{ "ml": { "v": "7", "eng": "2.2.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.087905616, "rte": "az", "prob": 0.087905616 } ], "prob": 0.087905616, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "xz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.007299661636352539, "type": "shell" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.0065651535987854, "type": "shell" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "text" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "gz" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "gz" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "gz" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.0047210752964019775, "type": "pdf" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.0014522671699523926, "type": "markdown" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "gz" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "gz" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "gz" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "gz" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.08790561556816101, "type": "kotlin" } ], "version": "v18.18", "analyzed_at": "2026-07-05T13:41:31Z" }, "path": "R-hwde-0.67.3.tgz", "raw": { "files": [ { "id": 0, "mol": "O(Er)H(Po₂)", "sha": "3cfdcd3f7c37e9c969c0f814a44f7fbdb4515f2837245c66a059819ea79d4eaa", "path": "R-hwde-0.67.3.tgz", "risk": 4, "size": 330092, "type": "xz", "facts": { "metrics": { "file": { "size": 330092.0, "entropy": 8.0, "size_bytes": 330092.0 }, "binary": { "overall_entropy": 8.0, "peak_region_bytes": 330092.0, "peak_region_entropy": 7.86 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.archive_as_archive": 1.0 } } }, "traits": [ { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell command execution capability", "from": [ { "file": 1 }, { "file": 2 } ], "spans": [ [ 0, 34 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::bin-sh", "atk": "T1059.004", "mbc": "E1059.004", "conf": 0.6000000238418579, "crit": 3, "desc": "References /bin/sh (Bourne shell)" }, { "id": "micro-behaviors/process/interpreter/perl::perl-keyword", "conf": 0.699999988079071, "crit": 3, "desc": "perl interpreter keyword (beyond shebang)" }, { "id": "micro-behaviors/os/env/vars/access::env-cmd", "atk": "T1082", "conf": 0.6000000238418579, "crit": 3, "desc": "env command path" }, { "id": "micro-behaviors/process/create/shell/spawn::shell-symbols", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell execution symbols", "from": [ { "off": 742, "file": 1, "line": 42 }, { "off": 742, "file": 2, "line": 42 } ], "spans": [ [ 0, 34 ] ] }, { "id": "objectives/evasion/masquerade/extension/shebang::bash-shebang-first-line", "atk": "T1036.008", "mbc": "F0008", "conf": 0.949999988079071, "crit": 3, "desc": "File starts with" }, { "id": "micro-behaviors/process/create/shell/spawn::sh-dynamic-command-target", "conf": 0.6000000238418579, "crit": 3, "desc": "Shell command name from variable", "spans": [ [ 0, 34 ] ] } ] }, { "ctx": [ { "b": "boXZHx(kOBxBk%\u003eboOmbwPQmql](D7wNPaXAX8wRf!Lm8gb7BtfekjngCx}ah99DFiX\u0026xiCwhvCmr\u0026+]bNK(Smncfla%X\u0026^3q:w=pc?PyjT8daa{}mFk$svba%X]/3uG({w]]dJ3jo72ofBELB-RNRvRGZkvrVGh3pm3SmnucymlI?FB-RNRvRGZkvQTs?zEEx[a{{X6r6qAUvRGZkv{%E63pvuOqCYI2flItRfjFTkfjOWdA=riflR6{El{h.EvRGZkv}YZ$wfIvFnkAqZjT8L4B8\u0026{P", "ln": 0, "col": 1, "line": 1 }, { "b": "jT8L4B8\u0026{yx(kOox(mD93p^#.p^30QB-RNRvRGZkxl4N5a{{?tk#G\u0026\u0026a{{\u003efk$0\u003cWflItRfjFTkfka{9wfIvLl{h.EB-RNRvRGZkx\u003eey{oI4#LmNo{DjT8L4B8\u0026{PvRGZky?W^5w)]Z%a{}1sjT8K*x(kOuzxYAYq-#rTvRGZky\u0026Z^co?N(CqAViSvRGZkzeiV@AV=@Ma{}4BjTa-^at4gH3q:e?oF[%SflItRfk$YtfjFTkfk$Gyy:6i.ogJtPl}{lFjT8L4B8\u0026{PvRGZkAbf8[vpTj?zxYA:ogJtXpdw2xa$[7WAXzGyx(kOyyId0*zF0/h3q:!(uQEKQjT8K*x(kOyCvR)8qCxp#fjFTkflg[N3q%O^nM4X}fjFTkflg]ux(Uy8q:\u003c8qa$[7WAXy)ozzc6xwfIvVmn#YJrY}SWB-RNRvRGZkwO#Vn3r6FUa$)ztzzc6Aa{}mAqDb!6flItRfjFTkflq5LBrR5\u003crxRJVB-RNRvRGZkB9eVlr7f.+jTa#VB95Pkr8lHYniFdIB-RNRvRGZkBz(qixD^^.qAViSB-RNRvRGZkBAeMjr8MZ+jTa#*B.8:7sv2?Pq-#rTB-RNRvRGZkCWUS9B0p}#lSE2LnM4YVbZSu?l%\u0026qQm15CIiV]X{p!Kq=o*@2El{T^ruQNE-jTtwwrz(jRqHJ%2p!KqBk#Qinb2Q1aCvUne3joE5lQsyjk#Qina$[7WAXzxExcEW+f!(0Xq:\u0026?[flItRfix}-qA2^bp/o.KnMXb1flItRfk$Yta{[VNogJt/sYmW-pdvMoq:\u0026?[flItRfk$Ytfj/lna{}dtm{/g$q:TtQmNxytmmoZBjT6", "ln": 385, "col": 5, "line": 24 }, { "b": "dLb-=e]UPsB8\u003e+kdLAz[yIdZev\u003chl!v{%B\u0026ar\u00267Tp!Kq=lR*DDnK\u003e/[sW=nqa%pPq3r{UUu0x:eu0ylGu3]\u003cQBx@9GA:q)HBZniuwNfW/pJ6JyphTu+f!0CouR\u003cx=uQEQ:mO9", "ln": 1158, "col": 39, "line": 64 }, { "b": "mmfQwEioZVDR^v9pc?PyEl5G\u003ewNY^@y?dl$xcp7{Aa9l(vp%c]x(mD}v}xZ7vqYP#xK#10azbt7wPG452#R)ko**9HDR^deoF}kvbZSuXm{/7\u003cmmG\u003cJEj]zJvLpRjB7/05wIn1lA+)yrB.LV5eOFZiA4V9Cay2lW2}W-xBzU\u0026gx(!xqatMblwmY{qzGP=i3vJl*v{%B\u0026as8qjr6:2yEirlw3q:I%r4QWpq=D4RoEQqPA+eZ5x(4r!qEsxUxj2v\u003cwnbK+A%-jni%[wAnLSh-k$\u003c%33jgAUax]%jbZSuXm)YHumsuv5jS\u003e}Da%pelj0nSUwO}?Y2{:\u003c}o)[cow/@vCp!Kq=p/o.KnMZx]y?WuiqzhN0v\u003eRIqzep\u003eAvpK7YxjVcpxMO9c3jgrU3je^Q3q:I%r4QHbnLSh-k$\u003c%33jf]Va%.IiogIrmq:(9UauZ?\u003eqx^k?aBFLVA+eZ5x(4r!qEsxUxj2v\u003cwnbK+A%-jni%]LuvpGS?as3", "ln": 1530, "col": 4, "line": 83 }, { "b": "zep!ox(mD$x\u003c@X4arR)oarR}Rr7f.+EioWQeQex\u003cfdP*=k$$3WmOcuyoI4MTqBK8Eq=Dg-aBFLzarR^He?X.JlQsBuuQ^QZl}*fsuS6r.nMeOSqxO\u003eao\u00261!Uas8qflQsBuuQ^QZl}*fsuQNE-Ef{q/bmj-4axrr1wOkZ#By/Fnx(mK3azbt7wPGEh2{P=-bZSGVq=Fe/aS@vYatbq$nLR-JuQ^QXmn\u003esRD\u003cQe^e?X.Dpdw2^mOcoxqY[$bo\u00261!Uas8qgogJt-mn#Mvk#ZcSl}Hp83jd{:2{QM\u003cwO(vewGUA0C{3*hz/cXtxK#3(ay!?\u0026xK#lq3jd{:2{:\u003c%mn)flar.\u003cVCPXQ(d[J97pg3%\u003emnliHaBFLz2)\u0026jqd[J97pg3%\u003emnliHaw$T5pGx[bbZSuXm{!$Vr6-]rr6:\u003eVnM6%z2{P=-boP(}zeTPeaAIjcy\u00261enw].*batmqFv\u003eR[pwO=g7e^.[f3jd#8r7f.+EioWQeQex\u003cfdP%(mncw$E0=nc2}^\u003eYq+ftJoDWk4o\u00261!Uas8qgogJt-mn#Mvk#ZcSl}Hp83jd#8r7f.+EioWQeQex\u003cfdP%(mncw$E0=nc2}^\u003eYq+ftJoDVX[mmfZ1qBKqQrZ!bRDR^v9uRJ%*k$11rl0)2KqHF(V2{QM\u003cwO(vewGUG3zF0P}B-H]jx(v(iw[=6)B0bgeaARpdC{3TozyoJGwnbT/wPw]9A=k!qBzbkdwmYvYB.(db2{QN5z/ff3xcp/2y?kja2{P=-bZSGVq=Fe/aS@vYatbq$mOcoxqY{En3jd1\u003efdPH-oHR(5qBKqQrZ!bRDR^v9uRJ%*k$11rl0)2KqHF(Uj39=Rp!$1?eKS30pe+aToIu(x2{P=-boQ09wmoN\u003eayPekazbLfBAnNnvrt{!vrl13e^.[f3jd#8r7f.+EioWQeQex\u003cfdPH/pe\u003edmE0=nc2}^\u003eYmO==UqY)ujp!Kq=o*@2El{T^ruQNE-Ef{o93jd}1rD8FSBy=O6zH0vsv@DlcBzbl5wGUF\u003ev}YB{e^.[f3jd#8r7f.+EioWQeQex\u003cfdPQYpFLm@njulwqY{En3jd1\u003efdPQYpFLm@njulwqY]7pl{T^vas8qgogJt-mn#Mvk(", "ln": 2048, "col": 32, "line": 106 }, { "b": "wGU/6vSC)$C{4ftvrb\u003c\u003eaAg+hxDQ?]BywS!B7D%h2{P=-bZSGVq=Fe/aS@vYatbq$q+fONlq]1OD\u003cQe^e?X.Nnk8PwqY[$bo\u00261!Uas8qgogJt-mn#Mvk#ZcSl}Hp83jd{:2{QM\u003cwO(vewGUM3AccvFwnc6}v@#Tfx\u003equdvqYP#B-8tywN({aB7Gxkfk2rzB-qyO3jd{:2{:\u003c%mn)flar.\u003cVCPXQ(d)#%bqY{En3jd1\u003efdPBZqD1YomnlMUmiA\u003e5p!Kq=o*@2El{T^ruQNE-Ef{oaDSiBjrdb(jat4*Xe?X.Pq:\u003cOOqCQp?aBFLz2)\u0026jqd]/IpqB:RXrzT/omnlMUmiA\u003e5p!Kq=o*@2El{T^ruQNE-Ef{o93jd}1lUH4vyANkcAV!!dC{3Wyx(!xgzF783x([zsvp\u003cQ)AV/NqcVS=vw[=c%B7/b}ay]4nx(n0lvqG:]zF7Ne2{P=-bZSGVq=Fe/aS@vYatbq$rz#s:m]Ab.p-$dk3jd1\u003efdQ43mf", "ln": 2977, "col": 30, "line": 148 }, { "b": "l](D5z/o-eAX8wRf!Lg6gb7yufebmpgbf[bgDExEiX-Gmyhvr}avQJ]as4p3wQ4{hatscf", "ln": 3578, "col": 9, "line": 171 } ], "depth": 1, "facts": { "imp": [ [ "", "shift" ], [ "", "shift" ], [ "", "{PWD_CMD}" ], [ "", "{ECHO}" ], [ "", "rebuild_R_pkg_indices" ], [ "", "rebuild_R_pkg_indices" ], [ "", "{RM}" ], [ "", "rebuild_R_pkg_indices" ], [ "", "rebuild_R_pkg_indices" ], [ "", "{TEST}" ], [ "", "./+OCAML_FINDLIB_REGISTER" ], [ "", "./+OCAML_FINDLIB_REGISTER" ], [ "", "{TEST}" ], [ "", "./+INFO_FILES" ], [ "", "./+INFO_FILES" ], [ "", "{TEST}" ], [ "", "./+ICON_THEMES" ], [ "", "./+ICON_THEMES" ], [ "", "{TEST}" ], [ "", "./+SHELL" ], [ "", "./+SHELL" ], [ "", "{TEST}" ], [ "", "./+SHELL" ], [ "", "./+SHELL" ], [ "", "{TEST}" ], [ "", "./+FILES" ], [ "", "./+FILES" ], [ "", "{TEST}" ], [ "", "./+FONTS" ], [ "", "./+FONTS" ], [ "", "{TEST}" ], [ "", "./+ICON_THEMES" ], [ "", "./+ICON_THEMES" ], [ "", "{TEST}" ], [ "", "./+SHLIBS" ], [ "", "./+SHLIBS" ], [ "", "{TEST}" ], [ "", "./+DIRS" ], [ "", "./+DIRS" ], [ "", "{TEST}" ], [ "", "./+USERGROUP" ], [ "", "./+USERGROUP" ], [ "", "{TEST}" ], [ "", "./+USERGROUP" ], [ "", "./+USERGROUP" ], [ "", "{TEST}" ], [ "", "./+FILES" ], [ "", "./+FILES" ], [ "", "{TEST}" ], [ "", "./+DIRS" ], [ "", "./+DIRS" ], [ "", "exit" ], [ "", "exit" ] ], "tgt": [ "${ECHO}", "${PWD_CMD}", "${RM}", "${TEST}", "./+DIRS", "./+FILES", "./+FONTS", "./+ICON_THEMES", "./+INFO_FILES", "./+OCAML_FINDLIB_REGISTER", "./+SHELL", "./+SHLIBS", "./+USERGROUP", ":", "R", "exit", "rebuild_R_pkg_indices", "shift" ], "funcs": [ [ "rebuild_R_pkg_indices", 1501 ] ], "metrics": { "ast": { "max_depth": 8, "call_count": 37, "node_count": 882 }, "file": { "size": 3634, "entropy": 5.79 }, "text": { "lines": 174, "top_char": 47, "tab_count": 85, "max_ws_run": 1, "digit_ratio": 0.03, "space_count": 244, "char_entropy": 5.79, "mixed_indent": 1, "unique_chars": 86, "top_char_null": 0, "string_density": 0.33, "top_char_ratio": 0.04, "avg_line_length": 19.89, "max_line_length": 69, "empty_line_ratio": 0.1, "last_line_length": 6, "whitespace_ratio": 0.14, "identifier_density": 1.29, "line_length_stddev": 17.57, "normalized_string_count": 4.4, "suspicious_string_ratio": 0.02, "suspicious_comment_ratio": 0.1, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 12.5 }, "binds": { "count": 55 }, "calls": { "dynamic_target_count": 17 }, "binary": { "peak_region_bytes": 3634, "peak_region_entropy": 5.79 }, "source": { "function_count": 1 }, "strings": { "bytes": 640, "count": 58, "shell": 1, "avg_length": 11.03, "max_length": 55, "path_count": 39, "avg_entropy": 2.79, "empty_count": 2, "entropy_stddev": 0.86 }, "comments": { "chars": 745, "count": 40, "empty": 22, "lines": 18, "high_entropy": 4, "to_code_ratio": 0.12 }, "functions": { "count": 1, "density": 0.57, "avg_params": 2, "code_ratio": 0.03, "max_params": 2, "avg_name_length": 21, "avg_length_lines": 6, "max_length_lines": 6, "min_length_lines": 6, "high_entropy_names": 1, "avg_param_name_length": 47 }, "identifiers": { "count": 224, "unique": 93, "avg_length": 7.11, "max_length": 31, "min_length": 1, "avg_entropy": 2.25, "reuse_ratio": 0.42, "length_stddev": 5.77, "has_digit_ratio": 0.05, "sequential_names": 1, "single_char_count": 6, "single_char_ratio": 0.06, "high_entropy_count": 8, "high_entropy_ratio": 0.09, "all_lowercase_ratio": 0.03, "all_uppercase_ratio": 0.67, "numeric_suffix_count": 1, "underscore_prefix_count": 1 } } }, "id": 1, "mol": "H(Po)Md(Pa)", "path": "R-hwde-0.67.3.tgz!!+DEINSTALL", "pid": 0, "risk": 3, "sha": "e0ebbf98c035ee8f1c300c9cb8e43cd2bb4acb77aa8df040fd87d773210ffd0b", "size": 3634, "traits": [ { "id": "metadata/package/files/bsd::pkgsrc-maintainer-script-basename", "conf": 0.92, "crit": 3, "desc": "pkgsrc binary package maintainer script filename", "spans": [ [ 0, 10 ] ] }, { "id": "metadata/package/files/bsd::pkgsrc-maintainer-script-header", "conf": 0.92, "crit": 3, "desc": "pkgsrc maintainer script NetBSD header", "spans": [ [ 14, 16 ] ] }, { "id": "metadata/package/files/bsd::pkgsrc-maintainer-script-vars", "conf": 0.92, "crit": 3, "desc": "pkgsrc maintainer script lifecycle variables", "spans": [ [ 77, 23 ] ] }, { "id": "micro-behaviors/fs/path/system::rm-utility-path", "conf": 0.5, "crit": 3, "desc": "Unix rm delete utility absolute path", "spans": [ [ 668, 8 ] ] }, { "id": "micro-behaviors/process/create/local-exec::execute-dot-slash-literal", "conf": 0.88, "crit": 3, "desc": "Executes a local relative file", "spans": [ [ 2112, 25 ], [ 2232, 13 ], [ 2346, 14 ], [ 2457, 8 ], [ 2679, 8 ], [ 2801, 8 ], [ 3041, 9 ], [ 3164, 7 ] ] }, { "id": "micro-behaviors/process/create/local-exec::shell-variable-exec-with-args", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Shell runs a variable command with args", "spans": [ [ 1789, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/shell::bin-sh", "conf": 0.6, "crit": 3, "desc": "/bin/sh shell interpreter path reference", "spans": [ [ 742, 7 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "boXZHx(kOBxBk%\u003eboOmbwPQmql](D7wNPaXAX8wRf!Lm8gb7BtfekjngCx}ah99DFiX\u0026xiCwhvCmr\u0026+]bNK(Smncfla%X\u0026^3q:w=pc?PyjT8daa{}mFk$svba%X]/3uG({w]]dJ3jo72ofBELB-RNRvRGZkvrVGh3pm3SmnucymlI?FB-RNRvRGZkvQTs?zEEx[a{{X6r6qAUvRGZkv{%E63pvuOqCYI2flItRfjFTkfjOWdA=riflR6{El{h.EvRGZkv}YZ$wfIvFnkAqZjT8L4B8\u0026{P", "ln": 0, "col": 1, "line": 1 }, { "b": "jT8L4B8\u0026{yx(kOox(mD93p^#.p^30QB-RNRvRGZkxl4N5a{{?tk#G\u0026\u0026a{{\u003efk$0\u003cWflItRfjFTkfka{9wfIvLl{h.EB-RNRvRGZkx\u003eey{oI4#LmNo{DjT8L4B8\u0026{PvRGZky?W^5w)]Z%a{}1sjT8K*x(kOuzxYAYq-#rTvRGZky\u0026Z^co?N(CqAViSvRGZkzeiV@AV=@Ma{}4BjTa-^at4gH3q:e?oF[%SflItRfk$YtfjFTkfk$Gyy:6i.ogJtPl}{lFjT8L4B8\u0026{PvRGZkAbf8[vpTj?zxYA:ogJtXpdw2xa$[7WAXzGyx(kOyyId0*zF0/h3q:!(uQEKQjT8K*x(kOyCvR)8qCxp#fjFTkflg[N3q%O^nM4X}fjFTkflg]ux(Uy8q:\u003c8qa$[7WAXy)ozzc6xwfIvVmn#YJrY}SWB-RNRvRGZkwO#Vn3r6FUa$)ztzzc6Aa{}mAqDb!6flItRfjFTkflq5LBrR5\u003crxRJVB-RNRvRGZkB9eVlr7f.+jTa#VB95Pkr8lHYniFdIB-RNRvRGZkBz(qixD^^.qAViSB-RNRvRGZkBAeMjr8MZ+jTa#*B.8:7sv2?Pq-#rTB-RNRvRGZkCWUS9B0p}#lSE2LnM4YVbZSu?l%\u0026qQm15CIiV]X{p!Kq=o*@2El{T^ruQNE-jTtwwrz(jRqHJ%2p!KqBk#Qinb2Q1aCvUne3joE5lQsyjk#Qina$[7WAXzxExcEW+f!(0Xq:\u0026?[flItRfix}-qA2^bp/o.KnMXb1flItRfk$Yta{[VNogJt/sYmW-pdvMoq:\u0026?[flItRfk$Ytfj/lna{}dtm{/g$q:TtQmNxytmmoZBjT6", "ln": 385, "col": 5, "line": 24 }, { "b": "dLb-=e]UPsB8\u003e+kdLAz[yIdZev\u003chl!v{%B\u0026ar\u00267Tp!Kq=lR*DDnK\u003e/[sW=nqa%pPq3r{UUu0x:eu0ylGu3]\u003cQBx@9GA:q)HBZniuwNfW/pJ6JyphTu+f!0CouR\u003cx=uQEQ:mO9", "ln": 1158, "col": 39, "line": 64 }, { "b": "A3czk3s^H=wGSmBq=D4Mmsup)zvfirmj?8aq=D4RoEQqPbmj-4axrq#vpK6}BzbkdxK#10wPw]mv@=p5BzLJgB1N!abmj-5DS9E-as8qjmncg0as8qgogI-yo*%EMrzDvRlRv:)bmj-4aw#=\u003cB.L(caARp9BrCEjv}x.5vrcSoB-RbmB0a[ewftJ9z/{2uaz2!iB95KyAV!}fB7DFavqfK2Bzbj)2{QNbzGx]dy\u00260K4x(v(iz!pblxK@r9vpK7YxjSX52{P=-bZSGVq=Fe/aS@vYatbq$rz#s:m]Ab.p-$dk3jd2=atbq$rz#s:m]Ab.p-@4(l)9+4p!Kq=o*@2El{T^ruQNE-Ef{n!arUxgatbq$rz#s:m]Ab.p-@a@mmfZ1k$19-bZSuXm{!$Vr6-]rr6:\u003eVnM6%#aARpdzvcWR2%5z12{pv4y\u0026:d{2)*]HCXImxf:Xi[arUogj0n}U2{:\u003c%mn)flar.\u003cVCPXQ(d)#%bqY{En3jd1\u003efdPBZqD1Y7l{@dyDR^v9uRJ%*k$11rl0)2KqHF(UbZSGVq=Fe/aS@vYatbq$l}HoPaBFLz2)\u0026jqd)#%bqY[[9qCy7jbZSuXm{!$Vr6-]rr6:\u003eVnM6%zarR^HarR^Hj39=Rp!$1?eLeYor6:hKdgcwa3jd}1qE%rWx(4r5Bz7", "ln": 1400, "col": 54, "line": 75 }, { "b": "wGU/6vSC)$C{4ftvrb\u003c\u003eaAg+hxDQ?]BywS!B7D%h2{P=-bZSGVq=Fe/aS@vYatbq$q+fONlq]1OD\u003cQe^e?X.Nnk8PwqY[v]l)9+4p!Kq=o*@2El{T^ruQNE-Ef{o93jd}1lVl{?ay/tcw[+[2A::67z/djHB-qqrA=-Box(4v4azC.nzY\u003c1nvpJ\u003e33jd{:arR^HarR^HbZSGVq=Fe/aS@vYatbq$mOcoxqY{En3jd1\u003efdPH-oHR(5k$19-bZSuXm{!$Vr6-]rr6:\u003eVnM6%zarR^HarR^HbZSGVq=Fe/aS@vYatbq$mOcoxqY{En3jd1\u003efdPH-oHR(5p^[nRqY)ujp!Kq=o*@2El{T^ruQNE-Ef{o93jd}1q!p4[B8UY2x\u003c\u003e*2AaK6bx(!ufz/fRsz/cV", "ln": 1950, "col": 30, "line": 102 }, { "b": "x(4v4fjX^qwN/?2A+P9aaARp9BrCEjwN({9xK#3k3jd{:2{:\u003c%mn)flar.\u003cVCPXQ(d]nVjo\u0026AfZD\u003cQe^e?X.Kmn=\u0026Uas8qgogJt-mn#Mvk#ZcSl}Hp83jd{:2{QM)AaAy0wGUA0C{3ZqzGG}xwmoN*vQTs?B1N!abmj-5DSiBjrdb(jat4*Xe?X.ApFK\u003e/aBFLz2)\u0026jqd[irfr8T[+DR^v9uRJ%*k$11rl0)2KqHF(V2{P=-boQ09wmoN\u003eayPekazCt7zxK4mwO(03v{@\u003eXwPGEh2{P=-bZSGVq=Fe/aS@vYatbq$nKDoGuSoM+o*}#6E0=nc2}^\u003eYnKDoGuSoM+o*}#6rzV7Hr7d]PDR^v9uRJ%*k$11rl0)2KqHF(V2{QMWxK$W?azbLjayPekaz\u003e?lB7]J8ayY5bB0a[6By/FnCv-dxwGUP0zFsf9wN(]$zGx]dy\u00260*6xd:I$bmj-5DSiBjrdb(jat4*Xe?X.ynM5FfE0=nc2}^\u003eYl}HoPavwW*lRx0%", "ln": 2278, "col": 36, "line": 114 }, { "b": "aw#=-x(!xcAV/BpwO=g7azCZofj/lnflp/ry\u00261eB3jd{:2{:\u003c%mn)flar.\u003cVCPXQ(d]O#coIuNRD\u003cQe^e?X.NnjuiCavey-as8qgogJt-mn#Mvk#ZcSl}Hp83jd#8r7f.+EioWQeQex\u003cfdP%(mncw$E0=nc2}^\u003eYq+ftJoDVX[mmfZ1k$19-bZSuXm{!$Vr6-]rr6:\u003eVnM6%z2{P=-boP(}xk8BewPw]czF0/fw[=6)B1N!abmj-5DSiBj", "ln": 2922, "col": 3, "line": 142 }, { "b": "fkLuifh:DAxKL{)fk$Gyy+Gmux(4rixK#10e]URHtNy=zeIgTTzes35B98ECgcNv4wP/.AB.\u003e\u003e3Ef{r\u003evrl05bZSD?k$sv(azCZ2p!$1?eLeYor6:hKdgcx4wNY^@y?c)JuVo^[uUKy*x\u003e7Z}3je^Q3pErOpe+aToIu(x329#]toCanDR^v9lp1KsEiG^%ar\u003cYcayc9KaARpdzvcWRbZSA-EipaNas8qgogJt=qBK5DsBz\u0026sx\u003c@.[fjY0hfkbDAy+G:ov@2H=wPGFqBzU?331^(U2%giQp!$1?eKS30pe+aToIu(x30OI@bZSuXm)YHumsuv5jS\u003e}Da%pelE0^5SwNY^@y?c)JuVo^[uUKy*x\u003e7Z}3je^Q3t1o!v*TC6bM", "ln": 3621, "col": 30, "line": 171 } ], "depth": 1, "facts": { "imp": [ [ "", "shift" ], [ "", "shift" ], [ "", "{PWD_CMD}" ], [ "", "{SH}" ], [ "", "{TEST}" ], [ "", "./+USERGROUP" ], [ "", "./+USERGROUP" ], [ "", "./+USERGROUP" ], [ "", "./+USERGROUP" ], [ "", "exit" ], [ "", "exit" ], [ "", "{TEST}" ], [ "", "./+DIRS" ], [ "", "./+DIRS" ], [ "", "{TEST}" ], [ "", "./+DIRS" ], [ "", "./+DIRS" ], [ "", "{TEST}" ], [ "", "./+SHLIBS" ], [ "", "./+SHLIBS" ], [ "", "{TEST}" ], [ "", "./+FILES" ], [ "", "./+FILES" ], [ "", "{TEST}" ], [ "", "./+FILES" ], [ "", "./+FILES" ], [ "", "{TEST}" ], [ "", "./+PERMS" ], [ "", "./+PERMS" ], [ "", "{TEST}" ], [ "", "./+FONTS" ], [ "", "./+FONTS" ], [ "", "{TEST}" ], [ "", "./+ICON_THEMES" ], [ "", "./+ICON_THEMES" ], [ "", "{TEST}" ], [ "", "./+DIRS" ], [ "", "./+DIRS" ], [ "", "{TEST}" ], [ "", "./+DIRS" ], [ "", "./+DIRS" ], [ "", "{TEST}" ], [ "", "./+FILES" ], [ "", "./+FILES" ], [ "", "{TEST}" ], [ "", "./+FILES" ], [ "", "./+FILES" ], [ "", "{TEST}" ], [ "", "./+SHELL" ], [ "", "./+SHELL" ], [ "", "{TEST}" ], [ "", "./+SHELL" ], [ "", "./+SHELL" ], [ "", "{TEST}" ], [ "", "./+INFO_FILES" ], [ "", "./+INFO_FILES" ], [ "", "{TEST}" ], [ "", "./+OCAML_FINDLIB_REGISTER" ], [ "", "./+OCAML_FINDLIB_REGISTER" ], [ "", "{ECHO}" ], [ "", "rebuild_R_pkg_indices" ], [ "", "rebuild_R_pkg_indices" ], [ "", "{RM}" ], [ "", "rebuild_R_pkg_indices" ], [ "", "rebuild_R_pkg_indices" ], [ "", "exit" ], [ "", "exit" ] ], "tgt": [ "${ECHO}", "${PWD_CMD}", "${RM}", "${SH}", "${TEST}", "./+DIRS", "./+FILES", "./+FONTS", "./+ICON_THEMES", "./+INFO_FILES", "./+OCAML_FINDLIB_REGISTER", "./+PERMS", "./+SHELL", "./+SHLIBS", "./+USERGROUP", ":", "R", "exit", "rebuild_R_pkg_indices", "shift" ], "funcs": [ [ "rebuild_R_pkg_indices", 3499 ] ], "metrics": { "ast": { "max_depth": 9, "call_count": 47, "node_count": 982 }, "file": { "size": 3987, "entropy": 5.74 }, "text": { "lines": 191, "top_char": 47, "tab_count": 107, "max_ws_run": 1, "digit_ratio": 0.03, "space_count": 311, "char_entropy": 5.74, "mixed_indent": 1, "unique_chars": 87, "top_char_null": 0, "string_density": 0.3, "top_char_ratio": 0.04, "avg_line_length": 19.87, "max_line_length": 69, "empty_line_ratio": 0.1, "last_line_length": 6, "whitespace_ratio": 0.15, "identifier_density": 1.37, "line_length_stddev": 17.34, "normalized_string_count": 4.2, "suspicious_string_ratio": 0.02, "suspicious_comment_ratio": 0.09, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 12.8 }, "binds": { "count": 55 }, "calls": { "dynamic_target_count": 21 }, "binary": { "peak_region_bytes": 3987, "peak_region_entropy": 5.71 }, "source": { "function_count": 1 }, "strings": { "bytes": 640, "count": 58, "shell": 1, "avg_length": 11.03, "max_length": 55, "path_count": 39, "avg_entropy": 2.79, "empty_count": 2, "entropy_stddev": 0.86 }, "comments": { "chars": 809, "count": 43, "empty": 24, "lines": 19, "high_entropy": 4, "to_code_ratio": 0.11 }, "functions": { "count": 1, "density": 0.52, "avg_params": 2, "code_ratio": 0.03, "max_params": 2, "avg_name_length": 21, "avg_length_lines": 6, "max_length_lines": 6, "min_length_lines": 6, "high_entropy_names": 1, "avg_param_name_length": 47 }, "identifiers": { "count": 262, "unique": 97, "avg_length": 6.94, "max_length": 31, "min_length": 1, "avg_entropy": 2.24, "reuse_ratio": 0.37, "length_stddev": 5.58, "has_digit_ratio": 0.05, "sequential_names": 1, "single_char_count": 6, "single_char_ratio": 0.06, "high_entropy_count": 8, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.03, "all_uppercase_ratio": 0.65, "numeric_suffix_count": 1, "underscore_prefix_count": 1 } } }, "id": 2, "mol": "H(Po)Md(Pa)", "path": "R-hwde-0.67.3.tgz!!+INSTALL", "pid": 0, "risk": 3, "sha": "39a21b31cbf3fa3ca33167bc74e787400cc45c09a4dfb196784ee429fad91091", "size": 3987, "traits": [ { "id": "metadata/package/files/bsd::pkgsrc-maintainer-script-basename", "conf": 0.92, "crit": 3, "desc": "pkgsrc binary package maintainer script filename", "spans": [ [ 0, 8 ] ] }, { "id": "metadata/package/files/bsd::pkgsrc-maintainer-script-header", "conf": 0.92, "crit": 3, "desc": "pkgsrc maintainer script NetBSD header", "spans": [ [ 14, 16 ] ] }, { "id": "metadata/package/files/bsd::pkgsrc-maintainer-script-vars", "conf": 0.92, "crit": 3, "desc": "pkgsrc maintainer script lifecycle variables", "spans": [ [ 77, 23 ] ] }, { "id": "micro-behaviors/fs/path/system::rm-utility-path", "conf": 0.5, "crit": 3, "desc": "Unix rm delete utility absolute path", "spans": [ [ 668, 8 ] ] }, { "id": "micro-behaviors/process/create/local-exec::execute-dot-slash-literal", "conf": 0.88, "crit": 3, "desc": "Executes a local relative file", "spans": [ [ 1645, 12 ], [ 1799, 7 ], [ 2014, 9 ], [ 2137, 8 ], [ 2342, 8 ], [ 2436, 8 ], [ 2539, 14 ], [ 2986, 8 ] ] }, { "id": "micro-behaviors/process/create/local-exec::shell-variable-exec-with-args", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "Shell runs a variable command with args", "spans": [ [ 3787, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/shell::bin-sh", "conf": 0.6, "crit": 3, "desc": "/bin/sh shell interpreter path reference", "spans": [ [ 742, 7 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "kY77yx\u003c\u0026c9v@=c(zxKokarR^He[n*qByw)3wPw]u3jgVWwmPy(xdXdrxj#xFatCM?CSMlsAa9o/x(mMny?mj2iV{dhAcKCK32K9\u003exk8lnA+Pf1BugKMB-.K-3jgMTA+x97eO]0gBugKMB-.K-3jgMTCRabNwoqGC", "n": [ { "c": 2, "d": "CSS class or id selector rule blocks", "i": "metadata/file/format/markup::css-selector-rule-block", "o": 20, "z": 12, "cf": 0.949999988079071 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1844.0, "entropy": 4.83, "size_bytes": 1844.0 }, "binary": { "overall_entropy": 4.83, "peak_region_bytes": 1844.0, "peak_region_entropy": 4.8 } } }, "id": 3, "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/html/R.css", "risk": 1, "sha": "52144cf4c349f7f2cf131342f81bbc43c6514ba2274556815df88918fdeb189b", "size": 1844, "traits": [ { "id": "metadata/file/format/markup::css-selector-rule-block", "conf": 0.949999988079071, "crit": 2, "desc": "CSS class or id selector rule blocks", "spans": [ [ 20, 12 ] ] } ], "type": "text" }, { "id": 4, "sha": "26e0f1500d05e9e830213c69d091378b66844ca132ad98e20f889b8dc309e15f", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/help/paths.rds", "size": 190, "type": "gz", "depth": 1 }, { "id": 5, "sha": "615d651fe642c86ca969cd1c4c28b482edd6ae818e42df229e9eb5e99b97b2e0", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/help/hwde.rdx", "size": 301, "type": "gz", "depth": 1 }, { "id": 6, "sha": "5d083d6220d6378628ba2a65ff6b3ff4a5a8e2e5c6d3ac3bb99c24f964f08f87", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/help/aliases.rds", "size": 158, "type": "gz", "depth": 1 }, { "ctx": [ { "b": "vRMl8fG74caA7.73oQATfhMXcwozx[AV==Hwm!!Lss(lWg+ZKqg:@++lVM:DBz(gxc@:+WdgdZ", "n": [ { "c": 2, "d": "PDF contains producer metadata tag", "i": "metadata/document/pdf/properties::has-producer", "o": 277687, "z": 11, "cf": 0.8999999761581421 } ], "ln": 277671 } ], "depth": 1, "facts": { "metrics": { "pdf": { "eof_count": 1.0, "header_count": 1.0, "object_count": 41.0, "objstm_count": 1.0, "stream_count": 40.0, "trailer_count": 0.0, "startxref_count": 1.0, "xref_stream_count": 1.0, "flate_filter_count": 40.0, "risky_feature_score": 0.0, "visible_object_count": 41.0, "signature_object_count": 0.0, "trailing_bytes_after_eof": 1.0, "unreferenced_object_count": 40.0, "stream_bad_delimiter_count": 0.0, "leading_bytes_before_header": 0.0, "stream_invalid_length_count": 0.0, "stream_missing_length_count": 0.0, "stream_length_mismatch_count": 0.0, "stream_missing_endstream_count": 0.0, "object_stream_inner_object_count": 66.0 }, "file": { "size": 282407.0, "entropy": 8.0, "size_bytes": 282407.0 }, "binary": { "overall_entropy": 8.0, "peak_region_bytes": 281600.0, "peak_region_entropy": 7.86 } } }, "id": 7, "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/doc/hwde.pdf", "risk": 1, "sha": "813940d823f48bc107afda75b050a69bbbdcedb986c8ce77ab65283e31388630", "size": 282407, "traits": [ { "id": "metadata/document/pdf/properties::has-producer", "conf": 0.8999999761581421, "crit": 2, "desc": "PDF contains producer metadata tag", "spans": [ [ 277687, 11 ] ] } ], "type": "pdf" }, { "ctx": [ { "b": "tX4+.B.$YcByPb}B8$LufMqa+vkI}iAaK5}DTQ@px\u003e7%\u003cEe", "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 38 }, { "b": "tY:X4y?m@)wPI%czF782zE:\u003e:z!9A}x(mMam}DNRBA}?tv\u003c1fNB7Gulx(4G)A+O%g", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 54, "z": 3, "cf": 0.800000011920929 } ], "ln": 3, "addr": 39 }, { "b": "", "ln": 4, "addr": 92 }, { "b": "tVk\u0026TvrMiTAcceFwO#c{zE\u003e$eem\u0026s8z-{MQoJaxd", "ln": 5, "addr": 93 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 12029.0, "entropy": 5.01, "size_bytes": 12029.0 }, "text": { "digit_ratio": 0.02, "space_count": 1785.0, "total_lines": 304.0, "char_entropy": 5.01, "unique_chars": 91.0, "escape_density": 0.01, "avg_line_length": 38.57, "max_line_length": 91.0, "empty_line_ratio": 0.11, "last_line_length": 14.0, "whitespace_ratio": 0.17, "most_common_ratio": 0.08, "line_length_stddev": 26.11, "unicode_escape_count": 1.0, "repeated_char_sequences": 2.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 10.0, "most_common_char_codepoint": 101.0 }, "binary": { "overall_entropy": 5.01, "peak_region_bytes": 7933.0, "peak_region_entropy": 5.26 } } }, "id": 8, "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/doc/hwde.Rnw", "risk": 1, "sha": "a18954c9912d98fce6641f3e633f00c13b4603def5dfee8d096de9920a8cc2d4", "size": 12029, "traits": [ { "id": "objectives/anti-static/obfuscation/payload/container::js-function-in-noncode", "atk": "T1027.003", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "JavaScript function keyword in non-code file", "spans": [ [ 8516, 18 ] ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "English language detection", "spans": [ [ 54, 3 ] ] } ], "type": "markdown" }, { "id": 9, "sha": "befb611062cd3dd7295dd895d20e144b6cf69a2c07f7c97cfc714da4f9d7dee2", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/data/Rdata.rdx", "size": 160, "type": "gz", "depth": 1 }, { "id": 10, "sha": "94a6b2cb08c30b80c973c9475a50510280a5872247891b38c2effe3878654295", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/data/Rdata.rds", "size": 102, "type": "gz", "depth": 1 }, { "id": 11, "sha": "fd37826619ea90acae92f48827f537849831f85b2c6215169d084e7c08d7285c", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/R/hwde.rdx", "size": 327, "type": "gz", "depth": 1 }, { "id": 12, "sha": "ba59bb6adac5f5b15bfe8ad4de6e54d2a00d1b1a16f0a5b9f7289f2bdde6e5d8", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/vignette.rds", "size": 239, "type": "gz", "depth": 1 }, { "id": 13, "sha": "cafca45090fd9e96555044a406ec1f30847f8009cb95d0c14f616f295f58add6", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/package.rds", "size": 1045, "type": "gz", "depth": 1 }, { "id": 14, "sha": "8afbd48ce6d238fa4006226bd84a72c1d8e91e904b8d50ec25e55e597a7976f1", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/nsInfo.rds", "size": 264, "type": "gz", "depth": 1 }, { "id": 15, "sha": "341300541631db56c2c9d60d90ded1e519c0bb7961b7fad9c792cb7fdd142bcc", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/links.rds", "size": 206, "type": "gz", "depth": 1 }, { "id": 16, "sha": "e4d468b6f2660c97fa9c0df481b08f1a0e3d057e229cd9dae07021e0d484ba56", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/hsearch.rds", "size": 679, "type": "gz", "depth": 1 }, { "id": 17, "sha": "59b68f91c57089746488000875e3b69cd734fec46a8c0e3e9beaa509f5d44503", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/features.rds", "size": 120, "type": "gz", "depth": 1 }, { "id": 18, "sha": "ea0b01f7d3d6a93c3bdaefaaf581a7128a9707c2d92178639b2ceeb0cfe97f05", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/data.rds", "size": 264, "type": "gz", "depth": 1 }, { "id": 19, "sha": "25cdba343b6d13734179a1b63c27c5e9c2774675871449c87923f490eadd7b64", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/Meta/Rd.rds", "size": 671, "type": "gz", "depth": 1 }, { "id": 20, "sha": "0bb0bd82412298f4e1d1523177cec92b013afae823e11524a19973fbc1770fb3", "path": "R-hwde-0.67.3.tgz!!lib/R/library/hwde/doc/hwde.R", "size": 3931, "type": "kotlin", "depth": 1 } ], "omitted_files": 15, "rev": "868bd", "v": "8" } }