{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9345387816429138, "class": 0 } ], "prob": 0.9345388, "class": 0, "version": "v16.16", "thresholds": [ 0.9815004, 0.99404883 ], "analyzed_at": "2026-04-30T08:08:12Z" }, "path": "DbeSession.cc", "raw": { "v": "4", "fs": [ { "f": "O₂(CEr)H(Po)", "x": 3, "id": 0, "is": [ "ARCH", "ARCH", "DbeSession", "Settings", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "propNames_name_store", "NTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "GTXT", "dbe_sprintf", "indxobj_define", "GTXT", "free", "indxobj_define", "GTXT", "indxobj_define", "GTXT", "indxobj_define", "GTXT", "indxobj_define", "GTXT", "indxobj_define", "GTXT", "dbe_sprintf", "indxobj_define", "GTXT", "free", "indxobj_define", "GTXT", "indxobj_define", "GTXT", "elf_init", "settings.read_rc", "init", "DbeSession", "Destroy", "Destroy", "Destroy", "Destroy", "Destroy", "Destroy", "Destroy", "Destroy", "Destroy", "hwcentries.size", "hwcentries.get", "free", "free", "idxobjs.size", "idxobjs.get", "hMap.values.destroy", "hMap.values", "Destroy", "Destroy", "Destroy", "free", "StringBuilder", "sb.append", "sb.append", "sb.toString", "system", "free", "free", "unlink_tmp_files", "tmp_files.size", "unlink", "tmp_files.fetch", "tmp_files.destroy", "dbe_sprintf", "system", "free", "free", "dbe_sprintf", "getuid", "getpid", "mkdir", "dbe_sprintf", "strlen", "getenv", "atoi", "set_search_path", "expGroups.destroy", "f_special.reset", "f_special.append", "omp_functions.reset", "omp_functions.append", "get_Unknown_LoadObject", "get_Total_LoadObject", "createDataObject", "d_total.set_name", "createDataObject", "d_scalars.set_name", "GTXT", "createDataObject", "d_unknown.set_name", "GTXT", "createDataObject", "PTXT", "PTXT", "PTXT", "PTXT", "dobj.set_dobjname", "createDataObject", "dobj.set_dobjname", "PTXT", "VecSize", "idxobjs.get", "idxobjs.get.reset", "idxobjs.get", "loadObjMap.reset", "dbev.reset", "exps.destroy", "lobjs.reset", "dobjs.destroy", "objs.destroy", "comp_lobjs.clear", "comp_dbelines.clear", "comp_sources.clear", "sourcesMap.clear", "sources.reset", "idxobjs.size", "idxobjs.fetch", "v.values.destroy", "v.values", "v.clear", "init", "get_sources", "getDbeFile", "Dprintf", "strncmp", "dbeFiles.get", "DbeFile", "dbeFiles.put", "get_Total_LoadObject", "createLoadObject", "get_Total_Function", "createFunction", "f_total.set_name", "get_Total_LoadObject", "mod.functions.append", "get_Unknown_LoadObject", "createLoadObject", "GTXT", "get_Unknown_Function", "get_Unknown_Source", "createSourceFile", "get_Unknown_Function", "createFunction", "f_unknown.set_name", "GTXT", "get_Unknown_LoadObject", "mod.functions.append", "create_hide_function", "createFunction", "h_function.set_name", "lo.get_name", "lo.noname.functions.append", "get_JUnknown_Function", "createFunction", "j_unknown.set_name", "GTXT", "get_Unknown_LoadObject", "mod.functions.append", "get_jvm_Function", "createFunction", "f_jvm.set_name", "GTXT", "get_Unknown_LoadObject", "lobjs.size", "lobjs.fetch", "mod.functions.append", "f_special.fetch", "GTXT", "GTXT", "createFunction", "get_Total_LoadObject", "mod.functions.append", "func.set_name", "f_special.store", "get_OMP_LoadObject", "lobjs.size", "lobjs.fetch", "createLoadObject", "omp_functions.fetch", "createFunction", "func.set_name", "get_OMP_LoadObject", "omp.noname.functions.append", "omp.functions.append", "omp_functions.store", "createExperimentPart1", "Experiment", "expGroups.size", "expGroups.fetch", "gr.append", "exp.setExpIdx", "exps.size", "exp.setUserExpId", "exps.append", "createExperiment", "Experiment", "append", "exp.setExpIdx", "exps.size", "exp.setUserExpId", "exps.append", "exp.founder_exp.children_exps.append", "expGroups.get.append", "expGroups.get", "VecSize", "expGroups.get", "gr.append", "hwcentries.append", "exps.size", "getView", "abort", "getView", "DbeView", "DbeView", "views.append", "views.remove", "get_group_or_expt", "fopen", "fgets", "strncmp", "strlen", "dbe_strdup", "canonical_path", "exp_list.append", "fgets", "sscanf", "dbe_strdup", "canonical_path", "exp_list.append", "fclose", "isdigit", "isdigit", "GET_INT_VAL", "GET_INT_VAL", "dexp.read_experiment_data", "free", "exp.open", "exp.get_status", "exp.read_experiment_data", "exp.open_epilogue", "views.size", "views.fetch", "dbev.add_experiment", "exp.getExpIdx", "exp.get_status", "check_tab_avail", "getenv", "atoi", "opendir", "check_tab_avail", "readdir", "strlen", "strcmp", "exp_names.append", "dbe_strdup", "closedir", "exp_names.sort", "exp_names.size", "exp_names.size", "exp_names.fetch", "dbe_sprintf", "dbe_sprintf", "dbe_stat", "free", "free", "dbe_stat", "free", "S_ISDIR", "free", "strlen", "Experiment", "dexp.setTinyThreshold", "dexp.open", "dexp.isDiscardedTinyExperiment", "free", "dexp.open", "append", "dexp.set_clock", "views.size", "views.fetch", "settings.check_en_desc", "dbev.add_subexperiment", "dexp.getExpIdx", "free", "views.size", "views.fetch", "dbev.add_experiment_epilogue", "DbeThreadPool", "exp_names.size", "malloc", "DbeQueue", "threadPool.put_queue", "threadPool.wait_queues", "exp_names.size", "dexp.open_epilogue", "exp_names.destroy", "check_tab_avail", "exp.fetch_errors", "pr_mesgs", "exp.fetch_errors", "sb.append", "sb.append", "sb.append", "free", "exp.fetch_warnings", "sb.append", "sb.append", "is_interactive", "sb.append", "sb.append", "VecSize", "settings.check_en_desc", "is_interactive", "dbe_sprintf", "dbe_sprintf", "sb.append", "sb.append", "sb.append", "free", "exps.size", "exps.fetch", "exp.setExpIdx", "getExperimensGroups", "dbeSession.expGroups.size", "expGroups.size", "expGroups.size", "expGroups.size", "expGroups.fetch", "grp.get_founders", "founders.size", "founders.size", "founders.size", "founders.fetch", "names.append", "dbe_strdup", "exp.get_expt_name", "groups.size", "groups.append", "groups.fetch.addAll", "groups.fetch", "groups.size", "groups.fetch", "names.size", "ExpGroup", "names.fetch", "dbe_sprintf", "ExpGroup", "free", "expGroups.append", "expGroups.size", "names.size", "names.fetch", "strlen", "strcmp", "get_group_or_expt", "lst.size", "Experiment", "append", "open_experiment", "lst.get", "exp.get_status", "append_mesgs", "lst.destroy", "Experiment", "append", "open_experiment", "exp.get_status", "append_mesgs", "views.size", "views.fetch", "dbev.update_advanced_filter", "dbev.get_settings.get_compare_mode", "dbev.get_settings", "dbev.set_compare_mode", "dbev.set_compare_mode", "sb.length", "sb.toString", "exps.fetch", "dbe_strdup", "VecSize", "drop_experiment", "dbev.drop_experiment", "expGroups.size", "expGroups.fetch", "gr.drop_experiment", "gr.exps.size", "expGroups.remove", "expGroups.size", "expGroups.size", "expGroups.fetch", "expList.size", "expList.fetch", "views.size", "views.fetch", "dbev.get_compare_mode", "dbev.set_compare_mode", "dbev.set_compare_mode", "check_tab_avail", "strcmp", "exp.get_expt_name", "exp.getExpIdx", "loadObjMap.sync_create_item", "loadObjMap.sync_create_item", "objs.append", "objs.size", "lobjs.append", "lobjs.size", "lobj.get_pathname", "dbeFiles.put", "dbeJarFiles.get", "DbeJarFile", "dbeJarFiles.put", "createModule", "Module", "objs.append", "objs.size", "mod.set_name", "dbe_strdup", "lo.seg_modules.append", "createUnknownModule", "createModule", "mod.set_file_name", "dbe_strdup", "strncmp", "sourcesMap.get", "SourceFile", "sourcesMap.put", "append", "createFunction", "Function", "objs.size", "objs.append", "createJMethod", "JMethod", "objs.size", "objs.append", "createClassFile", "ClassFile", "cls.set_name", "cls.get_java_file_name", "getDbeFile", "free", "objs.append", "objs.size", "DataObject", "dobjs.append", "dobjs.size", "assert", "createDataObject", "DataObject", "dobjs.append", "dobjs.size", "createDataObject", "DataObject", "dataobj.set_dobjname", "dobj.get_typename", "dobj.get_instname", "dobjs.append", "dobjs.size", "createMasterDataObject", "find_dobj_master", "createDataObject", "Dprintf", "dobj.parent.get_name", "get_dobj_elements", "createDataObject", "Dprintf", "element.get_name", "Dprintf", "dobj.parent.get_name", "find_dobj_master", "createDataObject", "Dprintf", "dobj.get_name", "Dprintf", "dobj.get_name", "mtr.get_flavors", "mlist.size", "mlist.fetch", "m.get_flavors", "mlist.insert", "mlist.append", "get_reg_metrics_tree", "BaseMetricTreeNode", "get_reg_metrics_tree.register_metric", "get_reg_metrics_tree", "find_metric", "find_metric", "BaseMetric", "m.set_expr_spec", "insert_metric", "find_metric", "BaseMetric", "insert_metric", "update_metric_tree", "register_metric", "find_metric", "dbe_sprintf", "dbe_sprintf", "BaseMetric", "insert_metric", "update_metric_tree", "BaseMetric", "BaseMetric", "insert_metric", "BaseMetric", "free", "free", "BaseMetric", "insert_metric", "update_metric_tree", "register_metric", "find_metric", "add_definition", "BaseMetric", "insert_metric", "update_metric_tree", "dbev.reset_metrics", "reg_metrics.size", "reg_metrics.fetch", "bm.get_type", "dbe_strcmp", "bm.get_expr_spec", "dbe_strcmp", "bm.get_cmd", "find_base_reg_metric", "reg_metrics.size", "reg_metrics.fetch", "bm.get_expr_spec", "dbe_strcmp", "bm.get_cmd", "get_base_reg_metrics", "get_all_reg_metrics", "ml.size", "ml.fetch", "m.get_expr_spec", "mlist.append", "dbev.get_settings.updateTabAvailability", "dbev.get_settings", "exps.size", "exps.fetch", "exps.size", "exps.fetch", "exps.size", "exps.fetch", "get_exp", "nexps", "get_exp", "loadObjMap.get", "hash", "dobj.get_unannotated_name", "find_dobj_by_name", "hash", "strcmp", "d.get_unannotated_name", "find_dobj_match", "dobj.get_unannotated_name", "hash", "strcmp", "d.get_unannotated_name", "find_dobj_master", "dobj.get_unannotated_name", "hash", "strcmp", "d.get_unannotated_name", "get_dobj_elements", "d.get_parent", "d.get_parent", "elements.append", "Vec_loop", "Vec_loop", "tlobjs.append", "strtoll", "isspace", "getNumber", "fprintf", "map_NametoFunction", "map_NametoModule", "map_NametoLoadObject", "map_NametoDataObject", "abort", "obj_lst.size", "obj_lst.size", "obj_lst.size", "fprintf", "fprintf", "ask_which", "obj_lst.fetch", "fprintf", "fprintf", "hitem.get_name", "hitem.get_type", "fprintf", "module.loadobject.get_pathname", "module.get_name", "fprintf", "fprintf", "module.loadobject.get_pathname", "strlen", "strlen", "fprintf", "fprintf", "fprintf", "fprintf", "fgets", "fprintf", "getNumber", "list.size", "fprintf", "if", "if", "strchr", "get_basename", "streq", "strncmp", "map_NametoLoadObject", "match_basename", "loitem.get_pathname", "match_basename", "loitem.get_name", "list.size", "list.append", "map_NametoModule", "match_basename", "match_basename", "mitem.get_name", "list.size", "list.append", "map_NametoFunction", "getNumber", "lobjs.size", "fprintf", "getNumber", "fprintf", "lobjs.fetch", "match_FName", "getNumber", "fprintf", "StrRchr", "match_basename", "match_basename", "mitem.get_name", "match_FName", "list.size", "list.append", "streq", "fitem.get_name", "mitem.is_fortran", "main_mod.read_stabs", "streq", "main_func.get_match_name", "map_NametoDataObject", "ditem.get_name", "streq", "list.size", "list.append", "list.size", "ditem.get_name", "strstr", "list.size", "list.append", "streq", "func.get_name", "streq", "func.get_mangled_name", "streq", "func.get_match_name", "md.is_fortran", "func.get_mangled_name", "strlen", "strlen", "strncmp", "snprintf", "func.get_name", "get_paren", "strchr", "strchr", "strncmp", "streq", "strlen", "strncmp", "strncmp", "strncmp", "streq", "add_path", "get_search_path", "add_path", "get_classpath", "classpath_df.size", "classpath.size", "classpath_df.store", "getDbeFile", "classpath.fetch", "split_str", "VecSize", "tokens.get", "pathes.size", "pathes.get", "streq", "pathes.append", "free", "dbeFiles.values", "f_list.size", "f_list.get", "f.set_need_refind", "sources.size", "sources.get", "f.dbeFile.set_need_refind", "search_path.destroy", "path.size", "path.fetch", "add_path", "set_need_refind", "search_path.size", "search_path.fetch", "sb.length", "sb.append", "sb.append", "free", "sb.toString", "dbe_strdup", "path.append", "strchr", "set_search_path", "free", "set_need_refind", "settings.set_pathmaps", "get_pathmaps", "settings.mobj_define", "dbev.get_settings.mobj_define", "dbev.get_settings", "fprintf", "loitem.get_name", "loitem.get_pathname", "loitem.dump_functions", "fprintf", "loitem.get_name", "loitem.get_pathname", "fprintf", "ditem.get_scope", "ditem.get_parent", "ditem.get_master", "fprintf", "ditem.get_size", "ditem.get_offset", "ditem.get_name", "fprintf", "ditem.get_size", "ditem.get_name", "fprintf", "fprintf", "fprintf", "scope.get_type", "fprintf", "scope.get_name", "get_basename", "scope.get_name", "fprintf", "fprintf", "scope.get_type", "scope.get_name", "fprintf", "exp.dump_map", "nexps", "get_exp", "fprintf", "exp.get_expt_name", "exp.dump_stacks", "PropDescr", "propNames.store", "PropDescr", "dbe_strdup", "propNames.store", "propNames.fetch", "propNames.size", "propNames_name_fetch", "strcasecmp", "propNames.size", "propNames.size", "propNames_name_fetch", "strcasecmp", "propNames.size", "dbe_strdup", "propNames_name_fetch", "propNames.size", "propNames.fetch", "dbe_strdup", "userLabels.append", "sources.append", "objs.append", "userLabels.size", "userLabels.fetch", "strcasecmp", "findMemSpaceByName", "ql_parse", "findIndexSpaceByName", "getIndexSpaceExpr", "findUserLabel", "qlparser.parse", "result", "getIndxObjDescriptions", "VecSize", "dyn_indxobj.get", "type.append", "desc.append", "dbe_strdup", "i18ndesc.append", "dbe_strdup", "sdesc.append", "dbe_strdup", "ldesc.append", "dbe_strdup", "mnemonic.append", "orderList.append", "settings.indx_tab_order.fetch", "exprList.append", "dbe_strdup", "res.store", "res.store", "res.store", "res.store", "res.store", "res.store", "res.store", "res.store", "getCustomIndxObjects", "dyn_indxobj.get", "name.append", "dbe_strdup", "formula.append", "dbe_strdup", "res.store", "res.store", "dbe_strdup", "isalpha", "dbe_sprintf", "isalnum", "dbe_sprintf", "findMemSpaceByName", "dbe_sprintf", "findIndexSpaceByName", "dyn_indxobj.fetch", "strcmp", "dbe_sprintf", "dbe_strdup", "strlen", "dbe_sprintf", "dbe_strdup", "ql_parse", "dbe_sprintf", "dbe_strdup", "dbe_strdup", "dbe_strdup", "dbe_strdup", "dyn_indxobj.append", "idxobjs.append", "settings.indxobj_define", "dbev.addIndexSpace", "dyn_indxobj.size", "dyn_indxobj.fetch", "dyn_indxobj.size", "dyn_indxobj.fetch", "dyn_indxobj.size", "dyn_indxobj.fetch", "dyn_indxobj.size", "dyn_indxobj.fetch", "strcasecmp", "findIndexSpace", "VecSize", "dyn_indxobj.get", "getIndexSpace", "findIndexSpaceByName", "res.fetch", "res.fetch", "res.fetch", "res.fetch", "res.fetch", "res.fetch", "res.fetch", "userLabels.size", "userLabels.fetch", "kwCategory.append", "dbe_strdup", "kwCategoryI18N.append", "dbe_strdup", "kwDataType.append", "dbe_strdup", "kwKeyword.append", "dbe_strdup", "kwFormula.append", "dbe_strdup", "kwDescription.append", "dbe_strdup", "kwEnumDescs.append", "propNames.size", "propNames.fetch", "kwCategory.append", "dbe_strdup", "kwCategoryI18N.append", "kwDataType.append", "kwKeyword.append", "kwFormula.append", "kwDescription.append", "kwEnumDescs.append", "dyn_indxobj.size", "dyn_indxobj.get", "kwCategory.append", "kwCategoryI18N.append", "kwDataType.append", "kwKeyword.append", "kwFormula.append", "kwDescription.append", "kwEnumDescs.append", "idxobjs.fetch", "iobjs.get", "idxobjs.fetch", "iobjs.get", "IndexObject", "idxobj.set_name", "iobjs.put", "idxobjs.fetch", "iobjs.get", "IndexObject", "idxobj.set_name", "iobjs.put", "objs.size", "objs.fetch", "findIndexObject", "match_java_threads", "dbe_sprintf", "regcomp", "free", "exp.get_jthreads", "regexec", "ret.append", "grids.append", "expids.append", "exp.getUserExpId", "regfree", "dbe_sprintf", "regcomp", "free", "obj.get_type", "regexec", "func.get_name", "ret.append", "regfree", "match_file_names", "dbe_sprintf", "regcomp", "free", "nexps", "get_exp", "exp.getFDataMap", "fDataMap.values", "fDataObjs.size", "fDataObjs.fetch", "regexec", "fData.get_raw_name", "ret.append", "regfree", "match_dobj_names", "dbe_sprintf", "regcomp", "free", "regexec", "ditem.get_name", "ret.append", "regfree", "fprintf", "mlist.size", "mlist.fetch", "m.dump", "fprintf", "free", "mlist.size", "mlist.fetch", "m.dump", "free" ], "ms": { "text": { "tab_count": 917.0, "digit_ratio": 0.02, "space_count": 15544.0, "total_lines": 3525.0, "char_entropy": 5.25, "mixed_indent": true, "unique_chars": 97.0, "escape_density": 0.01, "import_density": 30.01, "string_density": 0.19, "avg_line_length": 25.11, "max_line_length": 139.0, "empty_line_ratio": 0.08, "last_line_length": 1.0, "most_common_char": "e", "whitespace_ratio": 0.22, "most_common_ratio": 0.07, "identifier_density": 1.4, "line_length_stddev": 21.67, "octal_escape_count": 5.0, "normalized_import_count": 17.82, "normalized_string_count": 11.34, "repeated_char_sequences": 11.0, "suspicious_string_ratio": 0.01, "suspicious_comment_ratio": 0.03, "max_inline_whitespace_run": 9.0, "normalized_function_count": 1.16, "imports_to_functions_ratio": 15.33, "strings_to_functions_ratio": 9.75, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 62.89, "identifiers_to_functions_ratio": 10.74 }, "imports": { "total": 1058.0, "unique_modules": 434.0, "third_party_count": 1058.0, "third_party_ratio": 1.0 }, "strings": { "total": 673.0, "avg_length": 18.47, "max_length": 1093.0, "path_count": 10.0, "avg_entropy": 2.97, "total_bytes": 12431.0, "entropy_stddev": 0.84, "very_long_strings": 1.0, "shell_command_strings": 4.0 }, "comments": { "chars": 7571.0, "lines": 198.0, "total": 180.0, "xxx_count": 6.0, "to_code_ratio": 0.06, "base64_in_comments": 1.0, "high_entropy_comments": 4.0 }, "functions": { "total": 69.0, "length_stddev": 26.26, "over_100_lines": 1.0, "avg_name_length": 39.74, "no_params_count": 69.0, "avg_length_lines": 23.3, "max_length_lines": 160.0, "min_length_lines": 5.0, "high_entropy_names": 65.0, "density_per_100_lines": 1.96, "code_in_functions_ratio": 0.46 }, "identifiers": { "total": 4950.0, "avg_length": 9.57, "max_length": 32.0, "min_length": 1.0, "avg_entropy": 2.69, "reuse_ratio": 0.15, "unique_count": 741.0, "length_stddev": 5.03, "has_digit_ratio": 0.04, "sequential_names": 20.0, "base64_like_names": 3.0, "single_char_count": 13.0, "single_char_ratio": 0.02, "high_entropy_count": 57.0, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.53, "all_uppercase_ratio": 0.24, "numeric_suffix_count": 21.0, "underscore_prefix_count": 8.0 } }, "ss": [ [ 835, "config.h" ], [ 836, "config.h" ], [ 855, "\u003cctype.h\u003e" ], [ 874, "\u003cstdio.h\u003e" ], [ 893, "\u003cdirent.h\u003e" ], [ 913, "\u003cunistd.h\u003e" ], [ 933, "\u003csys/types.h\u003e" ], [ 956, "\u003cerrno.h\u003e" ], [ 975, "\u003csys/param.h\u003e" ], [ 999, "util.h" ], [ 1000, "util.h" ], [ 1017, "Application.h" ], [ 1018, "Application.h" ], [ 1042, "Experiment.h" ], [ 1043, "Experiment.h" ], [ 1066, "ExpGroup.h" ], [ 1067, "ExpGroup.h" ], [ 1088, "Expression.h" ], [ 1089, "Expression.h" ], [ 1112, "DataObject.h" ], [ 1113, "DataObject.h" ], [ 1136, "Elf.h" ], [ 1137, "Elf.h" ], [ 1153, "Function.h" ], [ 1154, "Function.h" ], [ 1175, "DbeSession.h" ], [ 1176, "DbeSession.h" ], [ 1199, "LoadObject.h" ], [ 1200, "LoadObject.h" ], [ 1223, "DbeSyncMap.h" ], [ 1224, "DbeSyncMap.h" ], [ 1247, "DbeThread.h" ], [ 1248, "DbeThread.h" ], [ 1270, "ClassFile.h" ], [ 1271, "ClassFile.h" ], [ 1293, "IndexObject.h" ], [ 1294, "IndexObject.h" ], [ 1318, "PathTree.h" ], [ 1319, "PathTree.h" ], [ 1340, "Print.h" ], [ 1341, "Print.h" ], [ 1665, "QLParser.tab.hh" ], [ 1666, "QLParser.tab.hh" ], [ 1692, "DbeView.h" ], [ 1693, "DbeView.h" ], [ 1713, "MemorySpace.h" ], [ 1714, "MemorySpace.h" ], [ 1738, "Module.h" ], [ 1739, "Module.h" ], [ 1758, "SourceFile.h" ], [ 1759, "SourceFile.h" ], [ 1782, "StringBuilder.h" ], [ 1783, "StringBuilder.h" ], [ 1809, "BaseMetric.h" ], [ 1810, "BaseMetric.h" ], [ 1833, "BaseMetricTreeNode.h" ], [ 1834, "BaseMetricTreeNode.h" ], [ 1865, "Command.h" ], [ 1866, "Command.h" ], [ 1886, "UserLabel.h" ], [ 1887, "UserLabel.h" ], [ 1909, "StringMap.h" ], [ 1910, "StringMap.h" ], [ 1932, "DbeFile.h" ], [ 1933, "DbeFile.h" ], [ 1953, "DbeJarFile.h" ], [ 1954, "DbeJarFile.h" ], [ 1977, "IOActivity.h" ], [ 1978, "IOActivity.h" ], [ 2001, "HeapActivity.h" ], [ 2002, "HeapActivity.h" ], [ 3992, "ATSTAMP" ], [ 3993, "ATSTAMP" ], [ 4049, "ETSTAMP" ], [ 4050, "ETSTAMP" ], [ 4105, "TSTAMP" ], [ 4106, "TSTAMP" ], [ 4159, "THRID" ], [ 4160, "THRID" ], [ 4212, "LWPID" ], [ 4213, "LWPID" ], [ 4265, "CPUID" ], [ 4266, "CPUID" ], [ 4319, "FRINFO" ], [ 4320, "FRINFO" ], [ 4376, "EVT_TIME" ], [ 4377, "EVT_TIME" ], [ 4448, "SMPLOBJ" ], [ 4449, "SMPLOBJ" ], [ 4504, "SAMPLE" ], [ 4505, "SAMPLE" ], [ 4578, "GCEVENTOBJ" ], [ 4579, "GCEVENTOBJ" ], [ 4638, "GCEVENT" ], [ 4639, "GCEVENT" ], [ 4738, "VOIDP_OBJ" ], [ 4739, "VOIDP_OBJ" ], [ 4864, "UCPU" ], [ 4865, "UCPU" ], [ 4915, "SCPU" ], [ 4916, "SCPU" ], [ 4966, "TRAP" ], [ 4967, "TRAP" ], [ 5017, "TFLT" ], [ 5018, "TFLT" ], [ 5068, "DFLT" ], [ 5069, "DFLT" ], [ 5119, "KFLT" ], [ 5120, "KFLT" ], [ 5170, "ULCK" ], [ 5171, "ULCK" ], [ 5221, "TSLP" ], [ 5222, "TSLP" ], [ 5272, "WCPU" ], [ 5273, "WCPU" ], [ 5323, "TSTP" ], [ 5324, "TSTP" ], [ 5377, "MSTATE" ], [ 5378, "MSTATE" ], [ 5431, "NTICK" ], [ 5432, "NTICK" ], [ 5487, "OMPSTATE" ], [ 5488, "OMPSTATE" ], [ 5584, "SRQST" ], [ 5585, "SRQST" ], [ 5636, "SOBJ" ], [ 5637, "SOBJ" ], [ 5733, "HWCTAG" ], [ 5734, "HWCTAG" ], [ 5788, "HWCINT" ], [ 5789, "HWCINT" ], [ 5842, "VADDR" ], [ 5843, "VADDR" ], [ 5895, "PADDR" ], [ 5896, "PADDR" ], [ 5949, "VIRTPC" ], [ 5950, "VIRTPC" ], [ 6004, "PHYSPC" ], [ 6005, "PHYSPC" ], [ 6066, "LWP_LGRP_HOME" ], [ 6067, "LWP_LGRP_HOME" ], [ 6134, "PS_LGRP_HOME" ], [ 6135, "PS_LGRP_HOME" ], [ 6200, "EA_PAGESIZE" ], [ 6201, "EA_PAGESIZE" ], [ 6261, "EA_LGRP" ], [ 6262, "EA_LGRP" ], [ 6322, "PC_PAGESIZE" ], [ 6323, "PC_PAGESIZE" ], [ 6383, "PC_LGRP" ], [ 6384, "PC_LGRP" ], [ 6440, "HWCDOBJ" ], [ 6441, "HWCDOBJ" ], [ 6497, "MEM_LAT" ], [ 6498, "MEM_LAT" ], [ 6554, "MEM_SRC" ], [ 6555, "MEM_SRC" ], [ 6639, "HTYPE" ], [ 6640, "HTYPE" ], [ 6692, "HSIZE" ], [ 6693, "HSIZE" ], [ 6746, "HVADDR" ], [ 6747, "HVADDR" ], [ 6802, "HOVADDR" ], [ 6803, "HOVADDR" ], [ 6859, "HLEAKED" ], [ 6860, "HLEAKED" ], [ 6880, "Leaked bytes" ], [ 6881, "Leaked bytes" ], [ 6961, "HMEM_USAGE" ], [ 6962, "HMEM_USAGE" ], [ 7020, "HFREED" ], [ 7021, "HFREED" ], [ 7040, "Freed bytes" ], [ 7041, "Freed bytes" ], [ 7121, "HCUR_ALLOCS" ], [ 7122, "HCUR_ALLOCS" ], [ 7146, "Current allocations" ], [ 7147, "Current allocations" ], [ 7237, "HCUR_NET_ALLOC" ], [ 7238, "HCUR_NET_ALLOC" ], [ 7340, "HCUR_LEAKS" ], [ 7341, "HCUR_LEAKS" ], [ 7364, "Current leaks" ], [ 7365, "Current leaks" ], [ 7445, "DDSCR_LNK" ], [ 7446, "DDSCR_LNK" ], [ 7568, "IOTYPE" ], [ 7569, "IOTYPE" ], [ 7621, "IOFD" ], [ 7622, "IOFD" ], [ 7675, "IONBYTE" ], [ 7676, "IONBYTE" ], [ 7731, "IORQST" ], [ 7732, "IORQST" ], [ 7785, "IOOFD" ], [ 7786, "IOOFD" ], [ 7840, "IOFNAME" ], [ 7841, "IOFNAME" ], [ 7895, "IOVFD" ], [ 7896, "IOVFD" ], [ 7951, "IOFSTYPE" ], [ 7952, "IOFSTYPE" ], [ 8037, "CPRID" ], [ 8038, "CPRID" ], [ 8090, "PPRID" ], [ 8091, "PPRID" ], [ 8143, "TSKID" ], [ 8144, "TSKID" ], [ 8197, "PTSKID" ], [ 8198, "PTSKID" ], [ 8250, "PRPC" ], [ 8251, "PRPC" ], [ 8337, "RID" ], [ 8338, "RID" ], [ 8388, "RTYPE" ], [ 8389, "RTYPE" ], [ 8442, "LEAFPC" ], [ 8443, "LEAFPC" ], [ 8497, "RVADDR" ], [ 8498, "RVADDR" ], [ 8550, "RCNT" ], [ 8551, "RCNT" ], [ 8636, "DID" ], [ 8637, "DID" ], [ 8688, "DLTYPE" ], [ 8689, "DLTYPE" ], [ 8742, "DTYPE" ], [ 8743, "DTYPE" ], [ 8796, "DVADDR" ], [ 8797, "DVADDR" ], [ 8892, "STACK" ], [ 8893, "STACK" ], [ 8946, "MSTACK" ], [ 8947, "MSTACK" ], [ 9001, "USTACK" ], [ 9002, "USTACK" ], [ 9056, "XSTACK" ], [ 9057, "XSTACK" ], [ 9111, "HSTACK" ], [ 9112, "HSTACK" ], [ 9167, "STACKID" ], [ 9168, "STACKID" ], [ 9338, "JTHREAD" ], [ 9339, "JTHREAD" ], [ 9359, "Java thread number" ], [ 9360, "Java thread number" ], [ 9441, "LEAF" ], [ 9442, "LEAF" ], [ 9492, "DOBJ" ], [ 9493, "DOBJ" ], [ 9549, "SAMPLE_MAP" ], [ 9550, "SAMPLE_MAP" ], [ 9613, "GCEVENT_MAP" ], [ 9614, "GCEVENT_MAP" ], [ 9670, "PID" ] ], "sz": 92054, "ts": [ { "a": "T1059.004", "c": 0.8799999952316284, "d": "system call on prepared buffer", "e": [ "system (cmd)" ], "i": "objectives/command-and-control/dropper/execution::system-buffer-exec", "l": 3, "m": "E1059" }, { "c": 0.20000000298023224, "d": "command keyword", "e": [ "command" ], "i": "micro-behaviors/data/text/keywords::command-dup", "l": 1 }, { "c": 0.6600000262260437, "d": "Uses readdir", "e": [ "readdir" ], "i": "micro-behaviors/fs/directory/readdir::readdir-readdir", "l": 2 }, { "d": "Get user ID", "e": [ "getuid" ], "i": "micro-behaviors/os/privilege/query::getuid", "l": 2 }, { "a": "T1106", "d": "d_name field access", "e": [ "d_name" ], "i": "micro-behaviors/os/syscall/invoke::d-name-field", "l": 2 }, { "c": 1.0, "d": "Infinite loop structure (e.g. for(;;) or while(1))", "e": [ "for (;;)" ], "i": "micro-behaviors/data/control-flow/loop::infinite-loop-header", "l": 2 }, { "c": 0.6600000262260437, "d": "Uses closedir", "e": [ "closedir" ], "i": "micro-behaviors/fs/directory/readdir::readdir-closedir", "l": 2 }, { "c": 0.8999999761581421, "d": "system() function call", "e": [ "system", "system" ], "i": "micro-behaviors/process/create/shell::system-fn", "l": 3 }, { "c": 0.699999988079071, "d": "macOS who tool reference", "e": [ "who" ], "i": "objectives/evasion/kernel-hide/rootkit::macos-who-ref", "l": 1 }, { "c": 0.6600000262260437, "d": "Uses opendir", "e": [ "opendir" ], "i": "micro-behaviors/fs/directory/readdir::readdir-opendir", "l": 2 }, { "c": 0.6600000262260437, "d": "Create directories", "e": [ "mkdir" ], "i": "micro-behaviors/fs/directory/mkdir::mkdir-base", "l": 2 }, { "c": 0.6600000262260437, "d": "Open files", "e": [ "fopen" ], "i": "micro-behaviors/fs/file/open::fopen", "l": 2 }, { "c": 0.30000001192092896, "d": "Get process ID", "e": [ "getpid" ], "i": "micro-behaviors/process/identity/query::getpid", "l": 2 }, { "c": 0.30000001192092896, "d": "getenv function (read environment variable)", "e": [ "getenv", "getenv" ], "i": "micro-behaviors/os/env/vars::getenv", "l": 2 } ], "sha": "227fd2a2f4c022197fc98a256a217b7dfb01fe4f55da9f95637f25ed82cb380b", "path": "DbeSession.cc", "type": "c" } ], "tv": "f6eaa" } }