undo-ransomware / ransomware_detection

lib/FileSignatures.php

Spacing +1 added lines, -1 removed lines

@@ -45,7 +45,7 @@
         ['mimeType' => '', 'extensions' => ['xls'], 'signature' => ['starting' => ['offset' => 512, 'bytes' => ['/0908100000060500/']]]],
         ['mimeType' => '', 'extensions' => ['doc'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/0d444f43/']]]],
         ['mimeType' => '', 'extensions' => ['webm'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/1a45dfa3/']]]],
-        ['mimeType' => '', 'extensions' => ['mkv','mka', 'mks', 'mk3d', 'webm'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/45dfa3934282886d6174726f736b61/', '/1a45dfa3/']]]],
+        ['mimeType' => '', 'extensions' => ['mkv', 'mka', 'mks', 'mk3d', 'webm'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/45dfa3934282886d6174726f736b61/', '/1a45dfa3/']]]],
         ['mimeType' => '', 'extensions' => ['gz', 'tgz', 'vlt'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/1f8b08/']]]],
         ['mimeType' => '', 'extensions' => ['tar'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/1f9d/', '/1fA0/']]]],
         ['mimeType' => '', 'extensions' => ['eps'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/252150532d41646f62652d332e3020455053462d332030/']]]],

lib/Analyzer/FileCorruptionAnalyzer.php

Indentation +12 added lines, -12 removed lines

@@ -94,22 +94,22 @@
                     }
                     // starting byte sequence
                     if (array_key_exists('starting', $signature['signature'])) {
-						foreach ($signature['signature']['starting']['bytes'] as $bytes) {
-							if (preg_match($bytes, strtolower(bin2hex(substr($data, $signature['signature']['starting']['offset'], strlen($bytes) / 2))))) {
-									$isFileCorrupted = false;
-							}
-						}
+                        foreach ($signature['signature']['starting']['bytes'] as $bytes) {
+                            if (preg_match($bytes, strtolower(bin2hex(substr($data, $signature['signature']['starting']['offset'], strlen($bytes) / 2))))) {
+                                    $isFileCorrupted = false;
+                            }
+                        }
                     }
                     // trailing byte sequence
                     if (array_key_exists('trailing', $signature['signature'])) {
                         $trailingIsNotMatching = true;
-						foreach ($signature['signature']['trailing']['bytes'] as $bytes) {
-							$trailingOffset = strlen($data) - $signature['signature']['trailing']['offset'] - strlen($bytes) / 2;
-							if (preg_match($bytes, strtolower(bin2hex(substr($data, $trailingOffset, strlen($bytes) / 2))))) {
-									$trailingIsNotMatching = false;
-							}
-						}
-						$isFileCorrupted = $isFileCorrupted || $trailingIsNotMatching;
+                        foreach ($signature['signature']['trailing']['bytes'] as $bytes) {
+                            $trailingOffset = strlen($data) - $signature['signature']['trailing']['offset'] - strlen($bytes) / 2;
+                            if (preg_match($bytes, strtolower(bin2hex(substr($data, $trailingOffset, strlen($bytes) / 2))))) {
+                                    $trailingIsNotMatching = false;
+                            }
+                        }
+                        $isFileCorrupted = $isFileCorrupted || $trailingIsNotMatching;
                         return new FileCorruptionResult($isFileCorrupted);
                     }
                     return new FileCorruptionResult($isFileCorrupted);

lib/Analyzer/EntropyFunnellingAnalyzer.php

Indentation +19 added lines, -19 removed lines

@@ -144,23 +144,23 @@
         return 0.0;
     }
 
-     /**
-      * Calculates the median of an array.
-      *
-      * @param  array $array
-      *
-      * @return float
-      */
-     public function median($array)
-     {
-         if (is_array($array) && count($array) > 0) {
-             $count = count($array);
-             sort($array);
-             $mid = floor(($count - 1) / 2);
-
-             return ($array[$mid] + $array[$mid + 1 - $count % 2]) / 2;
-         }
-
-         return 0.0;
-     }
+        /**
+         * Calculates the median of an array.
+         *
+         * @param  array $array
+         *
+         * @return float
+         */
+        public function median($array)
+        {
+            if (is_array($array) && count($array) > 0) {
+                $count = count($array);
+                sort($array);
+                $mid = floor(($count - 1) / 2);
+
+                return ($array[$mid] + $array[$mid + 1 - $count % 2]) / 2;
+            }
+
+            return 0.0;
+        }
 }

templates/personal.php

Spacing +1 added lines, -1 removed lines

@@ -28,7 +28,7 @@
         <h3>
             <?php p($l->t('Current color mode')); ?>
         </h3>
-        <select id="color-scheme" name="color-scheme" data-placeholder="<?php p($l->t('Color mode'));?>">
+        <select id="color-scheme" name="color-scheme" data-placeholder="<?php p($l->t('Color mode')); ?>">
             <option value="<?php p($_['color_active']['code']); ?>">
 				<?php p($_['color_active']['name']); ?>
 			</option>

lib/Events/FilesEvents.php

Indentation +27 added lines, -27 removed lines

@@ -27,7 +27,7 @@ 
 
 class FilesEvents {
 
-	/** @var string */
+    /** @var string */
     private $userId;
     
     /** @var ILogger */
@@ -37,74 +37,74 @@ 
     private $monitor;
 
 
-	/**
+    /**
      * @param ILogger   $logger
      * @param Monitor   $monitor
-	 * @param string    $userId
-	 */
-	public function __construct(
+     * @param string    $userId
+     */
+    public function __construct(
         ILogger $logger,
         Monitor $monitor,
         $userId
 
-	) {
+    ) {
         $this->logger = $logger;
         $this->monitor = $monitor;
-		$this->userId = $userId;
-	}
+        $this->userId = $userId;
+    }
 
-	/**
-	 * @param array $params
-	 */
-	public function onFileUpdate(array $params) {
+    /**
+     * @param array $params
+     */
+    public function onFileUpdate(array $params) {
         $this->logger->debug("Updating ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);
-	}
+    }
 
 
-	/**
-	 * @param array $params
-	 */
-	public function onFileRename(array $params) {
+    /**
+     * @param array $params
+     */
+    public function onFileRename(array $params) {
         $this->logger->debug("Renaming ".$params['oldpath']." to ".$params['newpath'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['oldpath'], $params['newpath']], Monitor::RENAME);
     }
 
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileCreate(array $params) {
         $this->logger->debug("Creating ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::CREATE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileWrite(array $params) {
         $this->logger->debug("Writing ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileDelete(array $params) {
         $this->logger->debug("Deleting ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::DELETE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileCopy(array $params) {
         $this->logger->debug("Copying ".$params['oldpath']." to ".$params['newpath'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['oldpath'], $params['newpath']], Monitor::RENAME);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileTouch(array $params) {
         $this->logger->debug("Touching ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);

lib/FilesHooks.php

Indentation +63 added lines, -63 removed lines

@@ -26,86 +26,86 @@
 
 class FilesHooks {
 
-	/**
-	 * Retrieve the FilesEvents' Controller.
-	 *
-	 * @return FilesEvents
-	 */
-	protected static function getController(): FilesEvents {
-		$app = new Application();
+    /**
+     * Retrieve the FilesEvents' Controller.
+     *
+     * @return FilesEvents
+     */
+    protected static function getController(): FilesEvents {
+        $app = new Application();
 
-		return $app->getContainer()
-				   ->query(FilesEvents::class);
-	}
+        return $app->getContainer()
+                    ->query(FilesEvents::class);
+    }
 
-	/**
-	 * Hook events: file is updated.
-	 *
-	 * @param array $params
-	 */
-	public static function onFileUpdate(array $params) {
-		self::getController()
-			->onFileUpdate($params);
-	}
+    /**
+     * Hook events: file is updated.
+     *
+     * @param array $params
+     */
+    public static function onFileUpdate(array $params) {
+        self::getController()
+            ->onFileUpdate($params);
+    }
 
 
-	/**
-	 * Hook events: file is renamed.
-	 *
-	 * @param array $params
-	 */
-	public static function onFileRename(array $params) {
-		self::getController()
-			->onFileRename($params);
+    /**
+     * Hook events: file is renamed.
+     *
+     * @param array $params
+     */
+    public static function onFileRename(array $params) {
+        self::getController()
+            ->onFileRename($params);
     }
 	
-	/**
-	 * Hook events: file is created.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is created.
+     *
+     * @param array $params
+     */
     public static function onFileCreate(array $params) {
-		self::getController()
-			->onFileCreate($params);
+        self::getController()
+            ->onFileCreate($params);
     }
 	
-	/**
-	 * Hook events: file is written.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is written.
+     *
+     * @param array $params
+     */
     public static function onFileWrite(array $params) {
-		self::getController()
-			->onFileWrite($params);
+        self::getController()
+            ->onFileWrite($params);
     }
 	
-	/**
-	 * Hook events: file is deleted.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is deleted.
+     *
+     * @param array $params
+     */
     public static function onFileDelete(array $params) {
-		self::getController()
-			->onFileDelete($params);
+        self::getController()
+            ->onFileDelete($params);
     }
 	
-	/**
-	 * Hook events: file is touched.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is touched.
+     *
+     * @param array $params
+     */
     public static function onFileTouch(array $params) {
-		self::getController()
-			->onFileTouch($params);
+        self::getController()
+            ->onFileTouch($params);
     }
 	
-	/**
-	 * Hook events: file is copied.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is copied.
+     *
+     * @param array $params
+     */
     public static function onFileCopy(array $params) {
-		self::getController()
-			->onFileCopy($params);
-	}
+        self::getController()
+            ->onFileCopy($params);
+    }
 }
\ No newline at end of file

lib/Service/DetectionService.php

Spacing +3 added lines, -3 removed lines

@@ -89,18 +89,18 @@
 
         foreach ($sequences as $id => $sequence) {
             if (sizeof($sequence) >= $this->config->getAppValue(Application::APP_ID, 'minimum_sequence_length', 0)) {
-                usort($sequence, function ($a, $b) {
+                usort($sequence, function($a, $b) {
                     return $b->getId() - $a->getId();
                 });
                 $result = $this->sequenceAnalyzer->analyze($id, $sequence);
-                $this->logger->debug('detection: suspicion score of sequence ' . $id . ' is ' . $result->getSuspicionScore() . '.', array('app' => Application::APP_ID));
+                $this->logger->debug('detection: suspicion score of sequence '.$id.' is '.$result->getSuspicionScore().'.', array('app' => Application::APP_ID));
                 if ($result->getSuspicionScore() >= 0.5) {
                     $detection = new Detection($id, $sequence);
                     array_push($detectionObjects, $detection);
                 }
             }
         }
-        usort($detectionObjects, function ($a, $b) {
+        usort($detectionObjects, function($a, $b) {
             return $b->getId() - $a->getId();
         });
         return $detectionObjects;

lib/AppInfo/Application.php

Spacing +19 added lines, -19 removed lines

@@ -68,33 +68,33 @@ 
         $container = $this->getContainer();
 
         // mapper
-        $container->registerService('FileOperationMapper', function ($c) {
+        $container->registerService('FileOperationMapper', function($c) {
             return new FileOperationMapper(
                 $c->query('ServerContainer')->getDb()
             );
         });
 
-        $container->registerService('RecoveredFileOperationMapper', function ($c) {
+        $container->registerService('RecoveredFileOperationMapper', function($c) {
             return new RecoveredFileOperationMapper(
                 $c->query('ServerContainer')->getDb()
             );
         });
 
-        $container->registerService('DetectionDeserializer', function ($c) {
+        $container->registerService('DetectionDeserializer', function($c) {
             return new DetectionDeserializer(
                 $c->query('FileOperationMapper')
             );
         });
 
         // services
-        $container->registerService('FileOperationService', function ($c) {
+        $container->registerService('FileOperationService', function($c) {
             return new FileOperationService(
                 $c->query(FileOperationMapper::class),
                 $c->query('ServerContainer')->getUserSession()->getUser()->getUID()
             );
         });
 
-        $container->registerService('RecoveredFileOperationService', function ($c) {
+        $container->registerService('RecoveredFileOperationService', function($c) {
             return new RecoveredFileOperationService(
                 $c->query(FileOperationMapper::class),
                 $c->query(RecoveredFileOperationMapper::class),
@@ -102,7 +102,7 @@ 
             );
         });
 
-        $container->registerService('DetectionService', function ($c) {
+        $container->registerService('DetectionService', function($c) {
             return new DetectionService(
                 $c->query(ILogger::class),
                 $c->query('FileOperationService'),
@@ -114,7 +114,7 @@ 
         });
 
         // classifier
-        $container->registerService('Classifier', function ($c) {
+        $container->registerService('Classifier', function($c) {
             return new Classifier(
                 $c->query(ILogger::class),
                 $c->query(FileOperationMapper::class),
@@ -123,7 +123,7 @@ 
         });
 
         // controller
-        $container->registerService('DetectionController', function ($c) {
+        $container->registerService('DetectionController', function($c) {
             return new DetectionController(
                 $c->query('AppName'),
                 $c->query('Request'),
@@ -132,28 +132,28 @@ 
         });
 
         // entropy
-        $container->registerService('Entropy', function ($c) {
+        $container->registerService('Entropy', function($c) {
             return new Entropy(
                 $c->query(ILogger::class)
             );
         });
 
         // analyzer
-        $container->registerService('SequenceSizeAnalyzer', function ($c) {
+        $container->registerService('SequenceSizeAnalyzer', function($c) {
             return new SequenceSizeAnalyzer();
         });
 
-        $container->registerService('FileTypeFunnellingAnalyzer', function ($c) {
+        $container->registerService('FileTypeFunnellingAnalyzer', function($c) {
             return new FileTypeFunnellingAnalyzer();
         });
 
-        $container->registerService('EntropyFunnellingAnalyzer', function ($c) {
+        $container->registerService('EntropyFunnellingAnalyzer', function($c) {
             return new EntropyFunnellingAnalyzer(
                 $c->query(ILogger::class)
             );
         });
 
-        $container->registerService('FileExtensionAnalyzer', function ($c) {
+        $container->registerService('FileExtensionAnalyzer', function($c) {
             return new FileExtensionAnalyzer(
                 $c->query(ILogger::class),
                 $c->query(Entropy::class)
@@ -161,7 +161,7 @@ 
             );
         });
 
-        $container->registerService('SequenceAnalyzer', function ($c) {
+        $container->registerService('SequenceAnalyzer', function($c) {
             return new SequenceAnalyzer(
                 $c->query(SequenceSizeAnalyzer::class),
                 $c->query(FileTypeFunnellingAnalyzer::class),
@@ -169,7 +169,7 @@ 
             );
         });
 
-        $container->registerService('EntropyAnalyzer', function ($c) {
+        $container->registerService('EntropyAnalyzer', function($c) {
             return new EntropyAnalyzer(
                 $c->query(ILogger::class),
                 $c->query(IRootFolder::class),
@@ -178,7 +178,7 @@ 
             );
         });
 
-        $container->registerService('FileCorruptionAnalyzer', function ($c) {
+        $container->registerService('FileCorruptionAnalyzer', function($c) {
             return new FileCorruptionAnalyzer(
                 $c->query(ILogger::class),
                 $c->query(IRootFolder::class),
@@ -186,7 +186,7 @@ 
             );
         });
 
-        $container->registerService('Monitor', function ($c) {
+        $container->registerService('Monitor', function($c) {
             return new Monitor(
                 $c->query(IRequest::class),
                 $c->query(IConfig::class),
@@ -202,7 +202,7 @@ 
             );
         });
 
-        $container->registerService('FilesEvents', function ($c) {
+        $container->registerService('FilesEvents', function($c) {
             return new FilesEvents(
                 $c->query(ILogger::class),
                 $c->query(Monitor::class),
@@ -218,7 +218,7 @@ 
     {
         // register sabre plugin to catch the profind requests
         $eventDispatcher = $this->getContainer()->getServer()->getEventDispatcher();
-        $eventDispatcher->addListener('OCA\DAV\Connector\Sabre::addPlugin', function (SabrePluginEvent $event) {
+        $eventDispatcher->addListener('OCA\DAV\Connector\Sabre::addPlugin', function(SabrePluginEvent $event) {
             $logger = $this->getContainer()->query(ILogger::class);
             $config = $this->getContainer()->query(IConfig::class);
             $userSession = $this->getContainer()->query(IUserSession::class);

lib/Monitor.php

Indentation +4 added lines, -4 removed lines

@@ -137,10 +137,10 @@
     {
         $path = $paths[0];
 		
-		if ($path === '') {
-			$this->logger->debug("Path is empty.");
-			return;
-		}
+        if ($path === '') {
+            $this->logger->debug("Path is empty.");
+            return;
+        }
 
         $storage = $this->rootFolder->getUserFolder($this->userId)->get(dirname($path))->getStorage();
         if ($this->userId === null || $this->nestingLevel !== 0 || /*!$this->isUploadedFile($storage, $path) ||*/ $this->isCreatingSkeletonFiles()) {