{ "ml": { "v": "7", "eng": "2.2.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00006387631, "rte": "az", "prob": 0.00006387631 }, { "cls": 0, "raw": 0.0004516244, "rte": "az/tar", "prob": 0.0004516244 } ], "prob": 0.00006387631, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00006387630855897442, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000011821587577287573, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000011831521987915039, "type": "elf" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000010838110938493628, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-06-26T11:07:48Z" }, "path": "freeradius-redis-3.0.27-r3.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000T3{24[J!\u003enkh=HeH]u63?!Yp^*DIa!jX1m:JNrco?u{f=2H?Deg@xa3GU*X", "n": [ { "c": 2, "d": "Binary is not digitally signed", "i": "metadata/unsigned", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 } ], "mol": "H(Db₂)Md(He)", "sha": "3c2ada1598177c031c52088d666f6c6ab88cd5f28e823afe3fabe5d0c17d5fcf", "path": "/data/samples/good/foraged/alpine/alpinelinux.org/_/freeradius-redis/freeradius-redis-3.0.27-r3.apk", "risk": 2, "size": 10641, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 10641.0, "entropy": 7.96, "size_bytes": 10641.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.96, "peak_region_bytes": 10240.0, "peak_region_entropy": 7.81 } } }, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "from": [ { "file": 1 }, { "file": 2 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/db/redis::hiredis", "conf": 0.8999999761581421, "crit": 3, "desc": "hiredis library", "from": [ { "file": 2 } ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/db/pooling::connection-pool-string", "conf": 0.8500000238418579, "crit": 3, "desc": "connection_pool string", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "from": [ { "file": 1 }, { "file": 2 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000Ktu\u003ep0000000000kMA+z3JJA(7626H0rr", "n": [ { "c": 3, "d": "Strips toolchain banner but retains build-id", "i": "metadata/build/artifact::aggressive-strip", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 }, { "b": "A-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0af8zwPzu{x(!xcA:JB0vqPN.x(mK30af8NwOkZ#", "n": [ { "c": 3, "d": "Terminal socket exec helper context", "i": "micro-behaviors/process/fd/dup::unix-terminal-socket-exec-benign-context", "o": 1485, "z": 12, "cf": 0.949999988079071 } ], "ln": 1469 }, { "b": "v@#B6zEmA}y?m3@wDl7AB97\u00262yHpN+yHpWZx(0=Vw)YQ\u003cv@#B6zEmo\u0026zdLE5v}G7?wN/*@z/e{1vqL", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 1704, "z": 14, "cf": 0.8999999761581421 } ], "ln": 1688 }, { "b": "x(!GizVBP/vQ?3cB-RvJCSmP*hz^4cz.r:A003a=00000000i6000310000000000000", "n": [ { "c": 3, "d": "Architecture detection strings", "i": "objectives/discovery/host/software::arch-detection", "o": 1818, "z": 6, "cf": 0.5 } ], "ln": 1802 }, { "b": "00000000000000000000A+]P1A+e=}B9zqoe]$}-wmYj)x8?]iD=SF204@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026Hz#", "n": [ { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 12960, "z": 21, "cf": 1.0 } ], "ln": 12944 }, { "b": "y?bbiwb[k{zGNNBvrl8Ze[xlBB9RQ5e[xlBB98B5e]\u003eJtvj(8ozu8qfwO=xtwo\u00264)e[]iqBo0}nwQ5p", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/static::elf-dynstr-section-name", "o": 13055, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/static::elf-dynsym-section-name", "o": 13047, "z": 7, "cf": 0.8999999761581421 } ], "ln": 13031 }, { "b": "A::j[e[O*nx\u003cUp?A::j[e[xlBvqPZ*04}]5Bo0}7vrt]Te[e)y04}]4BZFV\u003cvS=s1x(mX^", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/static::elf-dynamic-section-name", "o": 13157, "z": 8, "cf": 0.8999999761581421 } ], "ln": 13141 } ], "depth": 1, "facts": { "exp": [ [ "init" ], [ "fini" ], [ "rlm_rediswho" ] ], "imp": [ [ "", "dict_valbyattr" ], [ "", "cxa_finalize" ], [ "", "stack_chk_fail" ], [ "", "cf_section_sub_find" ], [ "", "deregister_frame_info" ], [ "", "module_instantiate" ], [ "", "ITM_registerTMCloneTable" ], [ "", "radlog" ], [ "", "radlog_request" ], [ "", "fr_pair_find_by_num" ], [ "", "cf_section_name1" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "strcmp" ], [ "", "fr_connection_release" ], [ "", "cf_pair_find" ], [ "", "cf_pair_value" ], [ "", "cf_section_name2" ], [ "", "rad_debug_lvl" ], [ "", "fr_connection_get" ], [ "", "register_frame_info" ], [ "", "cf_section_find" ] ], "sec": [ [ ".note.gnu.property", 680, 48, 1.87, "alloc" ], [ ".note.gnu.build-id", 728, 36, 4.25, "alloc" ], [ ".gnu.hash", 768, 48, 3.04, "alloc" ], [ ".dynsym", 816, 600, 0.98, "alloc" ], [ ".dynstr", 1416, 414, 4.48, "alloc" ], [ ".rela.dyn", 1832, 504, 1.34, "alloc" ], [ ".relr.dyn", 2336, 32, 2.64, "alloc" ], [ ".init", 4096, 3, 1.58, "alloc,executable" ], [ ".text", 4112, 1194, 5.74, "alloc,executable" ], [ ".fini", 5306, 3, 1.58, "alloc,executable" ], [ ".rodata", 8192, 1936, 4.62, "alloc" ], [ ".eh_frame_hdr", 10128, 36, 3.06, "alloc" ], [ ".eh_frame", 10168, 188, 4.44, "alloc" ], [ ".init_array", 11664, 8, 1.06, "write,alloc" ], [ ".fini_array", 11672, 8, 1.06, "write,alloc" ], [ ".dynamic", 11680, 416, 1.24, "write,alloc" ], [ ".got", 12096, 192, 0.09, "write,alloc" ], [ ".data", 12288, 672, 1.0, "write,alloc" ], [ ".gnu_debuglink", 12960, 28, 4.21, "" ], [ ".shstrtab", 12988, 209, 4.21, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 2.0, "nx_enabled": 1.0, "has_dt_relr": 1.0, "dynrel_count": 0.0, "dynsym_count": 25.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 21.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "program_header_count": 11.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 2368.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 2368.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 8.0 }, "file": { "size": 14608.0, "entropy": 2.63, "size_bytes": 14608.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 5.72, "data_entropy": 0.94, "overlay_size": 1411.0, "string_count": 69.0, "overlay_ratio": 0.1, "overall_entropy": 2.63, "overlay_entropy": 1.32, "entropy_variance": 2.57, "avg_string_length": 17.43, "max_string_length": 60.0, "peak_region_bytes": 1024.0, "code_to_data_ratio": 0.48, "peak_region_entropy": 5.68, "string_length_stddev": 13.17, "largest_section_ratio": 0.13, "sentence_string_count": 12.0, "sentence_string_ratio": 0.17, "high_entropy_string_count": 0.0 }, "exports": { "count": 3.0 }, "imports": { "count": 21.0 }, "sections": { "count": 22.0, "code_size": 1200.0, "entropy_max": 5.74, "entropy_mean": 2.62, "name_entropy": 4.16, "writable_count": 6.0, "executable_count": 3.0, "nonstandard_count": 6.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 1, "mol": "Md(He)", "path": "/data/samples/good/foraged/alpine/alpinelinux.org/_/freeradius-redis/freeradius-redis-3.0.27-r3.apk!!usr/lib/freeradius/rlm_rediswho.so", "risk": 1, "sha": "b04c9e6f0e84bf9c6b409f73387ff258085912f661537b536c9137a537728474", "size": 14608, "traits": [ { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "spans": [ [ 1485, 12 ] ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "spans": [ [ 1485, 12 ] ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "spans": [ [ 1485, 12 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000S4!nL0000000000kMA+z3JJA(7xti", "n": [ { "c": 3, "d": "Strips toolchain banner but retains build-id", "i": "metadata/build/artifact::aggressive-strip", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 }, { "b": "A-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0af8zwPzu{x(!xcA:JB0vqPN.x(mK30af8NwOkZ#", "n": [ { "c": 3, "d": "Terminal socket exec helper context", "i": "micro-behaviors/process/fd/dup::unix-terminal-socket-exec-benign-context", "o": 1815, "z": 12, "cf": 0.949999988079071 } ], "ln": 1799 }, { "b": "zE)s1x(v(@v@c78wDl7AB97\u00262yHpN+yHpWZx(0=\u0026y\u00269K1wN]H@uUj1\u0026x(^@{ADL\u0026kC(RC%wO1+JAbo!}vRPE:Bo2][uT[1(zE)s1x(v(@AbPVhuUjs\u0026wDls.uT[1(zE)s1x(v(@AbPVhuU%Z(B.\u003eR@x(mTb0chTYx(=::wN$\u003cZwN]H@lVl\u003cW", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 2024, "z": 14, "cf": 0.8999999761581421 }, { "c": 3, "d": "connection_pool string", "i": "micro-behaviors/data/db/pooling::connection-pool-string", "o": 2081, "z": 15, "cf": 0.8500000238418579 } ], "ln": 2008 }, { "b": "B7Ct(y\u00269K1wN]H@0bMvUxLzG#wnc9qB8JV=e\u0026bal0bMvUv\u003eIRvB8iBMi5Ub4g+J\u0026/e?)ta007}v00000000i600031000000000000", "n": [ { "c": 3, "d": "hiredis library", "i": "micro-behaviors/data/db/redis::hiredis", "o": 2366, "z": 7, "cf": 0.8999999761581421 }, { "c": 3, "d": "Architecture detection strings", "i": "objectives/discovery/host/software::arch-detection", "o": 2393, "z": 6, "cf": 0.5 } ], "ln": 2350 }, { "b": "o8%0Gzc}r{wnc9Caz++3xLzG#wnc9cC4CYnx(v(Iasg.Oc21$Tx-GC}y?9J^y\u00269K1wN]G", "n": [ { "c": 3, "d": "hiredis library", "i": "micro-behaviors/data/db/redis::hiredis", "o": 8854, "z": 7, "cf": 0.8999999761581421 } ], "ln": 8838 }, { "b": "00000000000000000000A+]P1A+e=}B1RJLe[wK5B.pWOUyT\u003ef04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026HAaG", "n": [ { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 12464, "z": 18, "cf": 1.0 } ], "ln": 12448 }, { "b": "y?bbiwb[k{zGNNBvrl8Ze[xlBB9RQ5e[xlBB98B5e]\u003eJtvj(8ozu8qfwO=xtwo\u00264)e[]iqBo0}nwQ5p", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/static::elf-dynstr-section-name", "o": 12555, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/static::elf-dynsym-section-name", "o": 12547, "z": 7, "cf": 0.8999999761581421 } ], "ln": 12531 }, { "b": "vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}]5Bo0}7vrt]Te[e)y04}]4BZFV\u003cvS=s1x(mX^", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/static::elf-dynamic-section-name", "o": 12670, "z": 8, "cf": 0.8999999761581421 } ], "ln": 12654 } ], "depth": 1, "facts": { "exp": [ [ "rlm_redis_finish_query" ], [ "fini" ], [ "rlm_redis_query" ], [ "init" ], [ "rlm_redis" ] ], "imp": [ [ "", "radlog_request_error" ], [ "", "redisSetTimeout" ], [ "", "snprintf" ], [ "", "xlat_register" ], [ "", "talloc_zero" ], [ "", "cxa_finalize" ], [ "", "fr_connection_pool_free" ], [ "", "redisCommandArgv" ], [ "", "redisConnectWithTimeout" ], [ "", "fr_connection_close" ], [ "", "stack_chk_fail" ], [ "", "redisFree" ], [ "", "deregister_frame_info" ], [ "", "ITM_registerTMCloneTable" ], [ "", "radlog" ], [ "", "radlog_request" ], [ "", "strlcpy" ], [ "", "fr_connection_reconnect" ], [ "", "redisCommand" ], [ "", "talloc_set_destructor" ], [ "", "cf_section_name1" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "strcmp" ], [ "", "fr_connection_release" ], [ "", "fr_connection_pool_module_init" ], [ "", "strlen" ], [ "", "cf_section_name2" ], [ "", "rad_expand_xlat" ], [ "", "rad_debug_lvl" ], [ "", "fr_connection_get" ], [ "", "register_frame_info" ], [ "", "freeReplyObject" ] ], "sec": [ [ ".note.gnu.property", 680, 48, 1.87, "alloc" ], [ ".note.gnu.build-id", 728, 36, 4.14, "alloc" ], [ ".gnu.hash", 768, 72, 3.32, "alloc" ], [ ".dynsym", 840, 912, 1.14, "alloc" ], [ ".dynstr", 1752, 653, 4.52, "alloc" ], [ ".rela.dyn", 2408, 816, 1.39, "alloc" ], [ ".relr.dyn", 3224, 32, 1.75, "alloc" ], [ ".init", 4096, 3, 1.58, "alloc,executable" ], [ ".text", 4112, 2052, 5.81, "alloc,executable" ], [ ".fini", 6164, 3, 1.58, "alloc,executable" ], [ ".rodata", 8192, 2320, 4.95, "alloc" ], [ ".eh_frame_hdr", 10512, 76, 3.51, "alloc" ], [ ".eh_frame", 10592, 440, 4.83, "alloc" ], [ ".init_array", 11248, 8, 1.06, "write,alloc" ], [ ".fini_array", 11256, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 11264, 280, 1.06, "write,alloc" ], [ ".dynamic", 11544, 432, 1.27, "write,alloc" ], [ ".got", 11976, 296, 0.07, "write,alloc" ], [ ".data", 12288, 176, 0.73, "write,alloc" ], [ ".gnu_debuglink", 12464, 24, 4.08, "" ], [ ".shstrtab", 12488, 222, 4.19, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 2.0, "nx_enabled": 1.0, "has_dt_relr": 1.0, "dynrel_count": 0.0, "dynsym_count": 38.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 34.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "program_header_count": 11.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 3256.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 3256.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 8.0 }, "file": { "size": 14184.0, "entropy": 3.62, "size_bytes": 14184.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 5.8, "data_entropy": 0.84, "overlay_size": 1474.0, "string_count": 88.0, "overlay_ratio": 0.1, "overall_entropy": 3.62, "overlay_entropy": 1.32, "entropy_variance": 2.79, "avg_string_length": 20.02, "max_string_length": 84.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 0.63, "peak_region_entropy": 5.69, "string_length_stddev": 17.1, "largest_section_ratio": 0.16, "sentence_string_count": 18.0, "sentence_string_ratio": 0.2, "high_entropy_string_count": 0.0 }, "exports": { "count": 5.0 }, "imports": { "count": 32.0 }, "sections": { "count": 23.0, "code_size": 2058.0, "entropy_max": 5.81, "entropy_mean": 2.57, "name_entropy": 4.14, "writable_count": 7.0, "executable_count": 3.0, "nonstandard_count": 6.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 2.0 } } }, "id": 2, "mol": "H(Db₂)Md(He)", "path": "/data/samples/good/foraged/alpine/alpinelinux.org/_/freeradius-redis/freeradius-redis-3.0.27-r3.apk!!usr/lib/freeradius/rlm_redis.so", "risk": 2, "sha": "1f4c86e6d333280a4684f557c35867fe05243bab26cf204a4d1c37623b96afe9", "size": 14184, "traits": [ { "id": "micro-behaviors/data/db/pooling::connection-pool-string", "conf": 0.8500000238418579, "crit": 3, "desc": "connection_pool string", "spans": [ [ 2081, 15 ], [ 2105, 15 ] ] }, { "id": "micro-behaviors/data/db/redis::hiredis", "conf": 0.8999999761581421, "crit": 3, "desc": "hiredis library", "spans": [ [ 2366, 7 ], [ 8854, 7 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "spans": [ [ 1815, 12 ] ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "spans": [ [ 1815, 12 ] ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "spans": [ [ 1815, 12 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf88vS=y3wfrVXf/HZsuVGThePJM", "n": [ { "c": 1, "d": "Alpine/Wolfi package info file", "i": "metadata/package/files/system-package::alpine-pkginfo-basename", "o": 0, "z": 1, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "boRbIx(mMaw)]E^A=k(raA?spB7]MgatCG8h.D\u0026", "ln": 2, "addr": 36 }, { "b": "Abf97vqPM#jS[uSwO2)\u003cwncgcePLAkx(:", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 68, "z": 26, "cf": 0.9700000286102295 } ], "ln": 3, "addr": 68 }, { "b": "Abf9fwPw[RatUS7e\u00262vqAX^", "n": [ { "c": 1, "d": "Alpine/Wolfi package version field", "i": "metadata/package/files/system-package::alpine-pkginfo-version-field", "o": 95, "z": 18, "cf": 0.8999999761581421 } ], "ln": 4, "addr": 95 }, { "b": "Abf8%wPIu7jS)Tlwnc9czeS%cy?mVgw]zYjmSJ6KqB9Yxrz$2YwPz%9AS", "ln": 5, "addr": 114 }, { "b": "B-IpvjS[AWBz#pZfe3{TwO2)\u003cwncgce]L=yf8", "ln": 6, "addr": 160 }, { "b": "B7]@iauZ\u00266g+Z)A", "ln": 9, "addr": 271 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "ln": 10, "addr": 284 }, { "b": "z/PM8x(k4RazbU9wPzi\u0026x)1E", "n": [ { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 298, "z": 19, "cf": 0.8999999761581421 } ], "ln": 11, "addr": 298 }, { "b": "v@Dj3x(\u003eEXau0Z\u0026vLxJFfK!N4v(N%NfK#\u003eEwh=g%vRduaiBKZ1fFLv)ggJj3w=", "ln": 12, "addr": 318 }, { "b": "zddc@Byw)3wPw[Rawuu+zEEM@zY?t^wO${0jAtsFy\u0026T5KvqG)%zE)S#zGQgRz/PFO", "ln": 13, "addr": 368 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 707.0, "entropy": 5.14, "size_bytes": 707.0 }, "binary": { "overall_entropy": 5.14, "peak_region_bytes": 707.0, "peak_region_entropy": 5.14 } } }, "id": 3, "path": "/data/samples/good/foraged/alpine/alpinelinux.org/_/freeradius-redis/freeradius-redis-3.0.27-r3.apk!!.PKGINFO", "risk": 1, "sha": "74f4f6d8557b3c1d9f32550192366659912653f9d931bac3ef229b72ad33d90d", "size": 707, "traits": [ { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgver metadata field", "spans": [ [ 95, 18 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 298, 19 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 95, 18 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 68, 26 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 68, 26 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 68, 26 ], [ 95, 18 ], [ 298, 19 ] ] } ], "type": "text" } ], "rev": "af11a", "v": "8" } }