{ "ml": { "v": "7", "eng": "2.2.0-rc.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00013883908, "rte": "az", "prob": 0.00013883908 } ], "prob": 0.00013883908, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00013883908104617149, "type": "apk_alpine" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000009944041266862769, "type": "elf" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000010281801223754883, "type": "perl" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000010838110938493628, "type": "text" } ], "version": "v18.18", "analyzed_at": "2026-06-26T09:36:36Z" }, "path": "freeradius-perl-3.0.27-r3.apk", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000T3{24[J!\u003enkh=HeH]u63?!Yp^*DIa!jX1m:JNrco?u{f=2H?Deg@xa3GU*X", "n": [ { "c": 2, "d": "Binary is not digitally signed", "i": "metadata/unsigned", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 } ], "mol": "Hâ‚‚(DsPo)Md(He)", "sha": "4a2857da7f5574805db56c3e8e703f8f7c1f513cd29dc0b47177768dce5b5724", "path": "freeradius-perl-3.0.27-r3.apk", "risk": 3, "size": 17877, "type": "apk_alpine", "facts": { "metrics": { "file": { "size": 17877.0, "entropy": 7.98, "size_bytes": 17877.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.98, "peak_region_bytes": 17877.0, "peak_region_entropy": 7.81 } } }, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/metrics/threshold::many-imports-50", "conf": 1.0, "crit": 1, "desc": "Binary has 50+ imports", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/load/runtime::dlclose", "atk": "T1574.006", "conf": 0.800000011920929, "crit": 3, "desc": "Dynamic library unload", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/help::usage-title", "crit": 2, "desc": "Usage: label (title case)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/scripted::use-module", "conf": 0.8500000238418579, "crit": 2, "desc": "Perl module import statement", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/ui/help::usage-title-string", "crit": 1, "desc": "Usage: label in binary strings", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "from": [ { "file": 3 } ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/scripted::subroutine-definition", "conf": 0.8500000238418579, "crit": 2, "desc": "Perl subroutine definition", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/interpreter/perl::perl-keyword", "conf": 0.699999988079071, "crit": 3, "desc": "perl interpreter keyword (beyond shebang)", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/ui/help::usage-label", "conf": 0.75, "crit": 1, "desc": "Command line usage text", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/scripted::sigil-variable-decl", "conf": 0.800000011920929, "crit": 2, "desc": "Perl sigil variable declaration", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "from": [ { "file": 3 } ] } ] }, { "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000SbR!q0000000000kMA+z3JJA(7xtiJ0rr91", "n": [ { "c": 3, "d": "Strips toolchain banner but retains build-id", "i": "metadata/build/artifact::aggressive-strip", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 }, { "b": "A-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0af8zwPzu{x(!xcA:JB0vqPN.x(mK30af8NwOkZ#", "n": [ { "c": 3, "d": "Benign network-capable library context", "i": "objectives/supply-chain/trojanized/backdoor::benign-network-library-context", "o": 3623, "z": 12, "cf": 0.8999999761581421 } ], "ln": 3607 }, { "b": "A=L-eByeJ@zGGDmBo2VPBzM29xjVf(vpS[?08Mu@BzbY4yH}+\u003eAcb=lwNPaRB7GDmAaJJ[w[+-P", "n": [ { "c": 2, "d": "Imports __tls_get_addr from the dynamic loader", "i": "metadata/binary/linking/runtime::imports-tls-get-addr", "o": 3703, "z": 12, "cf": 1.0 } ], "ln": 3687 }, { "b": "08NlEy*QQ]uVpdexAhyDB97\u00262yHpN+yHpWZx(0=Uz/o-8m0SVUoMauIwPv=EwPzP]zE[2]qVH\u0026Dwnz", "n": [ { "c": 3, "d": "Stack protector/canary enabled", "i": "metadata/hardening/build::stack-protector", "o": 3969, "z": 14, "cf": 0.8999999761581421 } ], "ln": 3953 }, { "b": "v/PtpA+]8\u003eC3!-}wNPPVwnC:(z/YE\u0026Acb=lwNPaRxjVgaAaJJ[w[+-PAaK6auT)[\u003czE\u0026/AwPzP]AccbcBywS{wNx4\u0026wN$\u003cNA:J)kB7Gxjz/L", "n": [ { "c": 3, "d": "Dynamic library unload", "i": "micro-behaviors/dylib/load/runtime::dlclose", "o": 4574, "z": 7, "cf": 0.800000011920929 }, { "c": 2, "d": "Process forking", "i": "micro-behaviors/process/fork/clone::fork", "o": 4602, "z": 10, "cf": 0.6600000262260437 } ], "ln": 4558 }, { "b": "A+)vHzVBP/vQ?3cB-RvJCSmP*hz^4cz.r:AflItRfkLuifk$Gyy=9\u003eQz/Pz@AaK6afgb", "n": [ { "c": 3, "d": "Architecture detection strings", "i": "objectives/discovery/host/software::arch-detection", "o": 5287, "z": 6, "cf": 0.5 } ], "ln": 5271 }, { "b": "wPzPfC4CYnx(v(Iash7erDzOYwJy@OvpT7{B7vr)CX*/gd06GJx(mMj08=9JuTEermnW5Nq=DM[lT:\u003cPzF%RtwP?G#B.8Xu", "n": [ { "c": 3, "d": "Terminal socket exec helper context", "i": "micro-behaviors/process/fd/dup::unix-terminal-socket-exec-benign-context", "o": 20715, "z": 28, "cf": 0.949999988079071 } ], "ln": 20699 }, { "b": "eJ$p8c37BlC5NBhC5RH5rDzOYwJy@OvpT7{B7vr)A:-G{z!yFmwP?T3efF!vB8$=5wHNR1y\u00269J#wPzPFash7em0SVUoMauIwPx*)wnCQ?x\u003c}", "n": [ { "c": 3, "d": "Benign socket shell helper context", "i": "micro-behaviors/process/fd/dup::posix-fd-redirect-shell-benign-context", "o": 21009, "z": 38, "cf": 0.9399999976158142 } ], "ln": 20993 }, { "b": "Y*@b600000V}7e%00000A+]P1AaK6ae]$}-wmYj)x8?]i-BnJ?04@taB98CAvpxi?zF%Sde[Y6Ae]U\u0026Hz#", "n": [ { "c": 2, "d": ".gnu_debuglink reference present", "i": "metadata/build/debug::elf-debuglink", "o": 28848, "z": 17, "cf": 1.0 } ], "ln": 28832 }, { "b": "y?bbiwb[k{zGNNBvrl8Ze[xlBB9RQ5e[xlBB98B5e]\u003eJtvj(8ozu8qfwO=xtwo\u00264)e[]iqBo0}nwQ5p", "n": [ { "c": 2, "d": "ELF dynstr section name", "i": "metadata/binary/linking/static::elf-dynstr-section-name", "o": 28939, "z": 7, "cf": 0.8999999761581421 }, { "c": 2, "d": "ELF dynsym section name", "i": "metadata/binary/linking/static::elf-dynsym-section-name", "o": 28931, "z": 7, "cf": 0.8999999761581421 } ], "ln": 28915 }, { "b": "vr?\u00269wmoN*e]\u003eJte]\u003e\u003ege[xlBvqPZ*04}]5Bo0}7vrt]Te[e)y04}]4BZFV\u003cvS=s1x(mX^", "n": [ { "c": 2, "d": "ELF dynamic section name", "i": "metadata/binary/linking/static::elf-dynamic-section-name", "o": 29054, "z": 8, "cf": 0.8999999761581421 } ], "ln": 29038 } ], "depth": 1, "facts": { "exp": [ [ "init" ], [ "rlm_perl" ], [ "fini" ] ], "imp": [ [ "", "rad_malloc" ], [ "", "PL_origenviron" ], [ "", "Perl_markstack_grow" ], [ "", "Perl_croak_nocontext" ], [ "", "Perl_sv_setiv" ], [ "", "Perl_sv_2pv_flags" ], [ "", "cf_item_find_next" ], [ "", "Perl_switch_locale_context" ], [ "", "pthread_getspecific" ], [ "", "radlog_request_error" ], [ "", "snprintf" ], [ "", "Perl_av_len" ], [ "", "Perl_pop_scope" ], [ "", "xlat_register" ], [ "", "Perl_av_clear" ], [ "", "Perl_more_bodies" ], [ "", "talloc_free" ], [ "", "Perl_gv_add_by_type" ], [ "", "cxa_finalize" ], [ "", "Perl_sv_2iv_flags" ], [ "", "Perl_stack_grow" ], [ "", "Perl_get_av" ], [ "", "perl_construct" ], [ "", "Perl_push_scope" ], [ "", "Perl_call_pv" ], [ "", "cf_item_to_pair" ], [ "", "environ" ], [ "", "fr_exit_now" ], [ "", "environ" ], [ "", "dlclose" ], [ "", "stack_chk_fail" ], [ "", "fr_pair_list_sort" ], [ "", "tls_get_addr" ], [ "", "fr_tokens" ], [ "", "Perl_sv_2bool_flags" ], [ "", "perl_parse" ], [ "", "Perl_sv_backoff" ], [ "", "Perl_mg_size" ], [ "", "cf_section_sub_find" ], [ "", "Perl_newSVpvn" ], [ "", "Perl_newSVpv" ], [ "", "Perl_sv_2mortal" ], [ "", "environ" ], [ "", "Perl_newXS" ], [ "", "cf_item_is_pair" ], [ "", "deregister_frame_info" ], [ "", "Perl_sys_init3" ], [ "", "ITM_registerTMCloneTable" ], [ "", "fr_cursor_init" ], [ "", "Perl_free_tmps" ], [ "", "Perl_hv_common_key_len" ], [ "", "pthread_key_create" ], [ "", "radlog" ], [ "", "environ" ], [ "", "radlog_request" ], [ "", "fr_pair_cmp_by_da_tag" ], [ "", "Perl_hv_undef_flags" ], [ "", "strlcpy" ], [ "", "Perl_sv_magic" ], [ "", "fr_pair_find_by_num" ], [ "", "perl_run" ], [ "", "cf_section_name1" ], [ "", "Perl_newRV" ], [ "", "Perl_get_sv" ], [ "", "perl_clone" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "fr_pair_value_from_str" ], [ "", "boot_DynaLoader" ], [ "", "Perl_get_hv" ], [ "", "Perl_savetmps" ], [ "", "Perl_av_push" ], [ "", "fr_strerror" ], [ "", "talloc_zero_array" ], [ "", "PL_thr_key" ], [ "", "pthread_mutex_unlock" ], [ "", "vp_prints_value" ], [ "", "perl_destruct" ], [ "", "cf_item_is_section" ], [ "", "fr_assert_cond" ], [ "", "cf_pair_value" ], [ "", "fr_int2str" ], [ "", "cf_item_to_section" ], [ "", "fr_cursor_next" ], [ "", "fr_pair_list_free" ], [ "", "talloc_array" ], [ "", "perl_alloc" ], [ "", "pthread_mutex_destroy" ], [ "", "cf_pair_attr" ], [ "", "pthread_mutex_lock" ], [ "", "radius_axlat" ], [ "", "PL_current_context" ], [ "", "Perl_more_sv" ], [ "", "Perl_av_fetch" ], [ "", "pthread_mutex_init" ], [ "", "strlen" ], [ "", "fr_cursor_next_peek" ], [ "", "cf_section_name2" ], [ "", "rad_debug_lvl" ], [ "", "Perl_ptr_table_free" ], [ "", "PL_veto_switch_non_tTHX_context" ], [ "", "Perl_hv_iternextsv" ], [ "", "fr_syserror" ], [ "", "Perl_hv_iterinit" ], [ "", "register_frame_info" ], [ "", "fr_pair_value_bstrncpy" ], [ "", "perl_free" ], [ "", "pthread_setspecific" ], [ "", "free" ], [ "", "Perl_mg_get" ], [ "", "fr_pair_make" ] ], "sec": [ [ ".note.gnu.property", 680, 48, 1.87, "alloc" ], [ ".note.gnu.build-id", 728, 36, 4.19, "alloc" ], [ ".gnu.hash", 768, 56, 2.77, "alloc" ], [ ".dynsym", 824, 2736, 1.17, "alloc" ], [ ".dynstr", 3560, 1769, 4.5, "alloc" ], [ ".rela.dyn", 5336, 2592, 1.52, "alloc" ], [ ".relr.dyn", 7928, 40, 2.67, "alloc" ], [ ".init", 8192, 3, 1.58, "alloc,executable" ], [ ".text", 8208, 10632, 5.99, "alloc,executable" ], [ ".fini", 18840, 3, 1.58, "alloc,executable" ], [ ".rodata", 20480, 3088, 5.27, "alloc" ], [ ".eh_frame_hdr", 23568, 252, 4.32, "alloc" ], [ ".eh_frame", 23824, 1788, 5.09, "alloc" ], [ ".init_array", 26576, 8, 1.06, "write,alloc" ], [ ".fini_array", 26584, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 26592, 720, 1.17, "write,alloc" ], [ ".dynamic", 27312, 448, 1.29, "write,alloc" ], [ ".got", 27760, 888, 0.03, "write,alloc" ], [ ".data", 28672, 176, 1.64, "write,alloc" ], [ ".gnu_debuglink", 28848, 24, 4.05, "" ], [ ".shstrtab", 28872, 222, 4.19, "" ] ], "metrics": { "elf": { "bits": 64.0, "entry": 0.0, "has_got": 1.0, "has_plt": 0.0, "has_note": 1.0, "note_count": 2.0, "nx_enabled": 1.0, "has_dt_relr": 1.0, "has_runpath": 1.0, "dynrel_count": 0.0, "dynsym_count": 114.0, "has_build_id": 1.0, "has_eh_frame": 1.0, "has_gnu_hash": 1.0, "stack_canary": 1.0, "symtab_count": 0.0, "dynrela_count": 108.0, "has_debuglink": 1.0, "little_endian": 1.0, "dt_flags_1_raw": 1.0, "pltreloc_count": 0.0, "build_id_length": 20.0, "executable_stack": 0.0, "fini_array_count": 1.0, "init_array_count": 1.0, "wx_segment_count": 0.0, "program_header_count": 11.0, "gnu_stack_section_absent": 0.0, "load_segment_max_file_size": 10651.0, "stripped_but_symtab_present": 0.0, "load_segment_max_memory_size": 10651.0, "section_relocation_group_count": 1.0, "stripped_metadata_section_count": 8.0 }, "file": { "size": 30568.0, "entropy": 4.68, "size_bytes": 30568.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 1.0, "code_entropy": 5.99, "data_entropy": 0.78, "overlay_size": 1474.0, "string_count": 206.0, "overlay_ratio": 0.05, "overall_entropy": 4.68, "overlay_entropy": 1.36, "entropy_variance": 2.86, "avg_string_length": 16.76, "max_string_length": 62.0, "peak_region_bytes": 10240.0, "code_to_data_ratio": 0.83, "peak_region_entropy": 5.88, "string_length_stddev": 10.56, "largest_section_ratio": 0.35, "sentence_string_count": 23.0, "sentence_string_ratio": 0.11, "high_entropy_string_count": 0.0 }, "exports": { "count": 3.0 }, "imports": { "count": 110.0 }, "sections": { "count": 23.0, "code_size": 10638.0, "entropy_max": 5.99, "entropy_mean": 2.72, "name_entropy": 4.14, "writable_count": 7.0, "executable_count": 3.0, "nonstandard_count": 6.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 2.0 } } }, "id": 1, "mol": "H(Ds)Md(He)", "path": "freeradius-perl-3.0.27-r3.apk!!usr/lib/freeradius/rlm_perl.so", "risk": 2, "sha": "e2aa01233b545fe7aace4d15925b2a1afa24527a59194efdd65ba7bc2d68cfa3", "size": 30568, "traits": [ { "id": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize", "crit": 2, "desc": "libc characteristic cxa finalize", "spans": [ [ 3623, 12 ] ] }, { "id": "metadata/binary/metrics/threshold::many-imports-50", "conf": 1.0, "crit": 1, "desc": "Binary has 50+ imports", "spans": [ [ 0, 22 ] ] }, { "id": "micro-behaviors/ui/help::usage-title-string", "crit": 1, "desc": "Usage: label in binary strings", "spans": [ [ 20715, 28 ], [ 21009, 38 ] ] }, { "id": "micro-behaviors/ui/help::usage-title", "crit": 2, "desc": "Usage: label (title case)", "spans": [ [ 20715, 28 ], [ 21009, 38 ] ] }, { "id": "micro-behaviors/dylib/load/runtime::dlclose", "atk": "T1574.006", "conf": 0.800000011920929, "crit": 3, "desc": "Dynamic library unload", "spans": [ [ 4574, 7 ] ] }, { "id": "metadata/hardening/missing::stripped-binary", "conf": 0.800000011920929, "crit": 3, "desc": "No full symbol table (likely stripped)", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/dylib/library/libc::libc-internal-functions-b", "conf": 0.699999988079071, "crit": 2, "desc": "libc internal symbols cluster B", "spans": [ [ 3623, 12 ] ] }, { "id": "micro-behaviors/ui/help::usage-label", "conf": 0.75, "crit": 1, "desc": "Command line usage text", "spans": [ [ 20715, 28 ], [ 21009, 38 ] ] }, { "id": "micro-behaviors/dylib/library/abi-graphics::cxx-abi-symbols-a", "conf": 0.800000011920929, "crit": 2, "desc": "C++ ABI symbols cluster A", "spans": [ [ 3623, 12 ] ] } ], "type": "elf" }, { "ctx": [ { "b": "3l])5arTS%x(+zoA=kPhvqNc3B0b7nwO009z!s9nvrb{vaBd)Fay!?$aAz47x(!xpx\u003c#jbwGUYeayPd#fk\u003e\u003eNzeS%0w{B.darUxuaA.NjwPw]nxK@rdwPzTeaA7\u003cmBzbkdm]05bm}DNHA:-=bp\u003c3k-x\u003e5nVx\u003e7Z(B7DF5B0bBAvR/+1xK$Y%vTeq9arU=twGTD.wN##.z!s9nvrb{4mSiA!wmoN]z/dSVwODm1wPw]pwPz\u003caz/cWMaA7\u003cmBzbkdoLF0FzGxwuaA8ocboO9SvrrSqz/(", "ln": 0, "col": 1, "line": 1 }, { "b": "zy#nv3l{Vora]#!aAhvtxl4A$azC)twncabA+P09By!#9x(k5nxK@r1z/xngBzb98azC{uCwg(fayX[8B-RbaB.\u0026PoboOarB-X:cnMnkRrA78bpfwYvk#HPDpe\u003evTaA}KwxM53naz2.czxK4mwGUY7Abol1wfu88A=LPaBA]0Ew^P+9awCp5lR6Hrr6-\u0026xoI5h^aA8oymOcMOmn)bcmO=]8k{e#\u0026qDcjPrzkXRaw=6op!$1Ue*8onwO00axK}I}arTfHruK!yzE)\u0026%y-(L%vR/:*awuGVwO#N2azbLjaz(4qwGUI{Byw)1B1N!A3l{Vos-nB9B7/Gmy?aV4vrMi8A+e-(x)a5#ayMy5z/x$Az!pblxK@qRpe@AbwO#71vqE5.BZ/f3v\u003c1DVv}xL0wEoU8ayP88zF78ox([2hBzbxfaAhvtxl4A$j0nlHaz#atefGdSx()]eBz\u0026pzxK@qQA+e/8q/un\u0026CvtJ63l{VomSiA!wmoN]z/d9GnP52\u003cefD/8avZxWzFK65zxI(1efEz@w]}YemR)0YAX5t1z/Z2szy=]8k{d\u003cpf!\u003evlf/7HrefE}\u003ek)!?zboO9@z/x#xx\u003eIa3atLS8g9vYsxK@qQA+e/Wk$1pAqY{c)A=#2maAhvtygQ)%3l{VolVl{?A+Pf1BrAs)fFT:[lt{NDzxIL\u0026A+5P@z*0l=vRP?4wmov]C0G$^vRG{}y+xgfj{\u0026Iw", "ln": 252, "col": 37, "line": 6 }, { "b": "v@#B6zxK4tazC.cBzkf1x)KtkBzbkdl{:D/v@Dm5wN/*@z/cXtzY?Cme^-*g3uZA3aAITBx\u003e8lD3uZA3aA}mmzFs03B2%ZoboRbIwGSPTe^=-xwGTxHByvi\u003em0iu=wPx\u003ct3l{VWA+PA7aARpdazkIevQT6}xKL%}wPF#dzGG!tBzbkdAa9l(vp%c]B7occwEru#AV=+RqB9YTqBKC.mn)epasf]Kl%\u0026?Xp!U1yasf]Kl%\u0026qLmmfZ0asd", "ln": 1022, "col": 20, "line": 27 }, { "b": "3jn0+boP%0x(+zsxK@rbwO\u003e\u003c{Aa%i5aA7\u003cmA+funA=91yvqH6$A%:c0B-Rapv@DmaByx6eaBsC4qCo!(o\u00261eSoHSq^mm{0or3iqajW6#xefDeWx(dY#wnbE]wO=SmA+e#%v@@\u0026nxK@rbwPq\u003c7B94-}qCo!(o\u00261eSoHSq:octu1arR^HjW6#zefDeWBzbkd", "ln": 1889, "col": 72, "line": 61 }, { "b": "v@C)?B0bNrwPzu8vrb]^Eld=yboP][zdK?#B0bKAv\u003eRLlv@co#wIm\u003erxd^\u003c8B-Rapv@DmaByx6eaBsC4oKy7=r7FbOarR^HarR^\u0026j%hQiarR)Kl3mo.wO#Q7v{%E[z/cXmwPI{3xjRzRoKyv^mO+cHarR^HarR^\u0026j%hTjarR)KnP5cUA=2lbx(v($y-)OaB8$=5wEn-quQW\u003c\u003carR^HarR^HarS*hat+R(ar@0$A=M8saz\u003eXhB75Y)3jfyks3Y.VarR^H", "ln": 2479, "col": 46, "line": 75 }, { "b": "2)(1!bmaVee?NFQ34ic/3l{V.B-7Yhx(v(iBz\u0026pnvqYQ(wGUA7BzbPkx)Ks$B9g}mvrDW9z/PMrwGVsb2{QMZz/M$hwNY^{xk8l@aAhEzAbP/eB0bysy\u003cuvj2{%Fbxj2W\u003cADL\u0026lByeD#BAh88B-.hoi%(r3boPJ*A+cRtaA}HgA+cwsz/{7yvrDW9z/PMrvruj4zxJA", "ln": 3319, "col": 2, "line": 101 }, { "b": "xdcCXl{:x{b1uP\u003ez6j7tvrrRqviu?8as7CtbXe2wdlv\u003eyy\u0026r/(y-\u003eh%nimd+z/xo9avX)Mas7Mky?mG)zdK\u0026dAV![bwGSgnAaJ]fcNrqry?mG)zdL7qbQ1u[3jgJ!v{%g4bRHO?jS[(+wmYvm3jgM{as82JvJW/RjvR\u003e9i%(p7y\u0026sxaavX)-3jgM{as7JwvqE5HaAqyFaAIWmazth3wnC*$DMTOPBZ^BXaBMrU31Xo*y-\u003e0mC42hG3jgo!vqE6kzddc@eK0\u0026RzE^M{AYXXh3i", "ln": 5276, "col": 17, "line": 198 } ], "depth": 1, "facts": { "imp": [ [ "", "open" ], [ "", "die" ], [ "", "main.handler" ], [ "", "Data::Dumper" ], [ "", "constant" ], [ "", "strict" ], [ "", "warnings" ] ], "mbr": [ "main.handler" ], "tgt": [ "die", "main.handler", "open" ], "metrics": { "ast": { "op.lt": 1, "op.lor": 1, "max_depth": 13, "call_count": 9, "node_count": 717, "member_count": 1, "op_density.lt": 0, "op_density.lor": 0, "max_array_length": 1, "max_member_depth": 2 }, "file": { "size": 5924, "entropy": 5.26 }, "text": { "lines": 230, "top_char": 101, "tab_count": 110, "digit_ratio": 0.01, "space_count": 823, "char_entropy": 5.26, "unique_chars": 92, "top_char_null": 0, "import_density": 1.74, "string_density": 0.06, "top_char_ratio": 0.07, "avg_line_length": 24.76, "max_line_length": 85, "empty_line_ratio": 0.16, "last_line_length": 1, "whitespace_ratio": 0.2, "identifier_density": 0.12, "line_length_stddev": 23.61, "max_whitespace_run": 10, "normalized_import_count": 0.26, "normalized_string_count": 0.92, "repeated_char_sequences": 2, "suspicious_comment_ratio": 0.02, "normalized_unique_identifiers": 2.17 }, "binary": { "peak_region_bytes": 5924, "peak_region_entropy": 5.22 }, "source": { "function_count": 12 }, "imports": { "count": 4, "third_party_count": 4, "third_party_ratio": 1 }, "strings": { "bytes": 254, "count": 14, "avg_length": 18.14, "max_length": 34, "avg_entropy": 3.22, "entropy_stddev": 1.05 }, "comments": { "chars": 3774, "count": 128, "empty": 20, "lines": 108, "high_entropy": 2, "to_code_ratio": 0.89 }, "functions": { "count": 12 }, "identifiers": { "count": 27, "unique": 17, "avg_length": 9.29, "max_length": 22, "min_length": 2, "avg_entropy": 2.69, "reuse_ratio": 0.63, "length_stddev": 4.77, "high_entropy_count": 1, "high_entropy_ratio": 0.06, "all_lowercase_ratio": 0.76, "all_uppercase_ratio": 0.24 } } }, "id": 2, "mol": "H(Cm)", "path": "freeradius-perl-3.0.27-r3.apk!!etc/raddb/mods-config/perl/example.pl", "pid": 0, "risk": 2, "sha": "ad35109b72d1188711d59ff1a1a1f8fc3ea4322978edc915e8bc7151ddbbae6e", "size": 5924, "traits": [ { "id": "micro-behaviors/communications/http/authorization-header::auth-like-constant-assignment", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Assigns a TOKEN/AUTH-named variable", "spans": [ [ 2543, 16 ] ] }, { "id": "metadata/import/perl/constant::constant", "conf": 0.95, "crit": 2, "desc": "imports constant", "spans": [ [ 1937, 0 ] ] }, { "id": "metadata/import/perl/data/dumper::data/dumper", "conf": 0.95, "crit": 2, "desc": "imports Data::Dumper", "spans": [ [ 1112, 0 ] ] }, { "id": "metadata/import/perl/strict::strict", "conf": 0.95, "crit": 2, "desc": "imports strict", "spans": [ [ 1075, 0 ] ] }, { "id": "metadata/import/perl/warnings::warnings", "conf": 0.95, "crit": 2, "desc": "imports warnings", "spans": [ [ 1087, 0 ] ] }, { "id": "metadata/lang/scripted::sigil-variable-decl", "conf": 0.8, "crit": 2, "desc": "Perl sigil variable declaration", "spans": [ [ 5393, 0 ] ] }, { "id": "metadata/lang/scripted::subroutine-definition", "conf": 0.85, "crit": 2, "desc": "Perl subroutine definition", "spans": [ [ 3367, 0 ] ] }, { "id": "metadata/lang/scripted::use-module", "conf": 0.85, "crit": 2, "desc": "Perl module import statement", "spans": [ [ 1070, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 87, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 61, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 300, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 519, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 420, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 583, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 6, 0 ] ] } ], "type": "perl" }, { "ctx": [ { "b": "boPG/zE)\u0026%By!#9vTf88vS=y3wfrVXf/HZsuVGThePJM", "n": [ { "c": 1, "d": "Alpine/Wolfi package info file", "i": "metadata/package/files/system-package::alpine-pkginfo-basename", "o": 0, "z": 1, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "boRbIx(mMaw)]E^A=k(raA?spB7]MgatCG8h.D\u0026", "ln": 2, "addr": 36 }, { "b": "Abf97vqPM#jS[uSwO2)\u003cwncgcePtowyY", "n": [ { "c": 2, "d": "Alpine/Wolfi package info metadata", "i": "metadata/package/files/system-package::alpine-apk-pkginfo", "o": 68, "z": 25, "cf": 0.9700000286102295 } ], "ln": 3, "addr": 68 }, { "b": "Abf9fwPw[RatUS7e\u00262vqAX^", "n": [ { "c": 1, "d": "Alpine/Wolfi package version field", "i": "metadata/package/files/system-package::alpine-pkginfo-version-field", "o": 94, "z": 18, "cf": 0.8999999761581421 } ], "ln": 4, "addr": 94 }, { "b": "Abf8%wPIu7jS)NjA+(\u003enz!a0bwGUP6AV^?(wO1+9l}HxSaAIamC4CW", "ln": 5, "addr": 113 }, { "b": "B-IpvjS[AWBz#pZfe3{TwO2)\u003cwncgce]L=yf8", "ln": 6, "addr": 157 }, { "b": "B7]@iauZ\u00266iw\u0026SH", "ln": 9, "addr": 268 }, { "b": "vrb\u003c\u003eauZ\u0026(i5Ub4gY", "ln": 10, "addr": 281 }, { "b": "z/PM8x(k4RazbU9wPzi\u0026x)1E", "n": [ { "c": 1, "d": "Alpine/Wolfi package origin field", "i": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "o": 295, "z": 19, "cf": 0.8999999761581421 } ], "ln": 11, "addr": 295 }, { "b": "v@Dj3x(\u003eEXau0Z\u0026vLxJFfK!N4v(N%NfK#\u003eEwh=g%vRduaiBKZ1fFLv)ggJj3w=", "ln": 12, "addr": 315 }, { "b": "zddc@Byw)3wPw[Rawuu+zEEM@zY?t^wO${0jAtsFy\u0026T5KvqG)%zE)S#zGQgRz/PFO", "ln": 13, "addr": 365 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 714.0, "entropy": 5.12, "size_bytes": 714.0 }, "binary": { "overall_entropy": 5.12, "peak_region_bytes": 714.0, "peak_region_entropy": 5.12 } } }, "id": 3, "path": "freeradius-perl-3.0.27-r3.apk!!.PKGINFO", "risk": 1, "sha": "59dcae839ddff5690b9677e891916219ba4a62b7acafd178c48b727fdbb09560", "size": 714, "traits": [ { "id": "metadata/package/files/system-package::alpine-pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package version field", "spans": [ [ 94, 18 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgver-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgver metadata field", "spans": [ [ 94, 18 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package info file" }, { "id": "metadata/package/files/system-package::alpine-pkginfo-package-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package name field", "spans": [ [ 68, 25 ] ] }, { "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Alpine/Wolfi package origin field", "spans": [ [ 295, 19 ] ] }, { "id": "metadata/package/files/system-package::arch-pkgname-field", "conf": 0.9399999976158142, "crit": 1, "desc": "Arch pkgname metadata field", "spans": [ [ 68, 25 ] ] }, { "id": "metadata/package/files/system-package::alpine-apk-pkginfo", "conf": 0.9700000286102295, "crit": 2, "desc": "Alpine/Wolfi package info metadata", "spans": [ [ 68, 25 ], [ 94, 18 ], [ 295, 19 ] ] } ], "type": "text" } ], "v": "8" } }