{"adoption": {"forks": 260, "observed_at": "2026-08-28T04:06:09.076617+00:00", "stars": 2049}, "canonical_url": "https://ross.abutalabs.com/products/qu1cksc0pe", "card": {"archived": false, "artifact_type": "cli-tool", "description": "All-in-One malware analysis tool.", "domain": ["security", "reverse-engineering", "developer-tools"], "enriched": true, "function": ["security", "reverse-engineering", "linter", "cli", "mcp"], "health_score": 80, "homepage": null, "language": "YARA", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["CYB3RMX/Qu1cksc0pe"], "name": "CYB3RMX/Qu1cksc0pe", "platform": ["windows", "python", "cli"], "pushed_at": "2026-08-25T14:15:30+00:00", "repo": "CYB3RMX/Qu1cksc0pe", "stars": 2049, "tags": ["malware-analysis", "yara", "apk-analysis", "threat-intelligence", "mitre-attack", "packer-detection", "termux", "command-line", "linux", "macos", "android"], "topics": ["linux", "malware-analysis", "python3", "static-analysis", "security-tools", "termux", "elf", "exe", "windows", "packer", "suspicious-files", "malware", "threat-analysis", "apk", "osx", "strings", "ransomware", "all-in-one", "mcp", "mcp-server"], "urls": [], "use_cases": ["analyze a suspicious exe for malware behavior", "extract URLs and IPs from a malware sample", "inspect android apk permissions and capabilities", "map malware samples to MITRE ATT&CK techniques", "detect packers and embedded executables in binaries", "analyze malicious vba macros in documents", "run malware static analysis from an mcp client like claude"], "what_it_is": "Qu1cksc0pe is an all-in-one malware analysis tool that statically and dynamically analyzes many file types, including Windows/Linux/macOS executables, Android APKs, documents, scripts, archives, PCAPs, and email files. It extracts indicators like DLLs, APIs, URLs, permissions, and MITRE ATT&CK mappings, and ships an MCP server exposing its analysis as tools for AI clients.", "when_to_avoid": ["you need deep reverse engineering with a full disassembler/decompiler", "you require enterprise sandbox detonation with detailed behavioral reports", "you need managed threat intelligence feeds and correlation"], "when_to_choose": ["you need a single tool covering many file formats for triage", "you want quick static analysis of suspicious files on linux or termux", "you want to expose malware analysis to AI agents via MCP"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/qu1cksc0pe", "repo": "CYB3RMX/Qu1cksc0pe", "role": "main", "score": 77}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:09.076617+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:57:36.500897+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3f3b01dcf38508c45dd4f74397ae7ce30e5ba0adddc8e4ccb4346360520fc85e", "fetched_at": "2026-08-28T04:06:09.076617+00:00", "kind": "readme", "missing": false, "url": "https://github.com/CYB3RMX/Qu1cksc0pe"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2511, "days_push": 8, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 77, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}