{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.0056777797, "rte": "az", "prob": 0.0056777797 }, { "cls": 0, "raw": 0.00042970976, "rte": "az/native", "prob": 0.00042970976 }, { "cls": 0, "raw": 0.000031113625, "rte": "az/elf", "prob": 0.000031113625 } ], "prob": 0.0056777797, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.005677779670804739, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-12T02:10:55Z" }, "path": "gcry_blowfish.module", "raw": { "v": "8", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000kP{ac0000000000kMy=:002m:4fc!pry?#wnR$?^Iss5}MJdc*07.$dq\u0026qbwJ@PZ\u003e0eY3U=Cw@^.r}\u003e154qH654qg\u0026g{NiuXdu4DgQKT(2MK\u0026nW!R.n2Ol$o1gkMr3\u0026*n[I-AP61p$Lkf-", "ln": 0 }, { "b": "Zw[ll0000007:Q10000000030\u00267gP.000000000\u0026XbVHe000000rp%S00000H?Yd1^*h.5e@yIWm00qHa#/[8=[RdwNeeAvIek@N\u003c@(cwCn5s.=T{d\u003cyZ/L+W\u003c!z]?b5HvWBG{{7yrQt*0{\u003e38#B]q000000000000000000000000000000h{KAA=?md-h*rct8.G3jO[Cojln$U", "ln": 2736 }, { "b": "}jYh:\u0026w%2$HlX-h(0^VY!9!%g*v[Itx(sbssQL1H6@*nA0FW?lT(Y}VLJs$\u0026tk:MEM!a6=/%*D4qhV}ai\u0026{\u003e$EwRz[!\u0026}Bcc[P\u003c{=N2h9O4e3\u003eA\u003cTz3o.BiBAJyRE\u003ea@%N@J9j[ObeuoJL%rf+Vu\u003eOdq4c9c[VfUKPw*lrBx$pl\u003ekKSJ9:#[!nkv7X]47}c1iFHZ3]Lo6}T:eQf0Bs((4mrdHe2lN@7we]=W/^}^#w\u003e8s#Sgda{z0{5d)}F\u00263HgYf9VZ5Qd82{$l1\u003exhM)NuY}Lnq5wB\u003cJ[=rFvPYfWK[*b-.Jo9e=u?+Lwx(t}gqlLdE=E(nmM\u0026irx\u0026A\u003eVFAvIQ5d2Ckb^Ipy@vJ.qw*4x=3pZF\u003c?m#D\u0026=!-FuUe?.9?s[S/k-F\u003e+E/X0wYw{nlERLRkmGlHKl\u003c+!n!Y\u003eFlSlTWGYm:.\u003eT}Cuam@HJ8w8%ccO)s0G8*xf4AaqVpJsuwtr$!*3AtAP\u0026u42UP2*kE#+\u0026l08yduSdGS=9\u003ec\u003cl^k9xGNMW4B\u0026jnt6\u003eCF\u0026=hnF#Z1Koc1]K{:p8fV0XqP*=}1=d%Tg/Y^l97\u0026w(Z!ol[/WX5*xU:*@N!E-JI!{r*{[.W#{}:eXu%nR-xCN.qID+IH$1ina.\u0026d-jmGxeU)(D[\u003eCRpB\u0026ZdW]]r%i\u003eL5L@#6wTOjh9UefZB}d/wAzAR$}fb]8VlvuY*H(ZUAes.aFF^wTR?ui!rP3#b$awL*!^lzK.b4SpT\u003ejklbrZmZ\u0026!wA!s]gl\u0026@N?\u0026=EDd(r{F9}Brc", "ln": 3040 }, { "b": "00002009820@@r3000210@@r30000q00002009722lj-700010000000000E00002009822lj-70002q0SSi20000O0000100@Sh0000000004000000000:00001", "ln": 7249 }, { "b": "5c8Xg000000000000000000000aZ1PwO#0#D2N\u003c9wmYm\u003eD2N\u003ejvR/%)yxd{-v@=\u003clByeG[z!0L.vRe$*wPRZ0C(RL@x([5$y?Xibwg/OpB7Gf1By/JnuUi.Xy?mcffAu6k0bDTf0bDTg0bDTh0bDTi0b3r", "ln": 7636 }, { "b": "xK#i\u003eB-8khxk8BewPv=TxjC$cuT!d#zEmEbvpK6MuUr\u003e?D0+5}Aa\u0026*6uVQf$v{-XYz*b/cB7+L^A=\u003e?#v}/)}wPzc#wOkZ#By/E)0000(2lj-7000010000k00000000000001C2lj-70000100001000", "ln": 7813 } ], "mol": "Md₃(BiBkHe)", "sha": "d380cca41e64eaee228ce1d4777a76ef079aa1c0e5fe896f4bcbb952ed80f2d7", "path": "gcry_blowfish.module", "risk": 4, "size": 9344, "supp": [ { "by": [ { "id": "metrics", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/hardening/mitigation::no-relro", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "sec": [ [ ".text", 64, 2715, 5.63, "alloc,executable" ], [ ".rela.text", 7896, 408, 1.45, "info_link" ], [ ".rodata", 2784, 4192, 7.95, "alloc" ], [ ".rodata.str1.1", 6976, 9, 3.17, "alloc,merge,strings" ], [ ".data", 6992, 96, 0.33, "write,alloc" ], [ ".rela.data", 8304, 96, 1.13, "info_link" ], [ ".module_license", 7088, 15, 3.64, "write,alloc" ], [ ".symtab", 7104, 552, 1.43, "" ], [ ".strtab", 7656, 237, 4.45, "" ], [ ".shstrtab", 8400, 109, 4.06, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 0, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 23, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "program_header_count": 0, "stripped_with_symtab": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 2, "stripped_metadata_section_count": 6 }, "file": { "size": 9344, "entropy": 6.59 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 5.63, "data_entropy": 0.78, "overlay_size": 835, "string_count": 27, "overlay_ratio": 0.09, "overlay_entropy": 1.04, "entropy_variance": 4.95, "rizin_incomplete": 1, "avg_string_length": 12.44, "max_string_length": 26, "peak_region_bytes": 3072, "code_to_data_ratio": 0.96, "peak_region_entropy": 7.83, "string_length_stddev": 5.23, "largest_section_ratio": 0.45, "sentence_string_count": 0, "sentence_string_ratio": 0, "high_entropy_string_count": 0 }, "sections": { "count": 13, "code_size": 2715, "entropy_max": 7.95, "entropy_mean": 3.32, "name_entropy": 3.93, "writable_count": 3, "executable_count": 1, "nonstandard_count": 6, "executable_writable_count": 0 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.binary_as_unknown": 1 }, "dependencies": { "count": 0 } } }, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 4 ], "spans": [ [ 0, 25 ] ] } ] } ] } }