{ "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.035840344, "rte": "az", "prob": 0.035840344 }, { "cls": 0, "raw": 0.003656447, "rte": "az/native", "prob": 0.003656447 }, { "cls": 0, "raw": 0.008023381, "rte": "az/elf", "prob": 0.008023381 } ], "prob": 0.035840344, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.035840343683958054, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-30T23:41:41Z" }, "path": "icon.so", "raw": { "v": "8", "rev": "c1ea9", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000%2!g0rr910000000000kMy=:00000KokH-0000000000kMA+z2()i\u003c8VQ=R0rr911POJ5000000000000000000000000000000+UOot00000+UOo", "ln": 0 }, { "b": "s*9P7000000SSi2l\u0026Wh!0rr911][S6Fb??u00002l\u0026Wh!mf0q//s4a^}4kCy000000000000000000000000000000000000@@Vdneha8000000000000000000000@%8p[bSN\u003c000000000000000l\u0026)t*5=.[i00000000000000000000}#D=$5=.[", "ln": 632 }, { "b": "\u003c]UO-5=-su-76!c00000:n=hu000009rVux5=-suJ7r{G00000h#\u0026{U000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib08^xAx(m{kx(^@Zvp%p:yFwv", "ln": 2312 }, { "b": "A==2cvpKxVnO})GwMiOmy\u0026r+.l$HBYA=lj{zdd6*nP5cU08)DuyEh\u0026QvGo+xB97\u00262yHpN+yHpWZx(0=RuTX1%wPz)1w)]y\u002606$amB.L(cnO})GwDkRtvpRYvz^(yslq}MoA=.pVwNPaoy\u0026r=HD30P$qE%oEltQNHoJanKz/fg/mnDxty\u0026r+.m}D^ey\u0026r=Yx)Ks\u003cqE]", "ln": 2920 }, { "b": "hzf5?e?]3Wy?Wu*e]$}-humM7eO]csB:bGDvrb\u003c\u003ehz^4cz.r:Ax\u003e870e]$}hm[=GvlTIP3f/G85oI4MruOTk\u0026h#\u0026{U000000rrc20rrc20rrc20rrc20rrc20rrc20rrf30rrc20rrc20rrc20rrf30rrc20rrc20rrf30rrc20rri40rrc20rrc20rrc", "ln": 3472 }, { "b": "[bJET5NE-#5Ai+NaoAUo[bJET5N[335cq@@aoAUo[bJET5Osr75f.jsaoAUo[bJET5O:Pb5jcFYaoAUo[bJET5Pf(f5mL:7aoAUo[bJET5PQej5p$1DaoAUo[bJET5Q3Cn5txn?aoAUo[bJET5QD.r5w!KiaoAUo[bJET5Q)1v5Ai!OaoAUo[bJET5Rrpz5cq#%aoAUo[bJET5R-ND", "ln": 5888 }, { "b": "ko*oX@D(qU@r04Z@D(wVZAS\u003chZYN@{00000e?O!fe?ZZMwmY!5fkj{mzz2A000000x(do\u003ewNxd?w]w!njS(d.z/fSraw3AUxjTULw]w!wdiIw=oItA^x(do\u003ewNxd?w]xm+", "ln": 18628 }, { "b": "000000000000000000000000000000000000000000000000000000000000u(x1B000003(P9C000000rr9100000mG-X\u003e000000rr9100000u\u003c3Df000000rr9100000y6jIp000004GDFe00000Fck\u0026L000003\u0026*nc00000neha8000004fcwd00000-7f\u003ed0000082%Tp00000", "ln": 64888 }, { "b": "vR]K^x\u003e7{*z/Pzvh.G88hz3Tqe[wK5B.pW*\u003eE]rc}++8Ju(G@Y1Mr.!!eRY[vko\u00261wIC$@ixgOfgc4p7vL//GgIey1vkRNPgH\u0026p5vp?FTgbgy(wNY^{00000Zco#-04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaK6iC(PEmz//LyxkR\u0026AvS=y3wg.Ia04}]4BUmuoB7+Lawo\u00266lD2iKlwo\u00266lBAdvlxkR\u0026AC4CYnx(v\u003e?", "ln": 66080 } ], "mol": "Md₃(BiBkHe₂)", "sha": "de6cf7fda9fe22aa5d7356a211ff8acf3e762b006807a306e6e71e4e7c0c4b7e", "path": "icon.so", "risk": 4, "size": 68176, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "RegisterICONImage" ], [ "UnregisterICONImage" ] ], "imp": [ [ "", "DestroyImageInfo" ], [ "", "CloneImage" ], [ "", "SyncImage" ], [ "", "ReadBlobLSBSignedLong" ], [ "", "UnregisterMagickInfo" ], [ "", "SyncAuthenticPixels" ], [ "", "ReadBlobByte" ], [ "", "EOFBlob" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "ImageToBlob" ], [ "", "WriteBlobByte" ], [ "", "ResizeImage" ], [ "", "BlobToImage" ], [ "", "cxa_finalize" ], [ "", "DestroyString" ], [ "", "SetImageProgress" ], [ "", "AcquireMagickInfo" ], [ "", "SeekBlob" ], [ "", "WriteBlobLSBLong" ], [ "", "QueueAuthenticPixels" ], [ "", "GetExceptionMessage" ], [ "", "memset" ], [ "", "AppendImageToList" ], [ "", "AcquireMagickMemory" ], [ "", "ReadBlobLSBShort" ], [ "", "LogMagickEvent" ], [ "", "AcquireQuantumMemory" ], [ "", "stack_chk_fail" ], [ "", "GetNextImageInList" ], [ "", "gmon_start__" ], [ "", "SetImageStorageClass" ], [ "", "stack_chk_guard" ], [ "", "GetVirtualPixels" ], [ "", "RegisterMagickInfo" ], [ "", "WriteBlobLSBShort" ], [ "", "GetBlobSize" ], [ "", "TransformImageColorspace" ], [ "", "SyncNextImageInList" ], [ "", "ReadBlobLSBLong" ], [ "", "TellBlob" ], [ "", "AcquireImage" ], [ "", "isoc23_strtol" ], [ "", "DestroyBlob" ], [ "", "ReferenceBlob" ], [ "", "CopyMagickString" ], [ "", "ctype_b_loc" ], [ "", "WriteBlob" ], [ "", "ThrowMagickException" ], [ "", "SetImageExtent" ], [ "", "ReadBlob" ], [ "", "OpenBlob" ], [ "", "GetFirstImageInList" ], [ "", "CloneImageInfo" ], [ "", "ReplaceImageInList" ], [ "", "CloseBlob" ], [ "", "SetImageArtifact" ], [ "", "ITM_registerTMCloneTable" ], [ "", "DestroyImageList" ], [ "", "RelinquishMagickMemory" ], [ "", "assert_fail" ], [ "", "errno_location" ], [ "", "AcquireNextImage" ], [ "", "AcquireImageColormap" ], [ "", "GetAuthenticPixels" ], [ "", "GetImageOption" ] ], "sec": [ [ ".note.gnu.property", 568, 32, 1.69, "alloc" ], [ ".note.gnu.build-id", 600, 36, 4.19, "alloc" ], [ ".gnu.hash", 640, 40, 2.77, "alloc" ], [ ".dynsym", 680, 1680, 1.08, "alloc" ], [ ".dynstr", 2360, 1182, 5.0, "alloc" ], [ ".gnu.version", 3542, 140, 1.31, "alloc" ], [ ".gnu.version_r", 3688, 80, 2.49, "alloc" ], [ ".rela.dyn", 3768, 192, 1.86, "alloc" ], [ ".rela.plt", 3960, 1488, 1.7, "alloc,info_link" ], [ ".init", 5448, 28, 3.99, "alloc,executable" ], [ ".plt", 5488, 1024, 4.41, "alloc,executable" ], [ ".text", 6528, 12100, 6.36, "alloc,executable" ], [ ".fini", 18628, 24, 3.72, "alloc,executable" ], [ ".rodata", 18656, 1069, 4.65, "alloc" ], [ ".eh_frame_hdr", 19728, 92, 3.65, "alloc" ], [ ".eh_frame", 19824, 860, 5.39, "alloc" ], [ ".init_array", 64936, 8, 1.06, "write,alloc" ], [ ".fini_array", 64944, 8, 1.06, "write,alloc" ], [ ".dynamic", 64952, 512, 1.58, "write,alloc" ], [ ".got", 65464, 48, 0.44, "write,alloc" ], [ ".got.plt", 65512, 520, 1.03, "write,alloc" ], [ ".data", 66032, 8, 1.55, "write,alloc" ], [ ".gnu_debugaltlink", 66040, 87, 5.31, "" ], [ ".gnu_debuglink", 66128, 52, 4.26, "" ], [ ".shstrtab", 66180, 264, 4.26, "" ] ], "tgt": [ "entry0", "fcn.000019a0", "fcn.00001a80", "fcn.00001b00", "sym.imp.AcquireImage", "sym.imp.AcquireImageColormap", "sym.imp.AcquireMagickInfo", "sym.imp.AcquireMagickMemory", "sym.imp.AcquireNextImage", "sym.imp.AcquireQuantumMemory", "sym.imp.AppendImageToList", "sym.imp.BlobToImage", "sym.imp.CloneImage", "sym.imp.CloneImageInfo", "sym.imp.CloseBlob", "sym.imp.CopyMagickString", "sym.imp.DestroyBlob", "sym.imp.DestroyImageInfo", "sym.imp.DestroyImageList", "sym.imp.DestroyString", "sym.imp.EOFBlob", "sym.imp.GetAuthenticPixels", "sym.imp.GetBlobSize", "sym.imp.GetExceptionMessage", "sym.imp.GetFirstImageInList", "sym.imp.GetImageOption", "sym.imp.GetNextImageInList", "sym.imp.GetVirtualPixels", "sym.imp.ImageToBlob", "sym.imp.LogMagickEvent", "sym.imp.OpenBlob", "sym.imp.QueueAuthenticPixels", "sym.imp.ReadBlob", "sym.imp.ReadBlobByte", "sym.imp.ReadBlobLSBLong", "sym.imp.ReadBlobLSBShort", "sym.imp.ReadBlobLSBSignedLong", "sym.imp.ReferenceBlob", "sym.imp.RegisterMagickInfo", "sym.imp.RelinquishMagickMemory", "sym.imp.ReplaceImageInList", "sym.imp.ResizeImage", "sym.imp.SeekBlob", "sym.imp.SetImageArtifact", "sym.imp.SetImageExtent", "sym.imp.SetImageProgress", "sym.imp.SetImageStorageClass", "sym.imp.SyncAuthenticPixels", "sym.imp.SyncImage", "sym.imp.SyncNextImageInList", "sym.imp.TellBlob", "sym.imp.ThrowMagickException", "sym.imp.TransformImageColorspace", "sym.imp.UnregisterMagickInfo", "sym.imp.WriteBlob", "sym.imp.WriteBlobByte", "sym.imp.WriteBlobLSBLong", "sym.imp.WriteBlobLSBShort", "sym.imp.__assert_fail", "sym.imp.__ctype_b_loc", "sym.imp.__cxa_finalize", "sym.imp.__errno_location", "sym.imp.__isoc23_strtol", "sym.imp.__stack_chk_fail", "sym.imp.memset" ], "funcs": [ [ "fcn.0000154c", 5452 ], [ "fcn.00001574", 5492 ], [ "sym.imp.DestroyImageInfo", 5520 ], [ "sym.imp.CloneImage", 5536 ], [ "sym.imp.SyncImage", 5552 ], [ "sym.imp.ReadBlobLSBSignedLong", 5568 ], [ "sym.imp.UnregisterMagickInfo", 5584 ], [ "sym.imp.SyncAuthenticPixels", 5600 ], [ "sym.imp.ReadBlobByte", 5616 ], [ "sym.imp.EOFBlob", 5632 ], [ "sym.imp.ImageToBlob", 5648 ], [ "sym.imp.WriteBlobByte", 5664 ], [ "sym.imp.ResizeImage", 5680 ], [ "sym.imp.BlobToImage", 5696 ], [ "sym.imp.__cxa_finalize", 5712 ], [ "sym.imp.DestroyString", 5728 ], [ "sym.imp.SetImageProgress", 5744 ], [ "sym.imp.AcquireMagickInfo", 5760 ], [ "sym.imp.SeekBlob", 5776 ], [ "sym.imp.WriteBlobLSBLong", 5792 ], [ "sym.imp.QueueAuthenticPixels", 5808 ], [ "sym.imp.GetExceptionMessage", 5824 ], [ "sym.imp.memset", 5840 ], [ "sym.imp.AppendImageToList", 5856 ], [ "sym.imp.AcquireMagickMemory", 5872 ], [ "sym.imp.ReadBlobLSBShort", 5888 ], [ "sym.imp.LogMagickEvent", 5904 ], [ "sym.imp.AcquireQuantumMemory", 5920 ], [ "sym.imp.__stack_chk_fail", 5936 ], [ "sym.imp.GetNextImageInList", 5952 ], [ "sym.imp.SetImageStorageClass", 5984 ], [ "sym.imp.GetVirtualPixels", 6000 ], [ "sym.imp.RegisterMagickInfo", 6016 ], [ "sym.imp.WriteBlobLSBShort", 6032 ], [ "sym.imp.GetBlobSize", 6048 ], [ "sym.imp.TransformImageColorspace", 6064 ], [ "sym.imp.SyncNextImageInList", 6080 ], [ "sym.imp.ReadBlobLSBLong", 6096 ], [ "sym.imp.TellBlob", 6112 ], [ "sym.imp.AcquireImage", 6128 ], [ "sym.imp.__isoc23_strtol", 6144 ], [ "sym.imp.DestroyBlob", 6160 ], [ "sym.imp.ReferenceBlob", 6176 ], [ "sym.imp.CopyMagickString", 6192 ], [ "sym.imp.__ctype_b_loc", 6208 ], [ "sym.imp.WriteBlob", 6224 ], [ "sym.imp.ThrowMagickException", 6240 ], [ "sym.imp.SetImageExtent", 6256 ], [ "sym.imp.ReadBlob", 6272 ], [ "sym.imp.OpenBlob", 6288 ], [ "sym.imp.GetFirstImageInList", 6304 ], [ "sym.imp.CloneImageInfo", 6320 ], [ "sym.imp.ReplaceImageInList", 6336 ], [ "sym.imp.CloseBlob", 6352 ], [ "sym.imp.SetImageArtifact", 6368 ], [ "sym.imp.DestroyImageList", 6384 ], [ "sym.imp.RelinquishMagickMemory", 6400 ], [ "sym.imp.__assert_fail", 6416 ], [ "sym.imp.__errno_location", 6432 ], [ "sym.imp.AcquireNextImage", 6448 ], [ "sym.imp.AcquireImageColormap", 6464 ], [ "sym.imp.GetAuthenticPixels", 6480 ], [ "sym.imp.GetImageOption", 6496 ], [ "entry0", 6528 ], [ "fcn.000019a0", 6560 ], [ "entry.fini0", 6668 ], [ "entry.init0", 6756 ], [ "fcn.00001a80", 6784 ], [ "fcn.00001b00", 6912 ], [ "fcn.00001bc8", 7112 ], [ "fcn.00002f24", 12068 ], [ "sym.RegisterICONImage", 18372 ], [ "sym.UnregisterICONImage", 18572 ], [ "fcn.000048c8", 18632 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 3, "note_count": 2, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 70, "has_build_id": 1, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 0, "dynrela_count": 8, "has_debuglink": 1, "little_endian": 1, "pltreloc_count": 62, "build_id_length": 20, "dt_versym_count": 70, "has_aarch64_bti": 1, "has_aarch64_pac": 1, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "program_header_count": 9, "stripped_with_symtab": 0, "has_direct_loader_dep": 1, "executable_segment_count": 1, "load_segment_max_file_size": 20684, "load_segment_max_memory_size": 20684, "section_relocation_group_count": 2, "stripped_metadata_section_count": 8 }, "file": { "size": 68176, "entropy": 2.42 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 1, "basic_blocks": 572, "code_entropy": 6.2, "data_entropy": 1.26, "overlay_size": 1732, "string_count": 137, "overlay_ratio": 0.03, "avg_complexity": 5.49, "max_complexity": 185, "huge_func_count": 2, "leaf_func_count": 65, "overlay_entropy": 1.47, "tiny_func_count": 66, "avg_basic_blocks": 7.73, "entropy_variance": 2.85, "avg_string_length": 15.56, "max_string_length": 66, "peak_region_bytes": 12288, "code_to_data_ratio": 0.92, "peak_region_entropy": 6.17, "string_length_stddev": 8.73, "largest_section_ratio": 0.18, "sentence_string_count": 6, "sentence_string_ratio": 0.04, "high_entropy_string_count": 0 }, "exports": { "count": 2, "api_count": 2 }, "imports": { "count": 65 }, "strings": { "truncated": 0, "retained_count": 137, "extracted_count": 137 }, "sections": { "count": 27, "code_size": 13176, "entropy_max": 6.36, "entropy_mean": 2.99, "name_entropy": 4.22, "writable_count": 7, "executable_count": 4, "nonstandard_count": 7, "executable_writable_count": 0 }, "functions": { "count": 74 }, "dependencies": { "count": 3 } } }, "traits": [ { "id": "metadata/binary/linking/runtime::dynamic-loader-needed", "conf": 0.7, "crit": 3, "desc": "ELF needs the Linux dynamic loader" }, { "id": "metadata/binary/linking/runtime::library-loader-dep", "conf": 1.0, "crit": 3, "desc": "ELF directly depends on the dynamic loader" }, { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.8, "crit": 3, "desc": "No full symbol table (likely stripped)" } ] } ] } }