{ "ml": { "v": "7", "eng": "2.2.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00001640121, "rte": "az", "prob": 0.00001640121 }, { "cls": 0, "raw": 0.00049996376, "rte": "az/zip", "prob": 0.00049996376 } ], "prob": 0.000017672777, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "xml" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "markdown" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "text" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "markdown" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.000014146168723527808, "type": "clojure" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "java" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "java" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.000012199084267194849, "type": "java" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.00001580516436661128, "type": "java" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000012139479622419458, "type": "java" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.000012159347534179688, "type": "java" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.00001615285873413086, "type": "java" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "java" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.000012536843314592261, "type": "java" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.000012209017768327612, "type": "java" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "java" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "clojure" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.00001767277717590332, "type": "clojure" }, { "id": 30, "lvl": -1, "conf": 0, "prob": 0.000014603137969970703, "type": "clojure" } ], "version": "v18.18", "analyzed_at": "2026-06-28T10:48:07Z" }, "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awys2MK\u002680000000000000000024W003UCBzb/ae[n*pfkUAkxKLE*yIWZaxLzuqADLYgBB2JQz/fiawmv/Ef!LgkfFt4\u003ex([4", "n": [ { "c": 2, "d": "Zip archive path", "i": "metadata/package/files/included::zip-archive-path", "o": 0, "z": 51, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "O₂(AsC)", "sha": "c87808ac873cfc8ffa62dc442b3cd7167eccd1fb7c3ed96ac488147a374f0de2", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip", "risk": 2, "size": 33522, "type": "zip", "facts": { "metrics": { "file": { "size": 33522.0, "entropy": 7.64, "size_bytes": 33522.0 }, "binary": { "overall_entropy": 7.64, "peak_region_bytes": 23552.0, "peak_region_entropy": 7.81 }, "archive": { "file_count": 35.0, "member_count": 35.0, "script_count": 0.0, "zip_bomb_ratio": 8.13, "directory_count": 0.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 23954.0, "compression.ratio": 0.24, "hidden_file_count": 15.0, "total_uncompressed": 101006.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 139.0, "rtlo_filename_count": 0.0, "format.regular_count": 35.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 35.0, "timing.sentinel_mtime_count": 35.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.deflate": 35.0 } } }, "traits": [ { "id": "objectives/impact/destroy/keywords::cleanup-verb--purge", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup/action word: purge", "from": [ { "file": 28 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-loadclass", "conf": 1.0, "crit": 1, "desc": "Java loadClass", "from": [ { "file": 23 } ] }, { "id": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "atk": "T1105", "mbc": "B0042", "conf": 0.8799999952316284, "crit": 3, "desc": "Java Base64 StringBuilder append source", "from": [ { "file": 20 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-newinstance", "conf": 1.0, "crit": 1, "desc": "Java newInstance", "from": [ { "file": 23 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-classloader", "conf": 1.0, "crit": 1, "desc": "Java ClassLoader", "from": [ { "file": 23 } ] }, { "id": "objectives/impact/destroy/keywords::delete-verb--delete", "conf": 0.8999999761581421, "crit": 1, "desc": "Destructive-action word: delete", "from": [ { "file": 23 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-reflection", "conf": 0.8500000238418579, "crit": 3, "desc": "Java reflection class loading", "from": [ { "off": 4821, "file": 23, "line": 159 } ] }, { "id": "metadata/package/files/included::github-module-zip-basename", "conf": 0.8600000143051147, "crit": 1, "desc": "GitHub versioned zip filename", "spans": [ [ 0, 51 ] ] } ] }, { "id": 1, "sha": "46d8c6229e13c21cb1c17b3f2553b7f0b34944fe43d1e84b47b188f68ecd272e", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/ant.xml", "size": 163, "type": "xml", "depth": 1 }, { "id": 2, "sha": "e38371f9b79608032e3b3a5ed4f7774f1ba0f8a090355abec446297d7bfbb36c", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/compiler.xml", "size": 648, "type": "xml", "depth": 1 }, { "id": 3, "sha": "6e7da18859caee16cf1ccb764b593eaed927089286881462466f55eee89709b6", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/copyright/profiles_settings.xml", "size": 111, "type": "xml", "depth": 1 }, { "id": 4, "sha": "ab712c9484733103b5e5aaacb517598f1efa11e26f5fe285ba87d4e3cf2a0009", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/dictionaries/antares.xml", "size": 144, "type": "xml", "depth": 1 }, { "id": 5, "sha": "0234e0fa9139efc865c3e6b2099a91944493dd7867b5e883ae5e10511cc239e9", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/encodings.xml", "size": 166, "type": "xml", "depth": 1 }, { "id": 6, "sha": "744b7488fa7292d134891f0ceaebe98f715ba9feafccd20cfed6d43bd2e5f7cc", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/libraries/joda_time_joda_time_2_0.xml", "size": 384, "type": "xml", "depth": 1 }, { "id": 7, "sha": "df6024615433aec0d9ae9e54c37bfef52a068ca22a3696002a1e62c4e67309b7", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/libraries/org_mongodb_mongo_java_driver_2_7_3.xml", "size": 332, "type": "xml", "depth": 1 }, { "id": 8, "sha": "3561012ef0118b111c830652fe4bc0b667906d6b158b246de467e97e3eddf8cb", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/libraries/org_quartz_scheduler_quartz_2_1_5.xml", "size": 516, "type": "xml", "depth": 1 }, { "id": 9, "sha": "3ad2c1766b1c7cd5b87b1fcb118560083b9cc5d5f12f592a6a5462a88078edba", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/misc.xml", "size": 8280, "type": "xml", "depth": 1 }, { "id": 10, "sha": "7416ae8eedd657db8abf43e700c354937bcf9a776b1e0413d4a18cdfe8c6471a", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/modules.xml", "size": 268, "type": "xml", "depth": 1 }, { "id": 11, "sha": "c1818c37eb63a10bcd7c575502aff53cdbff43df30419ccd9c4f6bf7792af4d0", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/scopes/scope_settings.xml", "size": 139, "type": "xml", "depth": 1 }, { "id": 12, "sha": "dcc3db1a3d33d4bb15c58e03ce582efd5343b39c04c0f6652e9a62bf6a799527", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/.idea/vcs.xml", "size": 169, "type": "xml", "depth": 1 }, { "id": 13, "sha": "bb674b3d17b8889ffb40c088186d4f008ce40633767e50490d64049f4a509f43", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/ChangeLog.md", "size": 801, "type": "markdown", "depth": 1 }, { "id": 14, "sha": "26d378b1af36133e5ff7ea20969a788691699917e765c5309bfbb34ccc60cb5a", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/LICENSE.txt", "size": 617, "type": "text", "depth": 1 }, { "id": 15, "sha": "b22363fb596f9412b31fd8426cf09a3cec9ecc6a1d6ee7459362220b5085929e", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/README.md", "size": 1825, "type": "markdown", "depth": 1 }, { "id": 16, "sha": "8347fa4c264b0b926ffed10bab4e449fa8173606ef78e687eb8a67a4ace77ff2", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/project.clj", "size": 1602, "type": "clojure", "depth": 1 }, { "id": 17, "sha": "0f10e3e23476c4dfae2b75a19fad3067f36d24b6fe1fd9665458e1c7fd967c78", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/CalendarIntervalTriggerPersistenceHelper.java", "size": 1994, "type": "java", "depth": 1 }, { "id": 18, "sha": "fec5ab994f0348bde68f74e0e8d55490e2e6afab4ce945a1b2e5d7626baad70b", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/Constants.java", "size": 1750, "type": "java", "depth": 1 }, { "id": 19, "sha": "792412576ec73b9167136d8ac374583787c32defd7413b15625249c04638f0da", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/CronTriggerPersistenceHelper.java", "size": 1724, "type": "java", "depth": 1 }, { "ctx": [ { "b": "arR^Hl$6!CC#OG{wL3=YwPz%5y/CB?xj\u003e^@nO@A.aAO.?asGS^x(55]x(dAMzGGDgC42h^A+Pf0wPyvVAbl%CBAh8dxjV9B", "ln": 24, "addr": 1079 }, { "b": "", "ln": 25, "addr": 1156 }, { "b": "arR^HA+funA=90^vrlc)l{:WUygQ)%luN0UwmY^lB97\u0026hBsq6Fx\u003eIc$vqEMrz+TUVc[cO$", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 1168, "z": 6, "cf": 0.8799999952316284 } ], "ln": 26, "addr": 1157 }, { "b": "arR^HarR^Hvq{f%zE+d{qB%wGmn^F\u003cmnMAsr9@i(r7fX=k$\u003eS=pdXzoaAPkGwPQ*YAaJE1nP5SYA=$(crC(I)c[c=^vqPN7djD\u003e", "ln": 27, "addr": 1214 }, { "b": "arR^HarR^Hvq{f%zE+d{qB%wGmn^F\u003cmnMAsr9@i(r7fX=k$\u0026*LBs}iqBw=W?wNPWLzGGDgC42hndjD\u003e", "ln": 28, "addr": 1294 }, { "b": "arUSzx)9{bwGTxcpHX6Iv@@\u0026nz:V]/vRPE:Bspa5zdMHPl$7u-Bz\u003eXsaBs", "ln": 35, "addr": 1594 }, { "b": "arR^HA+funA=90^vrlc)l{:WUygQ)%luN0UwmY^lB97\u0026hBsnN\u003c", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 1652, "z": 6, "cf": 0.8799999952316284 } ], "ln": 36, "addr": 1641 }, { "b": "arR^HarR^Hvq{f%zE+dtxM53la$K\u003cUz!7FkwPQEYB-F(Vdj$", "ln": 37, "addr": 1682 } ], "depth": 1, "facts": { "imp": [ [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "original" ], [ "", "toDBObject" ], [ "", "toDBObject" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "tod" ], [ "", "tod" ], [ "", "tod" ], [ "", "stored" ], [ "", "stored" ], [ "", "stored" ], [ "", "stored" ], [ "", "fromDBObject" ], [ "", "stored" ], [ "", "fromDBObject" ], [ "", "endTOD" ], [ "", "endTOD" ], [ "", "endTOD" ], [ "", "com.mongodb.BasicDBObjectBuilder" ], [ "", "com.mongodb.DBObject" ], [ "", "org.quartz.DailyTimeIntervalTrigger" ], [ "", "org.quartz.TimeOfDay" ], [ "", "org.quartz.impl.triggers.DailyTimeIntervalTriggerImpl" ], [ "", "org.quartz.spi.OperableTrigger" ] ], "tgt": [ "TimeOfDay", "append", "fromDBObject", "get", "getEndTimeOfDay", "getHour", "getMinute", "getRepeatInterval", "getRepeatIntervalUnit", "getSecond", "getStartTimeOfDay", "getTimesTriggered", "hasAdditionalProperties", "name", "setEndTimeOfDay", "setRepeatCount", "setRepeatInterval", "setStartTimeOfDay", "setTimesTriggered", "start", "toDBObject", "toMap" ], "metrics": { "ast": { "op.ne": 5.0, "op.land": 1.0, "op.lnot": 1.0, "max_depth": 16.0, "bind_count": 12.0, "call_count": 41.0, "node_count": 759.0, "op_density.ne": 0.01, "op_density.land": 0.0, "op_density.lnot": 0.0, "identifier_count": 55.0, "string_literal_count": 11.0 }, "file": { "size": 3003.0, "entropy": 5.05, "size_bytes": 3003.0 }, "text": { "space_count": 372.0, "total_lines": 75.0, "char_entropy": 5.05, "unique_chars": 61.0, "string_density": 0.15, "avg_line_length": 39.04, "max_line_length": 130.0, "empty_line_ratio": 0.15, "last_line_length": 1.0, "whitespace_ratio": 0.15, "most_common_ratio": 0.08, "identifier_density": 1.89, "line_length_stddev": 32.91, "normalized_string_count": 1.27, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 8.83 }, "binds": { "count": 12.0 }, "calls": { "count": 41.0 }, "binary": { "overall_entropy": 5.05, "peak_region_bytes": 3003.0, "peak_region_entropy": 5.06 }, "source": { "class_count": 1.0, "function_count": 5.0 }, "imports": { "count": 6.0, "unique_modules": 6.0, "third_party_count": 6.0, "third_party_ratio": 1.0 }, "strings": { "total": 11.0, "avg_length": 9.45, "max_length": 18.0, "avg_entropy": 2.79, "total_bytes": 104.0, "entropy_stddev": 0.5 }, "functions": { "count": 6.0, "avg_params": 1.4, "max_params": 2.0, "length_stddev": 9.15, "avg_name_length": 21.6, "avg_length_lines": 10.8, "max_length_lines": 28.0, "min_length_lines": 3.0, "high_entropy_names": 4.0, "avg_param_name_length": 6.29, "density_per_100_lines": 6.67, "code_in_functions_ratio": 0.72 }, "identifiers": { "count": 55.0, "total": 142.0, "avg_length": 13.56, "max_length": 41.0, "min_length": 1.0, "avg_entropy": 2.88, "reuse_ratio": 0.39, "unique_count": 55.0, "length_stddev": 8.94, "sequential_names": 1.0, "single_char_count": 1.0, "single_char_ratio": 0.02, "high_entropy_count": 14.0, "high_entropy_ratio": 0.25, "all_lowercase_ratio": 0.33, "all_uppercase_ratio": 0.09 } } }, "id": 20, "mol": "O(C)", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/DailyTimeIntervalTriggerPersistenceHelper.java", "risk": 1, "sha": "9fbf2601daf7cb2b15881b74d4a6bb5822a4e77ef02ed2f0c814a3acacc1e53f", "size": 3003, "traits": [ { "id": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "atk": "T1105", "mbc": "B0042", "conf": 0.8799999952316284, "crit": 3, "desc": "Java Base64 StringBuilder append source", "spans": [ [ 1168, 6 ], [ 1652, 6 ] ] } ], "type": "java" }, { "id": 21, "sha": "70ace549f5b85349c76425708d21e33267a607abfe1d6e64d62d0d7ea79c270d", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/GroupHelper.java", "size": 1194, "type": "java", "depth": 1 }, { "id": 22, "sha": "00c0912d483d5d77fc79bc62f06526d2a1d345420fd90e0f37f8c0c3567a979b", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/Keys.java", "size": 1217, "type": "java", "depth": 1 }, { "ctx": [ { "b": "asXH3z/x#xx\u003eIa3asH.GawD#{wM9IVBsXLazEUpwavf*WaAzgexMOqrA+fr6A=#28e*8oIBAzE.fe4J[Cp)-Py?mWaw]]Unz/2", "ln": 4, "addr": 101 }, { "b": "asW", "ln": 5, "addr": 180 }, { "b": "asXHkxK@rcz!s9nvrb{4x(k5nxLzJgAa9l(vp%c]x(+zoBZ/f3B7/b}aA.NjwPw]nxK@rdwPzTeaA7\u003cmBzbkdlR{6xaA/E(fA", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 186, "z": 3, "cf": 0.800000011920929 } ], "ln": 6, "addr": 183 }, { "b": "asXHIx\u003e7Z(B7D)Bvix5#AcSNAw/#qhx\u003e7*0xKL%8vR6a*azC.6y\u0026%o1wfu8gBz8!sxLzJgwncabA+P09BzkVhazCZoBzbj", "ln": 7, "addr": 261 }, { "b": "asXHcnKC{wq:\u0026rXCYU6ux(4uk", "ln": 8, "addr": 337 }, { "b": "arUSzx)9{bwGT][A+PA7tu@vWwmPZ(B8$]li@", "ln": 52, "addr": 1774 }, { "b": "arUSzx)9{bwGT][A+PA7aA.:pA=br5wJG", "ln": 53, "addr": 1804 }, { "b": "arUSzx)9{bwGT][A+PA7aAg+gB9zLywif", "n": [ { "c": 1, "d": "password/token/api_key field keyword (password)", "i": "objectives/credential-access/theft/keywords::credential-field--password", "o": 1848, "z": 8, "cf": 0.8399999737739563 } ], "ln": 54, "addr": 1831 }, { "b": "arUSzx)9{bwGT]YxK$Z%y?mS=x\u003eIr(y?mSfB7]o8vqGH}i@", "ln": 55, "addr": 1858 }, { "b": "arUSzz//M2By!#9y\u0026si7az\u003e?lw[=o%ra{q-B7/Gdwfs2Th83Zry=.", "ln": 56, "addr": 1896 }, { "b": "", "ln": 157, "addr": 4749 }, { "b": "arR^HBAhTHDJ", "ln": 158, "addr": 4750 }, { "b": "arR^HarT3/vrlGLn]Ff5azL?7lU{gLB09Q*c{}/VB8%Doz^\u003e)Vazkncn]Ffay*?yaoMauIwPxgFe]kDmwj7fwB8@-Tq/)4]zF7yvwmwtzygQ)%e[X:qc}Wo4uQEHMq=ta]i@", "n": [ { "c": 3, "d": "Java reflection class loading", "i": "objectives/anti-static/obfuscation/reflection/class::java-reflection", "o": 4807, "z": 11, "cf": 0.8500000238418579 }, { "c": 1, "d": "Java loadClass", "i": "objectives/anti-static/obfuscation/reflection/class::java-loadclass", "o": 4821, "z": 9, "cf": 1.0 } ], "ln": 159, "addr": 4760 }, { "b": "", "ln": 160, "addr": 4866 }, { "b": "arR^HarTo{vNtiKy?d9$ayYFcy?d9$auZ\u0026tz^(4Qx(4r\u003eAXqlvCs(^.c#9WflU{gLB14", "ln": 161, "addr": 4867 }, { "b": "arR^HarR^Hx\u003ewFoBAh8dxjV9oxjVfWwQ5q^x(W=:x(dAfdiH=paz#sry:*GN", "ln": 586, "addr": 21661 }, { "b": "arR^HarR^HarSr\u003cay]zkvR/P#v}YB-yANkcAV/stB8#58y?j-fwPIu{wN]}1wGVhhBzbxaazL?7", "ln": 587, "addr": 21710 }, { "b": "arR^HarR^HarSr\u003caz2!ev%8)cz/d9GCw7Y2xDRIqB.\u003eOhv{%m+wO-GhxK@r7wO2x{Bz\u0026pjwO+}1wIbO/", "n": [ { "c": 1, "d": "Destructive-action word: delete", "i": "objectives/impact/destroy/keywords::delete-verb--delete", "o": 21826, "z": 6, "cf": 0.8999999761581421 } ], "ln": 588, "addr": 21771 }, { "b": "arR^HarR^HarUxgasItLx\u003eI6\u0026AXYmWwPQWUCYVz?A+ei:zdLaAau.\u003egzGP=idiJ%", "ln": 589, "addr": 21836 }, { "b": "arR^HarR^HarR^HA+f9aC4BS[x\u003eI6\u0026AWV3Ix\u003eI6\u0026AXq0oBw3g\u003cc[cPb", "ln": 590, "addr": 21888 }, { "b": "arR^HBAhTHDJ", "ln": 728, "addr": 25998 }, { "b": "arR^HarT3/vrlGLpJf(=vpB4:rb#X=xjV9EaARTrxj\u003e^@lU{gLB09Q*c{}/VB8%DtAaK5#vR/QPA+Pf0wPx%-azkncrb#X=xjV9Jy*?yaoMauIwPxgFe]kDmwj7fwB8@-Tq/)4]zF7yvwmwtzygQ)%e[X:qc@:8om[l0CuQEHMq=ta]i@", "ln": 729, "addr": 26008 }, { "b": "arR^HarU=Dx\u003eI6\u0026AV^H/BAh8dxjV9Jy*?yae]ClAnP5P\u003evqYN^c[dj", "n": [ { "c": 1, "d": "Java newInstance", "i": "objectives/anti-static/obfuscation/reflection/class::java-newinstance", "o": 26179, "z": 11, "cf": 1.0 } ], "ln": 730, "addr": 26150 }, { "b": "arR^HEir3dByO#bc{}/VB8$8{BvHg\u003ezE=gXv}xR3x(v(iwHO:G", "ln": 731, "addr": 26194 }, { "b": "arR^HarU=tA=ldAzE[2mn]FfnwPz\u003caB97#hv}w8Nv}xR3x(v(qb13o\u003ey?aVaz/^alx(mD7BAh8dxjV9av@bN{B08UHd\u003cclsBAh8kxdj%lvOZDFwN/*mxjVfkr8MpTm[3r.lRG^AqZ\u003cdS", "ln": 732, "addr": 26235 }, { "b": "arR^HarUYoBAIRwasH2{ygQ)%nN%m)yhWMlxjVfkb424{a$kO", "ln": 908, "addr": 32760 }, { "b": "arR^HEir3dByO#bc}5h%y?Wx/By!9RC{3VEaBs", "ln": 909, "addr": 32800 }, { "b": "arR^HarU=tA=ldAzE[2mpHX6Iv@$1MA+eV\u0026C%#%(B98E(CW\u003er7BzkVhc$L2zwPQTTB8$=5wHF#Ri@", "n": [ { "c": 1, "d": "Zod getMessage call", "i": "metadata/file/format::zod-get-message-call", "o": 32878, "z": 11, "cf": 0.9700000286102295 } ], "ln": 910, "addr": 32831 }, { "b": "arR^HEe", "ln": 911, "addr": 32893 }, { "b": "arV7", "ln": 912, "addr": 32899 } ], "depth": 1, "facts": { "imp": [ [ "", "LoggerFactory" ], [ "", "getClass" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "connectToMongoDB" ], [ "", "selectDatabase" ], [ "", "initializeCollections" ], [ "", "ensureIndexes" ], [ "", "initializeHelpers" ], [ "", "mongo" ], [ "", "storeJobInMongo" ], [ "", "log" ], [ "", "newJob" ], [ "", "newTrigger" ], [ "", "storeTrigger" ], [ "", "storeJobInMongo" ], [ "", "Keys" ], [ "", "jobCollection" ], [ "", "find" ], [ "", "find" ], [ "", "jobCollection" ], [ "", "triggerCollection" ], [ "", "jobObj" ], [ "", "removeJob" ], [ "", "findJobDocumentByKey" ], [ "", "getJobClassLoader" ], [ "", "getJobClassLoader" ], [ "", "dbObject" ], [ "", "JobBuilder" ], [ "", "JobBuilder" ], [ "", "JobBuilder" ], [ "", "dbObject" ], [ "", "dbObject" ], [ "", "dbObject" ], [ "", "dbObject" ], [ "", "key" ], [ "", "key" ], [ "", "key" ], [ "", "key" ], [ "", "key" ], [ "", "jobData" ], [ "", "dbObject" ], [ "", "builder" ], [ "", "builder" ], [ "", "dbObject" ], [ "", "newTrigger" ], [ "", "jobCollection" ], [ "", "Keys" ], [ "", "newTrigger" ], [ "", "storeTrigger" ], [ "", "dbObject" ], [ "", "newTrigger" ], [ "", "Keys" ], [ "", "triggerCollection" ], [ "", "triggers" ], [ "", "triggers" ], [ "", "trigger" ], [ "", "jobCollection" ], [ "", "trigger" ], [ "", "job" ], [ "", "job" ], [ "", "job" ], [ "", "query" ], [ "", "job" ], [ "", "triggerCollection" ], [ "", "referencedTriggers" ], [ "", "jobCollection" ], [ "", "log" ], [ "", "triggerCollection" ], [ "", "removeTrigger" ], [ "", "removeTrigger" ], [ "", "storeTrigger" ], [ "", "triggerCollection" ], [ "", "Keys" ], [ "", "toTrigger" ], [ "", "jobCollection" ], [ "", "Keys" ], [ "", "triggerCollection" ], [ "", "Keys" ], [ "", "jobCollection" ], [ "", "triggerCollection" ], [ "", "calendarCollection" ], [ "", "pausedJobGroupsCollection" ], [ "", "pausedTriggerGroupsCollection" ], [ "", "dbObject" ], [ "", "dbObject" ], [ "", "serialize" ], [ "", "calendarCollection" ], [ "", "calendarCollection" ], [ "", "calendarCollection" ], [ "", "jobCollection" ], [ "", "triggerCollection" ], [ "", "calendarCollection" ], [ "", "locksCollection" ], [ "", "jobCollection" ], [ "", "queryHelper" ], [ "", "cursor" ], [ "", "cursor" ], [ "", "Keys" ], [ "", "result" ], [ "", "triggerCollection" ], [ "", "queryHelper" ], [ "", "cursor" ], [ "", "cursor" ], [ "", "Keys" ], [ "", "result" ], [ "", "jobCollection" ], [ "", "triggerCollection" ], [ "", "findJobDocumentByKey" ], [ "", "triggerCollection" ], [ "", "dbObject" ], [ "", "cursor" ], [ "", "triggers" ], [ "", "toTrigger" ], [ "", "cursor" ], [ "", "findTriggerDocumentByKey" ], [ "", "triggerStateForValue" ], [ "", "doc" ], [ "", "triggerCollection" ], [ "", "Keys" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "triggerCollection" ], [ "", "queryHelper" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "groupHelper" ], [ "", "markTriggerGroupsAsPaused" ], [ "", "triggerCollection" ], [ "", "Keys" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "triggerCollection" ], [ "", "queryHelper" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "groupHelper" ], [ "", "pausedTriggerGroupsCollection" ], [ "", "pausedJobGroupsCollection" ], [ "", "triggerCollection" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "groupHelper" ], [ "", "triggerCollection" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "groupHelper" ], [ "", "findJobDocumentByKey" ], [ "", "findJobDocumentByKey" ], [ "", "groupHelper" ], [ "", "triggerCollection" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "groupHelper" ], [ "", "idsFrom" ], [ "", "findJobDocumentsThatMatch" ], [ "", "triggerCollection" ], [ "", "queryHelper" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "findJobDocumentByKey" ], [ "", "findJobDocumentByKey" ], [ "", "triggerCollection" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "groupHelper" ], [ "", "idsFrom" ], [ "", "findJobDocumentsThatMatch" ], [ "", "triggerCollection" ], [ "", "queryHelper" ], [ "", "updateThatSetsTriggerStateTo" ], [ "", "query" ], [ "", "log" ], [ "", "log" ], [ "", "triggerCollection" ], [ "", "sort" ], [ "", "Integer" ], [ "", "cursor" ], [ "", "log" ], [ "", "log" ], [ "", "cursor" ], [ "", "cursor" ], [ "", "triggers" ], [ "", "cursor" ], [ "", "lock" ], [ "", "dbObj" ], [ "", "lock" ], [ "", "dbObj" ], [ "", "lock" ], [ "", "lock" ], [ "", "toTrigger" ], [ "", "trigger" ], [ "", "log" ], [ "", "log" ], [ "", "trigger" ], [ "", "applyMisfire" ], [ "", "trigger" ], [ "", "log" ], [ "", "log" ], [ "", "trigger" ], [ "", "log" ], [ "", "trigger" ], [ "", "locksCollection" ], [ "", "log" ], [ "", "trigger" ], [ "", "triggers" ], [ "", "toTrigger" ], [ "", "log" ], [ "", "trigger" ], [ "", "lock" ], [ "", "dbObj" ], [ "", "lock" ], [ "", "dbObj" ], [ "", "locksCollection" ], [ "", "lockCursor" ], [ "", "lockCursor" ], [ "", "log" ], [ "", "acquireNextTriggers" ], [ "", "isTriggerLockExpired" ], [ "", "log" ], [ "", "trigger" ], [ "", "removeTriggerLock" ], [ "", "acquireNextTriggers" ], [ "", "removeTriggerLock" ], [ "", "log" ], [ "", "trigger" ], [ "", "trigger" ], [ "", "retrieveCalendar" ], [ "", "trigger" ], [ "", "trigger" ], [ "", "retrieveJob" ], [ "", "trigger" ], [ "", "trigger" ], [ "", "bndle" ], [ "", "job" ], [ "", "results" ], [ "", "trigger" ], [ "", "storeTrigger" ], [ "", "log" ], [ "", "trigger" ], [ "", "retrieveTrigger" ], [ "", "trigger" ], [ "", "trigger" ], [ "", "trigger2" ], [ "", "removeTrigger" ], [ "", "trigger" ], [ "", "removeTrigger" ], [ "", "trigger" ], [ "", "signaler" ], [ "", "signaler" ], [ "", "signaler" ], [ "", "signaler" ], [ "", "signaler" ], [ "", "removeTriggerLock" ], [ "", "addresses" ], [ "", "db" ], [ "", "db" ], [ "", "db" ], [ "", "db" ], [ "", "db" ], [ "", "db" ], [ "", "db" ], [ "", "db" ], [ "", "password" ], [ "", "serverAddresses" ], [ "", "dbObj" ], [ "", "dbObj" ], [ "", "toTrigger" ], [ "", "getTriggerClassLoader" ], [ "", "getTriggerClassLoader" ], [ "", "dbObject" ], [ "", "triggerClass" ], [ "", "dbObject" ], [ "", "dbObject" ], [ "", "triggerPersistenceDelegateFor" ], [ "", "trigger" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "trigger" ], [ "", "dbObject" ], [ "", "tpd" ], [ "", "jobCollection" ], [ "", "dbObject" ], [ "", "job" ], [ "", "job" ], [ "", "lock" ], [ "", "System" ], [ "", "lockTime" ], [ "", "System" ], [ "", "getMisfireThreshold" ], [ "", "getMisfireThreshold" ], [ "", "tnft" ], [ "", "retrieveCalendar" ], [ "", "signaler" ], [ "", "signaler" ], [ "", "tnft" ], [ "", "storeTrigger" ], [ "", "objectStream" ], [ "", "objectStream" ], [ "", "byteStream" ], [ "", "keys" ], [ "", "keys" ], [ "", "jobCollection" ], [ "", "keys" ], [ "", "keys" ], [ "", "triggerCollection" ], [ "", "keys" ], [ "", "keys" ], [ "", "locksCollection" ], [ "", "locksCollection" ], [ "", "keys" ], [ "", "calendarCollection" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "newTrigger" ], [ "", "triggerPersistenceDelegateFor" ], [ "", "tpd" ], [ "", "triggerCollection" ], [ "", "triggerCollection" ], [ "", "keyToDBObject" ], [ "", "newTrigger" ], [ "", "newJob" ], [ "", "keyToDBObject" ], [ "", "jobCollection" ], [ "", "job" ], [ "", "key" ], [ "", "job" ], [ "", "key" ], [ "", "job" ], [ "", "newJob" ], [ "", "job" ], [ "", "newJob" ], [ "", "newJob" ], [ "", "job" ], [ "", "newJob" ], [ "", "jobCollection" ], [ "", "job" ], [ "", "log" ], [ "", "lock" ], [ "", "lock" ], [ "", "locksCollection" ], [ "", "log" ], [ "", "loadHelper" ], [ "", "retrieveJob" ], [ "", "removeTriggerLock" ], [ "", "jobCollection" ], [ "", "keyToDBObject" ], [ "", "triggerCollection" ], [ "", "keyToDBObject" ], [ "", "persistenceHelpers" ], [ "", "persistenceHelpers" ], [ "", "persistenceHelpers" ], [ "", "persistenceHelpers" ], [ "", "ts" ], [ "", "ts" ], [ "", "ts" ], [ "", "ts" ], [ "", "ts" ], [ "", "ts" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "list" ], [ "", "pausedTriggerGroupsCollection" ], [ "", "pausedTriggerGroupsCollection" ], [ "", "QueryBuilder" ], [ "", "QueryBuilder" ], [ "", "QueryBuilder" ], [ "", "list" ], [ "", "pausedJobGroupsCollection" ], [ "", "pausedJobGroupsCollection" ], [ "", "QueryBuilder" ], [ "", "QueryBuilder" ], [ "", "QueryBuilder" ], [ "", "list" ], [ "", "doc" ], [ "", "groupHelper" ], [ "", "com.mongodb" ], [ "", "com.mongodb.MongoException.DuplicateKey" ], [ "", "com.novemberain.quartz.mongodb.Constants" ], [ "", "com.novemberain.quartz.mongodb.Keys" ], [ "", "java.io.ByteArrayOutputStream" ], [ "", "java.io.IOException" ], [ "", "java.io.ObjectOutputStream" ], [ "", "java.net.UnknownHostException" ], [ "", "java.util" ], [ "", "org.bson.types.ObjectId" ], [ "", "org.quartz" ], [ "", "org.quartz.Calendar" ], [ "", "org.quartz.Trigger.CompletedExecutionInstruction" ], [ "", "org.quartz.Trigger.TriggerState" ], [ "", "org.quartz.impl.matchers.GroupMatcher" ], [ "", "org.quartz.spi" ], [ "", "org.slf4j.Logger" ], [ "", "org.slf4j.LoggerFactory" ] ], "mbr": [ "CompletedExecutionInstruction.DELETE_TRIGGER", "CompletedExecutionInstruction.SET_ALL_JOB_TRIGGERS_COMPLETE", "CompletedExecutionInstruction.SET_ALL_JOB_TRIGGERS_ERROR", "CompletedExecutionInstruction.SET_TRIGGER_COMPLETE", "CompletedExecutionInstruction.SET_TRIGGER_ERROR", "Trigger.MISFIRE_INSTRUCTION_IGNORE_MISFIRE_POLICY", "TriggerState.BLOCKED", "TriggerState.COMPLETE", "TriggerState.ERROR", "TriggerState.NONE", "TriggerState.NORMAL", "TriggerState.PAUSED", "WriteConcern.JOURNAL_SAFE", "addresses.length", "options.safe" ], "tgt": [ "BasicDBObject", "ByteArrayOutputStream", "CalendarIntervalTriggerPersistenceHelper", "CronTriggerPersistenceHelper", "DailyTimeIntervalTriggerPersistenceHelper", "Date", "GroupHelper", "IllegalArgumentException", "JobDataMap", "JobKey", "JobPersistenceException", "Mongo", "MongoOptions", "ObjectAlreadyExistsException", "ObjectOutputStream", "QueryHelper", "SchedulerConfigException", "ServerAddress", "SimpleTriggerPersistenceHelper", "TriggerFiredBundle", "TriggerFiredResult", "TriggerGroupHelper", "TriggerKey", "UnsupportedOperationException", "acquireNextTriggers", "add", "allGroups", "append", "applyMisfire", "authenticate", "build", "canHandleTriggerType", "clone", "close", "connectToMongoDB", "containsField", "count", "currentTimeMillis", "dbObjectToJobKey", "dbObjectToTriggerKey", "debug", "distinct", "ensureIndex", "ensureIndexes", "equals", "find", "findJobDocumentByKey", "findJobDocumentsThatMatch", "findOne", "findTriggerDocumentByKey", "get", "getCalendarName", "getClass", "getClassLoader", "getCollection", "getDB", "getDescription", "getEndTime", "getFinalFireTime", "getFireInstanceId", "getGroup", "getJobClass", "getJobClassLoader", "getJobDataMap", "getJobDetail", "getJobKey", "getKey", "getLocalizedMessage", "getLogger", "getMessage", "getMisfireInstruction", "getMisfireThreshold", "getName", "getNextFireTime", "getPreviousFireTime", "getPriority", "getStartTime", "getTime", "getTriggerClassLoader", "groupsForJobId", "groupsForJobIds", "groupsThatMatch", "hasNext", "idsFrom", "in", "inGroups", "inGroupsThatMatch", "initializeCollections", "initializeHelpers", "injectExtraPropertiesForInsert", "insert", "isConcurrentExectionDisallowed", "isDebugEnabled", "isTriggerLockExpired", "keySet", "keyToDBObject", "loadClass", "markJobGroupsAsPaused", "markTriggerGroupsAsPaused", "matchingKeysConditionFor", "newInstance", "newJob", "next", "notifySchedulerListenersFinalized", "notifyTriggerListenersMisfired", "put", "putAll", "remove", "removeJob", "removeTrigger", "removeTriggerLock", "retrieveCalendar", "retrieveJob", "retrieveTrigger", "selectDatabase", "serialize", "setCalendarName", "setDescription", "setEndTime", "setExtraPropertiesAfterInstantiation", "setFireInstanceId", "setJobKey", "setKey", "setMisfireInstruction", "setNextFireTime", "setPreviousFireTime", "setPriority", "setStartTime", "setWriteConcern", "signalSchedulingChange", "size", "sort", "split", "start", "storeJobInMongo", "storeTrigger", "toByteArray", "toCharArray", "toString", "toTrigger", "triggerPersistenceDelegateFor", "triggerStateForValue", "triggered", "unmarkJobGroupsAsPaused", "unmarkTriggerGroupsAsPaused", "update", "updateAfterMisfire", "updateThatSetsTriggerStateTo", "usingJobData", "valueOf", "warn", "withDescription", "withIdentity", "writeObject" ], "metrics": { "ast": { "op.eq": 21.0, "op.gt": 8.0, "op.le": 1.0, "op.ne": 9.0, "op.add": 38.0, "op.lor": 4.0, "op.mul": 2.0, "op.sub": 2.0, "op.land": 7.0, "op.lnot": 6.0, "max_depth": 20.0, "bind_count": 112.0, "call_count": 529.0, "node_count": 9054.0, "member_count": 15.0, "op_density.eq": 0.0, "op_density.gt": 0.0, "op_density.le": 0.0, "op_density.ne": 0.0, "op_density.add": 0.0, "op_density.lor": 0.0, "op_density.mul": 0.0, "op_density.sub": 0.0, "op_density.land": 0.0, "op_density.lnot": 0.0, "identifier_count": 369.0, "member_depth_max": 2.0, "string_literal_count": 65.0, "string_concat_chain_max_length": 5.0 }, "file": { "size": 36804.0, "entropy": 5.04, "size_bytes": 36804.0 }, "text": { "digit_ratio": 0.0, "space_count": 5814.0, "total_lines": 1039.0, "char_entropy": 5.04, "unique_chars": 88.0, "string_density": 0.06, "ascii_art_lines": 1.0, "avg_line_length": 34.42, "high_byte_ratio": 0.0, "max_line_length": 141.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.19, "last_line_length": 1.0, "whitespace_ratio": 0.19, "most_common_ratio": 0.09, "identifier_density": 1.51, "line_length_stddev": 32.16, "normalized_string_count": 2.02, "repeated_char_sequences": 54.0, "suspicious_string_ratio": 0.05, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.08, "max_inline_whitespace_run": 2.0, "trailing_whitespace_lines": 2.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 36.82 }, "binds": { "count": 112.0 }, "calls": { "count": 529.0 }, "binary": { "overall_entropy": 5.04, "peak_region_bytes": 33732.0, "peak_region_entropy": 5.12 }, "source": { "class_count": 1.0, "function_count": 91.0 }, "imports": { "count": 18.0, "unique_modules": 18.0, "third_party_count": 18.0, "third_party_ratio": 1.0 }, "members": { "count": 15.0 }, "strings": { "total": 65.0, "avg_length": 18.29, "max_length": 69.0, "avg_entropy": 2.77, "total_bytes": 1189.0, "entropy_stddev": 1.09, "embedded_code_candidates": 3.0 }, "comments": { "chars": 1736.0, "lines": 45.0, "total": 37.0, "todo_count": 8.0, "to_code_ratio": 0.05, "empty_comments": 2.0, "url_in_comments": 1.0, "high_entropy_comments": 3.0 }, "functions": { "count": 92.0, "avg_params": 0.86, "max_params": 4.0, "length_stddev": 11.39, "avg_name_length": 15.78, "no_params_count": 30.0, "avg_length_lines": 9.15, "max_length_lines": 83.0, "min_length_lines": 2.0, "high_entropy_names": 27.0, "avg_param_name_length": 8.38, "density_per_100_lines": 9.14, "code_in_functions_ratio": 0.84 }, "identifiers": { "count": 369.0, "total": 1566.0, "avg_length": 12.27, "max_length": 42.0, "min_length": 1.0, "avg_entropy": 2.89, "reuse_ratio": 0.24, "unique_count": 369.0, "length_stddev": 6.85, "has_digit_ratio": 0.01, "sequential_names": 4.0, "single_char_count": 4.0, "single_char_ratio": 0.01, "high_entropy_count": 56.0, "high_entropy_ratio": 0.15, "all_lowercase_ratio": 0.22, "all_uppercase_ratio": 0.13, "numeric_suffix_count": 1.0 } } }, "id": 23, "mol": "O(As)", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/MongoDBJobStore.java", "risk": 1, "sha": "3693589bd0b6d92d45bd087ed7197c7584e1d9a13fcd4b18e995b5a791b01764", "size": 36804, "traits": [ { "id": "objectives/anti-static/obfuscation/reflection/class::java-newinstance", "conf": 1.0, "crit": 1, "desc": "Java newInstance", "spans": [ [ 26179, 11 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-loadclass", "conf": 1.0, "crit": 1, "desc": "Java loadClass", "spans": [ [ 4821, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-classloader", "conf": 1.0, "crit": 1, "desc": "Java ClassLoader", "spans": [ [ 4807, 11 ] ] }, { "id": "objectives/impact/destroy/keywords::delete-verb--delete", "conf": 0.8999999761581421, "crit": 1, "desc": "Destructive-action word: delete", "spans": [ [ 21826, 6 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-reflection", "conf": 0.8500000238418579, "crit": 3, "desc": "Java reflection class loading", "spans": [ [ 4807, 11 ], [ 4821, 9 ], [ 26179, 11 ] ] } ], "type": "java" }, { "ctx": [ { "b": "arR^HB9ztuv}V#kzddJ@xK#ipxjVfLz/6D4A+er^BzaD?wPzj3z/NlPdiJ%", "ln": 17, "addr": 506 }, { "b": "arR^HarUf5B7DE.qb][Qq-T", "ln": 18, "addr": 554 }, { "b": "arR^HarR^HvS=y3wmY^lvq{f%zE+dtyH}=YA=l8ta$K\u003cDz/6D4A+ei*r://!wHPX", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 581, "z": 6, "cf": 0.8799999952316284 } ], "ln": 19, "addr": 573 }, { "b": "arR^HarR^HvSD3*yDz", "ln": 20, "addr": 625 }, { "b": "arR^HarUf5B7DE)r6:zYq^SP$r7G4", "ln": 21, "addr": 640 }, { "b": "arR^HarR^HvS=y3wmY^lvq{f%zE+dtyH}=YA=l8ta$K\u003cTByxiiB606$xI@zOwQ3QfpHX6Iv@%bez/6D4A+ei*r://!wHP5\u0026", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 672, "z": 6, "cf": 0.8799999952316284 } ], "ln": 22, "addr": 664 }, { "b": "arR^HarR^HvSD3*yDz", "ln": 23, "addr": 741 }, { "b": "arR^HarR^HvS=y3wmY^lvq{f%zE+dtyH}=YA=l8ta$K\u003cFzE^/\u0026x([2^wOkO0l{:WUygQ)%c$vgjAa9=#rbU/Cy\u0026%qrdlv", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 786, "z": 6, "cf": 0.8799999952316284 } ], "ln": 25, "addr": 778 }, { "b": "arR^HarUf5B7DEYpFK\u003ePnLShB", "ln": 26, "addr": 853 }, { "b": "arR^HarR^HvS=y3wmY^lvq{f%zE+dtyH}=YA=l8ta$K\u003cDz/fV9x(m#[x([2^wOkO0l{:WUygQ)%c$vgjAa9=#rbU/Cy\u0026%qrdlv", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 882, "z": 6, "cf": 0.8799999952316284 } ], "ln": 27, "addr": 874 }, { "b": "arR^HA+funA=90^vrlc)l{:WUygQ)%luN0UwmY^lB97\u0026hBsnN\u003cvq{f%zE+dtbYWEewQ2yIar\u003eboas!NAz/6D4A+ei*r://!wGSGCa$+t?dk2mABsnO1", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 1084, "z": 6, "cf": 0.8799999952316284 } ], "ln": 35, "addr": 1073 }, { "b": "arR^HA+funA=90^vrlc)l{:WUygQ)%luN0UwmY^lB97\u0026hBsnN\u003cvq{f%zE+dtbYWEewQ2yIar\u0026A/a%nxUv@Dj6vrb{Uz=Qp.B.8WCar\u00266Pdk2mABsnO1", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 1247, "z": 6, "cf": 0.8799999952316284 } ], "ln": 39, "addr": 1236 }, { "b": "arR^HA+funA=90^vrlc)l{:WUygQ)%luN0UwmY^lB97\u0026hBsnN\u003cvq{f%zE+dtbYWEewQ2yIay/tbAa9=#rbU/Cy\u0026%qre[X:qc[dj", "n": [ { "c": 3, "d": "Java Base64 StringBuilder append source", "i": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "o": 1414, "z": 6, "cf": 0.8799999952316284 } ], "ln": 43, "addr": 1403 } ], "depth": 1, "facts": { "imp": [ [ "", "BasicDBObjectBuilder" ], [ "", "matcher" ], [ "", "matcher" ], [ "", "builder" ], [ "", "builder" ], [ "", "startsWithRegexDBObject" ], [ "", "builder" ], [ "", "endsWithRegexDBObject" ], [ "", "builder" ], [ "", "containsWithRegexDBObject" ], [ "", "builder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "BasicDBObjectBuilder" ], [ "", "QueryBuilder" ], [ "", "QueryBuilder" ], [ "", "QueryBuilder" ], [ "", "com.mongodb.BasicDBObjectBuilder" ], [ "", "com.mongodb.DBObject" ], [ "", "com.mongodb.QueryBuilder" ], [ "", "com.novemberain.quartz.mongodb.Keys.KEY_GROUP" ], [ "", "java.util.Collection" ], [ "", "org.quartz.impl.matchers.GroupMatcher" ] ], "tgt": [ "append", "containsWithRegexDBObject", "endsWithRegexDBObject", "get", "getCompareToValue", "getCompareWithOperator", "in", "start", "startsWithRegexDBObject" ], "metrics": { "ast": { "op.add": 4.0, "max_depth": 13.0, "bind_count": 2.0, "call_count": 23.0, "node_count": 462.0, "op_density.add": 0.01, "identifier_count": 36.0, "string_literal_count": 11.0, "string_concat_chain_max_length": 3.0 }, "file": { "size": 1609.0, "entropy": 5.07, "size_bytes": 1609.0 }, "text": { "space_count": 200.0, "total_lines": 49.0, "char_entropy": 5.07, "unique_chars": 68.0, "string_density": 0.22, "avg_line_length": 31.84, "max_line_length": 92.0, "empty_line_ratio": 0.2, "last_line_length": 1.0, "whitespace_ratio": 0.15, "most_common_ratio": 0.08, "identifier_density": 1.8, "line_length_stddev": 29.42, "normalized_string_count": 1.57, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "normalized_unique_identifiers": 6.41 }, "binds": { "count": 2.0 }, "calls": { "count": 23.0 }, "binary": { "overall_entropy": 5.07, "peak_region_bytes": 1609.0, "peak_region_entropy": 5.01 }, "source": { "class_count": 1.0, "function_count": 5.0 }, "imports": { "count": 6.0, "unique_modules": 6.0, "third_party_count": 6.0, "third_party_ratio": 1.0 }, "strings": { "total": 11.0, "avg_length": 5.09, "max_length": 8.0, "avg_entropy": 1.89, "total_bytes": 56.0, "entropy_stddev": 1.13 }, "functions": { "count": 6.0, "avg_params": 1.0, "max_params": 1.0, "length_stddev": 6.8, "avg_name_length": 20.2, "avg_length_lines": 6.4, "max_length_lines": 20.0, "min_length_lines": 3.0, "high_entropy_names": 4.0, "avg_param_name_length": 11.0, "density_per_100_lines": 10.2, "code_in_functions_ratio": 0.65 }, "identifiers": { "count": 36.0, "total": 88.0, "avg_length": 10.0, "max_length": 25.0, "min_length": 2.0, "avg_entropy": 2.77, "reuse_ratio": 0.41, "unique_count": 36.0, "length_stddev": 6.5, "high_entropy_count": 7.0, "high_entropy_ratio": 0.19, "all_lowercase_ratio": 0.44, "all_uppercase_ratio": 0.14 } } }, "id": 24, "mol": "O(C)", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/QueryHelper.java", "risk": 1, "sha": "443f06e4cb42e1e48838a5cd7de7efe595a527fb662dca0cdc8452d67e87706b", "size": 1609, "traits": [ { "id": "objectives/command-and-control/dropper/staged-loader::java-base64-stringbuilder-append-source", "atk": "T1105", "mbc": "B0042", "conf": 0.8799999952316284, "crit": 3, "desc": "Java Base64 StringBuilder append source", "spans": [ [ 581, 6 ], [ 672, 6 ], [ 786, 6 ], [ 882, 6 ], [ 1084, 6 ], [ 1247, 6 ], [ 1414, 6 ] ] } ], "type": "java" }, { "id": 25, "sha": "9b92a78fbf1584f195a55ad9cae156f6e346a00aca0f5fb931c56db80092c3df", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/SimpleTriggerPersistenceHelper.java", "size": 1798, "type": "java", "depth": 1 }, { "id": 26, "sha": "c5882f2862eeb4912ca4b36722c65b36fc4ff4f5168275ca9c00a5f59fed0d08", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/TriggerGroupHelper.java", "size": 875, "type": "java", "depth": 1 }, { "id": 27, "sha": "70b7626461621897570ad100892f786fd6560feff2afe738584d47ab49d8fc15", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/main/java/com/novemberain/quartz/mongodb/TriggerPersistenceHelper.java", "size": 421, "type": "java", "depth": 1 }, { "ctx": [ { "b": "c#\u003cxrA==QXB97\u0026hBsv", "ln": 12, "addr": 357 }, { "b": "", "ln": 13, "addr": 372 }, { "b": "c$D[3zxJ[vA+w@nADLYgBB2JWBz(hh", "n": [ { "c": 1, "d": "Cleanup/action word: purge", "i": "objectives/impact/destroy/keywords::cleanup-verb--purge", "o": 379, "z": 5, "cf": 0.8799999952316284 } ], "ln": 14, "addr": 373 }, { "b": "arT)2t(", "ln": 15, "addr": 398 }, { "b": "arS7GwPP50A+ohic$Wuttu}", "ln": 16, "addr": 404 } ], "depth": 1, "facts": { "tgt": [ "defn", "f", "fn", "let", "mgc/connect!", "mgc/get-db", "mgc/set-db!", "mgc/set-default-write-concern!", "mgcol/remove", "ns", "quartz/clear!", "quartz/initialize", "quartz/start", "rfn" ], "metrics": { "ast": { "max_depth": 7.0, "call_count": 22.0, "node_count": 199.0, "string_literal_count": 7.0, "array_literal_max_length": 3.0 }, "file": { "size": 783.0, "entropy": 4.58, "size_bytes": 783.0 }, "text": { "space_count": 164.0, "total_lines": 26.0, "char_entropy": 4.58, "unique_chars": 43.0, "string_density": 0.27, "avg_line_length": 29.12, "max_line_length": 59.0, "empty_line_ratio": 0.12, "last_line_length": 11.0, "whitespace_ratio": 0.24, "most_common_ratio": 0.07, "identifier_density": 1.23, "line_length_stddev": 19.33, "normalized_string_count": 1.37, "repeated_char_sequences": 9.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 114.0, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 5.11 }, "calls": { "count": 22.0 }, "binary": { "overall_entropy": 4.58, "peak_region_bytes": 783.0, "peak_region_entropy": 4.58 }, "strings": { "total": 7.0, "avg_length": 17.86, "max_length": 28.0, "avg_entropy": 3.59, "total_bytes": 125.0, "entropy_stddev": 0.15 }, "identifiers": { "total": 32.0, "avg_length": 12.79, "max_length": 42.0, "min_length": 1.0, "avg_entropy": 2.71, "reuse_ratio": 0.75, "unique_count": 24.0, "length_stddev": 10.38, "sequential_names": 1.0, "single_char_count": 1.0, "single_char_ratio": 0.04, "high_entropy_count": 5.0, "high_entropy_ratio": 0.21, "all_lowercase_ratio": 0.38 } } }, "id": 28, "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/test/clojure/com/novemberain/quartz_mongodb/test/helper.clj", "risk": 1, "sha": "50281254ed94d281270a41ed821c575cd3972acd4a3af3e9325fe2c716d909c9", "size": 783, "traits": [ { "id": "objectives/impact/destroy/keywords::cleanup-verb--purge", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup/action word: purge", "spans": [ [ 379, 5 ] ] }, { "id": "objectives/impact/destroy/keywords::cleanup-verb", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup-word component", "spans": [ [ 379, 5 ] ] } ], "type": "clojure" }, { "ctx": [ { "b": "", "ln": 13, "addr": 629 }, { "b": "j3aM:xK#l@ayPq4azC.nwOl3(BzkVhaARgoBAnNpA=k!qqfuq/BB4UywI9", "ln": 14, "addr": 630 }, { "b": "j3aM:xK#Diwn-P0ay]4[wO#PjyhWM7z!pb6CX7]9x(!0axcq5fB95Kyw/#hewGVbkwmY^$D1?eeaAITyA+cwiAaK5#BzkVhA@", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 723, "z": 3, "cf": 0.800000011920929 } ], "ln": 15, "addr": 677 }, { "b": "j3aNazY\u003cmnazM4uBrCQnB-Rapx(\u003eFhwPzum", "ln": 16, "addr": 755 }, { "b": "", "ln": 17, "addr": 784 }, { "b": "arR^Hc@:(2wNPa5B8kA0A3c}\u003cfEV", "ln": 208, "addr": 7246 }, { "b": "arR^Hd05)iwN)DpzGxr3wN]}1wI4UnvSJU@BzCeh", "ln": 209, "addr": 7269 }, { "b": "arR^Hd05)iwN)D8wO+}1wI4UnvJYA3df", "n": [ { "c": 1, "d": "Destructive-action word: delete", "i": "objectives/impact/destroy/keywords::delete-verb--delete", "o": 7313, "z": 6, "cf": 0.8999999761581421 } ], "ln": 210, "addr": 7302 }, { "b": "arR^Hd05)iwN)D8wO+}1wI4UnvSJU@yhm97", "ln": 211, "addr": 7328 }, { "b": "arR^Hc@:(2wNPa5B8kA0A3c}\u003cfFB{", "ln": 212, "addr": 7357 } ], "depth": 1, "facts": { "tgt": [ "-\u003e", ".await", ".countDown", ".getMergedJobDataMap", "\u003c", "=", "CountDownLatch.", "GroupMatcher/groupEquals", "Thread/sleep", "atom", "calin/schedule", "calin/with-interval-in-seconds", "def", "defrecord", "deftest", "empty?", "execute", "fn", "from-job-data", "from-job-detail", "from-trigger", "get", "is", "j/build", "j/defjob", "j/key", "j/of-type", "j/using-job-data", "j/with-identity", "let", "m/group-equals", "nil?", "not", "ns", "s/schedule", "s/with-interval-in-milliseconds", "s/with-interval-in-seconds", "s/with-repeat-count", "sched/all-scheduled?", "sched/delete-job", "sched/delete-jobs", "sched/get-job", "sched/get-job-keys", "sched/get-jobs", "sched/get-matching-jobs", "sched/get-matching-triggers", "sched/get-trigger", "sched/get-trigger-keys", "sched/get-triggers", "sched/initialize", "sched/maybe-schedule", "sched/pause-all!", "sched/pause-job", "sched/pause-jobs", "sched/pause-trigger", "sched/pause-triggers", "sched/resume-all!", "sched/resume-job", "sched/resume-jobs", "sched/resume-trigger", "sched/resume-triggers", "sched/schedule", "sched/scheduled?", "sched/start", "sched/started?", "sched/trigger", "sched/unschedule-job", "sched/unschedule-jobs", "swap!", "t/build", "t/key", "t/start-at", "t/start-now", "t/with-description", "t/with-identity", "t/with-schedule", "thrown?" ], "metrics": { "ast": { "max_depth": 9.0, "call_count": 287.0, "node_count": 2357.0, "string_literal_count": 58.0, "array_literal_max_length": 8.0 }, "file": { "size": 9128.0, "entropy": 4.58, "size_bytes": 9128.0 }, "text": { "digit_ratio": 0.02, "space_count": 2214.0, "total_lines": 272.0, "char_entropy": 4.58, "unique_chars": 73.0, "string_density": 0.21, "avg_line_length": 32.56, "max_line_length": 114.0, "empty_line_ratio": 0.15, "last_line_length": 26.0, "whitespace_ratio": 0.27, "most_common_ratio": 0.07, "identifier_density": 1.65, "line_length_stddev": 26.78, "normalized_string_count": 3.52, "repeated_char_sequences": 56.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 6.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 16.57 }, "calls": { "count": 287.0 }, "binary": { "overall_entropy": 4.58, "peak_region_bytes": 8104.0, "peak_region_entropy": 4.78 }, "strings": { "total": 58.0, "avg_length": 21.74, "max_length": 46.0, "avg_entropy": 2.91, "total_bytes": 1261.0, "entropy_stddev": 1.08 }, "comments": { "chars": 447.0, "lines": 29.0, "total": 29.0, "to_code_ratio": 0.12 }, "identifiers": { "total": 449.0, "avg_length": 14.65, "max_length": 64.0, "min_length": 1.0, "avg_entropy": 2.78, "reuse_ratio": 0.3, "unique_count": 134.0, "length_stddev": 13.03, "has_digit_ratio": 0.07, "sequential_names": 5.0, "single_char_count": 9.0, "single_char_ratio": 0.07, "high_entropy_count": 47.0, "high_entropy_ratio": 0.35, "all_lowercase_ratio": 0.21, "all_uppercase_ratio": 0.01, "numeric_suffix_count": 9.0, "underscore_prefix_count": 1.0 } } }, "id": 29, "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/test/clojure/com/novemberain/quartz_mongodb/test/quartzite_integration_test.clj", "risk": 1, "sha": "c62ac5fd64d610795af18028f2feee24d5a16cc0373147261de01fb319cb6e85", "size": 9128, "traits": [ { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "English language detection", "spans": [ [ 723, 3 ] ] }, { "id": "objectives/impact/destroy/keywords::delete-verb--delete", "conf": 0.8999999761581421, "crit": 1, "desc": "Destructive-action word: delete", "spans": [ [ 7313, 6 ] ] }, { "id": "objectives/impact/destroy/keywords::delete-verb", "conf": 0.8999999761581421, "crit": 1, "desc": "Destructive removal-word component", "spans": [ [ 7313, 6 ] ] } ], "type": "clojure" }, { "id": 30, "sha": "4ac1630b40842d96162fa69e38f58c363c94b587c7167813a99d54b14bb23ec3", "path": "github.com-michaelklishin-quartz-mongodb-v1.1.0.zip!!github.com/michaelklishin/quartz-mongodb@v1.1.0/src/test/clojure/com/novemberain/quartz_mongodb/test/units_test.clj", "risk": 1, "size": 21674, "type": "clojure", "depth": 1 } ], "omitted_files": 25, "rev": "868bd", "v": "8" } }