{ "ml": { "v": "5", "fs": [ { "id": 0, "prob": 1.0, "class": 2, "threshold": 1.0 } ], "prob": 1.0, "class": 2, "level": 3, "models": [ { "m": "az", "prob": 0.96875, "class": 0 }, { "m": "az/vbs", "prob": 1.0, "class": 2 } ], "version": "v17.17", "threshold": 1.0, "analyzed_at": "2026-05-31T09:51:12Z" }, "path": "1bfdf6510715ff83308376afc72625a454407193639a980256f1ae69b96ddddf.vbe", "raw": { "v": "5", "fs": [ { "f": "O(As)Md", "x": 35, "ff": { "m": { "file": { "size": 393336.0, "entropy": 4.24, "size_bytes": 393336.0 }, "text": { "tab_count": 71.0, "digit_ratio": 0.24, "space_count": 5526.0, "total_lines": 1.0, "char_entropy": 4.24, "unique_chars": 100.0, "escape_density": 0.0, "lines_over_200": 1.0, "lines_over_500": 1.0, "avg_line_length": 393336.0, "high_byte_ratio": 0.0, "lines_over_1000": 1.0, "max_line_length": 393336.0, "non_ascii_ratio": 0.0, "null_byte_count": 1.0, "last_line_length": 393336.0, "long_token_count": 1076.0, "whitespace_ratio": 0.01, "most_common_ratio": 0.18, "octal_escape_count": 4.0, "non_printable_ratio": 0.02, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 2.0, "most_common_char_codepoint": 38.0 } }, "s": [ [ 0, "u8", "#@~^XQAGAA==@#@\u0026r2DkKxPA6ask1kO@#@\u0026@#@\u0026@#@\u0026@#@\u0026Gr:,|Ct$#@#@\u0026?" ], [ 388, "u8", "rO4PZeHo2 ?" ], [ 1073, "u8", "Dr^vJ[_EPLPpx!j" ], [ 2139, "u8", "fc2v2\u0026fGff2\u0026f\u00262" ], [ 3103, "u8", "fc2v2\u0026fGff2 f\u00262" ], [ 3720, "u8", "\u0026ff+\u0026f\u00262f\u00262vff2*\u0026ff+\u0026f\u0026Wf2\u0026+2\u00262c\u00262\u0026yf\u00262%f\u00262vff2c\u00262fv2\u0026\u00268ff\u0026+\u0026W\u0026" ], [ 26553, "u8", "fGw ;\u0026T T+Z T zTfZ2ffF*v{" ], [ 26809, "u8", "+G2vOv9v9+2GqvG" ], [ 27033, "u8", "Av1WcF\u0026GlGy{cFZf!y!+)Zf!Afsy Z{TG8vA 3vo" ], [ 27085, "u8", "/+!GT{8c1GG*y 92*+fv8vA" ], [ 27161, "u8", "Oc1FZ+ vGvl" ], [ 27289, "u8", "2vfFb22vyGl{ yff\u0026F2" ], [ 27321, "u8", "+vGvlvfGf{8v/\u0026zTfZ2fo2 f{lv1Gy+G\u0026X+2+sv;v8" ], [ 29251, "u8", "A Xvl" ], [ 32525, "u8", "o+%v*{lv9vZ+WvX+cFFvyGl" ], [ 32761, "u8", "fvwvWGov+{Z**GA" ], [ 33858, "u8", "T2!q yqvZ\u0026T98 F" ], [ 34483, "u8", "!Z%vZT{vZ!+vT!X" ], [ 35341, "u8", "TZfcTTZ T!l" ], [ 35417, "u8", "Z!o+!Z%vZ!ZX!Z," ], [ 35469, "u8", "TZ%vTTZ*T!O" ], [ 36141, "u8", "TZ2vZT*+!!;" ], [ 36345, "u8", "T!wvZ!1vTTWGT!8" ], [ 37462, "u8", "vZTwc12!Z!!WGZT*+!TGW!TX+!!A" ], [ 40627, "u8", "2ycGA" ], [ 40643, "u8", "yGovFX%l!T*F2vX" ], [ 40685, "u8", "1+ GW{cFFcl" ], [ 40979, "u8", "lvfG2{8cTZ*+cGlGy" ], [ 41145, "u8", "+GWGWGqcf{AvovO" ], [ 41401, "u8", "ovGcAvov1" ], [ 41613, "u8", "fW2vo" ], [ 41651, "u8", "G+*vyXT!yGlvfGXXWG3vl" ], [ 41869, "u8", "fW Go" ], [ 42035, "u8", "f+FvA**G2Gwv0c1" ], [ 42125, "u8", "XFcvo" ], [ 42157, "u8", "o+ GZXcF2vl" ], [ 42281, "u8", "fW {X+%vZ{,+\u0026cZT1Glv~co**{lvfGZTf+%" ], [ 42393, "u8", "2cTZf+%vWGO" ], [ 42413, "u8", "qW%v2{F+%cZT+GlvWv1v" ], [ 42457, "u8", "WGTF,F G2clfcWf*!Zf" ], [ 42537, "u8", "l!T1F%vZ{F+ GF" ], [ 42713, "u8", "8v3W*+ZvOv+*slc{*+\u0026{TZ%vW{F+!*l" ], [ 42957, "u8", "q+%vf{yGqvG*Z!/+Z+cvA yf\u00262!{F+\u0026" ], [ 43155, "u8", "wv0vW{lv9W!ZcGAvO" ], [ 43289, "u8", "yGTl!Z%vWGO" ], [ 43331, "u8", "WG1vy{Gl!To+vv3" ], [ 43379, "u8", "F+!G2XT!lv2G3vo" ], [ 43395, "u8", "ZGfGl" ], [ 43401, "u8", "lc{X+GcTTlvfGA" ], [ 43437, "u8", "o+%vW{*+fcwX*Glv2GT!*{lGovl" ], [ 43469, "u8", "*ls**{lvfGZTWGf+*+ GOvW" ], [ 43533, "u8", "qW GX" ], [ 43609, "base64", "LW\u0005pd\\e7\u0005" ], [ 43779, "u8", "WG3vw" ], [ 43821, "u8", "/+*GA*\u0026F,cZTXv;vWG1v*XFGovW" ], [ 43929, "u8", "AvX+GW2 2GA" ], [ 43987, "u8", "WGqvl" ], [ 44211, "u8", "s+\u0026cZT*GlvFcXv*{8v/cZT\u0026Fc" ], [ 44237, "u8", "o+%v*{lv9cW{lv{W!Z*vGv8" ], [ 44275, "u8", "v+2vO*+Glvyv9vX" ], [ 44409, "u8", "0vWGlv9cTTAvovO" ], [ 44602, "u8", "cOGZGovf*Z!3vw" ], [ 44761, "u8", "lv0WslcGlvF" ], [ 44819, "u8", "lvXvy{2vfl,F G8vG" ], [ 44889, "u8", "WcTZ F*v2GlXcF2" ], [ 45043, "u8", "vF Gl" ], [ 45059, "u8", "OvfG8" ], [ 45187, "u8", "WGqvZX F*" ], [ 45363, "u8", "f+sv2*T!RvWGqvTXZG9vl" ], [ 45385, "u8", "clc{X+GcTTWG1vG" ], [ 45434, "u8", "vlvWco**{lvfGZTZ+s" ], [ 45477, "u8", "*+\u0026Xslc{X+\u0026GZT*+!GO{**;vwvfvo" ], [ 45561, "u8", "TGRGlco**{lvfGZT F*" ], [ 45673, "u8", "c+c{XF%v2X!Z2vF{ovWvWGXG0" ], [ 45881, "u8", "3vOvFGqv+{Wc3 G" ], [ 45925, "u8", "Gl!Tv2sXolc 8" ], [ 46195, "u8", "s+fcZTXvZGOG**X" ], [ 46221, "u8", "oWAvf" ], [ 46259, "u8", "s+ GW{3vwv2c{Go" ], [ 46361, "u8", "W**+*+bGOvy{*+c{*+f" ], [ 46483, "u8", "AvXcZTlv" ], [ 46601, "u8", ",+\u0026{1F%vTX;vqvW{wv*lslcGlvF" ], [ 46873, "u8", "AcX+vFsvGcZTc+2" ], [ 46937, "u8", "FvTZ FsvWG8" ], [ 47033, "u8", "Xvzvyvoc*{AvXvG" ], [ 47123, "u8", "zv+vw*lvfFF+ cWGA" ], [ 47363, "u8", "WG3vl" ], [ 47385, "u8", "F*TZZ+FvZGO" ], [ 47475, "u8", "cFFvy{XvZGwcT!X" ], [ 47565, "u8", "1WfvX" ], [ 47635, "u8", "wv+cZTGvX+cF\u0026GOG2XG+2" ], [ 47693, "u8", "TZcGq" ], [ 47795, "u8", "!FscZTXv2v8v/vT{lv+*ZT*+f" ], [ 47917, "u8", "0WcGO" ], [ 48397, "u8", "q+G*TTlv/vW" ], [ 48451, "u8", "WGf*ZTcF {q+cGfXWvqvl" ], [ 48499, "u8", "s+ GZX+G8vlv/vf*Z!*GO" ], [ 48531, "u8", "lv9vA" ], [ 48653, "u8", "+F%v*XZGXvW{2*+F*+GvFvl{ +*" ], [ 48723, "u8", "FvXGy" ], [ 48851, "u8", "AvXcZTlv*FF+cG2*2" ], [ 49075, "u8", "cFFvF" ], [ 49081, "u8", "Xv;vlv*cf{lGovG" ], [ 49193, "u8", "GW {X+ZvO" ], [ 49465, "u8", "/vWvAvqv0*Gvovy{vW*" ], [ 49619, "u8", "ZG9vw" ], [ 49683, "u8", "FG1Gl" ], [ 49721, "u8", "ovGcWG3vX" ], [ 49869, "u8", "fl GX" ], [ 49923, "u8", "yGfvO" ], [ 49929, "u8", "fW!TX+cGX{yv1vy{WG*FFW2vlvW" ], [ 49961, "u8", "%W {X+GvF" ], [ 49987, "u8", "WGfGw" ], [ 50041, "u8", "ov2cWvXv*{8v+Gl" ], [ 50137, "u8", "yG+W FsvWGO" ], [ 50195, "u8", "WG1vW" ], [ 50221, "u8", "3+svZ{f+sv2*3 Gvlv*Gf{OGf*ZTcW**+l,cXX8*XcyXw*9W*Wc*2*OX\u0026lsX\u0026l**TZccl* l,clXq*lcy*o*1X8c/cZX\u0026l,**Ws*fXlcT!2Xl*oW*l2cOcWX2Ws*\u0026WsX" ], [ 50368, "u8", "GTTGvXGA" ], [ 50445, "u8", "/+\u0026cTTRGXvW{lG9W*+cG8vl" ], [ 50499, "u8", "WGTGO{ F\u0026" ], [ 50630, "u8", "*W{*+\u0026XTZ%vf{8v0cw" ], [ 50835, "u8", "lGov2" ], [ 51053, "u8", "/WcG2{F+ZcZTXvGvOv*GX" ], [ 51193, "u8", "/vZGZ!ov" ], [ 51245, "u8", "TZGvA" ], [ 51321, "u8", "qvRvZG/vq*Z!XvG" ], [ 51699, "u8", "cW Gl" ], [ 51737, "u8", "RcTZcW,cAvZTcF2" ], [ 51779, "u8", "lv0cA" ], [ 51827, "u8", "f+FvA*{GwvWv3v1" ], [ 52105, "u8", "*+ XTZAvf" ], [ 52557, "u8", "XF2vq" ], [ 53203, "u8", "WGqv2" ], [ 53241, "u8", "Xvzvyvocf{lvfvO" ], [ 53337, "u8", "yvoW F*v2GlXslf" ], [ 53421, "u8", "TZ2vw" ], [ 53453, "u8", "TZ GX" ], [ 53561, "u8", "XvWG2G1GfXZ!+Gl" ], [ 53635, "u8", "wvfGw" ], [ 53709, "u8", "fl2vo" ], [ 54009, "u8", "XvzvyvocX" ], [ 54099, "u8", "wvfcO{GcTZ,FfcZ!A" ], [ 57139, "u8", "FZ,vZTqGWFz*q!1" ], [ 57427, "u8", "y!1b8TW,f8vZ !O2+TZZ\u0026qFZ\u0026T1Wv!+T 8%s2Tqvl!+s+F+3y!1blT2AFT18 !1$l!)f8TOF+ZF;*!Z2yqv; T,z*T)GF!Oq ZFAZT0vyFlGf!1*Z!0vyqA+\u0026T1W*!q9" ], [ 57666, "u8", "/8!1 lTbzFq1~\u0026!q+8!),8qGbfZFy*!2b8qbOFT,2*T3OA!W*!Z,*ZTfF8F+%T!1Xl!*,8q!R\u0026T1Z*!90~!*c2T8!qZvGFF2*yTFz!T\u00268FT18 !8)cZ2!8q$c8!82T!X" ], [ 63246, "u8", "8!!11y!$bZT+FTZ,O !+bZTv8!T,O Tqz!!+q!Z,,yT$,Z!+FT!T1y!$GZTF8!T{WF!09Z!q\u0026ZTz\u0026qZ\u0026~!!8\u0026ZTfyFTFO!Tq2!!Z+FZ%vZTq\u0026Z!~*T!qfZ!9!ZT!ZsTX" ], [ 64046, "u8", "ZF!+*%82*ZT" ], [ 64470, "u8", "c2qy\u0026TZvZ\u0026FlF2qGy!TvZ qTR F;3!ZvFZq3\u0026yFlfT!" ], [ 64598, "u8", "!ZTZ!q8ZR!!w,ZT\u00268FqcF!T)Z!!2qF8%vZT)!R!F\u0026qFT" ], [ 67310, "u8", "8GFlTF8 byT" ], [ 67410, "u8", "q+!qF++z!TZ!Z GR FqvZFqZOvq08v!8qZOvFFq" ], [ 73070, "u8", "GGFFTZ82fzT{FW!;" ], [ 74390, "u8", "FFT8F{Z\u00268F!Z!ZTZyf0G8 T" ], [ 74450, "u8", "qF!qFFT2FqZ!Z!!; G0G8 TvZbT" ], [ 74972, "u8", "ZF8v!2F+9G8vTF8G*3Gc!ZT!ZAFZ0" ], [ 78009, "u8", "ovw!8F)F*q8F+bWT!Z!T)Z2G1qWFqFy)+!TZ!ZfcR Rqc8Fq zcTTZ!!zT2FGFWqqFybZGT!" ], [ 80398, "u8", "8!GTTW!1%y{2Fq8!Z!!l!wT%2v+bZ!TTZZ%R+*8vF+qTGZ!W!1v+{2Ff\u0026+qbZ!TTZbc0++FTGZTW!{l F\u0026F8FZT!Z*T 2%f" ], [ 81026, "u8", "qZGT!2TFz {f8FFTTZ!" ], [ 81433, "u8", "yGf8F8!!Z!FT!8%fcZ!TTZ%FZ0v8v!ZTT!l R )!TTZ!ocR+bZ!TTZ*G0+W!T!ZTRF3FcZ!!Z!zT2F!{!Z\u0026T$l GWT!Z!!OqT%+Fw f\u0026" ], [ 82908, "u8", "ZvZZ +!zT2Gv+bZ!TTZGGw" ], [ 83053, "u8", "o+GAA0%ZvFRT" ], [ 84553, "u8", "!Z!qTZ!!T+F!1\u0026~+;!)Z!Z!!ycR+!F!T\u0026Zs++Fb!ZT!Z%vw" ], [ 91267, "u8", "wv+GZ{!y\u0026{1+%v*X8 9Z;*8!0~FyfZO!W$!Z2Tb~sq3Z!!ZT!Z!%ZTT!Z!Z!T!TTZ!T!ZT!Z!TTZ!!TTZ!T!ZTZ!TZ!Z!!Z!ZT!Z!T!Z!TTZ!!ZT!Z!!ZTT!Z!ZcT!TT" ], [ 91932, "u8", ":orv#@#@\u0026,P~~VK1V#`*@#@\u0026,~~P@#@\u0026,P~P9rsP!|5\\2,)~j" ], [ 92017, "u8", "sVr#@#@\u0026~~P,fb:~" ], [ 92034, "u8", "j/VASPoKCV" ], [ 92767, "u8", "2XTF" ], [ 93204, "u8", "w@#@\u0026~~,P~P,~AVd" ], [ 93649, "u8", ",x,q!_Kh@#@\u0026Ax9~s!x^YbWU@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026oEU^DkGx,#}~(Bc\\C.BB*@#@\u0026P,~,frsPd?9A?@#@\u0026P,P~q6PHJ:ApvtCj99*~Pt" ], [ 94682, "u8", "bY4~5}26(cK.kTL" ], [ 95374, "u8", "UYUY.k\todcr]" ], [ 95581, "u8", "\u0026W\u0026 WXfv2*2Gf%f" ], [ 101630, "url", "2c\u0026{fW\u00261\u0026+fO\u0026*2F2vc8\u0026W*\u00262Gf,f12*\u00262f*2!\u0026FfX\u00262\u0026O\u0026X\u0026{f+\u0026q\u0026F*F2c*q2*\u00260flcq\u00262fy\u0026*2 2c\u00262\u0026+f 2Gfc2vf02\u0026\u00262f*2!\u00262f0\u00262\u0026R\u0026f\u0026{fF\u0026X\u0026Ffv2cf*2c" ], [ 103628, "url", "2G2c\u0026F\u0026WfF2cfF2cfq2*\u00268f*WF\u0026Wfq\u00262\u0026Z\u0026*\u0026{fW\u0026q\u0026+f,f+2v\u0026{fl\u0026*\u0026Wf8\u0026{2G2c\u0026F\u0026WfF2vf,f+2v\u0026Ffv2 \u0026Wfq\u0026W\u0026O\u0026*\u00260fW\u0026q\u0026+*\u00262cf+2c\u0026qf+\u0026*\u0026Wf8\u0026f2c2c" ], [ 104946, "url", "fW\u0026q\u0026Wf 2cfq2c\u0026qfW\u0026q\u0026Wf2\u0026{2G2c\u0026l\u0026Wf 2GfG2cff2c\u00268fc2F\u0026Wfq\u0026W\u00268\u0026*\u0026qfW\u0026q\u0026WfF2cfq2v\u0026{f+\u0026+\u0026Wf8\u0026f2,\u0026F\u0026WfF2Gf!2cf+2c\u00268fv2c\u0026Wfq\u0026W\u0026l\u0026*\u0026{fW" ], [ 120710, "url", "\u00262fl\u0026*2F2c\u00268\u0026WfF2v*v2cf+2c\u00268fv2c\u0026Wfq\u0026W\u0026l\u0026*\u0026{fW\u0026q\u0026FfG2v*f2c\u0026qfW\u0026q\u0026Wf8\u0026*2,2c\u0026R\u0026WfF2Gf*2cfq2v\u0026Ffv2\u0026\u0026Wf0\u0026W\u00268\u0026*\u0026qfW\u0026q\u0026Ff,2c*X2c\u0026qfW\u0026q" ], [ 121586, "url", "fW\u0026q\u0026+*\u00262cf+2v\u0026{f+\u0026f\u0026Wf8\u0026*2*2c\u0026F\u0026WfF2\u0026f\u00262cf+2c\u00268fv2c\u0026Wfq\u0026l\u0026O\u0026*\u0026{fW\u0026q\u0026Ffv2cf+2G\u0026{fl\u0026X\u0026l*8\u0026*2F2c\u00268\u0026WfF2Gf,fq2*\u00268fv2 \u0026Wfq\u0026W\u0026O\u0026*\u00260fW" ], [ 129502, "u8", "2vcWfv2 \u0026Ff" ], [ 131902, "u8", "2c\u0026Xf+\u0026*\u0026+*+\u0026" ], [ 139824, "u8", "cqfW\u0026q\u0026FfG2cfq2c\u0026qfWcX\u0026Wf2\u0026" ], [ 141196, "url", "2\u00262c\u0026y\u0026WfF2GfF2cfq2v\u0026Ffc2F\u0026Wfq\u0026l\u0026l\u0026*\u0026+fW\u0026q\u0026+f,2cfq2*\u0026qfW\u0026q\u0026Wf8\u0026X2*2c\u0026y\u0026WfF2vf,fq2v\u0026Ffc2F\u0026Wfq\u0026WcW\u0026*\u0026+fW\u0026q\u0026lf\u00262cfq2v\u0026{fW\u0026q\u0026Wf8\u0026*2*" ], [ 145330, "url", "fW\u0026q\u0026Ff!2c*q2c\u0026qfl\u0026{\u0026WfF\u0026f2!2v\u0026y\u0026WfF2Gf,*f2c\u00268f*2\u0026\u0026Wf{\u0026WcW\u0026*\u0026qfW\u0026q\u0026Wf*2cf+2c\u0026qfW\u0026X\u0026W*8\u0026X2,2G\u0026y\u0026WfF2vf,f" ], [ 146462, "url", "2G\u0026FfcWc\u0026W*q\u0026W\u00268\u0026X\u0026{fW\u0026q\u00262f*2cf02*\u0026qfWcf\u0026W*2\u0026X2*2v\u0026l\u0026WfF2Gf,f*2*\u00268fc2v\u0026W**\u00262\u0026W\u0026XcqfW\u0026q\u0026W*F2cf*2c\u0026qfW\u0026X\u0026W*W\u0026{2\u00262ccy\u0026WfF2Gf,f*2c\u00268" ], [ 147056, "url", "\u0026+fW\u0026q\u0026Ff,ff2G\u0026{f2\u0026*\u0026W*8\u0026{2G2*\u0026F\u0026WfF2Gf!2cff2v\u0026Ff\u00262\u0026\u0026Wff\u0026+c+\u0026X\u00260fW\u0026q\u0026+f,ff2v\u0026{fW\u0026+\u0026WfF\u0026X2*2*\u0026W\u0026WfF2Gf,fq2*\u00268f\u00262!\u0026W**\u0026l\u00268\u0026*\u0026+fW\u0026q" ], [ 148208, "url", "\u0026+fW\u0026q\u0026W*F2cfq2v\u0026{fW\u0026+\u0026W*8\u0026X2,2cc2\u0026WfF2vf,f*2v\u0026FfcWF\u0026W*q\u0026l\u0026O\u0026*cffW\u0026q\u0026l*F2cf*2v\u0026{fW\u0026+\u0026W*8\u0026X2,2cc2\u0026WfF2cf 2cf*2v\u0026Ffc2 \u0026W*q\u0026l\u0026O\u0026*cf" ], [ 153158, "url", "\u0026Wf2\u0026X2F2cc+\u0026WfF2*f 2cf12v\u0026FfvW*\u0026Wf0\u0026l\u00268\u0026*\u0026{fW\u0026q\u0026lf 2cf12v\u0026{f+cf\u0026WfO\u0026*2*2ccW\u0026WfF2Gf,f12v\u0026FfvWF\u0026Wf1\u00262\u0026R\u0026*cXfW\u0026q\u0026lf 2cf12v\u0026{f+\u00260\u0026W" ], [ 175112, "u8", "\u0026WfF\u0026X2G2\u0026\u0026+\u0026lfv2%fG2*f*2c\u0026+f*2v\u0026Wf{\u00262\u0026F\u0026X\u0026" ], [ 175304, "u8", "cWfy\u0026f2G2F\u0026+cWfv2*fv2%f" ], [ 175608, "u8", "cWf 2cf{2v\u0026" ], [ 177140, "u8", "fZ\u0026T\u0026Rfv2!fT2!\u0026TfZ\u0026T\u0026ZfZ\u0026T2!2*\u0026+\u0026Zf!Wcfv2!fT2F\u0026+f!2!clf*\u0026Z\u0026Z\u0026*\u0026{fZ\u0026T\u00262fv2!fT2*\u0026{fZ\u0026T\u0026Wf+\u0026T2!Wv\u0026+\u0026Zf!2 fG2!fT2!\u0026lf!2!\u00268fT\u0026Z\u0026Z\u0026{\u0026T" ], [ 177348, "u8", "fZ\u0026TcWf+\u0026T2!2*\u0026+\u0026Zf!2%fv2!fT2!\u0026Zf!2!\u0026lf" ], [ 178036, "u8", "fZ\u0026Tclf 2!fTWc\u0026" ], [ 178676, "u8", "fZ\u0026TcWfv2!fT2F\u0026" ], [ 179948, "u8", "\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T\u00268f!2!fT2F\u0026TfZ\u0026T\u0026ZfZ\u0026T2!2!\u0026Z\u0026Zf!2!f!2!fT2!\u0026Zf!2!\u0026ZfT\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T\u0026Zf!2!fT2!\u0026TfZ\u0026T\u0026ZfR\u0026T2!2!\u0026Z\u0026Zf!2!f!2!fT2F\u0026Zf!2!\u0026ZfT" ], [ 181192, "u8", "\u0026ZfFcX2 Wc\u0026+\u0026lfv2%fvWcf" ], [ 181262, "u8", "2vW\u0026\u0026lcWfv2*fv2%f" ], [ 181940, "u8", "fy\u0026Xclf Wcf" ], [ 181956, "u8", "fW\u0026{\u00262fF\u002612G2\u0026\u0026l\u00262f 2,f\u00262%ff2!\u00262f*2v\u0026Wff\u00262\u00262\u00261\u0026ff8\u0026f\u0026+f\u00262*ff2\u0026\u0026" ], [ 182688, "u8", "2*\u0026+fc2G\u00262f{\u0026O\u0026F\u0026f\u0026Xf2\u0026+\u0026Of\u00262%ff2!\u0026ffl\u0026" ], [ 183092, "u8", "fy\u0026{\u0026lfGWvf" ], [ 185998, "u8", "2F2 \u0026Z\u0026Wf*2!f!2FfT2!\u0026ZfF2!clfq\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T\u0026Zf!2!fT2%\u0026TfZ\u0026T\u00268fZ\u002602!2!\u0026Z\u00262fF2!f!2%f+2c\u0026Zfc2 \u0026yfq\u0026Z\u0026Z\u00260\u0026+fW\u0026T\u0026RfF2 fq2!\u0026TfR\u0026T\u0026WfZ\u00261" ], [ 187272, "u8", "\u0026yf8\u0026q2!2c\u00262\u0026yfF2*fF2vfT2G\u0026Zf%2!\u0026yfq\u00268\u0026Z\u0026*\u0026ffy\u0026q\u0026lfF2vfT2G\u0026T*2\u0026T\u0026yf8\u0026q2!2c\u00262\u0026yfF2*fF2vfT2G\u0026Zfc2 clfq\u0026y\u0026Zcq\u0026f*8\u0026T\u0026l*c2FfqWv\u0026{*+\u0026X" ], [ 188622, "u8", "2!2c\u0026Zclf!2Ff!2,*+2!\u0026Rf 2F\u0026lfq\u0026+\u0026Z\u00261cqfZ\u00260\u0026yfF2%fT2%\u0026Tfy\u0026TclfZ\u0026+2!W\u0026\u00268clf!2%f!W*fTWc\u00268f*2!\u00268fT\u0026Ocy\u0026T\u00260fy\u0026q\u0026lfFW*fTW*\u0026Tfy\u0026TcW*y\u0026T" ], [ 188878, "u8", "2!2,\u00268\u00268f%2FfF2FfT2F\u0026Zf!2 \u0026+fTc2\u0026Zcf\u0026Tf8\u0026T\u0026yf!2!f+2*\u0026T*W\u0026T\u00268fR\u0026+2F2F\u0026Z\u00268f!2!f 2vfT2F\u0026Zf!2!\u0026ZfT\u00262\u0026Z\u00260\u0026TfO\u0026T\u00268f%2 fq2F\u0026TfZ\u0026T\u0026+fZ\u00260" ], [ 189362, "u8", "\u0026T*l\u0026T\u0026yf!2FfT2!\u0026TfW\u0026T\u0026lfR\u0026T2%2 \u00268\u0026Rf!2Ff!2!fT2v\u0026Zf 2!\u0026yfT\u0026y\u0026Z\u0026+\u0026Tfy\u0026T\u0026yf!2 fT2*\u0026T*W\u0026q\u0026RfZ\u0026+2!2%\u0026Z\u0026Rf!2%f!2%fT2 \u0026Zf 2!\u0026yfT\u0026y\u0026Z\u0026+" ], [ 190724, "u8", "fZ\u0026Tclf+\u0026T2!2,\u0026+\u0026Zf!2%fv2!fT2c\u0026Ff!2!c+f" ], [ 191028, "u8", "fZ\u0026T\u0026WfG2!fT2!\u0026{fZ\u0026T\u0026lf+\u0026T2!2\u0026\u0026+\u0026Zf!2%fG2!fT2*\u0026Wf!2!\u0026yf{\u0026Z\u0026Z\u0026X\u0026" ], [ 192692, "u8", "fZ\u0026Tclfv2!fTWv\u0026" ], [ 194360, "u8", "\u0026yf*2%f{Wv\u0026" ], [ 194440, "u8", "\u0026Wf+cX2v2*\u0026+\u0026yf*2cfG2%f{2*\u0026+fc2*\u0026lf" ], [ 194568, "u8", "\u0026Ff+\u0026T2!2c\u0026F\u0026Ofv2%fG2*f*W*\u0026+*v2c\u00262f{\u0026F\u0026+cX\u0026" ], [ 194668, "u8", "\u00262\u0026F\u0026T\u0026TfW\u0026{\u0026Ofv2%f{2*\u0026**l\u0026" ], [ 194872, "u8", "clfv2Ff" ], [ 195140, "u8", "fl\u0026{\u0026yfl\u0026T2!2\u0026\u0026F\u0026yfG2Ffv2%f" ], [ 198124, "u8", "\u0026W\u0026+\u0026*\u0026{fl\u0026{\u0026Rfv2\u0026fX2!\u0026Tfy\u0026{\u0026lf+cf2v2c\u0026+clfv2Ffv2%f*2c\u0026+f*2v\u0026Wf" ], [ 199176, "u8", "\u0026Of+\u0026*2G2!\u0026F\u0026lfv2\u0026fv2%f{2*\u0026W**2vc+f" ], [ 201524, "u8", "*8\u0026{\u0026Ofv2\u0026fXWv\u0026XfW\u0026{\u0026lf+\u0026{2v2!\u0026Z\u0026lfv2%fG2*f" ], [ 202548, "u8", "fy\u0026XclfvWvf" ], [ 203512, "u8", "cWfc2cf" ], [ 203976, "u8", "c+f+cX2c2 \u0026F\u0026lfv2Gfv2Gf" ], [ 204160, "u8", "2G\u0026{fO\u0026{\u0026lf+c+2c2!\u0026Fc2fv2*fv2%f*2!\u0026Zf*2v\u0026Wf{\u0026l\u0026F\u0026+\u0026" ], [ 205304, "u8", "c+fcW f" ], [ 205560, "u8", "cWfv2Ff" ], [ 205768, "u8", "c2f+\u0026*2vW*\u0026+\u00268fv2%fcWcf" ], [ 206136, "u8", "cyfv2Ff" ], [ 206408, "u8", "c+f+\u0026f2c2%\u0026+\u00262fG2Ffv2%f*2c\u0026Ff*2v\u0026Ff*\u0026Z\u0026Z\u0026X\u0026" ], [ 207560, "u8", "\u00268f+\u0026*2G2\u0026\u0026Fclfv2,fcWvfXWv\u0026lf*2v\u00262f{c+\u0026+\u0026T\u0026{f2\u0026{\u0026Ofv2cf*2!\u0026T*8\u0026X\u0026Rfl\u002612*2!\u0026Zc8f*2%f*W f*2!\u0026Z*F2*\u00268fX\u0026Z\u0026l\u0026T\u0026T*8\u0026X\u0026Wfc2FfX2!\u0026T*8\u0026X" ], [ 208142, "base64", "eϟqg\u001fqg\u001f" ], [ 208270, "u8", "2c2%\u0026W\u0026Rfc2!f!W*f*W\u0026\u0026W*\u00262c\u0026ZfTcl\u0026Wc+\u0026*fR\u0026*\u0026Zf!Wcf*2c\u0026X*8\u0026X\u0026ZfZc*2c2F\u0026l\u0026yf*2!f!Wcf*W*\u0026Wf!2*\u0026ZfTcW\u0026W\u0026{\u0026*fR\u0026X\u0026Zf!Wcf*2G\u0026*fy\u0026*\u0026ZfZcf" ], [ 208718, "u8", "2c2!\u0026Z\u0026Wfc2%f*2!fX2!\u0026Zfc2c\u0026yfXcy\u0026W\u0026T\u0026TfW\u0026*\u00268f*2cfX2!\u0026TfW\u0026*clfWcq2c2!\u0026Z\u00262fcWFf*Wcf*2!\u0026Zf\u00262c\u0026RfX\u0026O\u0026W\u0026T\u0026Tf2\u0026*\u00262f*2FfX2!\u0026Tf2\u0026*clfW\u00260" ], [ 209248, "u8", "2G\u0026+f!2!\u00268ffcW\u0026+\u0026+\u0026{*+\u0026" ], [ 209772, "u8", "\u0026Z\u0026Z\u0026T\u0026qfZ\u0026T\u0026Zf!2FfT2*cqfZ\u0026T\u0026Ffl\u0026T2!2!\u0026Z\u0026Zf!2!f!2FfT2*c8f!2!\u0026lfX\u0026Z\u0026Z\u0026T\u0026qfZ\u0026T\u0026Zf!2FfT2*cqfZ\u0026Tc8f8\u0026T2!2!\u00268\u0026Zf!2!f!2!fT2%\u0026Zf!2!c+fT" ], [ 211012, "u8", "fZ\u0026T\u0026lf+\u0026T2!W*\u0026l\u0026Rf!2%**2%fTW cWf!2!\u0026Ffq\u0026Z\u0026Zcq\u0026ffZ\u0026T\u0026yf!2!fT2*\u0026qfZ\u0026T\u0026yf2\u0026T2!2F\u0026Z\u0026Zf!2*fF2!fT2F\u00262f!2!\u0026yfT\u0026Z\u0026Z\u0026f\u0026qfZ\u0026T\u00262fF2!fT2 \u0026T" ], [ 211564, "u8", "\u0026Z\u0026Z\u0026T\u0026TfW\u0026T\u0026Rfc2,fTW \u00260fZ\u0026T\u0026ZfZ\u0026*2!2\u0026\u0026Wcyf!2vf,2!fT2!\u0026Zf!2!cyfT\u0026Z\u0026Zc*\u0026TfZ\u0026Tc8f!2!fTW \u0026TfZ\u0026T\u0026OfZ\u0026T2!2G\u0026Z\u0026Zf!2%f!2!fT2v\u0026Zf!2!\u0026+fT" ], [ 214132, "u8", "fZ\u0026Tclf 2cfT2 c*fZ\u0026Tcyfl\u0026T2!W*\u0026y\u0026Wf!2c* 2!fT2\u0026\u0026lf!2!clf+\u0026W\u0026Z\u0026*c+fZ\u0026Tcyfc2!fTW*\u0026+fW\u0026Tc8*y\u0026T2!2\u0026\u0026W\u0026Zf!W*f 2cfT2%c8f!2!cyff\u0026Z\u0026ZcX\u0026+" ], [ 214644, "u8", "fy\u0026Tcl*cW fTW cffy\u0026T\u0026O*y\u0026+2!2%cWc8f!2%f 2FfT2F\u0026lf 2!cW*f\u0026y\u0026Z\u0026*c*fy\u0026T\u00268*\u00262 fT2Gcffy\u0026T\u0026WfR\u0026T2!2Fc+\u0026Zf!2vf!W fTW c2f!2!\u00268*" ], [ 215182, "u8", "2!2v\u0026+\u0026yf!2,fv2 fT2\u0026\u00268f\u00262!c8f*\u00268\u0026Z\u0026q\u0026Xfy\u0026TcWfFWvfT2 \u0026{fZ\u0026Tc2f2\u0026+2!2G\u00268\u0026yf!2cf%2!fTW\u0026\u00262f 2!\u0026Zf*\u0026F\u0026Z\u0026T\u00260fy\u0026T\u00268fv2 fTWF\u0026ffR\u0026T\u0026Wf+\u0026q" ], [ 215924, "u8", "*y\u0026Tcy*\u00262 fT2,\u0026qfZ\u0026T\u0026+fZc+2!W c2\u0026Zf!2,*v2FfTWv\u0026O* 2!c+f1\u0026y\u0026Z\u00261\u0026TfZ\u0026T\u0026+f!2%fT2 c" ], [ 216364, "u8", "\u00268\u0026Z\u00261c*f8\u0026T\u0026yf\u00262GfT2%c" ], [ 219570, "u8", "\u0026TfZ\u0026T\u0026Zf!2!fT2!\u0026T*W\u0026+cl*+\u0026T2!2c\u0026W\u0026Zf!2vf%2 fT2\u0026clf%2!\u00262fT\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T\u0026Zf!Wcf+W\u0026cffZ\u0026T\u0026WfW\u0026T2!2v\u0026Zcyf!W *\u00262%fq2v\u0026Zf!2!\u0026ZfT\u0026Z\u0026Z\u0026T" ], [ 220100, "u8", "fZ\u0026T\u0026ZfW\u0026*2!2%\u00262\u0026Zf!W*fc2%fT2v\u0026Zf!2!\u0026ZfT\u0026Z\u0026Z\u0026T\u0026T*2\u0026+\u0026R*c2!fT2!\u0026*fy\u0026T\u00262f8\u002602!W \u0026l\u0026yf!2v*\u00262!fT2!\u0026Zf!2!\u0026ZfTc2\u0026y\u0026TcffZ\u0026T\u0026Zfc2cfT2 \u0026f" ], [ 220722, "u8", "\u0026ffy\u0026Tc2f%2FfTWc\u0026ffZ\u0026T\u0026+f8\u0026T2!2!\u0026Z\u0026Zf!2!f!2%f+2!clf!2!\u0026lff\u0026W\u0026Z\u0026X\u0026qf8\u0026Tc+* 2!fT2v\u0026qfZ\u0026T\u0026ZfZ\u0026T2!2!\u0026Z\u0026Ff 2cf,2!fT2*\u00262fF2!c+f1\u00268\u0026Z\u0026f" ], [ 221752, "u8", "\u00268fF2!fT2!\u00260fZ\u0026T\u0026ZfZ\u0026T2!2!\u0026Z\u0026Zf!2vf!2\u0026fTW\u0026cy*c2!\u00262fX\u0026R\u0026Z\u0026f\u0026qfZ\u0026T\u0026Zf!2!fT2!\u0026Tf2\u0026+\u0026RfZ\u0026T2!2v\u0026Z\u00262f!W\u0026* W*fT2cc8f%2!\u0026+fq\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T" ], [ 222194, "u8", "\u0026TfR\u0026T\u00262fF2!fT2!\u0026TfZ\u0026T\u0026ZfZ\u0026q2 2%cy\u0026Zf!2\u0026f!2\u0026fTW\u0026\u0026O*\u00262!\u0026Rfq\u0026R\u0026Z\u0026f\u0026qfZ\u0026T\u0026Zf!2!fT2!\u0026Tf8\u0026+c2fO\u0026T2!2\u0026\u0026Z\u00262f!2Gf,WcfT2Fc2f%2!\u00262fq\u0026Z\u0026Z\u0026T" ], [ 222578, "u8", "\u0026T*y\u0026Tcy*\u00262%fq2v\u0026TfZ\u0026T\u0026ZfZ\u0026T2!2!\u0026Z\u0026Zf Wc**2!fT2 \u0026Zf!2!\u0026lfX\u0026F\u0026Zc+cXfy\u0026T\u0026W*\u00262!fT2!\u0026TfZ\u0026T\u0026ZfZ\u0026T2 W\u0026c2\u0026Zf!2 f!2!fT2v\u0026Zf,2!\u0026lff\u0026y\u0026Z\u0026*" ], [ 223236, "u8", "*l\u0026T\u00268fl\u0026T2!2F\u00268\u00262f!2%fvW fTWF\u00268f!2!\u00268fq\u00262\u0026Z\u0026*\u0026" ], [ 224498, "u8", "\u0026TfO\u0026T\u00268f W*fTWvc*fZ\u0026T\u0026+fZ\u002612!2F\u0026y\u00262f!W\u0026* 2!fT2v\u0026Zf,2!\u00268f+\u0026F\u0026Z\u0026+\u00260fZ\u0026T\u0026+f!2 fTW*\u0026ff2\u0026T\u0026+*W\u0026T2!W*\u0026Z\u0026yf!W*f\u0026W*fT2 cWf!2!clfT\u0026y\u0026ZcX" ], [ 225074, "u8", "\u0026T*2\u0026T\u0026Zfv2%fTW*\u00261fZ\u0026T\u0026+fZcf2!2v\u00262cyf!2Gf 2!fTW*\u0026ZfG2!c+*" ], [ 226418, "u8", "\u0026T*2\u0026T\u0026+*F2GfTW \u0026ffZ\u0026T\u0026+fZcf2!2vc8\u0026+f!W**\u00262!fT2v\u0026Zf!2!\u0026ZfT\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T\u00268f!2GfT2%cffZ\u0026T\u0026ZfZ\u0026T2!2!\u0026Z\u0026Zf!2 f!2!fT2!\u0026Zf!2!\u0026FfT\u0026Z\u0026Z\u0026T" ], [ 227012, "u8", "fy\u0026*\u00262fy\u0026T2!2!\u0026Z\u0026Ff!2!fc2!fT2!\u0026Zf\u00262 c2*X\u0026Z\u0026Z\u0026T\u0026TfZ\u0026T\u0026Wfc2,f*2*\u0026XfF\u0026*\u00262fy\u0026T2!2!\u0026Z\u0026Zf!2!fF2!fT2!\u0026Zf\u00262 c2**\u0026Z\u0026Z\u0026f\u0026Xfl\u0026X\u00262f 2!fT2!\u0026T" ], [ 227192, "u8", "\u0026Ofv2 f{2c\u0026{f2\u0026X\u00262fy\u0026T2!2!\u0026Z\u0026ZfF2%fF2!fT2!\u0026ZfF2F\u0026Zf{\u0026Z\u0026Z\u0026T\u0026T*l\u0026{\u00262f 2!fT2!\u0026Tf8\u0026q\u0026WfZ\u0026T2!2!\u0026Z\u0026Zf!W\u0026fv2!fT2*\u0026Zf!2!\u0026ZfT\u0026Z\u0026Z\u0026T\u0026TfO\u0026f" ], [ 228018, "u8", "\u0026TfZ\u0026Tcyf WFfTWF\u0026TfZ\u0026T\u0026ZfZ\u0026f2\u00262%\u0026y\u0026yf!2!f!2!fTW\u0026\u0026Zf!Wc\u0026ZfT\u00268\u00268\u0026T\u0026TfZ\u0026T\u0026WfF2!fT2!\u0026TfZ\u0026T\u0026Zf8\u0026T2!2F\u0026Z\u0026Zf\u00262\u0026fFWFf+2v\u0026Zf!2!cyf+c8\u0026Zcq" ], [ 229384, "u8", "c8fZ\u0026T2!2!\u0026Z\u00262f\u00262%f W fq2!\u0026Zf!2!\u0026RfT\u0026ZcW\u0026*\u0026TfZ\u0026T\u0026Zf!W\u0026fTW*\u0026{fZ\u0026Tc8fFcq2!2!\u0026Z\u0026Zf!2,f%2\u0026f{WF\u0026Zf!2!\u0026ZfT\u0026R\u0026Rc" ], [ 229492, "u8", "fW\u0026T\u00268fF2vfT2F\u0026qf+\u0026T\u00262f8cq2!2!\u0026Z\u0026Zf!2\u0026f%2%f+2 c8*F2!\u0026ZfT\u0026Z\u0026Z\u0026+\u0026{*+\u0026" ], [ 230304, "u8", "2!\u0026Z*v2!c+fTc2\u0026yc+\u0026qfZ\u0026T\u0026Zf!2%fTW\u0026\u00260fy\u0026T\u0026ZfZ\u0026q2F2!\u0026Z\u0026Zf!2 fF2!fT2!\u0026Zf!2!c+*" ], [ 230380, "u8", "\u0026Z\u0026Z\u0026X\u0026TfZ\u0026fcyfFWFf+2v\u0026TfZ\u0026Tcyfycq2!2G\u0026Z\u0026W**2Ff\u00262%fT2,\u0026Z*c2!\u0026+**\u0026R\u00268\u00261\u0026T*2\u00261c8f!2!fT2!\u0026T*+\u0026" ] ], "v": { "file.stem": "1bfdf6510715ff83308376afc72625a454407193639a980256f1ae69b96ddddf", "file.basename": "1bfdf6510715ff83308376afc72625a454407193639a980256f1ae69b96ddddf.vbe" }, "id": "vbs" }, "id": 0, "sz": 393336, "ts": [ { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "a": "T1562.001", "c": 0.8199999928474426, "d": "PowerShell char arithmetic", "e": [ "\u0026+fW\u0026q\u0026Ff,ff2G\u0026{f2\u0026*\u0026W*8\u0026{2G2*\u0026F\u0026WfF2Gf!2cff2v\u0026Ff\u00262\u0026\u0026Wff\u0026+c+\u0026X\u00260fW\u0026q\u0026+f,ff2v\u0026{fW\u0026+\u0026WfF\u0026X2*2*\u0026W\u0026WfF2G...", "\u0026Wf2\u0026X2F2cc+\u0026WfF2*f 2cf12v\u0026FfvW*\u0026Wf0\u0026l\u00268\u0026*\u0026{fW\u0026q\u0026lf 2cf12v\u0026{f+cf\u0026WfO\u0026*2*2ccW\u0026WfF2Gf,f12v\u0026FfvWF\u0026Wf1\u00262...", "2G2c\u0026F\u0026WfF2cfF2cfq2*\u00268f*WF\u0026Wfq\u00262\u0026Z\u0026*\u0026{fW\u0026q\u0026+f,f+2v\u0026{fl\u0026*\u0026Wf8\u0026{2G2c\u0026F\u0026WfF2vf,f+2v\u0026Ffv2 \u0026Wfq\u0026W\u0026O\u0026*\u00260fW...", "2\u00262c\u0026y\u0026WfF2GfF2cfq2v\u0026Ffc2F\u0026Wfq\u0026l\u0026l\u0026*\u0026+fW\u0026q\u0026+f,2cfq2*\u0026qfW\u0026q\u0026Wf8\u0026X2*2c\u0026y\u0026WfF2vf,fq2v\u0026Ffc2F\u0026Wfq\u0026WcW\u0026*\u0026+...", "fW\u0026q\u0026+*\u00262cf+2v\u0026{f+\u0026f\u0026Wf8\u0026*2*2c\u0026F\u0026WfF2\u0026f\u00262cf+2c\u00268fv2c\u0026Wfq\u0026l\u0026O\u0026*\u0026{fW\u0026q\u0026Ffv2cf+2G\u0026{fl\u0026X\u0026l*8\u0026*2F2c\u00268\u0026WfF...", "2G\u0026FfcWc\u0026W*q\u0026W\u00268\u0026X\u0026{fW\u0026q\u00262f*2cf02*\u0026qfWcf\u0026W*2\u0026X2*2v\u0026l\u0026WfF2Gf,f*2*\u00268fc2v\u0026W**\u00262\u0026W\u0026XcqfW\u0026q\u0026W*F2cf*2c\u0026qfW..." ], "i": "objectives/evasion/anti-av/amsi::powershell-char-arithmetic", "l": 1, "m": "E1562", "el": [ "0x23e70", "0x25646", "0x194cc", "0x2278c", "0x1daf2", "0x23c1e" ] }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 393336.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 0.949999988079071, "d": "File is a one-liner", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-one-liner", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Last line is over 1000 chars", "e": [ "text.last_line_length = 393336.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "l": 1, "m": "B0032" }, { "c": 0.8500000238418579, "d": "PowerShell or VBScript line bloat", "e": [ "text.avg_line_length = 393336.00" ], "i": "objectives/anti-static/obfuscation/string/anomaly::script-host-line-bloat", "l": 4 }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.01" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "c": 0.8999999761581421, "d": "Encoded payload detected: url", "e": [ "2G\u0026FfcWc\u0026W*q\u0026W\u00268\u0026X\u0026{fW\u0026q\u00262f*2cf02*\u0026qfWcf \u003curl\u003e", "\u00262fl\u0026*2F2c\u00268\u0026WfF2v*v2cf+2c\u00268fv2c\u0026Wfq\u0026W\u0026l \u003curl\u003e", "fW\u0026q\u0026+*\u00262cf+2v\u0026{f+\u0026f\u0026Wf8\u0026*2*2c\u0026F\u0026WfF2\u0026f\u0026 \u003curl\u003e", "2G2c\u0026F\u0026WfF2cfF2cfq2*\u00268f*WF\u0026Wfq\u00262\u0026Z\u0026*\u0026{fW \u003curl\u003e", "\u0026+fW\u0026q\u0026Ff,ff2G\u0026{f2\u0026*\u0026W*8\u0026{2G2*\u0026F\u0026WfF2Gf! \u003curl\u003e", "\u0026Wf2\u0026X2F2cc+\u0026WfF2*f 2cf12v\u0026FfvW*\u0026Wf0\u0026l\u00268 \u003curl\u003e", "\u0026+fW\u0026q\u0026W*F2cfq2v\u0026{fW\u0026+\u0026W*8\u0026X2,2cc2\u0026WfF2v \u003curl\u003e", "fZc+\u0026ZfR\u002612/\u0026+\u0026Zf!2!f!2!fT2!\u0026Zf!W\u0026\u0026yf{\u0026l \u003curl\u003e", "2\u00262c\u0026y\u0026WfF2GfF2cfq2v\u0026Ffc2F\u0026Wfq\u0026l\u0026l\u0026*\u0026+fW \u003curl\u003e", "fW\u0026q\u0026Wf 2cfq2c\u0026qfW\u0026q\u0026Wf2\u0026{2G2c\u0026l\u0026Wf 2GfG \u003curl\u003e", "2c\u0026{fW\u00261\u0026+fO\u0026*2F2vc8\u0026W*\u00262Gf,f12*\u00262f*2!\u0026F \u003curl\u003e", "fW\u0026q\u0026Ff!2c*q2c\u0026qfl\u0026{\u0026WfF\u0026f2!2v\u0026y\u0026WfF2Gf, \u003curl\u003e" ], "i": "metadata/encoded-payload/url", "l": 3, "el": [ "offset:146462", "offset:120710", "offset:121586", "offset:103628", "offset:147056", "offset:153158", "offset:148208", "offset:368650", "offset:141196", "offset:104946", "offset:101630", "offset:145330" ] } ], "sha": "1bfdf6510715ff83308376afc72625a454407193639a980256f1ae69b96ddddf", "path": "/data/samples/bad/datasets/various/datalake.abuse.ch/2025-10/1bfdf6510715ff83308376afc72625a454407193639a980256f1ae69b96ddddf.vbe", "type": "vbs" } ], "tv": "52045" } }