{
  "ml": {
    "v": "7",
    "eng": "2.11.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000013033549,
        "rte": "az",
        "prob": 0.000013033549
      },
      {
        "cls": 0,
        "raw": 0.000032206375,
        "rte": "az/scripts",
        "prob": 0.000032206375
      },
      {
        "cls": 0,
        "raw": 0.00002554059,
        "rte": "az/javascript",
        "prob": 0.00002554059
      }
    ],
    "prob": 0.000013033549,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013033549294050317,
        "type": "javascript"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-17T17:21:57Z"
  },
  "path": "20160328_0268937020c44c7d2e731fee14e3ff9f.js",
  "raw": {
    "v": "8",
    "files": [
      {
        "id": 0,
        "sha": "2853a031ffce972c374e78a0a7f25ff8139c2adeb9bd7393a7780e2197f75fa7",
        "path": "20160328_0268937020c44c7d2e731fee14e3ff9f.js",
        "size": 2453,
        "type": "javascript",
        "facts": {
          "imp": [
            [
              "",
              "Loffxkfa.Run"
            ],
            [
              "",
              "Pocztfsfrh.getUTCMilliseconds"
            ],
            [
              "",
              "WScript.Sleep"
            ],
            [
              "",
              "Dlzcl"
            ],
            [
              "",
              "Pocztfsfrh.getUTCMilliseconds"
            ],
            [
              "",
              "WScript.Sleep"
            ],
            [
              "",
              "Dlzcl"
            ],
            [
              "",
              "Pocztfsfrh.getUTCMilliseconds"
            ],
            [
              "",
              "Dnmwqnons"
            ],
            [
              "",
              "Dnmwqnons"
            ],
            [
              "",
              "Dnmwqnons"
            ],
            [
              "",
              "Dlzcl"
            ],
            [
              "",
              "Cmseon"
            ],
            [
              "",
              "Eqwjd"
            ],
            [
              "",
              "Loffxkfa.ExpandEnvironmentStrings"
            ],
            [
              "",
              "Pyynk"
            ],
            [
              "",
              "Axjqus.send"
            ],
            [
              "",
              "Dlzcl"
            ],
            [
              "",
              "Clvdck"
            ],
            [
              "",
              "Tiyaftnz"
            ],
            [
              "",
              "Lhzicbsthm.write"
            ],
            [
              "",
              "Tiyaftnz"
            ],
            [
              "",
              "Lhzicbsthm.SaveToFile"
            ],
            [
              "",
              "Axdbkvsse"
            ],
            [
              "",
              "Tiyaftnz"
            ],
            [
              "",
              "Pdzdsj.close"
            ],
            [
              "",
              "Jhhxz"
            ],
            [
              "",
              "Axdbkvsse"
            ]
          ],
          "mbr": [
            "Axjqus.ResponseBody",
            "Axjqus.readystate",
            "Axjqus.send",
            "Lhzicbsthm.SaveToFile",
            "Lhzicbsthm.type",
            "Lhzicbsthm.write",
            "Loffxkfa.ExpandEnvironmentStrings",
            "Loffxkfa.Run",
            "Pdzdsj.close",
            "Pdzdsj.position",
            "Pocztfsfrh.getUTCMilliseconds",
            "WScript.Sleep"
          ],
          "tgt": [
            "Axdbkvsse",
            "Axjqus.send",
            "Clvdck",
            "Cmseon",
            "Dlzcl",
            "Dnmwqnons",
            "Eqwjd",
            "Jhhxz",
            "Lhzicbsthm.SaveToFile",
            "Lhzicbsthm.write",
            "Loffxkfa.ExpandEnvironmentStrings",
            "Loffxkfa.Run",
            "Pdzdsj.close",
            "Pocztfsfrh.getUTCMilliseconds",
            "Pyynk",
            "Tiyaftnz",
            "WScript.Sleep"
          ],
          "funcs": [
            [
              "Pasmckhwqk",
              67
            ],
            [
              "Jhhxz",
              234
            ],
            [
              "Pyynk",
              305
            ],
            [
              "Dnmwqnons",
              344
            ],
            [
              "Clvdck",
              408
            ],
            [
              "Dlzcl",
              550
            ],
            [
              "Cmseon",
              615
            ],
            [
              "Eqwjd",
              1443
            ],
            [
              "Axdbkvsse",
              1576
            ],
            [
              "Tiyaftnz",
              2049
            ]
          ],
          "metrics": {
            "ast": {
              "op.eq": 2,
              "op.lt": 2,
              "op.ne": 1,
              "op.add": 5,
              "op.mul": 4,
              "op.sub": 1,
              "op.land": 3,
              "max_depth": 17,
              "call_count": 38,
              "node_count": 998,
              "member_count": 12,
              "op_density.eq": 0,
              "op_density.lt": 0,
              "op_density.ne": 0,
              "op_density.add": 0.01,
              "op_density.mul": 0,
              "op_density.sub": 0,
              "sequence_count": 2,
              "op_density.land": 0,
              "max_concat_chain": 4,
              "member_depth_max": 2,
              "const_return_function_count": 3,
              "const_return_function_ratio": 0.3
            },
            "file": {
              "size": 2453,
              "entropy": 5.61
            },
            "text": {
              "lines": 75,
              "top_char": 110,
              "max_ws_run": 1,
              "digit_ratio": 0.04,
              "space_count": 221,
              "char_entropy": 5.61,
              "unique_chars": 86,
              "top_char_null": 0,
              "string_density": 0.48,
              "top_char_ratio": 0.04,
              "avg_line_length": 30.71,
              "max_line_length": 100,
              "empty_line_ratio": 0.01,
              "last_line_length": 1,
              "whitespace_ratio": 0.15,
              "identifier_density": 1.73,
              "line_length_stddev": 23.34,
              "encoded_string_ratio": 0.03,
              "normalized_string_count": 4.16,
              "trailing_whitespace_lines": 4,
              "normalized_unique_identifiers": 6.26
            },
            "binds": {
              "count": 39
            },
            "binary": {
              "peak_region_bytes": 2453,
              "peak_region_entropy": 5.54
            },
            "source": {
              "function_count": 9
            },
            "strings": {
              "bytes": 331,
              "count": 36,
              "url_count": 1,
              "avg_length": 9.19,
              "max_length": 26,
              "avg_entropy": 2.61,
              "empty_count": 1,
              "entropy_stddev": 0.77,
              "base64_candidates": 1
            },
            "comments": {
              "chars": 65,
              "count": 1,
              "lines": 5,
              "to_code_ratio": 0.07
            },
            "functions": {
              "count": 9,
              "density": 13.33,
              "avg_params": 0.4,
              "code_ratio": 0.35,
              "max_params": 2,
              "one_liners": 9,
              "length_stddev": 4.8,
              "avg_name_length": 6.8,
              "no_params_count": 7,
              "avg_length_lines": 2.6,
              "max_length_lines": 17,
              "min_length_lines": 1,
              "avg_param_name_length": 7.25
            },
            "identifiers": {
              "count": 130,
              "unique": 39,
              "avg_length": 7.1,
              "max_length": 10,
              "min_length": 5,
              "avg_entropy": 2.59,
              "reuse_ratio": 0.3,
              "length_stddev": 1.69
            }
          }
        }
      }
    ]
  }
}