{ "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000038633745, "rte": "az", "prob": 0.000038633745 }, { "cls": 0, "raw": 0.00015280645, "rte": "az/scripts", "prob": 0.00015280645 }, { "cls": 0, "raw": 0.000026851892, "rte": "az/javascript", "prob": 0.000026851892 } ], "prob": 0.000038633745, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00003863374513457529, "type": "javascript" } ], "version": "v18.18", "analyzed_at": "2026-09-14T01:49:46Z" }, "path": "Sleigh Bell Percussion.mp3", "raw": { "v": "8", "rev": "b3dc8", "files": [ { "id": 0, "ctx": [ { "b": "nKLuo000005kl55g5}p[08)YBx\u003eI94ls\u003c$Haw=S\u0026v%8\u003clx(v(ifFSR}pFy/?5ccoVxk7s/zCS??pYJfH08#xZ000Jfx\u0026Gj)wPF#qh.D*qf-TNpo-Lfb0a*4Xx\u0026Gj)pes+Z03A%HfFCgmg=DKhfFCgmfF$QdfFCgmfF\u003eNuattG6fFCvsfD-56fFCgsl]DewfFCgmfHXqJfFCgmhBo!(ao", "ln": 0, "col": 1, "line": 1 }, { "b": "R4qRY@ZFs*\u003eBNb2vtc\u003ccYZ@s5pO5ziH8suN6.Ia\u003c=PI8UjWiWNa=7ewXKo[\u0026L9h1t=K9ool$d(xv?nJDnL8GBnL-cOBYax=LaFnpO$wdrqL6FK?G!\u003e!.\u003c!@yO$m\u003eWHABOcf!xPJN.$^go^ztg6l\u0026\u0026}yIwP$I)lX65DESW!\u003evIRApA{bac:J9iZ{vHZbtfpAKU{apNa7ajWavH", "ln": 2190, "col": 2191, "line": 1 }, { "b": "00000000000000000000000000000000000000000rq@Q00007Af17A4/=W\u003c5:H.3.#K7DjZJ:=eZ65xTi-XmXHh6kryGdM07432zYN2T)TEDa\u003ec.oLPk-v1\u003eykJe@^Pm.iOKpbzOt}h!r5!Q*%!5uOTB]sA\u003c5\u0026+*lKnuV8WS\u003eCV.\u0026\u003ead)ShZKHf8\u0026yNHR%k/\u003e}HCO86*=8Cmkl", "ln": 3146, "col": 68, "line": 5 }, { "b": "HU5\u003eHyF:s8mk.eHa[QUYMrw1m+Lh4t)\u003c$IvKP36hN^YYLsdk$kcdRH)JVXhRgw(B]+pE}8Yz}{h%bRWfd!mq5(T@\u003e\u003es.2WWRTBhiSV2Wh=\u003ea\u003cA-U.k^WurzCH^j\u0026\u003eVY$FYt#YY!Q^iZ]II%REb4O$c3PiWAWm%#7hgB8m^/4]TSKYQEW6u8Y?Ds+pW[z!Y[Y)#iYzVw@*?Ban]5M*uj2b]zU=p^!A.u[!l:*VnNqxuZJYv3z?N!+Jt3j\u0026.", "ln": 3936, "col": 364, "line": 10 }, { "b": "T3glZvD\u003c4]QI+*8A=h\u003eyrv^TbjZ\u003e$gff#1f/168{{UbvNXSnyZNb:fNWzfR\u0026tH[7dzQ]XzCWnSa)vdc$RTB3h*sa.^E]ZPUSAL[qRLQ?m92HHR}j/AfS%ZhjgPzjT{C\u003e?GMCxz==jz\u003cXT\u003cmU9L$vVHdpnRl={tAruqz3W+6]Iee7@w9XO?%Y=L(PAew3yo=*M6e%5H\u0026gF4%RnD.at.WflDJ*j?S5W\u0026R\u003eVe3Fz=O)oQKCK6grWCO4H!)j\u003c\u003e0dU4Hb\u0026H2lBVzT0![9Fk43gC::uCkg@!0}#y)MYhJulS{L#Ql?=6hiWz%IOOT(CBAxidgfEJEsRD#!U4}h0N9ri\u0026GKtIa1:\u003c^6h}eDlcdfxUiUu^9JD{Q\u003eOBVD/m27#wM!kqg5Y?T$/gxi(xp", "ln": 6387, "col": 57, "line": 18 }, { "b": "lRy6#Ey$6\u003e*w?iN00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000rq@Q00006^t(SA51vR4[-?wqD2u/2jWaJ\u003ezoFUzR+\u0026^IXKY.4ryl-^0fHUC-\u003cZ\u0026M[2C*)-\u0026CLfkMy=.\u003c[uq2-yem\u003eY^YDgO1x", "ln": 7266, "col": 936, "line": 18 }, { "b": "AqAb5FL/5P\u00266-Rj:t)AJc@/k*E4zcg4X+kQ=$tzd2uk9[:scUFgiujv\u003ePcl-=m6EOk?Gm[fUQbBL^-}n=}a)cKt!zuURWEHG?a9=hPp6\u003ex$tiLm-2]LJ9EQ*C8K.SIkE9@vV=w*9qZP(a2U.=+UnzdKcL+xp=@2PcoO-lL1-tRh!ygKv#AFaIZ[u%a\u0026J7-5\u003eaK(iIOuocZz7?ZPzd%h.ppnc\u0026:kE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000rq@Q00007C92L\u0026yS*XMK)dJqK8t)?k%-L=4A7lEcLf}PXd@WSs5Ye/0lu1ZvL\u0026AuF}PtS}(V3M%cvsaSIbdyU(", "ln": 8115, "col": 24, "line": 25 }, { "b": "{?HP5(!fa5(f+*TmxQA2!JuRlo1ni0.O?j#f\u003c)B%TL5BOsv-i\u003exO%pJ{SPlDGrh]ZRJ[YKM==yk)+CcNY}mlHWxgPr=3=YuTZ{q*:f8)*\u003eqxAhM@Qk?fI/HjktEJykJ+kw%l4$vQ.V#Hfb!*mnM=T:Fb/Ni0UNbj{]Rm]x)pMFuhp9m/tbfn3ofTt*a1NYum0a46N@1$.r)/9*X]P*3@PRVP%!f2!(:aD3}nrE:Cz{K2I\u003eSLT\u003et=VZp4lLWwvi$W9eU5ylt*/Cbn?hNKb*YM\u003c2hgGj8GhxB/.dNi9#uvhgz^ao+632gT5bbb\u003c/tXH9-)}.wzuo?5^Ak+J/P\u0026NQC-F*?P+RA@.2KXFF:i\u003cayM49pUbnt.\u0026w)3XA2KVmDi9rJRZx=H/OQP4$gIu{f:^]8ArzEbd", "ln": 8785, "col": 126, "line": 27 }, { "b": "f52YInpBcFnB\u003cwFyIzKtP-tG31os6?^Fg!eL7cxO6v)2l-@I[VNIRiKd{Wm/dL1WMBTi/RJh5yIn]3G+hzR*E8[sBSGAs[h]/I3(Mq(f0c\u003en2We-?$Z[-GJA?HeS-+KTHd:m[vD%nqr+Z5rvaX1z\u003c-ZgihhMr7rpXADkCnQ#INBTXHGXR)su--gp", "ln": 9701, "col": 236, "line": 30 }, { "b": "Rx}c#gHJo5v5HQ*F8Ay+{t9en:kb[Ru)8\u003e.SnuVv47:ZCSuCia)@E1Re%1-NY7SjbOtqy)T6[Z}eV[)pN]Y3@rv8+t\u003eK{DlR]I\u003c$Hcs%9\u003e\u003edeTMDQ63kEkANQaD", "ln": 13791, "col": 554, "line": 41 }, { "b": "eiz+fWYihcT-)[wtin%!ZrkYCOx}2R(KT0{h[R8wE]}ex]x@Oez$P-wQ{lEND)!}5f4oL6jbk+3WSJrI8ybAJrPWc9wIDRiE+=H=@X0olq\u003e({ls\u0026m\u0026r^.@7idrAg.BKRbi=FyOgq^\u003cpK}=k8DpudWZ?tD*aE\u003eud}%eK:[OC}rSMJ2Ev)Zn8JfnP", "ln": 16260, "col": 397, "line": 47 }, { "b": "Tiu6r]paO7\u003c-VC/P-uVcwiWsMYB0g1lVKZBr6w@HyR:+!NWNj8wXD$RP8JTpD=\u003el*y{GFaVTPk^!!NGiv*]Y\u00264^%/S{QPtX/8Ll\u003c%cWJPVf2hc8b{bCT-w\u003edO2=", "ln": 39894, "col": 2184, "line": 108 }, { "b": "\u0026K=wVElwpUu.l}])ZWF\u0026.!Xz\u003ce\u0026\u0026y(%k#us\u003c}PPGyN\u0026YY)Y:RaPx=$*W!W01+Ed92Fa@#n]!fQ093C\u003e0Z6UABKUvbM!mK[-M[?@e0.3sQTo]yJB}-WBOVd0WK#VrxrP\u003cw2J]O\u0026uZ1k7d}(pC=/eFB3A$8M\u003e\u0026F(Lzvn^S+K4yN3@{a%c.JI}c[:qPmXo47q4jW$pS*5(VTt4M9?M(r]jATM7XWY{q)\u003e9F#kR/WX!IoGD?%c\u003ch8STedl($Ku^TdIMf+H-^Eqss[kL%vp)*(I\u0026lO=(=w0YAfT2]V.h0IDZ}RxgyVHf\u0026#ev?4H?-\u0026PdCMh{A!)3h=?zv3%AO:\u0026dT\u003ezp)r{*+0i@k[07tWw-Xh1m\u003ebwi7ReFMz8/hI=kRsyE9eFbYwl[)Z}b7wLw}MK18Wnf7YpOlBsSG5/Vyt)om@o\u0026+CV=]\u00262iD]-bTOqT{uuoq[e{E6n{N=Tb0{En6+H@b{5OPCOy3+x*/%JD/w{mpY)YpDjfhgz90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000rq@Q00006\u003e-w-oz\u0026nO%ql26.B8Ckfk#CJMeYlBodMEdXXsWXS=jD8oPRo%)x8KJDz\u0026JT@-v]19Z9dubC^C(/hlm*D:.vkL-eZZI9)NGv!YecIC*p=bNqbeX\u003e)\u0026(IxPW5[UqW)B!pO)ubdD6#", "ln": 64335, "col": 3, "line": 177 } ], "mol": "O(As)Md", "sha": "2c0110870db16a9cf4808d0e9ec39e0db581195a78bd0405da74e941592d9095", "path": "Sleigh Bell Percussion.mp3", "risk": 3, "size": 145980, "supp": [ { "by": [ { "id": "metadata/file/metrics::high-byte-script-text", "spans": [ [ 0, 27 ] ] } ], "id": "micro-behaviors/crypto/symmetric/xor/loop::xor-modulo-key-loop", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "spans": [ [ 0, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code", "spans": [ [ 0, 28 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::recognized-very-long-lines-marker", "spans": [ [ 0, 19 ] ] }, { "id": "metadata/file/metrics::low-whitespace", "spans": [ [ 0, 28 ] ] } ], "id": "objectives/anti-static/obfuscation/string/anomaly::javascript-line-bloat", "crit": "notable", "kind": "unless" } ], "type": "javascript", "facts": { "imp": [ [ "", "��" ], [ "", "tS32y�e�" ], [ "", "�H" ], [ "", "�r" ], [ "", "�" ], [ "", "�u��k" ], [ "", "�" ], [ "", "Y�3�4" ], [ "", "T�2��maSwr��Ku��" ], [ "", "ʷ" ], [ "", "�" ], [ "", "���.���d" ], [ "", "�JmˢG�P�E�HUWUC" ], [ "", "�x�" ], [ "", "�x�" ], [ "", "�����鈖K6" ], [ "", "RH" ], [ "", "�d�" ], [ "", "�" ], [ "", "�" ], [ "", "�v�" ], [ "", "�" ], [ "", "�" ], [ "", "V��R�Iٓe���El���XgO��" ], [ "", "��" ], [ "", "��" ], [ "", "�" ], [ "", "�ϖ������r���R޻ڷ3�k�eK��Mֵ���R�ŽZ�" ], [ "", "�R3" ], [ "", "c�ҏ" ], [ "", "W�Ͷ��9�yS�" ], [ "", "�" ], [ "", "Z�I" ], [ "", "�E���h�1E�k" ], [ "", "�" ], [ "", "�.���M" ], [ "", "q��5h��ʹa" ], [ "", "����Fd��" ], [ "", "V�" ], [ "", "���L�I�A�.�" ], [ "", "�q���" ], [ "", "�t" ], [ "", "�L0��" ], [ "", "��E���F" ], [ "", "�j�" ], [ "", "���" ], [ "", "N3���" ], [ "", "�" ], [ "", "�n" ], [ "", "ʅ�t�3C�����" ], [ "", "�Ko����" ], [ "", "Y$��" ], [ "", "Hx�F����4LM" ], [ "", "�h�" ], [ "", "���h" ], [ "", "���h" ], [ "", "���h" ], [ "", "��" ], [ "", "�̻ؕ��j�ys" ], [ "", "�U" ], [ "", "����" ], [ "", "Rh�4�S���Z" ], [ "", "�x�Y�9�5" ], [ "", "��bt�" ], [ "", "⤊�Q��W��w��" ], [ "", "޵��R4�" ], [ "", "�T" ], [ "", "�" ], [ "", "�b��t" ], [ "", "��6�" ], [ "", "Ûdz�w7" ], [ "", "�" ], [ "", "a��" ], [ "", "a�" ], [ "", "Ú����_�YΖ" ], [ "", "ݴ��Rԁ��" ], [ "", "����9�U�e�Ҟ��db" ], [ "", "Am" ], [ "", "�kZ��b�jt" ], [ "", "�ֽ�����W6��8�_4�o�o��v" ], [ "", "�" ], [ "", "EI" ], [ "", "�4.H" ], [ "", "Knp�F��2�Ź" ], [ "", "�ɢ�H�" ], [ "", "�" ], [ "", "�" ], [ "", "�" ], [ "", "vq�" ], [ "", "��" ], [ "", "w���ySw������" ], [ "", "W�Ȳ�1" ], [ "", "��" ], [ "", "lgV�Q�" ], [ "", "�" ], [ "", "a�Q" ], [ "", "��zi�Β���f��$" ], [ "", "�P�Z�ս" ], [ "", "��AL�" ], [ "", "����rQ" ], [ "", "���s�" ], [ "", "�a" ], [ "", "��" ], [ "", "��" ], [ "", "lP" ], [ "", "�u_z�" ], [ "", "Ԥ2�" ], [ "", "��j�9k" ], [ "", "�DI֤" ], [ "", "��j��" ], [ "", "Tρ�" ], [ "", "۩b�" ], [ "", "��" ], [ "", "��" ], [ "", "���R�Z�5hi��R�" ], [ "", "�W�Q���3" ], [ "", "�" ], [ "", "��WOOOo" ], [ "", "u���t" ], [ "", "�����v" ], [ "", "w����" ], [ "", "��" ], [ "", "N�kZ" ], [ "", "W�i" ], [ "", "eZ�" ], [ "", "fIH�M�I9�t՗S�Q" ], [ "", "����" ], [ "", "L��xw��k" ], [ "", "�j�i33�k��ZH��֒" ], [ "", "��" ], [ "", "k����x��_��M" ], [ "", "�9���d0I" ], [ "", "���So��J" ], [ "", "⡫" ], [ "", "��rp�F�uF" ], [ "", "зф" ], [ "", "���X" ], [ "", "�������“��I" ], [ "", "�Z�" ], [ "", "�Z�" ], [ "", "�B" ], [ "", "���R2r" ], [ "", "��" ], [ "", "vX���s�Ζ���N�" ], [ "", "�Z" ], [ "", "�bQI����4�u����a" ], [ "", "��" ], [ "", "�n" ], [ "", "�L�b��" ], [ "", "t�5" ], [ "", "�lG�" ], [ "", "���b����" ], [ "", "�" ], [ "", "G������I��֕�Z�D�NJ����j��F�$" ], [ "", "�ڻ�" ], [ "", "��n���W�ʾ�" ], [ "", "a„e$ec�" ] ], "mbr": [ "Am().�", "C.e���c����", "Eb����.w", "E�Yg�Xs�j����.��Q��1��", "G������I��֕�Z�D�NJ����j��F�$().r0��X�u", "I�.mˀH", "K.�2��WZ��", "K�.�", "K�0�wf���ݥ��w.��Y��f�", "K����2�QE��b���b��.��Il�Y", "M.��", "O.��", "Pg.N�U", "Q�.I��S��D9", "RK.��", "R�RS����.S", "R��i.�", "R���.��j�x�", "X�����Uw��.��", "YM.�Mk�", "YM.�Mk�.�������x��y�w�", "Y�F$P.��r", "Y�Qc.���1��Z�", "Y�Qc.���1��Z�.�9�", "Z5�f.���l", "_Ҫȱ���L�.�", "h.�", "h�ry9.�zr�$��", "j�.��2�7��2�w�k���������_", "j���.w", "j���.w.w", "k���ڥ�.n", "m��Q3.v", "p�.�g", "q�aI.f", "r.PlP厁�X", "r.PlP厁�X.������L", "sZ�.w����v�", "sZ�.w����v�.�fwV��r�", "t.�", "t�eM�bd����n�.$RZ֧3E", "uR����.�", "w.kxs��", "ʨ��l1Ǜ�����.����", "ʨ��l1Ǜ�����.����.��U�7�c��������", "˚�w�����X���q��.�UeP", "˩�.���", "ݵ�.�", "밓��a�vFdXP.�J�t", "�.A�Eȹ", "�.D�X", "�.H", "�.I", "�.Qp�R�F�I", "�.nk", "�.u", "�.v���", "�.�", "�.�.��A�B", "�.�4ЬD���", "�.�Aԋ3", "�.�L�H", "�.�V�����", "�.�Y�j�t9��IK�", "�.�g", "�.�ojT�T��", "�.�˰�", "�.���", "�.���M", "�0H�4sJ�M�j.��L�9", "�1�.��", "�3.�d4���ڟw", "�3.�d4���ڟw.�r޿�", "�4.H", "�53.�", "�6��m���.�ԙu", "�7d�Y�.z", "�B�.ֻv����s�������jַIS", "�D.��T�", "�H�.xe�", "�K.r��", "�OPjj�r�Ol�7z���9Z�����r��.a�", "�Vș����R.�g", "�Y.w�", "�Z�q.l�D�", "�aUr�3�_�.�U�", "�c�.�dљ$�Dp", "�d.l��E", "�fSe�.�i", "�gc.g̲�pÛ���j���޻̫ck�", "�g��c�T��b.R鐳MhkRL�", "�kZ��b�jt().�h�v�Tf", "�k�Aj.��H�", "�l�.s�Ϲa�", "�m.�", "�p�7.�B", "�p�H�o����̷���.�K�ۺ�", "�r��������5�5�������.k�v��", "�t����39�.vݚ���", "�u���.���", "�Țà.w��ki����a", "�̻�3�.�", "��.B��v9��w�", "��.H�", "��.k", "��.�R", "��.��o", "��.����Ž�ܲz", "��2�vy��֥���M��������.k", "��77�y.���", "��8�.�", "��X��p�J.�wIJM2�", "��oV.��u�", "��r�X�F�.��", "��v�.���6�", "��y�.�U", "��̷�5��X���.�6X�j�", "��ݓk.��D��", "���.j��r�", "���.��2", "���.���T�kYv�Y�k", "���.���d", "���1��Wf��.�¾��", "���9U�f�.ٌ���p�e", "���L�I�A�.�", "���MC��G.ė�ëVR����", "���U×.ϵ���", "���b�.�", "���l��.��d��", "���u�0���.xdO��", "���˘o��.x�", "���ֻ���U�.�՝ak�", "���޻.�u", "����.lQWդo", "����C�Y���.��ܮ", "����C�Y���.��ܮ.��tl�_NK", "����k.ٱ�z�6X���", "����o.�Z�", "����wq1.#Wjg�B�v������", "����yW���.�s", "����y�.a�9�", "����y�.a�9�.ac����", "�����.�֤�Uܻ", "�����3���.�›Z���C�", "��������g.��" ], "tgt": [ "$�v�", "Am", "G������I��֕�Z�D�NJ����j��F�$", "Hx�F����4LM", "N�kZ", "Rh�4�S���Z", "T�2��maSwr��Ku��", "V��R�Iٓe���El���XgO��", "W�Ȳ�1", "Y$��", "Z�I", "a�Q", "c", "eZ�", "fIH�M�I9�t՗S�Q", "n", "t�5", "u���t", "vX���s�Ζ���N�", "w���ySw������", "y", "Ûdz�w7", "ʅ�t�3C�����", "зф", "ݴ��Rԁ��", "޵��R4�", "�", "�.���M", "�4.H", "�DI֤", "�H", "�JmˢG�P�E�HUWUC", "�L�b��", "�R3", "�U", "�W�Q���3", "�Z", "�Z�", "�Z�()", "�a", "�bQI����4�u����a", "�b��t", "�d�", "�h�", "�j�i33�k��ZH��֒", "�kZ��b�jt", "�lG�", "�r", "�t", "�x�", "�x�()", "�ɢ�H�", "�ϖ������r���R޻ڷ3�k�eK��Mֵ���R�ŽZ�", "�ֽ�����W6��8�_4�o�o��v", "��", "��AL�", "��E���F", "��rp�F�uF", "��zi�Β���f��$", "���.���d", "���L�I�A�.�", "���R2r", "���h", "���h()", "���h()()", "����9�U�e�Ҟ��db", "����Fd��", "�����v", "�������“��I" ], "funcs": [ [ "ynZj", 11337 ], [ "�n", 115628 ] ], "metrics": { "ast": { "op.eq": 2, "op.gt": 111, "op.lt": 101, "op.add": 125, "op.bor": 81, "op.div": 93, "op.lor": 1, "op.mod": 120, "op.mul": 131, "op.pow": 1, "op.sub": 166, "op.xor": 110, "op.band": 154, "op.bnot": 92, "op.lnot": 94, "max_depth": 24, "call_count": 86, "node_count": 22976, "op.coalesce": 1, "member_count": 145, "max_array_len": 3, "op_density.eq": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.add": 0.01, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mod": 0.01, "op_density.mul": 0.01, "op_density.pow": 0, "op_density.sub": 0.01, "op_density.xor": 0, "sequence_count": 26, "op_density.band": 0.01, "op_density.bnot": 0, "op_density.lnot": 0, "max_concat_chain": 20, "member_depth_max": 3, "self_compare_count": 5, "xor_mod_loop_count": 33, "op_density.coalesce": 0 }, "file": { "size": 145980, "entropy": 4.31 }, "text": { "lines": 228, "top_char": 191, "tab_count": 225, "max_ws_run": 2, "digit_ratio": 0.17, "space_count": 337, "char_entropy": 4.31, "unique_chars": 242, "top_char_null": 0, "escape_density": 0.01, "lines_over_200": 167, "lines_over_500": 104, "string_density": 0.5, "top_char_ratio": 0.21, "avg_line_length": 639.26, "lines_over_1000": 43, "max_line_length": 4166, "non_ascii_ratio": 0.68, "null_byte_count": 11374, "last_line_length": 3237, "long_token_count": 513, "whitespace_ratio": 0.01, "identifier_density": 34.99, "line_length_stddev": 655.01, "octal_escape_count": 13, "non_printable_ratio": 0.13, "unicode_escape_count": 1, "normalized_string_count": 7.55, "repeated_char_sequences": 94, "suspicious_string_ratio": 0.08, "trailing_whitespace_lines": 8, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 547.05 }, "binds": { "count": 82 }, "binary": { "peak_region_bytes": 59392, "peak_region_entropy": 4.66 }, "strings": { "bytes": 17375, "count": 114, "shell": 9, "very_long": 3, "avg_length": 152.41, "max_length": 1747, "avg_entropy": 3.36, "email_count": 2, "empty_count": 2, "entropy_stddev": 0.59 }, "functions": { "density": 0.88, "anonymous": 2, "code_ratio": 0.02, "one_liners": 1, "length_stddev": 1.5, "no_params_count": 2, "avg_length_lines": 2.5, "max_length_lines": 4, "min_length_lines": 1 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 7977, "unique": 4285, "avg_length": 14.04, "max_length": 85, "min_length": 1, "avg_entropy": 2.23, "reuse_ratio": 0.54, "length_stddev": 10.54, "has_digit_ratio": 0.27, "sequential_names": 69, "single_char_count": 55, "single_char_ratio": 0.01, "high_entropy_count": 8, "high_entropy_ratio": 0, "all_lowercase_ratio": 0.01, "all_uppercase_ratio": 0.02, "repeated_char_names": 11, "numeric_suffix_count": 208, "underscore_prefix_count": 24 } } }, "traits": [ { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.9, "crit": 1, "desc": "File has 30 or more lines", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/metrics::js-long-string-concat-chain", "conf": 0.94, "crit": 3, "desc": "Long JavaScript string concatenation chain", "spans": [ [ 0, 28 ] ] }, { "id": "metadata/file/metrics::high-byte-script-text", "conf": 0.88, "crit": 3, "desc": "High-byte script text (\u003e=12%)", "spans": [ [ 0, 27 ] ] }, { "id": "metadata/file/metrics::low-whitespace", "conf": 0.7, "crit": 2, "desc": "Very low whitespace ratio (minified/compressed)", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/metrics::multiple-lines-over-1000-chars", "conf": 0.88, "crit": 3, "desc": "Multiple source lines exceed 1000 characters", "spans": [ [ 0, 28 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::numeric-suffix-identifiers", "atk": "T1027", "mbc": "B0032", "conf": 0.75, "crit": 3, "desc": "Many numeric suffix identifier names", "spans": [ [ 0, 41 ] ] }, { "id": "metadata/library/structure::js-newline-minified-library-bundle", "conf": 0.9, "crit": 2, "desc": "Statement-per-line minified JavaScript bundle", "uses": [ 0, 3, 5 ], "spans": [ [ 0, 0 ] ] }, { "id": "metadata/library/structure::js-any-bundle-output", "conf": 0.95, "crit": 2, "desc": "Contains bundled or minified JavaScript", "uses": [ 7 ], "spans": [ [ 0, 0 ] ] } ] } ] } }