{ "ml": { "l": -1, "v": "6", "fs": [ { "l": -1, "id": 0, "prob": 0.8254117965698242 } ], "prob": 0.8254118, "models": [ { "m": "az", "prob": 0.8254118, "class": 0 }, { "m": "az/scripts", "prob": 0.5673232, "class": 0 }, { "m": "az/javascript", "prob": 0.5458015, "class": 0 } ], "version": "v17.17", "analyzed_at": "2026-06-02T06:47:52Z" }, "path": "VirusShare_903884bcdd17f5b228da881fa779e71b", "raw": { "v": "6", "fs": [ { "f": "H₃(DbPoU)", "x": 36, "ff": { "i": [ [ "", "hglgfdrr4634hezfdg" ], [ "", "d.createElement" ], [ "", "s.type" ], [ "", "s.async" ], [ "", "pl" ], [ "", "String.fromCharCode" ], [ "", "s.src" ], [ "", "document.currentScript.parentNode.insertBefore" ], [ "", "d.getElementsByTagName" ], [ "", "window.Modernizr" ], [ "", "j.cssText" ], [ "", "prefixes.join" ], [ "", "f.bind" ], [ "", "b.createElement" ], [ "", "s.call" ], [ "", "Function.prototype.bind" ], [ "", "q.call" ], [ "", "a.prototype" ], [ "", "c.apply" ], [ "", "d.concat" ], [ "", "q.call" ], [ "", "Object" ], [ "", "c.apply" ], [ "", "d.concat" ], [ "", "q.call" ], [ "", "z.toLowerCase" ], [ "", "e.r" ], [ "", "m.z" ], [ "", "p.push" ], [ "", "e.addTest" ], [ "", "e.addTest" ], [ "", "a.toLowerCase" ], [ "", "e.a" ], [ "", "a.createElement" ], [ "", "a.getElementsByTagName" ], [ "", "c.innerHTML" ], [ "", "d.insertBefore" ], [ "", "a.split" ], [ "", "a.g" ], [ "", "i.h" ], [ "", "c.createElement" ], [ "", "f.cache.a.cloneNode" ], [ "", "e.test" ], [ "", "f.cache.a" ], [ "", "f.createElem" ], [ "", "f.createElem" ], [ "", "d.test" ], [ "", "f.frag.appendChild" ], [ "", "a.createDocumentFragment" ], [ "", "c.frag.cloneNode" ], [ "", "d.createElement" ], [ "", "b.cache" ], [ "", "b.createElem" ], [ "", "b.createFrag" ], [ "", "b.frag" ], [ "", "b.createFrag" ], [ "", "a.createElement" ], [ "", "b.createElem" ], [ "", "a.createDocumentFragment" ], [ "", "Function" ], [ "", "Function" ], [ "", "l.join.replace" ], [ "", "l.join" ], [ "", "b.createElem" ], [ "", "b.frag.createElement" ], [ "", "c.hasCSS" ], [ "", "b.createElement" ], [ "", "a.innerHTML" ], [ "", "b.createElement" ], [ "", "b.createDocumentFragment" ], [ "", "a.html5" ], [ "", "e._version" ], [ "", "g.className" ], [ "", "g.className.replace" ], [ "", "p.join" ], [ "", "o.call" ], [ "", "p.shift" ], [ "", "u.r" ], [ "", "l.onload" ], [ "", "l.onreadystatechange" ], [ "", "t.removeChild" ], [ "", "y.c.hasOwnProperty" ], [ "", "y.c.d.onload" ], [ "", "b.createElement" ], [ "", "y.c" ], [ "", "l.data" ], [ "", "l.src" ], [ "", "l.type" ], [ "", "l.width" ], [ "", "l.height" ], [ "", "l.onerror" ], [ "", "l.onload" ], [ "", "l.onreadystatechange" ], [ "", "k.call" ], [ "", "p.splice" ], [ "", "t.insertBefore" ], [ "", "y.c.push" ], [ "", "p.splice" ], [ "", "a.loader" ], [ "", "b.getElementsByTagName" ], [ "", "b.createRange" ], [ "", "o.call" ], [ "", "o.call" ], [ "", "a.timeout" ], [ "", "a.split" ], [ "", "a.pop" ], [ "", "a.f.split" ], [ "", "g.shift" ], [ "", "x.f" ], [ "", "i.url.split.pop.split.shift" ], [ "", "i.url.split.pop.split" ], [ "", "i.url.split.pop" ], [ "", "i.url.split" ], [ "", "a.split.pop.split" ], [ "", "a.split.pop" ], [ "", "a.split" ], [ "", "i.instead" ], [ "", "i.noexec" ], [ "", "y.i.url" ], [ "", "f.load" ], [ "", "i.url.split.pop.split.shift" ], [ "", "i.url.split.pop.split" ], [ "", "i.url.split.pop" ], [ "", "i.url.split" ], [ "", "f.load" ], [ "", "y.i.url" ], [ "", "k.apply" ], [ "", "Object" ], [ "", "a.hasOwnProperty" ], [ "", "a.hasOwnProperty" ], [ "", "k.apply" ], [ "", "j.n" ], [ "", "a.apply" ], [ "", "Object" ], [ "", "Object" ], [ "", "B.addPrefix" ], [ "", "z.a" ], [ "", "B.addFilter" ], [ "", "x.push" ], [ "", "B.errorTimeout" ], [ "", "b.readyState" ], [ "", "b.addEventListener" ], [ "", "b.removeEventListener" ], [ "", "b.readyState" ], [ "", "a.yepnope" ], [ "", "a.yepnope.executeStack" ], [ "", "a.yepnope.injectJs" ], [ "", "b.createElement" ], [ "", "k.src" ], [ "", "k.setAttribute" ], [ "", "k.onreadystatechange" ], [ "", "k.onload" ], [ "", "k.onload" ], [ "", "k.onreadystatechange" ], [ "", "k.onload" ], [ "", "n.parentNode.insertBefore" ], [ "", "a.yepnope.injectCss" ], [ "", "b.createElement" ], [ "", "e.href" ], [ "", "e.rel" ], [ "", "e.type" ], [ "", "e.setAttribute" ], [ "", "n.parentNode.insertBefore" ], [ "", "Modernizr.load" ], [ "", "yepnope.apply" ] ], "m": { "ast": { "op.eq": 28.0, "op.lt": 4.0, "op.ne": 8.0, "op.add": 15.0, "op.lor": 38.0, "op.bnot": 1.0, "op.land": 41.0, "op.lnot": 34.0, "max_depth": 41.0, "bind_count": 183.0, "call_count": 179.0, "node_count": 5486.0, "member_count": 165.0, "op_density.eq": 0.01, "op_density.lt": 0.0, "op_density.ne": 0.0, "op_density.add": 0.0, "op_density.lor": 0.01, "sequence_count": 48.0, "op_density.bnot": 0.0, "op_density.land": 0.01, "op_density.lnot": 0.01, "identifier_count": 137.0, "member_depth_max": 6.0, "string_literal_count": 86.0, "string_concat_chain_max_length": 3.0 }, "file": { "size": 8139.0, "entropy": 5.33, "size_bytes": 8139.0 }, "text": { "digit_ratio": 0.03, "space_count": 189.0, "total_lines": 10.0, "char_entropy": 5.33, "unique_chars": 85.0, "lines_over_200": 1.0, "lines_over_500": 1.0, "string_density": 8.6, "avg_line_length": 813.0, "lines_over_1000": 1.0, "max_line_length": 7558.0, "last_line_length": 7558.0, "long_token_count": 20.0, "whitespace_ratio": 0.02, "most_common_ratio": 0.07, "identifier_density": 119.5, "line_length_stddev": 2248.91, "encoded_string_ratio": 0.02, "normalized_string_count": 27.2, "suspicious_string_ratio": 0.01, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 1.0, "max_inline_whitespace_run": 1.0, "trailing_whitespace_lines": 2.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.2, "normalized_unique_identifiers": 41.24 }, "binds": { "count": 183.0 }, "calls": { "count": 179.0 }, "binary": { "overall_entropy": 5.33 }, "source": { "function_count": 21.0 }, "members": { "count": 165.0 }, "strings": { "total": 86.0, "avg_length": 9.19, "max_length": 154.0, "avg_entropy": 1.92, "empty_count": 6.0, "total_bytes": 790.0, "entropy_stddev": 1.29, "base64_candidates": 2.0, "embedded_code_candidates": 1.0 }, "comments": { "chars": 108.0, "lines": 3.0, "total": 1.0, "to_code_ratio": 0.43, "url_in_comments": 1.0, "high_entropy_comments": 1.0 }, "functions": { "count": 21.0, "anonymous": 33.0, "avg_params": 1.45, "max_params": 7.0, "one_liners": 58.0, "avg_name_length": 1.0, "no_params_count": 20.0, "avg_length_lines": 1.0, "max_length_lines": 1.0, "min_length_lines": 1.0, "nested_functions": 16.0, "avg_nesting_depth": 1.76, "max_nesting_depth": 5.0, "single_char_names": 25.0, "single_char_params": 84.0, "avg_param_name_length": 1.0, "density_per_100_lines": 580.0, "code_in_functions_ratio": 5.8 }, "identifiers": { "count": 137.0, "total": 1195.0, "avg_length": 6.83, "max_length": 23.0, "min_length": 1.0, "avg_entropy": 2.05, "reuse_ratio": 0.11, "unique_count": 137.0, "length_stddev": 4.73, "has_digit_ratio": 0.01, "sequential_names": 28.0, "single_char_count": 28.0, "single_char_ratio": 0.2, "high_entropy_count": 5.0, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.57, "all_uppercase_ratio": 0.01, "numeric_suffix_count": 1.0, "underscore_prefix_count": 1.0 } }, "s": [ [ 25, "10", "1" ], [ 65, "u8", "script" ], [ 66, "u8", "script" ], [ 83, "u8", "text/javascript" ], [ 84, "u8", "text/javascript" ], [ 145, "10", "104" ], [ 149, "10", "116" ], [ 153, "10", "116" ], [ 157, "10", "112" ], [ 161, "10", "115" ], [ 165, "10", "58" ], [ 168, "10", "47" ], [ 171, "10", "47" ], [ 174, "10", "116" ], [ 178, "10", "111" ], [ 182, "10", "109" ], [ 186, "10", "46" ], [ 189, "10", "118" ], [ 193, "10", "101" ], [ 197, "10", "114" ], [ 201, "10", "121" ], [ 205, "10", "98" ], [ 208, "10", "101" ], [ 212, "10", "97" ], [ 215, "10", "116" ], [ 219, "10", "105" ], [ 223, "10", "102" ], [ 227, "10", "117" ], [ 231, "10", "108" ], [ 235, "10", "97" ], [ 238, "10", "110" ], [ 242, "10", "116" ], [ 246, "10", "111" ], [ 250, "10", "110" ], [ 254, "10", "121" ], [ 258, "10", "46" ], [ 261, "10", "99" ], [ 264, "10", "111" ], [ 268, "10", "109" ], [ 272, "10", "47" ], [ 275, "10", "97" ], [ 278, "10", "46" ], [ 281, "10", "106" ], [ 285, "10", "115" ], [ 440, "u8", "head" ], [ 441, "u8", "head" ], [ 448, "10", "0" ], [ 682, "u8", ";" ], [ 683, "u8", ";" ], [ 844, "10", "1" ], [ 855, "u8", "function" ], [ 856, "u8", "function" ], [ 889, "10", "1" ], [ 897, "u8", "2.6.2" ], [ 898, "u8", "2.6.2" ], [ 913, "10", "0" ], [ 937, "u8", "modernizr" ], [ 938, "u8", "modernizr" ], [ 1055, "u8", "undefined" ], [ 1056, "u8", "undefined" ], [ 1079, "u8", "undefined" ], [ 1080, "u8", "undefined" ], [ 1188, "u8", "undefined" ], [ 1189, "u8", "undefined" ], [ 1288, "u8", "function" ], [ 1289, "u8", "function" ], [ 1342, "10", "1" ], [ 1629, "u8", "no-" ], [ 1630, "u8", "no-" ], [ 1684, "u8", "object" ], [ 1685, "u8", "object" ], [ 1790, "u8", "function" ], [ 1791, "u8", "function" ], [ 1817, "u8", "undefined" ], [ 1818, "u8", "undefined" ], [ 1847, "u8", " " ], [ 1848, "u8", " " ], [ 1857, "u8", "no-" ], [ 1858, "u8", "no-" ], [ 1951, "u8", "p" ], [ 1952, "u8", "p" ], [ 1981, "u8", "head" ], [ 1982, "u8", "head" ], [ 1989, "10", "0" ], [ 2030, "u8", "x\u003cstyle\u003e" ], [ 2031, "u8", "x\u003cstyle\u003e" ], [ 2043, "u8", "\u003c/style\u003e" ], [ 2044, "u8", "\u003c/style\u003e" ], [ 2142, "u8", "string" ], [ 2143, "u8", "string" ], [ 2159, "u8", " " ], [ 2160, "u8", " " ], [ 2576, "10", "0" ], [ 2875, "u8", "h,f" ], [ 2876, "u8", "h,f" ], [ 2881, "u8", "return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods\u0026\u0026(" ], [ 2882, "u8", "return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods\u0026\u0026(" ], [ 3041, "u8", "c(\"" ], [ 3042, "u8", "c(" ], [ 3049, "u8", "\")" ], [ 3050, "u8", ")" ], [ 3056, "u8", ");return n}" ], [ 3057, "u8", ");return n}" ], [ 3164, "u8", "article,aside,figcaption,figure,footer,header,hgroup,nav,section{display:block}mark{background:#FF0;color:#000}" ], [ 3165, "u8", "article,aside,figcaption,figure,footer,header,hgroup,nav,section{display:block}mark{background:#FF0;color:#000}" ], [ 3496, "u8", "_html5shiv" ], [ 3497, "u8", "_html5shiv" ], [ 3511, "10", "0" ], [ 3558, "u8", "a" ], [ 3559, "u8", "a" ], [ 3575, "u8", "\u003cxyz\u003e\u003c/xyz\u003e" ], [ 3576, "u8", "\u003cxyz\u003e\u003c/xyz\u003e" ], [ 3591, "u8", "hidden" ], [ 3592, "u8", "hidden" ], [ 3627, "10", "1" ], [ 3657, "u8", "a" ], [ 3658, "u8", "a" ], [ 3722, "u8", "undefined" ], [ 3723, "u8", "undefined" ], [ 3768, "u8", "undefined" ], [ 3769, "u8", "undefined" ], [ 3805, "u8", "undefined" ], [ 3806, "u8", "undefined" ], [ 3832, "10", "0" ], [ 3837, "10", "0" ], [ 3872, "u8", "abbr article aside audio bdi canvas data datalist details figcaption figure footer header hgroup mark meter nav output progress " ], [ 3873, "u8", "abbr article aside audio bdi canvas data datalist details figcaption figure footer header hgroup mark meter nav output progress " ], [ 4050, "10", "1" ], [ 4107, "10", "1" ], [ 4114, "u8", "default" ], [ 4115, "u8", "default" ], [ 4270, "u8", "$1$2" ], [ 4271, "u8", "$1$2" ], [ 4281, "u8", " js " ], [ 4282, "u8", " js " ], [ 4295, "u8", " " ], [ 4296, "u8", " " ], [ 4363, "u8", "[object Function]" ], [ 4364, "u8", "[object Function]" ], [ 4414, "u8", "string" ], [ 4415, "u8", "string" ], [ 4471, "u8", "loaded" ], [ 4472, "u8", "loaded" ], [ 4484, "u8", "complete" ], [ 4485, "u8", "complete" ], [ 4499, "u8", "uninitialized" ], [ 4500, "u8", "uninitialized" ], [ 4549, "10", "1" ], [ 4571, "u8", "c" ], [ 4572, "u8", "c" ], [ 4608, "10", "0" ], [ 4622, "10", "1" ], [ 4626, "10", "0" ], [ 4641, "10", "0" ], [ 4714, "10", "1" ], [ 4763, "u8", "img" ], [ 4764, "u8", "img" ], [ 4804, "10", "50" ], [ 4915, "10", "0" ], [ 4919, "10", "0" ], [ 4945, "10", "1" ], [ 4958, "10", "1" ], [ 4969, "u8", "object" ], [ 4970, "u8", "object" ], [ 5026, "u8", "0" ], [ 5027, "u8", "0" ], [ 5108, "10", "0" ], [ 5113, "u8", "img" ], [ 5114, "u8", "img" ], [ 5127, "10", "2" ], [ 5217, "10", "0" ], [ 5224, "u8", "j" ], [ 5225, "u8", "j" ], [ 5235, "u8", "c" ], [ 5236, "u8", "c" ], [ 5285, "10", "0" ], [ 5290, "10", "1" ], [ 5360, "10", "0" ], [ 5429, "u8", "script" ], [ 5430, "u8", "script" ], [ 5439, "10", "0" ], [ 5463, "10", "0" ], [ 5467, "u8", "MozAppearance" ], [ 5468, "u8", "MozAppearance" ], [ 5558, "u8", "[object Opera]" ], [ 5559, "u8", "[object Opera]" ], [ 5618, "u8", "object" ], [ 5619, "u8", "object" ], [ 5629, "u8", "script" ], [ 5630, "u8", "script" ], [ 5638, "u8", "img" ], [ 5639, "u8", "img" ], [ 5648, "u8", "script" ], [ 5649, "u8", "script" ], [ 5694, "u8", "[object Array]" ], [ 5695, "u8", "[object Array]" ], [ 5788, "10", "0" ], [ 5842, "u8", "!" ], [ 5843, "u8", "!" ], [ 5922, "10", "0" ], [ 5945, "u8", "=" ], [ 5946, "u8", "=" ], [ 5985, "10", "0" ], [ 6076, "u8", "." ], [ 6077, "u8", "." ], [ 6093, "u8", "?" ], [ 6094, "u8", "?" ], [ 6152, "u8", "/" ], [ 6153, "u8", "/" ], [ 6169, "u8", "?" ], [ 6170, "u8", "?" ], [ 6174, "10", "0" ], [ 6230, "10", "0" ], [ 6241, "10", "1" ], [ 6280, "u8", "css" ], [ 6281, "u8", "css" ], [ 6299, "u8", "." ], [ 6300, "u8", "." ], [ 6316, "u8", "?" ], [ 6317, "u8", "?" ], [ 6329, "u8", "c" ], [ 6330, "u8", "c" ], [ 6448, "10", "2" ], [ 6578, "10", "0" ], [ 6633, "10", "0" ], [ 7061, "10", "0" ], [ 7065, "10", "0" ], [ 7087, "10", "0" ], [ 7120, "10", "0" ], [ 7124, "10", "0" ], [ 7329, "u8", "loading" ], [ 7330, "u8", "loading" ], [ 7358, "u8", "DOMContentLoaded" ], [ 7359, "u8", "DOMContentLoaded" ], [ 7412, "u8", "DOMContentLoaded" ], [ 7413, "u8", "DOMContentLoaded" ], [ 7433, "10", "0" ], [ 7449, "u8", "complete" ], [ 7450, "u8", "complete" ], [ 7461, "10", "0" ], [ 7567, "u8", "script" ], [ 7568, "u8", "script" ], [ 7719, "10", "1" ], [ 7781, "10", "1" ], [ 7785, "10", "1" ], [ 7902, "u8", "link" ], [ 7903, "u8", "link" ], [ 7938, "u8", "stylesheet" ], [ 7939, "u8", "stylesheet" ], [ 7958, "u8", "text/css" ], [ 7959, "u8", "text/css" ], [ 8042, "10", "0" ], [ 8134, "10", "0" ], [ 5573, "xor", "yff4u8:77s:u4+\u003e):rw7fzz9u://:83" ] ], "v": { "file.stem": "VirusShare_903884bcdd17f5b228da881fa779e71b", "file.basename": "VirusShare_903884bcdd17f5b228da881fa779e71b", "source.language": "javascript", "source.imports[0]": "B.addFilter", "source.imports[1]": "B.addPrefix", "source.imports[2]": "B.errorTimeout", "source.imports[3]": "Function", "source.imports[4]": "Function.prototype.bind", "source.imports[5]": "Modernizr.load", "source.imports[6]": "Object", "source.imports[7]": "String.fromCharCode", "source.imports[8]": "a.apply", "source.imports[9]": "a.createDocumentFragment", "source.strings[0]": ");return n}", "source.strings[1]": "\u003c/style\u003e", "source.strings[2]": "\u003cxyz\u003e\u003c/xyz\u003e", "source.strings[3]": "DOMContentLoaded", "source.strings[4]": "MozAppearance", "source.strings[5]": "[object Array]", "source.strings[6]": "[object Function]", "source.strings[7]": "[object Opera]", "source.strings[8]": "_html5shiv", "source.strings[9]": "abbr article aside audio bdi canvas data datalist details figcaption figure footer header hgroup mark meter nav output progress section summary time video", "source.has_imports": true, "source.imports[10]": "a.createElement", "source.imports[11]": "a.f.split", "source.imports[12]": "a.g", "source.imports[13]": "a.getElementsByTagName", "source.imports[14]": "a.hasOwnProperty", "source.imports[15]": "a.html5", "source.imports[16]": "a.innerHTML", "source.imports[17]": "a.loader", "source.imports[18]": "a.pop", "source.imports[19]": "a.prototype", "source.imports[20]": "a.split", "source.imports[21]": "a.split.pop", "source.imports[22]": "a.split.pop.split", "source.imports[23]": "a.timeout", "source.imports[24]": "a.toLowerCase", "source.imports[25]": "a.yepnope", "source.imports[26]": "a.yepnope.executeStack", "source.imports[27]": "a.yepnope.injectCss", "source.imports[28]": "a.yepnope.injectJs", "source.imports[29]": "b.addEventListener", "source.imports[30]": "b.cache", "source.imports[31]": "b.createDocumentFragment", "source.imports[32]": "b.createElem", "source.imports[33]": "b.createElement", "source.imports[34]": "b.createFrag", "source.imports[35]": "b.createRange", "source.imports[36]": "b.frag", "source.imports[37]": "b.frag.createElement", "source.imports[38]": "b.getElementsByTagName", "source.imports[39]": "b.readyState", "source.imports[40]": "b.removeEventListener", "source.imports[41]": "c.apply", "source.imports[42]": "c.createElement", "source.imports[43]": "c.frag.cloneNode", "source.imports[44]": "c.hasCSS", "source.imports[45]": "c.innerHTML", "source.imports[46]": "d.concat", "source.imports[47]": "d.createElement", "source.imports[48]": "d.getElementsByTagName", "source.imports[49]": "d.insertBefore", "source.imports[50]": "d.test", "source.imports[51]": "document.currentScript.parentNode.insertBefore", "source.imports[52]": "e._version", "source.imports[53]": "e.a", "source.imports[54]": "e.addTest", "source.imports[55]": "e.href", "source.imports[56]": "e.r", "source.imports[57]": "e.rel", "source.imports[58]": "e.setAttribute", "source.imports[59]": "e.test", "source.imports[60]": "e.type", "source.imports[61]": "f.bind", "source.imports[62]": "f.cache.a", "source.imports[63]": "f.cache.a.cloneNode", "source.imports[64]": "f.createElem", "source.imports[65]": "f.frag.appendChild", "source.imports[66]": "f.load", "source.imports[67]": "g.className", "source.imports[68]": "g.className.replace", "source.imports[69]": "g.shift", "source.imports[70]": "hglgfdrr4634hezfdg", "source.imports[71]": "i.h", "source.imports[72]": "i.instead", "source.imports[73]": "i.noexec", "source.imports[74]": "i.url.split", "source.imports[75]": "i.url.split.pop", "source.imports[76]": "i.url.split.pop.split", "source.imports[77]": "i.url.split.pop.split.shift", "source.imports[78]": "j.cssText", "source.imports[79]": "j.n", "source.imports[80]": "k.apply", "source.imports[81]": "k.call", "source.imports[82]": "k.onload", "source.imports[83]": "k.onreadystatechange", "source.imports[84]": "k.setAttribute", "source.imports[85]": "k.src", "source.imports[86]": "l.data", "source.imports[87]": "l.height", "source.imports[88]": "l.join", "source.imports[89]": "l.join.replace", "source.imports[90]": "l.onerror", "source.imports[91]": "l.onload", "source.imports[92]": "l.onreadystatechange", "source.imports[93]": "l.src", "source.imports[94]": "l.type", "source.imports[95]": "l.width", "source.imports[96]": "m.z", "source.imports[97]": "n.parentNode.insertBefore", "source.imports[98]": "o.call", "source.imports[99]": "p.join", "source.strings[10]": "article,aside,figcaption,figure,footer,header,hgroup,nav,section{display:block}mark{background:#FF0;color:#000}", "source.strings[11]": "complete", "source.strings[12]": "default", "source.strings[13]": "function", "source.strings[14]": "hidden", "source.strings[15]": "loaded", "source.strings[16]": "loading", "source.strings[17]": "modernizr", "source.strings[18]": "object", "source.strings[19]": "return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods\u0026\u0026(", "source.strings[20]": "script", "source.strings[21]": "string", "source.strings[22]": "stylesheet", "source.strings[23]": "text/css", "source.strings[24]": "text/javascript", "source.strings[25]": "undefined", "source.strings[26]": "uninitialized", "source.strings[27]": "x\u003cstyle\u003e", "source.strings[28]": "yff4u8:77s:u4+\u003e):rw7fzz9u://:83", "source.functions[0]": "anonymous", "source.functions[1]": "b", "source.functions[2]": "c", "source.functions[3]": "d", "source.functions[4]": "e", "source.functions[5]": "f", "source.functions[6]": "g", "source.functions[7]": "h", "source.functions[8]": "i", "source.functions[9]": "j", "source.imports[100]": "p.push", "source.imports[101]": "p.shift", "source.imports[102]": "p.splice", "source.imports[103]": "pl", "source.imports[104]": "prefixes.join", "source.imports[105]": "q.call", "source.imports[106]": "s.async", "source.imports[107]": "s.call", "source.imports[108]": "s.src", "source.imports[109]": "s.type", "source.imports[110]": "t.insertBefore", "source.imports[111]": "t.removeChild", "source.imports[112]": "u.r", "source.imports[113]": "window.Modernizr", "source.imports[114]": "x.f", "source.imports[115]": "x.push", "source.imports[116]": "y.c", "source.imports[117]": "y.c.d.onload", "source.imports[118]": "y.c.hasOwnProperty", "source.imports[119]": "y.c.push", "source.imports[120]": "y.i.url", "source.imports[121]": "yepnope.apply", "source.imports[122]": "z.a", "source.imports[123]": "z.toLowerCase", "source.functions[10]": "k", "source.functions[11]": "l", "source.functions[12]": "m", "source.functions[13]": "n", "source.functions[14]": "o", "source.functions[15]": "p", "source.functions[16]": "q", "source.functions[17]": "u", "source.functions[18]": "v", "source.functions[19]": "w", "source.functions[20]": "x", "source.functions[21]": "y" }, "ct": [ "B", "Function", "Function()", "Object", "String.fromCharCode", "TypeError", "a", "a.apply", "a.createDocumentFragment", "a.createElement", "a.getElementsByTagName", "a.hasOwnProperty", "a.pop", "a.split", "a.split().pop", "a.split().pop().split", "a.toLowerCase", "b", "b.addEventListener", "b.createDocumentFragment", "b.createElem", "b.createElement", "b.createFrag", "b.createRange", "b.frag.createElement", "b.getElementsByTagName", "b.removeEventListener", "c", "c.apply", "c.createElement", "c.frag.cloneNode", "d", "d.concat", "d.createElement", "d.getElementsByTagName", "d.insertBefore", "d.test", "document.currentScript.parentNode.insertBefore", "e", "e.addTest", "e.setAttribute", "e.test", "f.bind", "f.createElem", "f.frag.appendChild", "f.load", "g", "g.className.replace", "g.shift", "h", "i", "i.instead", "i.url.split", "i.url.split().pop", "i.url.split().pop().split", "i.url.split().pop().split().shift", "j", "k", "k.apply", "k.call", "k.onload", "k.setAttribute", "l", "l().join", "l().join().replace", "m", "n", "n.parentNode.insertBefore", "o.call", "p", "p.join", "p.push", "p.shift", "p.splice", "prefixes.join", "q", "q.call", "s.call", "t", "t.insertBefore", "t.removeChild", "u", "w", "x.push", "yepnope.apply", "z.toLowerCase" ], "id": "javascript", "mc": [ "Array.isArray", "B.addFilter", "B.addPrefix", "B.errorTimeout", "B.injectCss", "B.injectJs", "Function.prototype", "Function.prototype.bind", "Modernizr.load", "String.fromCharCode", "a.a", "a.apply", "a.both", "a.callback", "a.childNodes", "a.childNodes.length", "a.cloneNode", "a.complete", "a.constructor", "a.constructor.prototype", "a.createDocumentFragment", "a.createElement", "a.documentElement", "a.e", "a.getElementsByTagName", "a.hasOwnProperty", "a.html5", "a.innerHTML", "a.length", "a.load", "a.loader", "a.nope", "a.opera", "a.pop", "a.prototype", "a.s", "a.setTimeout", "a.split", "a.split().pop", "a.split().pop().split", "a.t", "a.test", "a.timeout", "a.toLowerCase", "a.x", "a.yep", "a.yepnope", "a.yepnope.executeStack", "a.yepnope.injectCss", "a.yepnope.injectJs", "b.addEventListener", "b.attachEvent", "b.cache", "b.createDocumentFragment", "b.createElem", "b.createElement", "b.createFrag", "b.createRange", "b.createRange().compareNode", "b.documentElement", "b.frag", "b.frag.createElement", "b.getElementsByTagName", "b.length", "b.readyState", "b.removeEventListener", "c.apply", "c.createElement", "c.elements", "c.frag", "c.frag.cloneNode", "c.hasCSS", "c.innerHTML", "c.lastChild", "c.prototype", "c.shivCSS", "c.shivMethods", "d.concat", "d.createElement", "d.firstChild", "d.getElementsByTagName", "d.insertBefore", "d.test", "document.currentScript", "document.currentScript.parentNode", "document.currentScript.parentNode.insertBefore", "e._version", "e.addTest", "e.href", "e.rel", "e.setAttribute", "e.test", "e.type", "f.bind", "f.cache", "f.createElem", "f.frag", "f.frag.appendChild", "f.length", "f.load", "g.canHaveChildren", "g.className", "g.className.replace", "g.shift", "i.attrs", "i.autoCallback", "i.bypass", "i.forceCSS", "i.forceJS", "i.instead", "i.noexec", "i.origUrl", "i.style", "i.timeout", "i.url", "i.url.split", "i.url.split().pop", "i.url.split().pop().split", "i.url.split().pop().split().shift", "j.cssText", "k.apply", "k.call", "k.onload", "k.onreadystatechange", "k.readyState", "k.setAttribute", "k.src", "l().join", "l().join().replace", "l.data", "l.height", "l.onerror", "l.onload", "l.onreadystatechange", "l.readyState", "l.src", "l.style", "l.type", "l.width", "n.parentNode", "n.parentNode.insertBefore", "o.call", "p.join", "p.length", "p.push", "p.shift", "p.slice", "p.splice", "prefixes.join", "q.call", "r.elements", "r.shivCSS", "r.shivMethods", "s.async", "s.call", "s.src", "s.type", "t.insertBefore", "t.removeChild", "u.r", "window.Modernizr", "x.length", "x.push", "yepnope.apply", "z.toLowerCase" ] }, "id": 0, "sz": 8139, "ts": [ { "c": 0.800000011920929, "d": "Split with custom delimiter", "e": [ ".split(\"!\")" ], "i": "objectives/anti-static/obfuscation/syntax::js-split-custom-delimiter", "l": 1 }, { "c": 1.0, "d": "Plain JavaScript identifier assignment", "e": [ "d=document;" ], "i": "metadata/lang/scripted::plain-js-identifier-assignment", "l": 1 }, { "c": 1.0, "d": "JavaScript undefined literal", "e": [ "undefined" ], "i": "metadata/lang/scripted::undefined-literal", "l": 1 }, { "c": 0.20000000298023224, "d": "output keyword", "e": [ "output" ], "i": "micro-behaviors/data/text/keywords/lexicon::output", "l": 1 }, { "c": 0.9700000286102295, "d": "Validation vocabulary string", "e": [ "String" ], "i": "metadata/file/text/format::vocab-string", "l": 1 }, { "c": 0.8799999952316284, "d": "Source or test deletion target", "e": [ "test" ], "i": "micro-behaviors/data/text/keywords/lexicon::target-source-test", "l": 1 }, { "c": 0.800000011920929, "d": "String.fromCharCode fragment (CharCode)", "e": [ "CharCode" ], "i": "objectives/execution/interpreter/script/wsh-fragments::from-char-code-fragment-charcode", "l": 1 }, { "c": 0.9700000286102295, "d": "Validation vocabulary object", "e": [ "Object" ], "i": "metadata/file/text/format::vocab-object", "l": 1 }, { "a": "T1027", "c": 0.9300000071525574, "d": "Regex component marker", "e": [ ".split(" ], "i": "objectives/anti-static/obfuscation/string/reverse::js-decode-then-reverse-split--rx-9", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.9300000071525574, "d": "Regex component marker", "e": [ ".split(" ], "i": "objectives/anti-static/obfuscation/string/reverse::js-reverse-split-then-decode--rx-4", "l": 1, "m": "B0032" }, { "a": "T1552.001,T1082,T1041", "c": 0.9399999976158142, "d": "Regex component marker", "e": [ "error" ], "i": "objectives/supply-chain/recon-exfil/npm::console-output-silenced--rx-3", "l": 1 }, { "a": "T1027", "d": "Function() constructor", "e": [ "Function" ], "i": "objectives/anti-static/obfuscation/string/encoding::js-function-call", "l": 1, "m": "B0032", "el": [ "b32" ] }, { "c": 0.699999988079071, "d": "String.fromCharCode() assembly", "e": [ "String.fromCharCode(" ], "i": "micro-behaviors/data/encode/charcode::from-char-code", "l": 1 }, { "c": 0.9700000286102295, "d": "Validation vocabulary array", "e": [ "Array" ], "i": "metadata/file/text/format::vocab-array", "l": 1 }, { "a": "T1027", "c": 0.699999988079071, "d": "Many single-char params", "e": [ "functions.single_char_params = 84.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/functions::single-char-params", "l": 1, "m": "B0032" }, { "c": 0.800000011920929, "d": "Nested array concatenation", "e": [ "d.concat" ], "i": "micro-behaviors/data/control-flow/analysis::js-nested-array-concat", "l": 4, "el": [ "5a7" ] }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 10.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 7558.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 0.8199999928474426, "d": "JavaScript static key string assignment", "e": [ "=\"),(e=z[g.shift()])\u0026\u0026(c=e(c,g));for(f=0;f\u003cb;f++)c=x[f](c);return c}function g(a,e,f,g,h){var i=b(a),j=i.autoCallback;i.url.spli" ], "i": "micro-behaviors/crypto/symmetric/aes/library::js-static-key-string-assignment", "l": 1 }, { "c": 0.20000000298023224, "d": "encrypted-file trailer vocabulary", "e": [ "footer" ], "i": "micro-behaviors/data/text/keywords/lexicon::encrypted-trailer-vocab", "l": 1 }, { "c": 1.0, "d": "toString method token", "e": [ "toString" ], "i": "micro-behaviors/data/encode/tostring::tostring-token", "l": 1 }, { "c": 0.30000001192092896, "d": "for loop (content)", "e": [ "{for(" ], "i": "micro-behaviors/data/control-flow/analysis::for-loop-content", "l": 2 }, { "c": 0.800000011920929, "d": "Short sidecar-sized source", "e": [ "text.total_lines = 10.00" ], "i": "metadata/package/config::short-sidecar-file", "l": 1 }, { "c": 0.8199999928474426, "d": "Array literal joined with empty string", "e": [ "l().join", "p.join", "prefixes.join" ], "i": "objectives/execution/interpreter/scripting/host::array-join-empty-string-ast", "l": 1, "el": [ "b8c", "10c0", "29a" ] }, { "c": 0.800000011920929, "d": "Dot path splitting double quote", "e": [ ".split(\".\")" ], "i": "micro-behaviors/data/source/prototype::js-path-split-double", "l": 2 }, { "c": 0.800000011920929, "d": "Sequential source identifier names", "e": [ "identifiers.sequential_names = 28.00" ], "i": "metadata/file/text/profile::sequential-identifiers", "l": 2 }, { "c": 0.8199999928474426, "d": "JavaScript substring search call", "e": [ "indexOf(" ], "i": "micro-behaviors/data/string/search::js-includes-indexof-call", "l": 2 }, { "a": "T1204.001", "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "video" ], "i": "objectives/execution/lure/video-meeting::meeting-device-permission-lure--rx-8", "l": 1 }, { "a": "T1204.001", "c": 0.8600000143051147, "d": "Regex component marker", "e": [ "audio" ], "i": "objectives/execution/lure/video-meeting::meeting-device-permission-lure--rx-7", "l": 1 }, { "a": "T1027", "c": 0.9300000071525574, "d": "Regex component marker", "e": [ ").join" ], "i": "objectives/anti-static/obfuscation/string/reverse::js-decode-then-reverse-split--rx-8", "l": 1, "m": "B0032" }, { "a": "T1105", "c": 0.800000011920929, "d": "createElement('script') element creation", "e": [ "createElement('script'" ], "i": "micro-behaviors/process/create/load/remote-code::js-dom-createelement-literal", "l": 1 }, { "c": 1.0, "d": "JavaScript length property", "e": [ "length" ], "i": "metadata/lang/scripted::length-prop", "l": 1 }, { "c": 0.550000011920929, "d": "Array element swap pattern", "e": [ "var a=r.elements;return typeof a==\"string\"?a.split(\" \"):a}function m(a){var b=i[a[g]];return b||(b={},h++,a[g]=h,i[h]=b),b}funct" ], "i": "objectives/anti-static/obfuscation/string/encoding::js-array-swap", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.9200000166893005, "d": "String.fromCharCode call marker", "e": [ "String.fromCharCode" ], "i": "objectives/anti-static/obfuscation/encoding/arithmetic::js-rot-n-charcode--rx-3", "l": 1, "m": "B0032", "el": [ "7d" ] }, { "c": 0.30000001192092896, "d": "for loop (AST)", "e": [ "for(var d in a)t(a,d)\u0026\u0026e.addTest(d,a[d]);", "for(var d in y[c])y[c].hasOwnProperty(d)\u0026\u0026y[c][d].onload()", "for(o in d)k.setAttribute(o,d[o]);", "for(i=0;i\u003ca.length;i++)j=a[i],e(j)?g(j,0,l,0):w(j)?B(j):Object(j)===j\u0026\u0026h(j,l);", "for(;e\u003cg;e++)d.createElement(f[e]);", "for(c in a)a.hasOwnProperty(c)\u0026\u0026b++;", "for(f=0;f\u003cd;f++)g=a[f].split(\"=\"),(e=z[g.shift()])\u0026\u0026(c=e(c,g));", "for(var z in m)t(m,z)\u0026\u0026(r=z.toLowerCase(),e[r]=m[z](),p.push((e[r]?\"\":\"no-\")+r));", "for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:w(f,\"function\")?f.bind(d||b):f}", "for(f=0;f\u003cb;f++)c=x[f](c);", "for(n in m=function(){var b=0,c;for(c in a)a.hasOwnProperty(c)\u0026\u0026b++;return b}(),a)a.hasOwnProperty(n...", "for(j in d)e.setAttribute(j,d[j]);" ], "i": "micro-behaviors/data/control-flow/analysis::for-loop-ast", "l": 2, "el": [ "10:1113", "10:4228", "10:7029", "10:6501", "10:2015", "10:6057", "10:5336", "10:979", "10:213", "10:5399", "10:6025", "10:7389" ] }, { "a": "T1027", "c": 0.949999988079071, "d": "Regex component marker", "e": [ ").join" ], "i": "objectives/anti-static/obfuscation/string/reverse::js-reverse-then-eval--rx-12", "l": 1, "m": "B0032" }, { "d": "Direct Function constructor call", "e": [ "=Function(" ], "i": "micro-behaviors/process/interpreter/vm::function-direct-call", "l": 3 }, { "c": 0.8799999952316284, "d": "Codebase deletion target", "e": [ "code" ], "i": "micro-behaviors/data/text/keywords/lexicon::target-codebase", "l": 1 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "join(" ], "i": "micro-behaviors/fs/file/read::require-cwd-package-json--rx-4", "l": 1 }, { "c": 0.699999988079071, "d": "Function constructor keyword", "e": [ "Function" ], "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "l": 2 }, { "a": "T1497.001", "c": 0.75, "d": "Compares value against undefined string", "e": [ "==\"undefined\"" ], "i": "objectives/anti-analysis/environment-detect/wsh::env-check-undefined-compare", "l": 1, "m": "B0003" }, { "a": "T1027", "c": 0.9300000071525574, "d": "Regex component marker", "e": [ ").join" ], "i": "objectives/anti-static/obfuscation/string/reverse::js-reverse-split-then-decode--rx-3", "l": 1, "m": "B0032" }, { "c": 0.8999999761581421, "d": "innerHTML/location.href rewrite (page blocker shape)", "e": [ "innerHTML=\"" ], "i": "objectives/supply-chain/hidden-payload/extensions/browser::extension-page-block", "l": 1 }, { "a": "T1027.002", "c": 0.8999999761581421, "d": "LZString decoded value split call", "e": [ ").split(\"?\")" ], "i": "objectives/anti-static/obfuscation/string/encoding::js-lzstring-table-split-call", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Last line is over 1000 chars", "e": [ "text.last_line_length = 7558.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "l": 1, "m": "B0032" }, { "c": 0.8999999761581421, "d": "Nested loops with multiple charAt calls", "e": [ "for(var z in m)t(m,z)\u0026\u0026(r=z.toLowerCase(),e[r]=m[z](),p.push((e[r]?\"\":\"no-\")+r));return e.addTest=function(a,b){if(typeof a==\"ob" ], "i": "micro-behaviors/data/encode/permutation/loop::js-permutation-loop", "l": 2 }, { "c": 0.699999988079071, "d": "BSD license reference", "e": [ "BSD" ], "i": "metadata/package/license::bsd-word", "l": 2 }, { "a": "T1027", "c": 0.949999988079071, "d": "Regex component marker", "e": [ ".split(" ], "i": "objectives/anti-static/obfuscation/string/reverse::js-reverse-then-eval--rx-13", "l": 1, "m": "B0032" }, { "c": 0.8399999737739563, "d": "ANSI terminal erase operation", "e": [ "[j" ], "i": "micro-behaviors/ui/terminal::ansi-erase-op", "l": 1 }, { "a": "T1027", "c": 1.0, "d": "Benign context: high comment-to-code ratio (≥35%)", "e": [ "comments.to_code_ratio = 0.43" ], "i": "objectives/anti-static/obfuscation/code-metrics/strings::comment-heavy-source", "l": 1, "m": "B0032" }, { "d": "Five or fewer comment lines in file", "e": [ "comments.lines = 3.00" ], "i": "metadata/file/text/metrics::few-comment-lines", "l": 1 }, { "c": 0.800000011920929, "d": "String.fromCharCode fragment (romChar)", "e": [ "romChar" ], "i": "objectives/execution/interpreter/script/wsh-fragments::from-char-code-fragment-romchar", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Benign context: ≥25% comment ratio", "e": [ "comments.to_code_ratio = 0.43" ], "i": "objectives/anti-static/obfuscation/code-metrics/string-blob::js-base64-candidate-comment-heavy", "l": 1, "m": "B0032" }, { "a": "T1105", "c": 0.800000011920929, "d": "DOM script element literal", "e": [ "text/javascript", "script" ], "i": "micro-behaviors/process/create/load/remote-code::js-dom-script-literal", "l": 1, "el": [ "53", "41" ] }, { "c": 1.0, "d": "DOM or CSS size property", "e": [ "width" ], "i": "micro-behaviors/ui/window/manage/dom::size-prop", "l": 1 }, { "a": "T1204.002", "c": 0.699999988079071, "d": "createElement anchor for download", "e": [ "createElement(\"a\")" ], "i": "objectives/command-and-control/dropper/delivery/html::drive-by-create-anchor", "l": 1, "m": "F0007" }, { "c": 0.7799999713897705, "d": "References iframe DOM element", "e": [ "iframe" ], "i": "micro-behaviors/ui/window/manage/dom::browser-iframe-element", "l": 3 }, { "c": 0.699999988079071, "d": "High ratio of single character function names", "e": [ "functions.single_char_names = 25.00" ], "i": "objectives/supply-chain/hidden-payload/extensions/vscode::single-char-names-dup", "l": 2 }, { "c": 0.8999999761581421, "d": "Creates stylesheet link element", "e": [ "createElement(\"link\")" ], "i": "objectives/impact/ui/delivery::stylesheet-link-injection", "l": 1 }, { "c": 0.8999999761581421, "d": "Stylesheet rel assignment", "e": [ ".rel=\"stylesheet\"" ], "i": "objectives/impact/ui/delivery::remote-stylesheet-injection", "l": 1 }, { "c": 0.800000011920929, "d": "Many comma sequence expressions (obfuscation)", "e": [ "ast.sequence_count = 48.00" ], "i": "objectives/anti-static/obfuscation/syntax::js-comma-sequence-obfuscation-v2", "l": 2 }, { "c": 0.8999999761581421, "d": "Prototype guard checks constructor", "e": [ "constructor" ], "i": "micro-behaviors/data/source/prototype::js-proto-guard-constructor", "l": 2 }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.02" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.699999988079071, "d": "Many one-line source function definitions", "e": [ "functions.one_liners = 58.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/functions::many-one-liner-functions", "l": 2, "m": "B0032" }, { "c": 0.800000011920929, "d": "Slash path split call", "e": [ "i.url.split().pop().split", "i.url.split", "a.split().pop().split", "a.split" ], "i": "objectives/command-and-control/dns/tunneling::slash-path-split-call", "l": 1, "el": [ "17b0", "17b0", "1800", "867" ] }, { "a": "T1027", "c": 0.75, "d": "Deep function nesting", "e": [ "functions.max_nesting_depth = 5.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/functions::deep-nesting", "l": 2, "m": "B0032" }, { "c": 0.8999999761581421, "d": "Prototype guard keyword", "e": [ "prototype" ], "i": "micro-behaviors/data/source/prototype::js-proto-guard-prototype", "l": 2 }, { "a": "T1557", "c": 0.699999988079071, "d": "XMLHttpRequest readystate interception", "e": [ "onreadystatechange=null,b)){\"img\"!=a\u0026\u0026m(function" ], "i": "micro-behaviors/process/hook/xhr::readystate-intercept", "l": 3 }, { "c": 0.800000011920929, "d": "Assigns DOM innerHTML", "e": [ ".innerHTML=" ], "i": "micro-behaviors/ui/window/manage/dom::browser-innerhtml-assignment", "l": 3 }, { "a": "T1027", "c": 0.699999988079071, "d": "Low identifier reuse ratio", "e": [ "identifiers.reuse_ratio = 0.11" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::low-identifier-reuse", "l": 2, "m": "B0032" }, { "c": 0.699999988079071, "d": "DOM write API insertBefore", "e": [ ".insertBefore(" ], "i": "objectives/impact/ui/delivery::dynamic-ad-injection-dom-api-b", "l": 1 }, { "c": 0.699999988079071, "d": "DOM write API innerHTML or appendChild", "e": [ ".appendChild(" ], "i": "objectives/impact/ui/delivery::dynamic-ad-injection-dom-api-a", "l": 1 }, { "c": 0.800000011920929, "d": "Assigns CSS mime type", "e": [ ".type=\"text/css\"" ], "i": "objectives/impact/ui/delivery::css-type-assignment", "l": 2 }, { "c": 0.8500000238418579, "d": "High function density", "e": [ "functions.density_per_100_lines = 580.00" ], "i": "metadata/file/text/metrics::high-function-density", "l": 2 }, { "c": 0.800000011920929, "d": "Removes DOM node from page", "e": [ ".removeChild(" ], "i": "micro-behaviors/ui/window/manage/dom::browser-node-remove", "l": 3 }, { "c": 0.8399999737739563, "d": "Creates script DOM element", "e": [ "createElement('script')" ], "i": "micro-behaviors/ui/window/manage/dom::browser-create-script-element", "l": 3 }, { "c": 0.9700000286102295, "d": "Form-validation vocabulary in dense non-ASCII file", "e": [ "Array", "String", "Object" ], "i": "metadata/file/text/format::i18n-validation-vocab", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Minified/compressed code (multiple indicators)", "e": [ "functions.one_liners = 58.00", "text.whitespace_ratio = 0.02", "identifiers.sequential_names = 28.00", "functions.density_per_100_lines = 580.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code", "l": 2, "m": "B0032" } ], "sha": "1c05aaa820241e7d8e8fedc10701fd9159b799dba67618e8a3e648c9de55723c", "path": "VirusShare_903884bcdd17f5b228da881fa779e71b", "type": "javascript" } ], "tv": "ed903" } }