{ "ml": { "v": "7", "eng": "2.3.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.43082538, "rte": "az", "prob": 0.43082538 }, { "cls": 0, "raw": 0.012711763, "rte": "az/tar", "prob": 0.012711763 } ], "prob": 0.43082538, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.4308253824710846, "type": "tar.gz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00009953975677490234, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.06575891375541687, "type": "javascript" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.006845384836196899, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.0020404160022735596, "type": "c" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.008436799049377441, "type": "javascript" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.344389945268631, "type": "javascript" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.0001499950885772705, "type": "javascript" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00014829635620117188, "type": "shell" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000026285648345947266, "type": "c" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.012551754713058472, "type": "javascript" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.0076904296875, "type": "python" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.008222907781600952, "type": "c" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.002269268035888672, "type": "text" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.00003388524055480957, "type": "c" } ], "version": "v18.18", "analyzed_at": "2026-07-10T15:31:55Z" }, "path": "jukebox-0.5.10.tar.gz", "raw": { "files": [ { "id": 0, "mol": "O(As)H₂(CmPo)Md(Pt)", "sha": "087c86eda5a74803cc33f9db4ee52bade5ca36dfef4c5e9cf28e59051d41d436", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz", "risk": 4, "size": 55906, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 55906.0, "entropy": 8.0, "size_bytes": 55906.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 8.0, "peak_region_bytes": 55906.0, "peak_region_entropy": 7.84 } } }, "traits": [ { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-count", "conf": 0.949999988079071, "crit": 1, "desc": "Many subtraction operators present", "from": [ { "file": 2 } ], "spans": [ [ 0, 18 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "crit": 3, "desc": "Shell exec builtin (process replacement)", "from": [ { "file": 8 } ] }, { "id": "objectives/impact/destroy/keywords::delete-verb--delete", "conf": 0.8999999761581421, "crit": 1, "desc": "Destructive-action word: delete", "from": [ { "file": 10 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-density", "conf": 0.949999988079071, "crit": 1, "desc": "Subtraction operators dominate the parse tree", "from": [ { "file": 1 } ], "spans": [ [ 0, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::js-arithmetic-array-init", "conf": 0.949999988079071, "crit": 3, "desc": "Array initialization with repetitive arithmetic expressions (obfuscation)", "from": [ { "file": 1 }, { "file": 2 }, { "file": 3 }, { "file": 6 }, { "file": 7 }, { "file": 10 } ], "spans": [ [ 0, 18 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-symbols", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell execution symbols", "from": [ { "file": 8 } ] }, { "id": "metadata/lang/javascript-features::js-self-compare-count-2", "conf": 0.800000011920929, "crit": 3, "desc": "JavaScript self-comparison count", "from": [ { "file": 1 } ], "spans": [ [ 0, 29 ] ] }, { "id": "micro-behaviors/communications/socket/bind/function::bind", "conf": 0.75, "crit": 3, "desc": "Bind socket to address", "from": [ { "file": 4 } ] } ] }, { "ctx": [ { "b": "DO3D+oHhAzry6bzaxiS9wLWnRA::6dA=S=Om)PKxB1wC3p/5nVeQW$yz!a0bwGTP/yH{%[CRh%lz!%FEnP5cKA-vs6wPF#rxK#i}3jn1(zEWH9wmV(cwPz*fA=S\u003cDa{@43AbP=savy6+BAhqoe\u003e{n4vpPZVze:AlBrBg#", "n": [ { "c": 2, "d": "Haskell source file extension", "i": "metadata/file/extension/identity::haskell-source-basename", "o": 0, "z": 13, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "w[+*!avGTWvj\u003eF\u0026BrC1kax8\u0026[3tBu@z/P}xl$7gCe\u003e][]z=HB^C)T[2D2NsqmS\u0026PUBzkVhcM\u003eL{c%F8{vqPNbaxiS9wHQ[oasG#[zdLmvrc-B]djCPhx(mJ]A-vs6wPF$PiV}S#zG6-uavx%NB-Rb1at2=1pgn0Jo=$\u0026*nP5G\u0026BrA}!vrDT5t}v9$D2Nsq", "n": [ { "c": 2, "d": "Function constructor keyword", "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "o": 322, "z": 8, "cf": 0.699999988079071 } ], "ln": 274, "col": 13, "line": 11 }, { "b": "z6i^D3lQDlarR^HayPwgze0G5d0cN)jVTZddiH+@wn-PqaAO$Njs}W$wPzSgBupQ/cM\u003eJ6aARgnz6i%.aAO$NjVU.GBTGl[A+funA=90FdiK3CarR^HarR^HBy/Gf", "n": [ { "c": 1, "d": "Do-while block marker", "i": "micro-behaviors/process/create/script/wsh::wsh-do-block-marker", "o": 2437, "z": 4, "cf": 0.800000011920929 } ], "ln": 2405, "col": 35, "line": 79 } ], "depth": 1, "facts": { "imp": [ [ "", "NameM" ], [ "", "inferTypes" ], [ "", "newName" ], [ "", "newName" ], [ "", "newName" ], [ "", "zipWith" ], [ "", "zipWith" ], [ "", "newName" ], [ "", "newName" ], [ "", "tyMap" ], [ "", "let" ], [ "", "ty" ], [ "", "Map.findWithDefault" ], [ "", "Map.findWithDefault" ], [ "", "rep" ], [ "", "prob" ], [ "", "bind" ], [ "", "Bind" ], [ "", "Bind" ], [ "", "term" ], [ "", "term" ], [ "", "Var" ], [ "", "fun" ], [ "", "fun_" ], [ "", "let" ], [ "", "cs" ], [ "", "mapM_" ], [ "", "lss" ], [ "", "map" ], [ "", "atomic" ], [ "", "term" ], [ "", "where.findWithDefault" ], [ "", "where" ], [ "", "term" ], [ "", "let" ], [ "", "zipWithM_" ], [ "", "ys" ] ], "mbr": [ "Jukebox.Tools", "Jukebox.Tools.InferTypes", "Map.elems", "Map.findWithDefault", "Map.fromList", "Set.map", "fmap.fromList", "fmap.fromList.sequence", "the.toLiterals", "the.toLiterals.what", "where().findWithDefault" ], "tgt": [ "Bind", "Bind()", "Map.findWithDefault", "Map.findWithDefault()", "NameM", "Var", "__", "atomic", "bind", "fun_", "let", "map", "mapM_", "newName", "newName()", "rep", "term", "where", "where().findWithDefault", "ys", "zipWith", "zipWith()", "zipWithM_" ], "metrics": { "ast": { "op.lt": 11.0, "op.bor": 4.0, "op.sub": 22.0, "max_depth": 25.0, "bind_count": 8.0, "call_count": 41.0, "node_count": 959.0, "member_count": 11.0, "op_density.lt": 0.01, "op_density.bor": 0.0, "op_density.sub": 0.02, "sequence_count": 8.0, "identifier_count": 104.0, "member_depth_max": 3.0, "self_compare_count": 2.0, "string_literal_count": 5.0, "array_literal_max_length": 2.0 }, "file": { "size": 2777.0, "entropy": 4.52, "size_bytes": 2777.0 }, "text": { "space_count": 840.0, "total_lines": 87.0, "char_entropy": 4.52, "unique_chars": 68.0, "string_density": 0.06, "avg_line_length": 30.92, "max_line_length": 87.0, "empty_line_ratio": 0.16, "last_line_length": 24.0, "whitespace_ratio": 0.33, "most_common_ratio": 0.05, "identifier_density": 3.63, "line_length_stddev": 20.1, "normalized_string_count": 0.54, "repeated_char_sequences": 21.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "trailing_whitespace_lines": 3.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.1, "normalized_unique_identifiers": 16.14 }, "binds": { "count": 8.0 }, "calls": { "count": 41.0 }, "binary": { "overall_entropy": 4.52, "peak_region_bytes": 2777.0, "peak_region_entropy": 4.68 }, "members": { "count": 11.0 }, "strings": { "total": 5.0, "avg_length": 15.0, "max_length": 43.0, "avg_entropy": 2.64, "total_bytes": 75.0, "entropy_stddev": 0.58 }, "functions": { "anonymous": 2.0, "length_stddev": 3.5, "no_params_count": 2.0, "avg_length_lines": 13.5, "max_length_lines": 17.0, "min_length_lines": 10.0, "nested_functions": 1.0, "avg_nesting_depth": 0.5, "max_nesting_depth": 1.0, "density_per_100_lines": 2.3, "code_in_functions_ratio": 0.31 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 104.0, "total": 316.0, "avg_length": 4.79, "max_length": 15.0, "min_length": 1.0, "avg_entropy": 1.86, "reuse_ratio": 0.33, "unique_count": 104.0, "length_stddev": 2.75, "sequential_names": 10.0, "single_char_count": 12.0, "single_char_ratio": 0.12, "high_entropy_count": 1.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.56, "all_uppercase_ratio": 0.05, "underscore_prefix_count": 2.0 } } }, "id": 1, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/Tools/InferTypes.hs", "pid": 0, "risk": 1, "sha": "6ccb66294d63905281d95b9fa3919de64dfc505b313fe509f63f728feb55896b", "size": 2777, "traits": [ { "id": "metadata/file/extension/identity::haskell-source-basename", "conf": 1.0, "crit": 2, "desc": "Haskell source file extension", "spans": [ [ 0, 13 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 36 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DO3D+oHhAzry6bzav!Z=rc6Pkp*[D/wPzVUBZYr3B08XVEf%?fwozZ1awc=(wNYO5e(V+cy\u0026.j0B.bSno(BMNy-)}nwPzt?3tBu@z/P}xlVl\u003c:A=k+Do(B]Twd03/AbP=sawc=(wNYO5e(2?(wErc*AbP=sawc=(wNYM", "n": [ { "c": 2, "d": "Haskell source file extension", "i": "metadata/file/extension/identity::haskell-source-basename", "o": 0, "z": 13, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "axiw)wPFg=B-7]pwPz\u003c6auzLarC(I]wPz\u003c6at2=1rc-B]at2=1pgn0Jo=$\u0026*mS\u0026PUBzkVht}va5mSir:t}3b6zFso9A=U!mp?s6MzY?g=AaJD}zWHS8x)a6dB7DE[A+e*6auZ\u0026?A+e*63jp--vqZ0ax=]LYwn.!$aBmQtzY?d]az$+mmS\u0026PUBzkVhar(by", "n": [ { "c": 2, "d": "Function constructor keyword", "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "o": 290, "z": 8, "cf": 0.699999988079071 } ], "ln": 242, "col": 24, "line": 11 }, { "b": "azzf9aAIWnv\u003c0(=az$+mmS\u0026PUBzkVhar\u003e(Hv}cY9twmv=x:L$9Ab]J2auRj#zE[2YB-7Yhx(v(ib5?NlwfJd2x\u003cz\u0026}3lQEcwPP5pD2NtoauZ\u0026Kc)x{Ja$K\u003cJdp0n", "n": [ { "c": 1, "d": "Array index i access", "i": "micro-behaviors/data/buffer::array-index-i", "o": 432, "z": 3, "cf": 0.699999988079071 } ], "ln": 400, "col": 32, "line": 18 }, { "b": "arR\u003eOwPzYiaW3@?BZ[]fssCBB3lQDlarR^HarR^JAb]J2d06Jvv\u003c\u003eCddiH+@srX7{arR^HarR!j3lQEiwPS6nzxHuiDs.bnefG1Rv}e^}aAhvjy\u0026%o1dgcA7A+e*6azz@Yay]x$arUL", "n": [ { "c": 1, "d": "Nested function call assignment target", "i": "micro-behaviors/data/source/syntax/assignment::nested-call-assignment", "o": 679, "z": 15, "cf": 0.8500000238418579 } ], "ln": 647, "col": 9, "line": 28 } ], "depth": 1, "facts": { "imp": [ [ "", "universe" ], [ "", "universe" ], [ "", "funs" ], [ "", "prelude" ], [ "", "map" ], [ "", "funs" ], [ "", "map" ], [ "", "func" ], [ "", "func" ], [ "", "base" ], [ "", "base" ], [ "", "answer" ], [ "", "map" ], [ "", "\"adt\"" ], [ "", "\"program\"" ], [ "", "constructors" ], [ "", "newFunction" ], [ "", "head" ], [ "", "answer" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ], [ "", "theRhss" ], [ "", "newFunction" ], [ "", "concat" ], [ "", "lines" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ], [ "", "foldr" ], [ "", "closeForm" ], [ "", "answer" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ], [ "", "Literal" ], [ "", "Neg" ], [ "", "Tru" ], [ "", "its" ], [ "", "map" ], [ "", "map" ], [ "", "its" ], [ "", "usort" ], [ "", "its" ], [ "", "recursive" ], [ "", "map" ], [ "", "map" ], [ "", "reduce" ], [ "", "constructor" ], [ "", "sequence" ], [ "", "replicate" ], [ "", "subterm" ], [ "", "map" ], [ "", "map" ], [ "", "constructors" ], [ "", "cases" ], [ "", "liftM2" ], [ "", "ty" ], [ "", "maxArity" ], [ "", "maximum" ], [ "", "varNames" ], [ "", "maxArity" ], [ "", "mapM" ], [ "", "take" ], [ "", "take" ] ], "mbr": [ "Jukebox.Tools", "Jukebox.Tools.GuessModel" ], "tgt": [ "Literal", "Neg", "O", "Pos", "Tru", "answer", "base", "base()", "cases", "closeForm", "concat", "constructors", "foldr", "func", "head", "its", "liftM2", "lines", "map", "map()", "mapM", "maxArity", "maximum", "newFunction", "recursive", "reduce", "replicate", "sequence", "take", "take()", "usort" ], "metrics": { "ast": { "op.gt": 1.0, "op.lt": 17.0, "op.bor": 5.0, "op.sub": 42.0, "max_depth": 26.0, "bind_count": 18.0, "call_count": 58.0, "node_count": 1483.0, "member_count": 2.0, "op_density.gt": 0.0, "op_density.lt": 0.01, "op_density.bor": 0.0, "op_density.sub": 0.03, "sequence_count": 15.0, "identifier_count": 141.0, "member_depth_max": 3.0, "string_literal_count": 33.0, "array_literal_max_length": 4.0 }, "file": { "size": 4088.0, "entropy": 4.71, "size_bytes": 4088.0 }, "text": { "digit_ratio": 0.0, "space_count": 1001.0, "total_lines": 121.0, "char_entropy": 4.71, "unique_chars": 76.0, "string_density": 0.27, "avg_line_length": 32.79, "max_line_length": 89.0, "empty_line_ratio": 0.12, "last_line_length": 30.0, "whitespace_ratio": 0.27, "most_common_ratio": 0.06, "identifier_density": 3.31, "line_length_stddev": 20.42, "normalized_string_count": 3.0, "repeated_char_sequences": 17.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "trailing_whitespace_lines": 3.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 20.38 }, "binds": { "count": 18.0 }, "calls": { "count": 58.0 }, "binary": { "overall_entropy": 4.71, "peak_region_bytes": 4088.0, "peak_region_entropy": 4.77 }, "members": { "count": 2.0 }, "strings": { "total": 33.0, "avg_length": 7.52, "max_length": 47.0, "avg_entropy": 2.11, "total_bytes": 248.0, "entropy_stddev": 1.06 }, "functions": { "anonymous": 1.0, "no_params_count": 1.0, "avg_length_lines": 42.0, "max_length_lines": 42.0, "min_length_lines": 42.0, "density_per_100_lines": 0.83, "code_in_functions_ratio": 0.35 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 141.0, "total": 400.0, "avg_length": 5.44, "max_length": 13.0, "min_length": 1.0, "avg_entropy": 2.07, "reuse_ratio": 0.35, "unique_count": 141.0, "length_stddev": 2.78, "has_digit_ratio": 0.01, "sequential_names": 7.0, "single_char_count": 9.0, "single_char_ratio": 0.06, "high_entropy_count": 1.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.6, "all_uppercase_ratio": 0.03, "numeric_suffix_count": 2.0, "underscore_prefix_count": 3.0 } } }, "id": 2, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/Tools/GuessModel.hs", "pid": 0, "risk": 1, "sha": "28ed17a6ac9f06eeb93264b74b7c78f7e74d2fe81b5056ff24abe5a9f7d508db", "size": 4088, "traits": [ { "id": "metadata/file/extension/identity::haskell-source-basename", "conf": 1.0, "crit": 2, "desc": "Haskell source file extension", "spans": [ [ 0, 13 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 35 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DO3D+oHhAzry6bzav!Z=rc6Pkp*[D/wPzVUBZYr3B08XVEf%?fwozZ1awc=(wNYO5e(V+cy\u0026.i$zEWP}wMi}]wPF#rxK#i}3jpG:AbP=sawc=(wNYO5e(V+cy\u0026.i@y*?Ecx\u003ezSsB8U@fBsXLPwO(vewKQPYx)83IA=(mJ", "n": [ { "c": 2, "d": "Haskell source file extension", "i": "metadata/file/extension/identity::haskell-source-basename", "o": 0, "z": 14, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "xK#3(auZ\u0026Cv}YB\u003cwGVsbarUJfyH]$TzEW^5z/cWUiV}yEAaHdzj%iQezdMA:mS\u0026PUBzkVhed9HxB7n({zdLBAiYXxirc-B]at2=1lt{^UdiHiaasHimAaHdzj%isqzEW^5z/d0DeJ$pQv}YB\u003cwIBJmaBKO7wmoN*ax8=-wO(0kauZ\u0026Cv}YB\u003cwICrO3lQE6", "n": [ { "c": 2, "d": "Function constructor keyword", "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "o": 441, "z": 8, "cf": 0.699999988079071 } ], "ln": 393, "col": 8, "line": 14 }, { "b": "vqE5mp\u0026yy$d0cN)jVTZddjDXMarR^HarR^HarV4OzF%Rtc#A)uzY*DID2K)FdjDx5az2LnvqH0cB7n({zdK\u0026iaAX2larR^HarR!nB:b3oAbP!uc}[t%wPzi}asG#@xcnQAauzUDaAYaZdgdgu", "n": [ { "c": 1, "d": "Nested function call assignment target", "i": "micro-behaviors/data/source/syntax/assignment::nested-call-assignment", "o": 1254, "z": 20, "cf": 0.8500000238418579 } ], "ln": 1222, "col": 24, "line": 35 }, { "b": "cVZzGzFTOvz/fbeBA}?pe^-ZzarR^HzeTrgcM)^Vy?mG%Bz8!sD2\u003e8\u003ejS(E4jS[lMzGx[xrc0a)3lQDlarR^HarR^HaBCqIBzblaCwhbfauZ\u0026:z/fF2arU=KAaIHYzES", "n": [ { "c": 1, "d": "References the JavaScript .length property", "i": "metadata/lang/scripted::length-prop", "o": 2075, "z": 6, "cf": 1.0 } ], "ln": 2043, "col": 47, "line": 52 } ], "depth": 1, "facts": { "imp": [ [ "", "data" ], [ "", "guard" ], [ "", "guard" ], [ "", "aux" ], [ "", "where" ], [ "", "ForAll" ], [ "", "pos" ], [ "", "scheme" ], [ "", "Bind" ], [ "", "otherwise" ], [ "", "notInwards" ], [ "", "scheme" ], [ "", "Bind" ], [ "", "Not" ], [ "", "aux" ], [ "", "Exists" ], [ "", "pos" ], [ "", "scheme" ], [ "", "Bind" ], [ "", "otherwise" ], [ "", "notInwards" ], [ "", "scheme" ], [ "", "Bind" ], [ "", "Not" ], [ "", "aux" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "not" ], [ "", "mono" ], [ "", "aux" ], [ "", "Literal" ], [ "", "Neg" ], [ "", "not" ], [ "", "not" ], [ "", "mono" ], [ "", "aux" ], [ "", "aux" ], [ "", "aux" ], [ "", "aux" ], [ "", "aux" ], [ "", "fmap" ], [ "", "aux" ], [ "", "aux" ], [ "", "fmap" ], [ "", "aux" ], [ "", "aux" ], [ "", "tys" ], [ "", "funcs" ], [ "", "otherwise" ], [ "", "mapM" ], [ "", "typeMap" ], [ "", "Map.fromList" ], [ "", "ty" ], [ "", "map" ], [ "", "Nothing" ], [ "", "Nothing" ], [ "", "Nothing" ], [ "", "map" ], [ "", "inp" ], [ "", "fmap" ], [ "", "Input" ], [ "", "fmap" ], [ "", "Input" ], [ "", "name" ], [ "", "isNumber" ], [ "", "Fixed" ], [ "", "isNumber" ], [ "", "Fixed" ], [ "", "isNumber" ], [ "", "Fixed" ], [ "", "mapName" ], [ "", "tagsFlags" ], [ "", "newFunction" ], [ "", "\"type_tag\"" ], [ "", "name" ], [ "", "fs" ], [ "", "bound" ], [ "", "foldr" ], [ "", "mono" ], [ "", "otherwise" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "fs" ], [ "", "Exists" ], [ "", "Bind" ], [ "", "equals" ], [ "", "fs" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "protect" ], [ "", "funcAxiom" ], [ "", "typeAxiom" ], [ "", "fs" ], [ "", "ty" ], [ "", "fmap" ], [ "", "otherwise" ], [ "", "Literal" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "otherwise" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "ts" ], [ "", "typ" ], [ "", "mono" ], [ "", "otherwise" ], [ "", "fmap" ], [ "", "fmap" ], [ "", "Exists" ], [ "", "bind" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "newFunction" ], [ "", "\"type_pred\"" ], [ "", "name" ], [ "", "ps" ], [ "", "foldr" ], [ "", "mono" ], [ "", "not" ], [ "", "otherwise" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ], [ "", "ps" ], [ "", "ForAll" ], [ "", "Bind" ], [ "", "simplify" ], [ "", "exists" ], [ "", "bound" ], [ "", "foldr" ], [ "", "mono" ], [ "", "not" ], [ "", "otherwise" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ], [ "", "ps" ], [ "", "Exists" ], [ "", "Bind" ], [ "", "equals" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "funcAxiom" ], [ "", "typeAxiom" ], [ "", "pos" ], [ "", "otherwise" ], [ "", "getAny" ], [ "", "collect" ], [ "", "mono" ], [ "", "otherwise" ], [ "", "fmap" ], [ "", "fmap" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ], [ "", "otherwise" ], [ "", "fmap" ], [ "", "fmap" ], [ "", "Exists" ], [ "", "bind" ], [ "", "Literal" ], [ "", "Pos" ], [ "", "Tru" ] ], "mbr": [ "Any.naked", "Form.run", "Jukebox.Tools", "Jukebox.Tools.EncodeTypes", "Map.fromList", "Map.lookup", "functions.tagsFlags", "map().split", "map().split.simplify", "map().split.simplify.foldr", "simplify.ForAll", "simplify.ForAll.bind" ], "tgt": [ "Bind", "Exists", "Fixed", "ForAll", "Input", "Literal", "Literal()", "Map.fromList", "Neg", "Not", "Nothing", "Nothing()", "Nothing()()", "Pos", "Tru", "aux", "aux()", "bind", "collect", "f", "fmap", "fmap()", "foldr", "fs", "getAny", "guard", "guard()", "inp", "isNumber", "map", "mapM", "mapName", "mono", "name", "newFunction", "not", "not()", "notInwards", "ps", "scheme", "simplify", "t", "ty", "typ", "where" ], "metrics": { "ast": { "op.eq": 4.0, "op.gt": 8.0, "op.lt": 14.0, "op.add": 1.0, "op.bor": 29.0, "op.div": 2.0, "op.lor": 1.0, "op.sub": 72.0, "op.lnot": 4.0, "max_depth": 28.0, "bind_count": 38.0, "call_count": 139.0, "node_count": 2901.0, "member_count": 12.0, "op_density.eq": 0.0, "op_density.gt": 0.0, "op_density.lt": 0.0, "op_density.add": 0.0, "op_density.bor": 0.01, "op_density.div": 0.0, "op_density.lor": 0.0, "op_density.sub": 0.02, "sequence_count": 7.0, "op_density.lnot": 0.0, "identifier_count": 189.0, "member_depth_max": 4.0, "self_compare_count": 5.0, "string_literal_count": 36.0, "array_literal_max_length": 1.0, "string_concat_chain_max_length": 2.0 }, "file": { "size": 8098.0, "entropy": 4.72, "size_bytes": 8098.0 }, "text": { "digit_ratio": 0.01, "space_count": 2148.0, "total_lines": 209.0, "char_entropy": 4.72, "unique_chars": 77.0, "string_density": 0.17, "avg_line_length": 37.75, "max_line_length": 128.0, "empty_line_ratio": 0.09, "last_line_length": 64.0, "whitespace_ratio": 0.29, "most_common_ratio": 0.05, "identifier_density": 4.23, "line_length_stddev": 23.89, "normalized_string_count": 2.49, "repeated_char_sequences": 33.0, "suspicious_string_ratio": 0.03, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 19.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 24.52 }, "binds": { "count": 38.0 }, "calls": { "count": 139.0 }, "binary": { "overall_entropy": 4.72, "peak_region_bytes": 6050.0, "peak_region_entropy": 4.96 }, "members": { "count": 12.0 }, "strings": { "total": 36.0, "avg_length": 18.67, "max_length": 74.0, "avg_entropy": 2.61, "empty_count": 1.0, "total_bytes": 672.0, "entropy_stddev": 1.34, "embedded_code_candidates": 1.0 }, "functions": { "anonymous": 1.0, "no_params_count": 1.0, "avg_length_lines": 3.0, "max_length_lines": 3.0, "min_length_lines": 3.0, "density_per_100_lines": 0.48, "code_in_functions_ratio": 0.01 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 189.0, "total": 885.0, "avg_length": 5.49, "max_length": 15.0, "min_length": 1.0, "avg_entropy": 2.12, "reuse_ratio": 0.21, "unique_count": 189.0, "length_stddev": 2.76, "has_digit_ratio": 0.03, "sequential_names": 10.0, "single_char_count": 12.0, "single_char_ratio": 0.06, "high_entropy_count": 1.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.47, "all_uppercase_ratio": 0.02, "numeric_suffix_count": 5.0, "underscore_prefix_count": 3.0 } } }, "id": 3, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/Tools/EncodeTypes.hs", "pid": 0, "risk": 1, "sha": "131740995221ac568632e928184954e0e6a9c18a2921fe97e4ecd91e80d267ca", "size": 8098, "traits": [ { "id": "metadata/file/extension/identity::haskell-source-basename", "conf": 1.0, "crit": 2, "desc": "Haskell source file extension", "spans": [ [ 0, 14 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 36 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "arV4Oq!p56zGP=iaA?/GjS[YuA+PAkmSir:ayY55wfrPHw=", "ln": 307, "addr": 9909 }, { "b": "arV4Oz//V7A^8kswGTb", "ln": 308, "addr": 9947 }, { "b": "arR^HxME:7ax[", "ln": 309, "addr": 9963 }, { "b": "arR^HarU=qCYU6FauR?gvSC)!yH}QeasH]AwPe+uAcl5dBAI2lwGUG3zeAY7c#AyiayY55wfrp0wPPLDz+K\u003e^BrC:FdjDX{auR?gv@Dg4zy+", "n": [ { "c": 3, "d": "Bind socket to address", "i": "micro-behaviors/communications/socket/bind/function::bind", "o": 10027, "z": 4, "cf": 0.75 } ], "ln": 310, "addr": 9974 }, { "b": "arR^HarUMkB95JWasIh9A+PAkmSir:ayY55wfrPHw*}0", "ln": 311, "addr": 10061 }, { "b": "", "ln": 312, "addr": 10097 }, { "b": "x(n0lvqYN^ax8@(CoxK)zE:(lxK#i}", "ln": 313, "addr": 10098 } ], "depth": 1, "facts": { "imp": [ [ "", "Data.Map" ], [ "", "Data.Set" ], [ "", ".ret" ], [ "", "show" ], [ "", "text" ], [ "", "text" ], [ "", "escapeAtom" ], [ "", "mapM" ], [ "", "text" ], [ "", "vcat" ], [ "", "not" ], [ "", "pPrintClause" ], [ "", "pPrintClause" ], [ "", "pPrintClause" ], [ "", "inps" ], [ "", "isJust" ], [ "", "typeDecl" ], [ "", "usort" ], [ "", "usort" ], [ "", "typeDecl" ], [ "", "typeClause" ], [ "", "typeClause" ], [ "", "text" ], [ "", "escapeAtom" ], [ "", "Pretty" ], [ "", "Show" ], [ "", "prettyShow." ], [ "", "family" ], [ "", "family" ], [ "", "show" ], [ "", "pp" ], [ "", "parens" ], [ "", "hsep" ], [ "", "punctuate" ], [ "", "text" ], [ "", "Clause" ], [ "", "parens.hsep.punctuate" ], [ "", "not" ], [ "", "text" ], [ "", "escapeAtom" ], [ "", "parens" ], [ "", "hsep" ], [ "", "punctuate" ], [ "", "pPrintForm" ], [ "", "pPrintForm" ], [ "", "pPrint" ], [ "", "Literal" ], [ "", "Neg" ], [ "", "Literal" ], [ "", "pPrintPrec" ], [ "", "Literal" ], [ "", "pPrintForm" ], [ "", "pPrintForm" ], [ "", "Not" ], [ "", "Literal" ], [ "", "ForAll" ], [ "", "Exists" ], [ "", "pPrintConnective" ], [ "", "pPrintConnective" ], [ "", "pPrintForm" ], [ "", "maybeParens" ], [ "", "maybeParens" ], [ "", "pPrintForm" ], [ "", "brackets" ], [ "", "hsep" ], [ "", "punctuate" ], [ "", "bind" ], [ "", "show" ], [ "", "Map.findWithDefault" ], [ "", "name" ], [ "", "where" ] ], "mbr": [ "Char.String", "Char.String.String", "Control.Monad", "Control.Monad.Trans", "Control.Monad.Trans.State", "Control.Monad.Trans.State.Strict", "Data.Char", "Data.Map", "Data.Map.Strict", "Data.Maybe", "Data.Set", "Data.Symbol", "Jukebox.Form", "Jukebox.Name", "Jukebox.TPTP", "Jukebox.TPTP.Lexer", "Jukebox.Utils", "Map.findWithDefault", "Set.fromList", "Set.member", "Set.null", "Set.toList", "String.Bind", "String.String", "String.a", "String.a.Map", "Text.PrettyPrint", "Text.PrettyPrint.HughesPJ", "Text.PrettyPrint.HughesPJClass", "Unknown.ret", "Variable.Doc", "_.ret", "a.Bool", "a.Doc", "a.Doc.Doc", "a.Map", "a.a", "annot.inputValue", "case.pPrintFof", "case.pPrintFof.pPrint", "findNumber.do", "formulae.WARNING", "globalsScope.union", "p.types", "pPrint().Rational", "pPrint().Rational.Form", "pPrint().Rational.Form.Doc", "pPrintForm().String", "pPrintForm().String.Set", "pPrintForm().String.Set.Set", "pPrintForm().String.Set.Set.Form", "pPrintForm().String.Set.Set.Form.Doc", "pPrintForm().pPrint", "pPrintTff.String", "parens.hsep", "parens.hsep.punctuate", "parens.hsep.punctuate().map", "parents.do", "scope.union", "show.pPrintProblem", "text.escapeAtom", "text.escapeAtom.show", "text.escapeAtom.show.tname", "text.show", "text.show.Token", "text.show.Token.Atom", "text.show.Token.Atom.tokenName" ], "tgt": [ "Clause", "Data.Map", "Data.Set", "Exists", "ForAll", "Literal", "Map.findWithDefault", "Neg", "Not", "Pretty", "Show", "_.ret", "_p", "bind", "brackets", "escapeAtom", "family", "family()", "hsep", "inps", "isJust", "mapM", "maybeParens", "maybeParens()", "name", "not", "p", "pPrint", "pPrintClause", "pPrintClause()", "pPrintClause()()", "pPrintConnective", "pPrintConnective()", "pPrintForm", "pPrintForm()", "pPrintPrec", "parens", "parens.hsep.punctuate", "pp", "punctuate", "show", "text", "text()", "typeClause", "typeDecl", "usort", "vcat", "where" ], "metrics": { "ast": { "op.eq": 3.0, "op.gt": 10.0, "op.lt": 26.0, "op.add": 4.0, "op.bor": 19.0, "op.lor": 1.0, "op.sub": 12.0, "op.land": 2.0, "max_depth": 70.0, "op.concat": 56.0, "bind_count": 44.0, "call_count": 87.0, "node_count": 3839.0, "member_count": 67.0, "op_density.eq": 0.0, "op_density.gt": 0.0, "op_density.lt": 0.01, "op_density.add": 0.0, "op_density.bor": 0.0, "op_density.lor": 0.0, "op_density.sub": 0.0, "op_density.land": 0.0, "identifier_count": 342.0, "member_depth_max": 6.0, "op_density.concat": 0.01, "string_literal_count": 52.0 }, "file": { "size": 12063.0, "entropy": 4.75, "size_bytes": 12063.0 }, "text": { "digit_ratio": 0.0, "space_count": 2896.0, "total_lines": 377.0, "char_entropy": 4.75, "unique_chars": 84.0, "string_density": 0.14, "avg_line_length": 31.0, "max_line_length": 119.0, "empty_line_ratio": 0.15, "last_line_length": 26.0, "whitespace_ratio": 0.27, "most_common_ratio": 0.06, "identifier_density": 3.96, "line_length_stddev": 21.87, "normalized_string_count": 2.68, "repeated_char_sequences": 41.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 2.0, "trailing_whitespace_lines": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.06, "normalized_unique_identifiers": 39.96 }, "binds": { "count": 44.0 }, "calls": { "count": 87.0 }, "binary": { "overall_entropy": 4.75, "peak_region_bytes": 9216.0, "peak_region_entropy": 5.02 }, "members": { "count": 67.0 }, "strings": { "total": 52.0, "avg_length": 4.79, "max_length": 18.0, "path_count": 3.0, "avg_entropy": 1.54, "total_bytes": 249.0, "entropy_stddev": 1.08 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.source_as_unknown": 1.0 }, "identifiers": { "count": 342.0, "total": 1494.0, "avg_length": 5.67, "max_length": 17.0, "min_length": 1.0, "avg_entropy": 2.11, "reuse_ratio": 0.23, "unique_count": 342.0, "length_stddev": 3.09, "has_digit_ratio": 0.01, "sequential_names": 18.0, "single_char_count": 19.0, "single_char_ratio": 0.06, "high_entropy_count": 3.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.53, "all_uppercase_ratio": 0.02, "numeric_suffix_count": 5.0, "keyboard_pattern_names": 1.0, "underscore_prefix_count": 5.0 } } }, "id": 4, "mol": "H(Cm)", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/TPTP/Print.hs", "pid": 0, "risk": 1, "sha": "1f9a24ad29c35bf01ff3c46558c71c11a24cc2d788e370530242cbf98315d24a", "size": 12063, "traits": [ { "id": "micro-behaviors/communications/socket/bind/function::bind", "conf": 0.75, "crit": 3, "desc": "Bind socket to address", "spans": [ [ 10027, 4 ] ] } ], "type": "c" }, { "ctx": [ { "b": "DO3D+oHhAzry6bzavw$4ar@E^3t\u003cY(B.\u003eRin{a]XvScGzr8uK\u003ce\u003efL)wjyoHwGVhgwPzt?3tBu@z/P}xq*ACawO\u003c4?x(4uSvrue\u0026x(d*cA=-B5D2[7sz7Xj\u003cA+e:5z/QaKwn=42mRMWImr\u0026J/BsvMhze:AlBn", "n": [ { "c": 2, "d": "Haskell source file extension", "i": "metadata/file/extension/identity::haskell-source-basename", "o": 0, "z": 11, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "auzLanLZEkmRMWIp*[DVt)+jQBw#7op^/2rB09Q*wn-Pqay]hbauRj#xjVfNzGWcDr8uK\u003cb0c]/wPS6nzxJd]x(WG4Eiq{cvru0)u)64*arU(wwPzu8w/%b}aw2u$CW\u003er7BzkVhat2=1nLZEkmRMWIp*[DVt).X%arR^HarUnsuM.GOA+funA=917t)Z{Jx(mDJx(4uIy**%$auZ5OazCZ-A=l8t", "n": [ { "c": 2, "d": "Contains a catch error handler", "i": "metadata/package/error-handling::catch-keyword", "o": 904, "z": 5, "cf": 0.5 }, { "c": 1, "d": "Do-while block marker", "i": "micro-behaviors/process/create/script/wsh::wsh-do-block-marker", "o": 861, "z": 4, "cf": 0.800000011920929 } ], "ln": 829, "col": 12, "line": 29 } ], "depth": 1, "facts": { "imp": [ [ "", "IO" ], [ "", "findFile" ], [ "", "candidate" ], [ "", "doesFileExist" ], [ "", "IO" ], [ "", "candidates" ], [ "", "msum" ], [ "", "mapM" ], [ "", "findFileFlags" ] ], "mbr": [ "Jukebox.TPTP", "Jukebox.TPTP.FindFile" ], "tgt": [ "IO", "doesFileExist", "findFile", "mapM", "msum" ], "metrics": { "ast": { "op.gt": 5.0, "op.lt": 7.0, "op.sub": 7.0, "max_depth": 11.0, "bind_count": 4.0, "call_count": 8.0, "node_count": 368.0, "member_count": 2.0, "op_density.gt": 0.01, "op_density.lt": 0.02, "op_density.sub": 0.02, "sequence_count": 1.0, "identifier_count": 54.0, "member_depth_max": 3.0, "self_compare_count": 1.0, "string_literal_count": 8.0, "array_literal_max_length": 2.0 }, "file": { "size": 1237.0, "entropy": 4.99, "size_bytes": 1237.0 }, "text": { "digit_ratio": 0.0, "space_count": 211.0, "total_lines": 44.0, "char_entropy": 4.99, "unique_chars": 69.0, "string_density": 0.18, "avg_line_length": 27.11, "max_line_length": 73.0, "empty_line_ratio": 0.11, "last_line_length": 5.0, "whitespace_ratio": 0.21, "most_common_ratio": 0.07, "identifier_density": 2.27, "line_length_stddev": 17.79, "normalized_string_count": 1.21, "repeated_char_sequences": 1.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 9.89 }, "binds": { "count": 4.0 }, "calls": { "count": 8.0 }, "binary": { "overall_entropy": 4.99, "peak_region_bytes": 1024.0, "peak_region_entropy": 5.05 }, "members": { "count": 2.0 }, "strings": { "total": 8.0, "avg_length": 14.88, "max_length": 61.0, "avg_entropy": 2.31, "total_bytes": 119.0, "entropy_stddev": 1.36 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 54.0, "total": 100.0, "avg_length": 6.67, "max_length": 19.0, "min_length": 1.0, "avg_entropy": 2.29, "reuse_ratio": 0.54, "unique_count": 54.0, "length_stddev": 3.51, "sequential_names": 1.0, "single_char_count": 3.0, "single_char_ratio": 0.06, "all_lowercase_ratio": 0.37, "all_uppercase_ratio": 0.11, "double_underscore_count": 1.0, "underscore_prefix_count": 3.0 } } }, "id": 5, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/TPTP/FindFile.hs", "pid": 0, "risk": 1, "sha": "ccbdb9dbab33a0a28e548625b80c857dd034b4706fb6313bd8eeabd433dc2579", "size": 1237, "traits": [ { "id": "metadata/package/error-handling::catch-keyword", "crit": 2, "desc": "Contains a catch error handler", "spans": [ [ 904, 5 ] ] }, { "id": "metadata/file/extension/identity::haskell-source-basename", "conf": 1.0, "crit": 2, "desc": "Haskell source file extension", "spans": [ [ 0, 11 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DO3D+oHhAzry6bzavoHOxhA2UBy/GgB1wC7wO#71vqGU7wN[LECxwaHwKH9Ix)aidxdLe)p/5nVeQW$yz!a0bwGTP/yH{%[CRh{6Bs{0\u003cB9O)LxK#i}3jpG:AbP=sawDM/x\u0026wCZaztF1x(mMac#JQedgf^aAbP=saAqKj", "n": [ { "c": 2, "d": "Haskell source file extension", "i": "metadata/file/extension/identity::haskell-source-basename", "o": 0, "z": 7, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "vru0)ayMxAj%i^jBtj[DayVDBj%iA)ayUW#B-7b^Btj[ZaB21(aAzQxq^\u003c+\u003cCoy9rdp15Avrt7UwmZ0dc[co-dgcz\u003cBv*vXwQ2sUiV]?DA+3q3efE-ewfttgau.[hvJWl^ax8Y\u003cf^6)Ev\u003c0u!ax8Y\u003cayMy4ay+:!Bv*vXwQ2svx\u003ehDhz6g$:wn.!$aA}mo", "n": [ { "c": 2, "d": "Calls a property using bracket notation", "i": "micro-behaviors/data/source/property/computed::js-computed-property-call", "o": 1602, "z": 8, "cf": 0.8199999928474426 } ], "ln": 1554, "col": 22, "line": 52 } ], "depth": 1, "facts": { "imp": [ [ "", "Signed" ], [ "", "Solver" ], [ "", "ReaderT" ], [ "", "ReaderT" ], [ "", "StateT" ], [ "", "deriving" ], [ "", "newtype" ], [ "", "ReaderT" ], [ "", "ReaderT" ], [ "", "StateT" ], [ "", "Map" ], [ "", "deriving" ], [ "", "data" ], [ "", "SatState" ], [ "", "Sat1" ], [ "", "data" ], [ "", "Lit" ], [ "", "nt" ], [ "", "nt" ], [ "", "nt" ], [ "", "nt" ], [ "", "nt" ], [ "", "nt" ], [ "", "unique" ], [ "", "where." ], [ "", "u._" ], [ "", "And" ], [ "", "runSat" ], [ "", "evalStateT" ], [ "", "runReaderT" ], [ "", "go" ], [ "", "idxs" ], [ "", "Map.insert" ], [ "", "atIndex" ], [ "", "idx" ], [ "", "Sat" ], [ "", "Sat" ], [ "", "lift" ], [ "", "gets" ], [ "", "Map.findWithDefault" ], [ "", "Sat" ], [ "", "lift" ], [ "", "modify" ], [ "", "Map.insert" ], [ "", "xs" ], [ "", "liftIO" ], [ "", "model" ], [ "", "Sat1" ], [ "", "lift" ], [ "", "liftIO" ], [ "", "traverse" ], [ "", "False" ], [ "", "modelValue" ], [ "", "liftIO" ], [ "", "addForm" ], [ "", "liftIO" ], [ "", "mapM" ], [ "", "flatten.return" ], [ "", "flatten" ], [ "", "flatten" ], [ "", "flatten" ], [ "", "flatten" ], [ "", "flatten" ], [ "", "flatten" ], [ "", "lit" ], [ "", "lit.neg" ], [ "", "lit" ], [ "", "Ord" ], [ "", "Sat1" ], [ "", "lift" ], [ "", "liftIO" ], [ "", "Sat1" ], [ "", "lift" ], [ "", "lift" ], [ "", "put" ], [ "", "Sat1" ] ], "mbr": [ "Jukebox.Sat", "Jukebox.Sat.Easy", "Map.empty", "Map.findWithDefault", "Map.insert", "Map.lookup", "MiniSat.addClause", "MiniSat.modelValue", "MiniSat.newLit", "MiniSat.solve", "SatState.empty", "concat.sequence", "flatten().return", "lit().neg" ], "tgt": [ "And", "False", "Lit", "Map", "Map.findWithDefault", "Map.insert", "ReaderT", "ReaderT()", "Sat", "Sat()", "Sat1", "SatState", "Signed", "Solver", "StateT", "a", "atIndex", "deriving", "evalStateT", "flatten", "flatten()", "flatten()()", "flatten().return", "gets", "go", "idxs", "lift", "liftIO", "lit", "lit().neg", "mapM", "modify", "nt", "nt()", "put", "runReaderT", "traverse", "u" ], "metrics": { "ast": { "op.gt": 5.0, "op.lt": 16.0, "op.bor": 2.0, "op.sub": 32.0, "op.bnot": 1.0, "op.lnot": 1.0, "max_depth": 17.0, "bind_count": 15.0, "call_count": 70.0, "node_count": 1426.0, "member_count": 14.0, "op_density.gt": 0.0, "op_density.lt": 0.01, "op_density.bor": 0.0, "op_density.sub": 0.02, "sequence_count": 5.0, "op_density.bnot": 0.0, "op_density.lnot": 0.0, "identifier_count": 114.0, "member_depth_max": 3.0, "self_compare_count": 1.0, "string_literal_count": 1.0, "array_literal_max_length": 2.0 }, "file": { "size": 3208.0, "entropy": 4.86, "size_bytes": 3208.0 }, "text": { "digit_ratio": 0.01, "space_count": 657.0, "total_lines": 110.0, "char_entropy": 4.86, "unique_chars": 74.0, "string_density": 0.01, "avg_line_length": 28.16, "max_line_length": 148.0, "empty_line_ratio": 0.15, "last_line_length": 22.0, "whitespace_ratio": 0.24, "most_common_ratio": 0.07, "identifier_density": 4.25, "line_length_stddev": 25.12, "normalized_string_count": 0.1, "repeated_char_sequences": 2.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 97.0, "suspicious_identifier_ratio": 0.1, "normalized_unique_identifiers": 16.81 }, "binds": { "count": 15.0 }, "calls": { "count": 70.0 }, "binary": { "overall_entropy": 4.86, "peak_region_bytes": 3072.0, "peak_region_entropy": 5.02 }, "members": { "count": 14.0 }, "strings": { "total": 1.0, "avg_length": 27.0, "max_length": 27.0, "avg_entropy": 3.93, "total_bytes": 27.0 }, "functions": { "anonymous": 9.0, "one_liners": 7.0, "length_stddev": 1.87, "no_params_count": 9.0, "avg_length_lines": 1.78, "max_length_lines": 7.0, "min_length_lines": 1.0, "nested_functions": 1.0, "avg_nesting_depth": 0.11, "max_nesting_depth": 1.0, "density_per_100_lines": 8.18, "code_in_functions_ratio": 0.15 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 114.0, "total": 468.0, "avg_length": 5.32, "max_length": 26.0, "min_length": 1.0, "avg_entropy": 1.93, "reuse_ratio": 0.24, "unique_count": 114.0, "length_stddev": 3.65, "has_digit_ratio": 0.03, "sequential_names": 11.0, "single_char_count": 13.0, "single_char_ratio": 0.11, "high_entropy_count": 2.0, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.47, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 2.0, "double_underscore_count": 1.0, "underscore_prefix_count": 2.0 } } }, "id": 6, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/Sat/Easy.hs", "pid": 0, "risk": 1, "sha": "7f5d0c6772f7c0321ebdaa54692c30878eed13e91187d84f75c3315e47d6c8c1", "size": 3208, "traits": [ { "id": "metadata/file/extension/identity::haskell-source-basename", "conf": 1.0, "crit": 2, "desc": "Haskell source file extension", "spans": [ [ 0, 7 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-property-call", "conf": 0.8199999928474426, "crit": 2, "desc": "Calls a property using bracket notation", "spans": [ [ 1602, 8 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DO3D+oHhAzry6bzav!Z=rc6fbeQW$yz!a0bwGTP/yH{%[CRhBfBy/GgvqF+Xz*2YjB1P)7Cw7MdwEn=Uze:AlBrBg#yH{%[CRhE7A+#}jx\u003eg{}xcnQAvp}blpJw0eA=(nbdgf^aAbP=sawc=(wNYO5e(2?(wErc*AbP:", "n": [ { "c": 2, "d": "Haskell source file extension", "i": "metadata/file/extension/identity::haskell-source-basename", "o": 0, "z": 4, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarS7KA+e\u0026%CQC3+ze0JfauZ\u0026*Abolgl3aj$y?mG%Bz8!oA+e\u0026%CQT+Kx(mF?arR^HarR^HarR^HarR^Hd0P!:aAIWqw[=GqdiH+@B8U@fBu$0\u003ec#rEjxlm/fzd@", "n": [ { "c": 1, "d": "References the JavaScript .length property", "i": "metadata/lang/scripted::length-prop", "o": 3089, "z": 6, "cf": 1.0 } ], "ln": 3057, "col": 11, "line": 83 } ], "depth": 1, "facts": { "imp": [ [ "", "Nothing" ], [ "", "Nothing" ], [ "", "where" ], [ "", "\"answer\".typ" ], [ "", "head" ], [ "", "IO" ], [ "", "not" ], [ "", "popen" ], [ "", "popen" ], [ "", "showProblem" ], [ "", "eflags" ], [ "", "str" ], [ "", "fromMaybe" ], [ "", "fromMaybe" ], [ "", "varMap" ], [ "", "intern" ], [ "", "show" ], [ "", "funMap" ], [ "", "intern" ], [ "", "show" ], [ "", "result" ], [ "", "status" ], [ "", "let" ], [ "", "toks" ], [ "", "parser" ], [ "", "UserState" ], [ "", "parens" ], [ "", "bracks" ], [ "", "fmap" ], [ "", "fmap" ], [ "", "term" ], [ "", "fmap" ], [ "", "liftM2" ], [ "", "liftM2" ], [ "", "fmap" ], [ "", "bracks" ], [ "", "term" ], [ "", "Map.findWithDefault" ], [ "", "E prover options" ] ], "mbr": [ "Jukebox.ExternalProvers", "Jukebox.ExternalProvers.E", "Map.findWithDefault", "Map.fromList", "Var.lookup", "coding.mangleAnswer" ], "tgt": [ "IO", "Map.findWithDefault", "Nothing", "UserState", "bracks", "fmap", "fmap()", "fromMaybe", "fromMaybe()", "head", "intern", "liftM2", "liftM2()", "not", "parens", "parser", "popen", "popen()", "show", "showProblem", "term", "where" ], "metrics": { "ast": { "op.eq": 2.0, "op.gt": 3.0, "op.lt": 18.0, "op.bor": 14.0, "op.sub": 26.0, "max_depth": 22.0, "bind_count": 11.0, "call_count": 35.0, "node_count": 1174.0, "member_count": 6.0, "op_density.eq": 0.0, "op_density.gt": 0.0, "op_density.lt": 0.02, "op_density.bor": 0.01, "op_density.sub": 0.02, "sequence_count": 6.0, "identifier_count": 141.0, "member_depth_max": 3.0, "self_compare_count": 3.0, "string_literal_count": 32.0, "array_literal_max_length": 2.0 }, "file": { "size": 3904.0, "entropy": 4.73, "size_bytes": 3904.0 }, "text": { "digit_ratio": 0.0, "space_count": 1017.0, "total_lines": 102.0, "char_entropy": 4.73, "unique_chars": 74.0, "string_density": 0.31, "avg_line_length": 37.27, "max_line_length": 94.0, "empty_line_ratio": 0.06, "last_line_length": 94.0, "whitespace_ratio": 0.29, "most_common_ratio": 0.05, "identifier_density": 3.17, "line_length_stddev": 23.82, "normalized_string_count": 3.17, "repeated_char_sequences": 32.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 21.13 }, "binds": { "count": 11.0 }, "calls": { "count": 35.0 }, "binary": { "overall_entropy": 4.73, "peak_region_bytes": 2048.0, "peak_region_entropy": 4.97 }, "imports": { "count": 1.0, "unique_modules": 1.0, "third_party_count": 1.0, "third_party_ratio": 1.0 }, "members": { "count": 6.0 }, "strings": { "total": 32.0, "avg_length": 18.5, "max_length": 56.0, "avg_entropy": 2.98, "total_bytes": 592.0, "entropy_stddev": 0.96 }, "functions": { "anonymous": 2.0, "one_liners": 2.0, "no_params_count": 2.0, "avg_length_lines": 1.0, "max_length_lines": 1.0, "min_length_lines": 1.0, "density_per_100_lines": 1.96, "code_in_functions_ratio": 0.02 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 141.0, "total": 323.0, "avg_length": 5.66, "max_length": 18.0, "min_length": 1.0, "avg_entropy": 2.17, "reuse_ratio": 0.44, "unique_count": 141.0, "length_stddev": 2.95, "has_digit_ratio": 0.01, "sequential_names": 7.0, "single_char_count": 9.0, "single_char_ratio": 0.06, "high_entropy_count": 2.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.46, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 1.0, "underscore_prefix_count": 2.0 } } }, "id": 7, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/ExternalProvers/E.hs", "pid": 0, "risk": 1, "sha": "dd12c14260889b8b9bb06af84d52cd3cfcf2c9930e64cd91acda5a4cc3423026", "size": 3904, "traits": [ { "id": "metadata/file/extension/identity::haskell-source-basename", "conf": 1.0, "crit": 2, "desc": "Haskell source file extension", "spans": [ [ 0, 4 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 35 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "boXZHx(kOIB7+]5D2NtowPP4Dvix00xlay!Ab](bwPI]vdiJ%AarR^Hw]zYjvrc06x(k4sdMX+-zWEQfarR^HarUf5B7DEtvrc06x(jn2arR^HarR^HarR!ia$u?wdgdguarR^HarR^HarR^HarUSzz!0v1B08.RwN/y(as7xoxcqNAv%8\u003e", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HauIT(arR^HarR^HarR^HkQ[h\u0026arR^HarR^HarR^HarR^HAb](bwPI]nbQ^ehBrz?SwN/y(as7xoxcqNAv%8(oeN{K/djCPDarR^HarR^HarR^HarR^*i%)8MarR^HarR^HarSmLB97@5d\u003eq-\u0026at4hFB7D}twiBNzy?a$4arR^HarR^HarR^HarR^H", "ln": 184, "col": 12, "line": 9 }, { "b": "B1oy0vrb#/arR^HarR^HarR^HarR^Hj39=(arR^HarR!rB75L=arR^Hwn=u%3vJl*Ab](bwPI]nbQ%cdwQ4=@azihPat4URvrui[eO]cgxjCA]ePV2xBzkkpy?Wv1ByX(id\u003cc9CA+xC2", "ln": 373, "col": 20, "line": 16 } ], "depth": 1, "facts": { "imp": [ [ "", "process" ], [ "", "process" ], [ "", "echo" ], [ "", "echo" ], [ "", "cut" ], [ "", "cut" ], [ "", "rev" ], [ "", "rev" ], [ "", "cut" ], [ "", "cut" ], [ "", "rev" ], [ "", "rev" ], [ "", "process" ], [ "", "process" ], [ "", "cat" ], [ "", "cat" ], [ "", "echo" ], [ "", "echo" ], [ "", "cut" ], [ "", "cut" ], [ "", "process" ], [ "", "process" ], [ "", "exec" ], [ "", "exec" ] ], "tgt": [ "cat", "cut", "echo", "exec", "process", "rev" ], "funcs": [ [ "process", 28 ] ], "metrics": { "ast": { "max_depth": 14, "call_count": 12, "node_count": 125 }, "file": { "size": 485, "entropy": 3.62 }, "text": { "lines": 24, "top_char": 99, "max_ws_run": 1, "digit_ratio": 0.02, "space_count": 218, "char_entropy": 3.62, "unique_chars": 41, "top_char_null": 0, "top_char_ratio": 0.05, "avg_line_length": 19.21, "max_line_length": 70, "empty_line_ratio": 0.13, "last_line_length": 47, "whitespace_ratio": 0.5, "identifier_density": 1.71, "line_length_stddev": 16.9, "repeated_char_sequences": 11, "normalized_unique_identifiers": 3.05 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 485, "peak_region_entropy": 3.62 }, "source": { "function_count": 1 }, "comments": { "chars": 9, "count": 1, "lines": 1, "to_code_ratio": 0.04 }, "functions": { "count": 1, "density": 4.17, "avg_params": 1, "code_ratio": 0.71, "max_params": 1, "avg_name_length": 7, "avg_length_lines": 17, "max_length_lines": 17, "min_length_lines": 17, "avg_param_name_length": 377 }, "identifiers": { "count": 41, "unique": 14, "avg_length": 5.64, "max_length": 17, "min_length": 2, "avg_entropy": 1.91, "reuse_ratio": 0.34, "length_stddev": 4.35, "has_digit_ratio": 0.07, "all_lowercase_ratio": 0.57 } } }, "id": 8, "mol": "H(Po₂)", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/gcc-static-libstdc++", "pid": 0, "risk": 1, "sha": "8ba3966d189941788aebe962695b97e9328517b5dae9568f188c9da3e7469fc0", "size": 485, "traits": [ { "id": "micro-behaviors/process/create/shell/spawn::shell-exec", "atk": "T1059", "conf": 0.5, "crit": 3, "desc": "Uses shell exec to replace process", "spans": [ [ 437, 4 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "spans": [ [ 437, 4 ] ] }, { "id": "micro-behaviors/process/create/exec::child-process-execution", "atk": "T1059", "conf": 0.94, "crit": 3, "desc": "Executes a child process", "spans": [ [ 437, 4 ] ] } ], "type": "shell" }, { "id": 9, "sha": "1bc80685fcc79c23b110eb2b3bcbc2cee621bfaa1479d2a5ad4aa7ef3bfff23e", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/errors.h", "size": 161, "type": "c", "depth": 1 }, { "ctx": [ { "b": "DO3D+oHhAzry6bzaxiS9wLWnRA::6dA=S=OlsB+Ap*[D/wPzWfefEqRp+i.=vruQ5A=ax\u0026vrb[1ar@E^", "n": [ { "c": 2, "d": "Script overall entropy stays low", "i": "metadata/file/metrics::low-overall-entropy-source", "o": 0, "z": 29, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "zeS%cy?j.YB.+L$z*i)lz/oDke\u003c\u003cC-B-RneC{4rAwPzt", "ln": 2, "addr": 65 }, { "b": "", "ln": 3, "addr": 101 }, { "b": "v@bN@B7]limR(HCB09Q", "ln": 22, "addr": 584 }, { "b": "arUxom@\u0026J\u003cA3ct@zG6-uayPd#ay/j@B-Rnex\u003eqrcz/x/jz/fRuas3", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 617, "z": 3, "cf": 0.800000011920929 } ], "ln": 23, "addr": 600 }, { "b": "arT3/vrDT9w{D\u003cZvp%T7js08", "ln": 24, "addr": 643 }, { "b": "", "ln": 37, "addr": 1068 }, { "b": "arSl/aw3e/B-Rnmxcn=TB8U@fBsXLRA:-\u003cby*?A%ayMygwOkB[wN]dTz/fr3v@#\u003clwGU{", "ln": 38, "addr": 1069 }, { "b": "arSl/azC.nzY\u0026Ehv@Dm1wN/?8A+cwxA4AbNzY\u0026F8y\u0026sIuB8U@fBAzkmxcqqmaA7+1B-G8", "n": [ { "c": 1, "d": "Permission-grant action verb keyword", "i": "metadata/permission/capture::permission-grant-verb", "o": 1155, "z": 5, "cf": 0.8600000143051147 } ], "ln": 39, "addr": 1125 }, { "b": "arUfgvrDT9w{D%=AclnzaARpdz/QaCz^)J%xlbgzx(m(Jx(m)hdf", "ln": 40, "addr": 1181 }, { "b": "arR^HD)0GHy?X0kx(mMaw]7)*B1wC1CPY:)xjk)[wj7oMygQ)%B-I4ojs}W\u003ex(mD7x(m(jjP", "n": [ { "c": 2, "d": "Recognized cloud config marker", "i": "objectives/exfiltration/stealer/credential/token::cloud-config-recognized-marker", "o": 1270, "z": 4, "cf": 0.949999988079071 } ], "ln": 41, "addr": 1223 }, { "b": "arR^HarUfgvrDT9w{D%=AclnzaARpdz/QaCz^)J%xlbgzx(m(qi+-FJB14", "ln": 42, "addr": 1281 }, { "b": "arU-py?m9#asIE}CYLqRjS(d$eo(j+auySHasIH^CSHa\u003ediK0Xd0Wv?B15j]eG/aCy?m9#aB4@It(", "ln": 96, "addr": 2686 }, { "b": "arQ", "ln": 97, "addr": 2748 }, { "b": "arU-tDlsR4zE:(eB15jOarR^HarR^HarS/\u0026y?mG%Bz8!oA@", "n": [ { "c": 1, "d": "JavaScript length property", "i": "metadata/lang/scripted::length-prop", "o": 2779, "z": 6, "cf": 1.0 } ], "ln": 98, "addr": 2751 }, { "b": "arU-tDlsR9z/OcWy-\u003eb)x(mD7uM:qpdiH+@B7]}yz#", "ln": 99, "addr": 2789 }, { "b": "arU-tDlsRyayESTB.M2bayuMuarR^HarS/\u0026g5", "ln": 100, "addr": 2823 }, { "b": "arR^HeIe8?wGV5fz!%04x)KtkxK#i}aAIDzBzb98aA}xtA+fxmwGV8dwGV5fz!%04azb+lv@#B6zu", "ln": 250, "addr": 8696 }, { "b": "arR^HeIe7[x\u003ewGiwGUJ4aARphB0a[6By/Fnv@Dsix(mMmaA}xtxjVfcB7GJaA:-=bB8bYgwO(44zEW^5z/fRB", "n": [ { "c": 2, "d": "Recognized developer credential marker", "i": "objectives/credential-access/cloud/devops-bundle::developer-credential-sweep-recognized-marker", "o": 8786, "z": 7, "cf": 0.949999988079071 } ], "ln": 251, "addr": 8758 }, { "b": "arR^Hwn-Pfz/WoGjs}W@wO(vewKQ\u0026TB98ECAbP^", "ln": 252, "addr": 8827 }, { "b": "arSl/aAIspy?mE9wPzTeazthbwGU]ey\u003cvdDvrc6\u003cvR/Q%ayPslvrc16zdNQbB1wCxA+PSfwPF#5A+cwfvrc0(c#{:", "ln": 288, "addr": 9957 }, { "b": "arUikaAIPDjs}W%wPq\u003c7zEWl2toEJ{vq)tqCP.w%j$dQ5B8bYgwO\u0026MmasH\u0026xwO00adjDx!aB21\u003eeG^#6Bs}VNoLFM\u0026aB4@It(", "ln": 289, "addr": 10029 }, { "b": "arR^HaAz4gz*2XXCXIkvB08(LBZ/AlasH\u0026uy?dMed10K)diJtnB0bKBdiJNU", "n": [ { "c": 1, "d": "modprobe hook shell metachar", "i": "objectives/persistence/system/surface/modprobe::modprobe-shell-metachar", "o": 10107, "z": 36, "cf": 0.8199999928474426 } ], "ln": 290, "addr": 10107 }, { "b": "arV1.", "ln": 291, "addr": 10156 }, { "b": "arSl/aAIspy?mE9wPzTeay!?$azthbwGU]kxK#ibB8bYgwO(K2A=2\u003euvriM1A+xJiwO#QhefFwwx([62B0a[iwGV5hvqG:dwPxj", "ln": 292, "addr": 10161 }, { "b": "z/Oi-B95Ket{7mjarR^HarR^HjS(dceheH", "ln": 326, "addr": 11111 }, { "b": "z/Oi-B95Kev{Hi1arR^HarR^HjS[k", "ln": 327, "addr": 11139 }, { "b": "z/Oi-B95JMc$s$.y+Ww1v@\u003c7wjS(d.f^4}*v\u003e]OTv\u003e/8Qaz-!Qd\u003cesSasXHIf!0", "n": [ { "c": 1, "d": "Needle C2 descriptor word", "i": "well-known/malware/stealer/needle::c2-word", "o": 11191, "z": 2, "cf": 0.5 } ], "ln": 328, "addr": 11163 }, { "b": "aA}HgA+b", "ln": 329, "addr": 11214 }, { "b": "arS7xgaWk%diH+@z/Oi-B95KmA@", "ln": 330, "addr": 11221 } ], "depth": 1, "facts": { "imp": [ [ "", "clausify" ], [ "", "Form.run" ], [ "", "clausifyInputs." ], [ "", "toCNF" ], [ "", "toCNF" ], [ "", "obligs" ], [ "", "Not" ], [ "", "obligs" ], [ "", "clausifyInputs" ], [ "", "obligs" ], [ "", "inps" ], [ "", "inp" ], [ "", "inps" ], [ "", "what" ], [ "", "source" ], [ "", "theory" ], [ "", "ForAll" ], [ "", "split" ], [ "", "maximumBy" ], [ "", "Or" ], [ "", "let" ], [ "", "select." ], [ "", "select" ], [ "", "select" ], [ "", "siz" ], [ "", "ForAll" ], [ "", "siz" ], [ "", "Or" ], [ "", "pns" ], [ "", "qm" ], [ "", "getMax" ], [ "", "otherwise" ], [ "", "getMax" ], [ "", "ForAll" ], [ "", "common" ], [ "", "ForAll" ], [ "", "Bind" ], [ "", "removeEquivAux" ], [ "", "removeEquivAux" ], [ "", "removeEquivAux" ], [ "", "removeEquivAux" ], [ "", "ForAll" ], [ "", "Exists" ], [ "", "removeEquivAux" ], [ "", "Literal" ], [ "", "small" ], [ "", "inEquiv" ], [ "", "removeExists" ], [ "", "otherwise" ], [ "", "\"equiv\"" ], [ "", "\"equiv\"" ], [ "", "Literal" ], [ "", "Literal" ], [ "", "Literal" ], [ "", "Literal" ], [ "", "isSmall" ], [ "", "isSmall" ], [ "", "isSmall" ], [ "", "ForAll" ], [ "", "isSmall" ], [ "", "Exists" ], [ "", "removeExists" ], [ "", "ForAll" ], [ "", "ForAll" ], [ "", "Exists" ], [ "", "arities" ], [ "", "skolem" ], [ "", "removeExists" ], [ "", "subst" ], [ "", "foldr" ], [ "", "arities" ], [ "", "skolem" ], [ "", "skolem" ], [ "", "subst" ], [ "", "lit" ], [ "", "unitCost" ], [ "", "cs" ], [ "", "sum" ], [ "", "sum" ], [ "", "orCost." ], [ "", "orCost.c" ], [ "", "orCost" ], [ "", "orCost" ], [ "", "where" ], [ "", "removeExpensiveOrAux" ], [ "", "makeOr" ], [ "", "makeOr" ], [ "", "makeOr" ], [ "", "sortBy" ], [ "", "sortBy" ], [ "", "ForAll" ], [ "", "fmap" ], [ "", "ForAll" ], [ "", "lit" ], [ "", "makeOr." ], [ "", "fcs2" ], [ "", "Or" ], [ "", "orCost" ], [ "", "otherwise" ], [ "", "\"or\"" ], [ "", "\"or\"" ], [ "", "free" ], [ "", "makeOr.fcs1" ], [ "", "makeOr" ], [ "", "makeOr" ], [ "", "makeOr" ], [ "", "Literal" ], [ "", "Or" ], [ "", "Literal" ], [ "", "orCost" ], [ "", "fc" ], [ "", "split" ], [ "", "fcs" ], [ "", "fcs" ], [ "", "cnf" ], [ "", "ForAll" ], [ "", "cnf" ], [ "", "cnf" ], [ "", "cross" ], [ "", "cnf" ], [ "", "cross" ], [ "", "cs" ], [ "", "simplifyCNF" ], [ "", "usort.concatMap" ], [ "", "xs." ], [ "", "xs" ], [ "", "xs" ], [ "", "xs" ], [ "", "xs" ], [ "", "xs" ], [ "", "Neg" ], [ "", "Var" ], [ "", "subst" ], [ "", "subst" ], [ "", "Set.null" ], [ "", "pos" ], [ "", "not" ], [ "", "clause" ], [ "", "Neg" ], [ "", "Pos" ], [ "", "otherwise" ], [ "", "Pos" ], [ "", "lift" ], [ "", "show" ], [ "", "not" ], [ "", "lift" ], [ "", "getName" ], [ "", "skolem" ], [ "", "vs" ], [ "", "vs" ], [ "", "Tru" ], [ "", "Input and clausifier options" ] ], "mbr": [ "ForAll.Bind", "Form.run", "Jukebox.Tools", "Jukebox.Tools.Clausify", "Set.fromList", "Set.null", "Set.singleton", "Set.toList", "copy.There", "occur.clausifyInputs", "run.clausifyInputs", "small.All", "tautElim.unify", "them.makeCopyable", "usort.concatMap" ], "tgt": [ "Bind", "Exists", "ForAll", "Form.run", "Literal", "M", "Neg", "Not", "Or", "Pos", "Set.null", "Tru", "_", "arities", "clausifyInputs", "cnf", "common", "cross", "cs", "fc", "fcs", "fmap", "foldr", "free", "getMax", "inp", "isSmall", "lift", "makeOr", "makeOr()", "makeOr()()", "maximumBy", "not", "obligs", "orCost", "orCost()", "p", "pos", "qm", "removeEquivAux", "removeEquivAux()", "removeExists", "removeExpensiveOrAux", "select", "select()", "show", "siz", "skolem", "skolem()", "small", "sortBy", "sortBy()", "split", "subst", "sum", "t", "theory", "toCNF", "toCNF()", "usort.concatMap", "where", "x", "xs", "xs()", "xs()()", "xs()()()", "xs()()()()" ], "metrics": { "ast": { "op.eq": 1.0, "op.gt": 15.0, "op.le": 2.0, "op.lt": 37.0, "op.ne": 1.0, "op.add": 3.0, "op.bor": 30.0, "op.div": 2.0, "op.lor": 1.0, "op.mul": 3.0, "op.sub": 68.0, "op.bnot": 2.0, "op.land": 2.0, "max_depth": 91.0, "bind_count": 36.0, "call_count": 163.0, "node_count": 5535.0, "member_count": 15.0, "op_density.eq": 0.0, "op_density.gt": 0.0, "op_density.le": 0.0, "op_density.lt": 0.01, "op_density.ne": 0.0, "op_density.add": 0.0, "op_density.bor": 0.01, "op_density.div": 0.0, "op_density.lor": 0.0, "op_density.mul": 0.0, "op_density.sub": 0.01, "sequence_count": 38.0, "op_density.bnot": 0.0, "op_density.land": 0.0, "identifier_count": 438.0, "member_depth_max": 3.0, "self_compare_count": 1.0, "string_literal_count": 34.0, "array_literal_max_length": 4.0, "numeric_sequence_max_length": 2.0, "string_concat_chain_max_length": 4.0 }, "file": { "size": 15445.0, "entropy": 4.72, "size_bytes": 15445.0 }, "text": { "digit_ratio": 0.01, "space_count": 3858.0, "total_lines": 459.0, "char_entropy": 4.72, "unique_chars": 86.0, "string_density": 0.07, "ascii_art_lines": 10.0, "avg_line_length": 32.65, "max_line_length": 114.0, "empty_line_ratio": 0.16, "last_line_length": 11.0, "whitespace_ratio": 0.28, "most_common_ratio": 0.06, "identifier_density": 3.83, "line_length_stddev": 23.72, "normalized_string_count": 1.59, "repeated_char_sequences": 62.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 41.0, "trailing_whitespace_lines": 11.0, "most_common_char_codepoint": 45.0, "suspicious_identifier_ratio": 0.06, "normalized_unique_identifiers": 49.53 }, "binds": { "count": 36.0 }, "calls": { "count": 163.0 }, "binary": { "overall_entropy": 4.72, "peak_region_bytes": 6144.0, "peak_region_entropy": 5.07 }, "imports": { "count": 1.0, "unique_modules": 1.0, "third_party_count": 1.0, "third_party_ratio": 1.0 }, "members": { "count": 15.0 }, "strings": { "total": 34.0, "avg_length": 9.82, "max_length": 67.0, "avg_entropy": 2.3, "empty_count": 1.0, "total_bytes": 334.0, "entropy_stddev": 0.9 }, "functions": { "anonymous": 1.0, "no_params_count": 1.0, "avg_length_lines": 18.0, "max_length_lines": 18.0, "min_length_lines": 18.0, "density_per_100_lines": 0.22, "code_in_functions_ratio": 0.04 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 438.0, "total": 1760.0, "avg_length": 5.54, "max_length": 20.0, "min_length": 1.0, "avg_entropy": 2.04, "reuse_ratio": 0.25, "unique_count": 438.0, "length_stddev": 3.32, "has_digit_ratio": 0.03, "sequential_names": 27.0, "single_char_count": 25.0, "single_char_ratio": 0.06, "high_entropy_count": 4.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.7, "all_uppercase_ratio": 0.03, "numeric_suffix_count": 11.0, "keyboard_pattern_names": 1.0, "double_underscore_count": 1.0, "underscore_prefix_count": 2.0 } } }, "id": 10, "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/Tools/Clausify.hs", "pid": 0, "risk": 1, "sha": "0f5e26ec644c32df5a7432ab6eb34093498447b003e2c7b54e56e0e47041f8b9", "size": 15445, "traits": [ { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Script overall entropy stays low", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 36 ] ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "English language detection", "spans": [ [ 617, 3 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-count", "conf": 0.949999988079071, "crit": 1, "desc": "Many subtraction operators present", "spans": [ [ 0, 18 ] ] } ], "type": "javascript" }, { "id": 11, "sha": "060595dd5671eb775610c4d42322f3d946b87837c1b637c4199f20acc2500402", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/Tools/AnalyseMonotonicity.hs", "risk": 1, "size": 2788, "type": "python", "depth": 1 }, { "id": 12, "sha": "b680abf3cff561fea44f662fd872b1a28280920cfbbf16b420fe4255e75cb46d", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/TPTP/Parse/Core.hs", "risk": 1, "size": 23076, "type": "c", "depth": 1 }, { "id": 13, "sha": "98c0d9694023dec2b3ea5f08d999dbea8704f1e60823e0438ac03c19b99c3a84", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/LICENSE", "risk": 1, "size": 1529, "type": "text", "depth": 1 }, { "id": 14, "sha": "0ccd6f8155b21d44441b81663f3fe5002fca6e37ff9c410fb2a72f0222d932c3", "path": "/data/samples/unknown/foraged/haskell/haskell.org/hackage.haskell.org/jukebox/jukebox-0.5.10.tar.gz!!jukebox-0.5.10/src/Jukebox/SMTLIB.hs", "size": 6082, "type": "c", "depth": 1 } ], "omitted_files": 5, "rev": "75cb2", "v": "8" } }