{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.019572059, "rte": "az", "prob": 0.019572059 }, { "cls": 0, "raw": 0.0009952983, "rte": "az/native", "prob": 0.0009952983 }, { "cls": 0, "raw": 0.00018621485, "rte": "az/elf", "prob": 0.00018621485 } ], "prob": 0.019572059, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.0195720586925745, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-11T22:32:27Z" }, "path": "procfs.module", "raw": { "v": "8", "rev": "71e24", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000UNHNj0000000000kMy=:002m:3\u0026*Un.)*6O006[\u003eZ^%p!ntc1-00000002MDm*N16XbVHe00000098NFE]5W)\u003c]rWZZ*j\u0026Tf#ctp[\u003c{E{000000000\u0026Ird35nS0vznr55Qnq3mKnqP^[nb", "ln": 0 }, { "b": "6Awak0SSl30rr91000001][S600000cia2C0SSl32lj-7000006Awak00000irf3V0SSl38VP\u003cr000007YTKo00000o8[}(0SSl3gxmyP00000D\u0026KcD00000tMs:7", "ln": 1136 }, { "b": "A=M8s0b3s{vQA}=B97=fwO(vewDlv-BZ!Y\u0026A+e!Zxl5c7uU0\u003e(yHpQ-C3/xfA+e($B97#l0b3s{vQAL:v}YB\u0026A9)c\u0026ASx-)BZ!Y]x(!x6Aclkn0000001F#e000000096102kFl00000000000384t", "ln": 2275 } ], "mol": "Md₃(BiBkHe)", "sha": "cea8b0781b52d654b0e7edcccfd18a1aa10445f6274c4883a32cae7c5bebe4fe", "path": "procfs.module", "risk": 4, "size": 4272, "supp": [ { "by": [ { "id": "metrics", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/hardening/mitigation::no-relro", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "grub_procfs_entries" ] ], "imp": [ [ "", "grub_memmove" ], [ "", "grub_strdup" ], [ "", "grub_disk_dev_register" ], [ "", "grub_errno" ], [ "", "grub_fs_list" ], [ "", "grub_strcmp" ], [ "", "grub_archelp_open" ], [ "", "grub_error" ], [ "", "grub_list_remove" ], [ "", "grub_free" ], [ "", "grub_disk_dev_unregister" ], [ "", "grub_archelp_dir" ], [ "", "grub_list_push" ] ], "sec": [ [ ".text", 64, 702, 4.32, "alloc,executable" ], [ ".rela.text", 2368, 720, 1.32, "info_link" ], [ ".rodata.str1.1", 766, 43, 3.62, "alloc,merge,strings" ], [ ".data", 816, 184, 0.05, "write,alloc" ], [ ".rela.data", 3088, 312, 1.23, "info_link" ], [ ".module_license", 1000, 15, 3.64, "write,alloc" ], [ ".symtab", 1016, 840, 1.41, "" ], [ ".strtab", 1856, 508, 4.13, "" ], [ ".shstrtab", 3400, 101, 4.08, "" ] ], "funcs": [ [ "sym.grub_procdev_close", 134217792 ], [ "sym.grub_procdev_read", 134217793 ], [ "sym.grub_procfs_rewind", 134217799 ], [ "sym.grub_procfs_close", 134217819 ], [ "sym.grub_procfs_open", 134217843 ], [ "sym.grub_procfs_find_file", 134217967 ], [ "sym.grub_procdev_iterate", 134218062 ], [ "sym.grub_procdev_open", 134218084 ], [ "sym.grub_procfs_dir", 134218172 ], [ "sym.grub_procdev_write", 134218327 ], [ "sym.grub_procfs_read", 134218333 ], [ "sym.grub_mod_init", 134218375 ], [ "sym.grub_mod_fini", 134218445 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 0, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 35, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "program_header_count": 0, "stripped_with_symtab": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 2, "stripped_metadata_section_count": 6 }, "file": { "size": 4272, "entropy": 3.07 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "basic_blocks": 27, "code_entropy": 4.32, "data_entropy": 0.32, "overlay_size": 771, "string_count": 44, "overlay_ratio": 0.18, "avg_complexity": 1.85, "max_complexity": 4, "huge_func_count": 0, "leaf_func_count": 12, "overlay_entropy": 1.03, "tiny_func_count": 8, "avg_basic_blocks": 2.08, "entropy_variance": 2.34, "avg_string_length": 14, "max_string_length": 24, "peak_region_bytes": 1024, "code_to_data_ratio": 0.78, "peak_region_entropy": 3.86, "string_length_stddev": 4.48, "largest_section_ratio": 0.2, "sentence_string_count": 2, "sentence_string_ratio": 0.05, "high_entropy_string_count": 0 }, "exports": { "count": 1 }, "imports": { "count": 13 }, "sections": { "count": 12, "code_size": 702, "entropy_max": 4.32, "entropy_mean": 2.64, "name_entropy": 3.96, "writable_count": 3, "executable_count": 1, "nonstandard_count": 6, "executable_writable_count": 0 }, "functions": { "count": 13 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.binary_as_unknown": 1 }, "dependencies": { "count": 0 } } }, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 4 ], "spans": [ [ 0, 25 ] ] } ] } ] } }