undo-ransomware / ransomware_detection

lib/FileSignatures.php

Spacing +1 added lines, -1 removed lines

@@ -45,7 +45,7 @@
         ['mimeType' => '', 'extensions' => ['xls'], 'signature' => ['starting' => ['offset' => 512, 'bytes' => ['/0908100000060500/']]]],
         ['mimeType' => '', 'extensions' => ['doc'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/0d444f43/']]]],
         ['mimeType' => '', 'extensions' => ['webm'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/1a45dfa3/']]]],
-        ['mimeType' => '', 'extensions' => ['mkv','mka', 'mks', 'mk3d', 'webm'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/45dfa3934282886d6174726f736b61/', '/1a45dfa3/']]]],
+        ['mimeType' => '', 'extensions' => ['mkv', 'mka', 'mks', 'mk3d', 'webm'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/45dfa3934282886d6174726f736b61/', '/1a45dfa3/']]]],
         ['mimeType' => '', 'extensions' => ['gz', 'tgz', 'vlt'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/1f8b08/']]]],
         ['mimeType' => '', 'extensions' => ['tar'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/1f9d/', '/1fA0/']]]],
         ['mimeType' => '', 'extensions' => ['eps'], 'signature' => ['starting' => ['offset' => 0, 'bytes' => ['/252150532d41646f62652d332e3020455053462d332030/']]]],

lib/Controller/MonitoringController.php

Spacing +2 added lines, -2 removed lines

@@ -124,7 +124,7 @@ 
 
         foreach ($sequences as $sequenceId => $sequence) {
             if (sizeof($sequence) >= $this->config->getAppValue(Application::APP_ID, 'minimum_sequence_length', 0)) {
-                usort($sequence, function ($a, $b) {
+                usort($sequence, function($a, $b) {
                     return $b->getId() - $a->getId();
                 });
                 $sequenceResult = $this->sequenceAnalyzer->analyze($sequenceId, $sequence);
@@ -133,7 +133,7 @@ 
             }
         }
 
-        usort($result, function ($a, $b) {
+        usort($result, function($a, $b) {
             return $b['id'] - $a['id'];
         });
 

lib/Controller/ScanController.php

Indentation +2 added lines, -2 removed lines

@@ -80,7 +80,7 @@ 
     protected $fileExtensionAnalyzer;
 
     /** @var IDBConnection */
-	protected $connection;
+    protected $connection;
 
     /** @var string */
     protected $userId;
@@ -296,7 +296,7 @@ 
     protected function getLastActivity($objectId)
     {
         $query = $this->connection->getQueryBuilder();
-    	$query->select('*')->from('activity');
+        $query->select('*')->from('activity');
         $query->where($query->expr()->eq('affecteduser', $query->createNamedParameter($this->userId)))
             ->andWhere($query->expr()->eq('object_id', $query->createNamedParameter($objectId)));
         $result = $query->execute();

Spacing +4 added lines, -4 removed lines

@@ -151,14 +151,14 @@ 
     {
         if ($command === Monitor::WRITE) {
             // Delete file
-            if ($this->deleteFromStorage($path . '/' . $name)) {
+            if ($this->deleteFromStorage($path.'/'.$name)) {
                 return new JSONResponse(['status' => 'success', 'id' => $id, 'sequence' => $sequence], Http::STATUS_OK);
             } else {
                 return new JSONResponse(['status' => 'error', 'message' => 'File cannot be deleted.'], Http::STATUS_OK);
             }
         } else if ($command === Monitor::DELETE) {
             // Restore file
-            $trashPath = '/'.$name.'.d'.$timestamp;;
+            $trashPath = '/'.$name.'.d'.$timestamp; ;
             if ($this->restoreFromTrashbin($trashPath, $name, $timestamp) !== false) {
                 return new JSONResponse(['status' => 'success', 'id' => $id, 'sequence' => $sequence], Http::STATUS_OK);
             }
@@ -199,7 +199,7 @@ 
         }
 
         // sort ASC for timestamp
-        usort($allFiles, function ($a, $b) {
+        usort($allFiles, function($a, $b) {
             if ($a['timestamp'] === $b['timestamp']) {
                 return 0;
             }
@@ -323,7 +323,7 @@ 
         $fileOperation = new FileOperation();
         $fileOperation->setUserId($this->userId);
         if (strpos($file['path'], 'files_trashbin') !== false) {
-            $node = $this->userFolder->getParent()->get($file['path'] . '.d' . $file['timestamp']);
+            $node = $this->userFolder->getParent()->get($file['path'].'.d'.$file['timestamp']);
             $fileOperation->setCommand(Monitor::DELETE);
             $fileOperation->setTimestamp($file['timestamp']);
             $pathInfo = pathinfo($node->getInternalPath());

Braces +2 added lines, -4 removed lines

@@ -406,14 +406,12 @@
                 $storageStructure->setNumberOfFiles($storageStructure->getNumberOfFiles() + $tmpStorageStructure->getNumberOfFiles());
             }
             return $storageStructure;
-        }
-        else if ($node instanceof File) {
+        } else if ($node instanceof File) {
             // it's a file
             $storageStructure->addFile($node);
             $storageStructure->increaseNumberOfFiles();
             return $storageStructure;
-        }
-        else {
+        } else {
             // it's me Mario.
             // there is nothing else than file or folder
             $this->logger->error('getStorageStructure: Neither file nor folder.', array('app' => Application::APP_ID));

lib/Analyzer/FileCorruptionAnalyzer.php

Indentation +12 added lines, -12 removed lines

@@ -94,22 +94,22 @@
                     }
                     // starting byte sequence
                     if (array_key_exists('starting', $signature['signature'])) {
-						foreach ($signature['signature']['starting']['bytes'] as $bytes) {
-							if (preg_match($bytes, strtolower(bin2hex(substr($data, $signature['signature']['starting']['offset'], strlen($bytes) / 2))))) {
-									$isFileCorrupted = false;
-							}
-						}
+                        foreach ($signature['signature']['starting']['bytes'] as $bytes) {
+                            if (preg_match($bytes, strtolower(bin2hex(substr($data, $signature['signature']['starting']['offset'], strlen($bytes) / 2))))) {
+                                    $isFileCorrupted = false;
+                            }
+                        }
                     }
                     // trailing byte sequence
                     if (array_key_exists('trailing', $signature['signature'])) {
                         $trailingIsNotMatching = true;
-						foreach ($signature['signature']['trailing']['bytes'] as $bytes) {
-							$trailingOffset = strlen($data) - $signature['signature']['trailing']['offset'] - strlen($bytes) / 2;
-							if (preg_match($bytes, strtolower(bin2hex(substr($data, $trailingOffset, strlen($bytes) / 2))))) {
-									$trailingIsNotMatching = false;
-							}
-						}
-						$isFileCorrupted = $isFileCorrupted || $trailingIsNotMatching;
+                        foreach ($signature['signature']['trailing']['bytes'] as $bytes) {
+                            $trailingOffset = strlen($data) - $signature['signature']['trailing']['offset'] - strlen($bytes) / 2;
+                            if (preg_match($bytes, strtolower(bin2hex(substr($data, $trailingOffset, strlen($bytes) / 2))))) {
+                                    $trailingIsNotMatching = false;
+                            }
+                        }
+                        $isFileCorrupted = $isFileCorrupted || $trailingIsNotMatching;
                         return new FileCorruptionResult($isFileCorrupted);
                     }
                     return new FileCorruptionResult($isFileCorrupted);

lib/Analyzer/EntropyFunnellingAnalyzer.php

Indentation +19 added lines, -19 removed lines

@@ -144,23 +144,23 @@
         return 0.0;
     }
 
-     /**
-      * Calculates the median of an array.
-      *
-      * @param  array $array
-      *
-      * @return float
-      */
-     public function median($array)
-     {
-         if (is_array($array) && count($array) > 0) {
-             $count = count($array);
-             sort($array);
-             $mid = floor(($count - 1) / 2);
-
-             return ($array[$mid] + $array[$mid + 1 - $count % 2]) / 2;
-         }
-
-         return 0.0;
-     }
+        /**
+         * Calculates the median of an array.
+         *
+         * @param  array $array
+         *
+         * @return float
+         */
+        public function median($array)
+        {
+            if (is_array($array) && count($array) > 0) {
+                $count = count($array);
+                sort($array);
+                $mid = floor(($count - 1) / 2);
+
+                return ($array[$mid] + $array[$mid + 1 - $count % 2]) / 2;
+            }
+
+            return 0.0;
+        }
 }

templates/admin.php

Spacing +2 added lines, -2 removed lines

@@ -41,13 +41,13 @@
         <h3>
             <?php p($l->t('Suspicion threshold for notifications')); ?>
         </h3>
-        <select id="sequence-suspicion-level" name="sequence-suspicion-level" class="suspicion-level-<?php p($_['active_suspicion_level']['code']); ?>" data-placeholder="<?php p($l->t('Sequence suspicion level'));?>">
+        <select id="sequence-suspicion-level" name="sequence-suspicion-level" class="suspicion-level-<?php p($_['active_suspicion_level']['code']); ?>" data-placeholder="<?php p($l->t('Sequence suspicion level')); ?>">
             <option class="suspicion-level-<?php p($_['active_suspicion_level']['code']); ?>" value="<?php p($_['active_suspicion_level']['code']); ?>">
 				<?php p($_['active_suspicion_level']['name']); ?>
 			</option>
             <?php foreach ($_['suspicion_levels'] as $suspicionLevel): ?>
 				<option class="suspicion-level-<?php p($suspicionLevel['code']); ?>" value="<?php p($suspicionLevel['code']); ?>">
-					<?php p($suspicionLevel['name']);?>
+					<?php p($suspicionLevel['name']); ?>
 				</option>
 			<?php endforeach; ?>
         </select>

templates/personal.php

Spacing +1 added lines, -1 removed lines

@@ -28,7 +28,7 @@
         <h3>
             <?php p($l->t('Current color mode')); ?>
         </h3>
-        <select id="color-scheme" name="color-scheme" data-placeholder="<?php p($l->t('Color mode'));?>">
+        <select id="color-scheme" name="color-scheme" data-placeholder="<?php p($l->t('Color mode')); ?>">
             <option value="<?php p($_['color_active']['code']); ?>">
 				<?php p($_['color_active']['name']); ?>
 			</option>

lib/AppInfo/Application.php

Spacing +14 added lines, -14 removed lines

@@ -64,14 +64,14 @@ 
         $container = $this->getContainer();
 
         // mapper
-        $container->registerService('FileOperationMapper', function ($c) {
+        $container->registerService('FileOperationMapper', function($c) {
             return new FileOperationMapper(
                 $c->query('ServerContainer')->getDb()
             );
         });
 
         // services
-        $container->registerService('FileOperationService', function ($c) {
+        $container->registerService('FileOperationService', function($c) {
             return new FileOperationService(
                 $c->query(FileOperationMapper::class),
                 $c->query('ServerContainer')->getUserSession()->getUser()->getUID()
@@ -79,7 +79,7 @@ 
         });
 
         // classifier
-        $container->registerService('Classifier', function ($c) {
+        $container->registerService('Classifier', function($c) {
             return new Classifier(
                 $c->query(ILogger::class),
                 $c->query(FileOperationMapper::class),
@@ -88,28 +88,28 @@ 
         });
 
         // entropy
-        $container->registerService('Entropy', function ($c) {
+        $container->registerService('Entropy', function($c) {
             return new Entropy(
                 $c->query(ILogger::class)
             );
         });
 
         // analyzer
-        $container->registerService('SequenceSizeAnalyzer', function ($c) {
+        $container->registerService('SequenceSizeAnalyzer', function($c) {
             return new SequenceSizeAnalyzer();
         });
 
-        $container->registerService('FileTypeFunnellingAnalyzer', function ($c) {
+        $container->registerService('FileTypeFunnellingAnalyzer', function($c) {
             return new FileTypeFunnellingAnalyzer();
         });
 
-        $container->registerService('EntropyFunnellingAnalyzer', function ($c) {
+        $container->registerService('EntropyFunnellingAnalyzer', function($c) {
             return new EntropyFunnellingAnalyzer(
                 $c->query(ILogger::class)
             );
         });
 
-        $container->registerService('FileExtensionAnalyzer', function ($c) {
+        $container->registerService('FileExtensionAnalyzer', function($c) {
             return new FileExtensionAnalyzer(
                 $c->query(ILogger::class),
                 $c->query(Entropy::class)
@@ -117,7 +117,7 @@ 
             );
         });
 
-        $container->registerService('SequenceAnalyzer', function ($c) {
+        $container->registerService('SequenceAnalyzer', function($c) {
             return new SequenceAnalyzer(
                 $c->query(SequenceSizeAnalyzer::class),
                 $c->query(FileTypeFunnellingAnalyzer::class),
@@ -125,7 +125,7 @@ 
             );
         });
 
-        $container->registerService('EntropyAnalyzer', function ($c) {
+        $container->registerService('EntropyAnalyzer', function($c) {
             return new EntropyAnalyzer(
                 $c->query(ILogger::class),
                 $c->query(IRootFolder::class),
@@ -134,7 +134,7 @@ 
             );
         });
 
-        $container->registerService('FileCorruptionAnalyzer', function ($c) {
+        $container->registerService('FileCorruptionAnalyzer', function($c) {
             return new FileCorruptionAnalyzer(
                 $c->query(ILogger::class),
                 $c->query(IRootFolder::class),
@@ -142,7 +142,7 @@ 
             );
         });
 
-        $container->registerService('Monitor', function ($c) {
+        $container->registerService('Monitor', function($c) {
             return new Monitor(
                 $c->query(IRequest::class),
                 $c->query(IConfig::class),
@@ -158,7 +158,7 @@ 
             );
         });
 
-        $container->registerService('FilesEvents', function ($c) {
+        $container->registerService('FilesEvents', function($c) {
             return new FilesEvents(
                 $c->query(ILogger::class),
                 $c->query(Monitor::class),
@@ -174,7 +174,7 @@ 
     {
         // register sabre plugin to catch the profind requests
         $eventDispatcher = $this->getContainer()->getServer()->getEventDispatcher();
-        $eventDispatcher->addListener('OCA\DAV\Connector\Sabre::addPlugin', function (SabrePluginEvent $event) {
+        $eventDispatcher->addListener('OCA\DAV\Connector\Sabre::addPlugin', function(SabrePluginEvent $event) {
             $logger = $this->getContainer()->query(ILogger::class);
             $config = $this->getContainer()->query(IConfig::class);
             $userSession = $this->getContainer()->query(IUserSession::class);

lib/Events/FilesEvents.php

Indentation +27 added lines, -27 removed lines

@@ -27,7 +27,7 @@ 
 
 class FilesEvents {
 
-	/** @var string */
+    /** @var string */
     private $userId;
     
     /** @var ILogger */
@@ -37,74 +37,74 @@ 
     private $monitor;
 
 
-	/**
+    /**
      * @param ILogger   $logger
      * @param Monitor   $monitor
-	 * @param string    $userId
-	 */
-	public function __construct(
+     * @param string    $userId
+     */
+    public function __construct(
         ILogger $logger,
         Monitor $monitor,
         $userId
 
-	) {
+    ) {
         $this->logger = $logger;
         $this->monitor = $monitor;
-		$this->userId = $userId;
-	}
+        $this->userId = $userId;
+    }
 
-	/**
-	 * @param array $params
-	 */
-	public function onFileUpdate(array $params) {
+    /**
+     * @param array $params
+     */
+    public function onFileUpdate(array $params) {
         $this->logger->debug("Updating ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);
-	}
+    }
 
 
-	/**
-	 * @param array $params
-	 */
-	public function onFileRename(array $params) {
+    /**
+     * @param array $params
+     */
+    public function onFileRename(array $params) {
         $this->logger->debug("Renaming ".$params['oldpath']." to ".$params['newpath'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['oldpath'], $params['newpath']], Monitor::RENAME);
     }
 
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileCreate(array $params) {
         $this->logger->debug("Creating ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::CREATE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileWrite(array $params) {
         $this->logger->debug("Writing ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileDelete(array $params) {
         $this->logger->debug("Deleting ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::DELETE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileCopy(array $params) {
         $this->logger->debug("Copying ".$params['oldpath']." to ".$params['newpath'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['oldpath'], $params['newpath']], Monitor::RENAME);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileTouch(array $params) {
         $this->logger->debug("Touching ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);