{
  "ml": {
    "v": "7",
    "eng": "2.11.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.00004432599,
        "rte": "az",
        "prob": 0.00004432599
      },
      {
        "cls": 0,
        "raw": 0.00020588438,
        "rte": "az/scripts",
        "prob": 0.00020588438
      },
      {
        "cls": 0,
        "raw": 0.0008685191,
        "rte": "az/batch",
        "prob": 0.0008685191
      }
    ],
    "prob": 0.00004432599,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000443259887106251,
        "type": "batch"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-15T19:13:08Z"
  },
  "path": "47f8e4ad68a059b80d0fc6a5c6d26b018f6db05fbbadc3dce4f2e2f2fa233ed9.bat",
  "raw": {
    "v": "8",
    "rev": "e86a6",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "\u003e8uh2JJz6pJPm0\u003c\u003c=#v#M9YUkVGlUc\u003e83IdRl5^-QVvY5\u003eB5\u003cxWw8-}MG9*@\u003echnRJHYdwX-XKq\u003eb2DFJICT2Ui81V\u0026\u003ctxrFURw6Quv9f\u003ezuz4FWBN8VGEHT\u003ez=t3JKm\u00267TMLOp\u003cc=+7THdbOPYRJH\u0026?rdfG}^Z{V/vdQ\u003e7{h2KHBqpQ#]v=\u003e9q+9H]xG\u003cRrj5J\u003eAiagXWgB-R@BzS\u003eaFTnK*KqhU\u0026rsb\u003eBw:sOWW:mUi8N?\u003eAhF2Y@ydNUi7Cp\u003eAi7kIkxvFV/^QP\u003eb2DEXV+26V/X@@\u0026\u003eqFRXVa+SV/X9\u0026\u003eCt6rPSNv:WbOG{\u003caT@4GS:E0UJy?F\u003ec.RVXUXCxWc1i(\u003eddXTGS\u003cM#V/^EE\u0026\u003eqXXWw\u0026f0R@\u003emZ\u003eyHhaRkSK\u0026QVWSt\u003c=3zaIkxv1W=Lid\u003cFwg4Y].AxL\u0026!mw\u0026\u003eqITM6yA@X-HJc\u003cGTo}OS8NrSPGFM\u003eAiplQ]Av7QtR#f",
            "ln": 0
          }
        ],
        "mol": "O(C)Md",
        "sha": "47f8e4ad68a059b80d0fc6a5c6d26b018f6db05fbbadc3dce4f2e2f2fa233ed9",
        "path": "47f8e4ad68a059b80d0fc6a5c6d26b018f6db05fbbadc3dce4f2e2f2fa233ed9.bat",
        "risk": 2,
        "size": 372,
        "type": "batch",
        "facts": {
          "metrics": {
            "ast": {
              "max_depth": 2,
              "call_count": 0,
              "node_count": 3
            },
            "file": {
              "size": 372,
              "entropy": 5.04
            },
            "text": {
              "lines": 1,
              "top_char": 230,
              "char_entropy": 5.04,
              "unique_chars": 51,
              "top_char_null": 0,
              "lines_over_200": 1,
              "top_char_ratio": 0.14,
              "avg_line_length": 372,
              "max_line_length": 372,
              "non_ascii_ratio": 1,
              "last_line_length": 372,
              "long_token_count": 1
            },
            "binary": {
              "peak_region_bytes": 372,
              "peak_region_entropy": 5.04
            }
          }
        },
        "traits": [
          {
            "id": "objectives/command-and-control/dropper/staging/embedded::batch-has-long-token",
            "atk": "T1027,T1112,T1059.001",
            "conf": 0.9,
            "crit": 3,
            "desc": "Batch has long encoded token"
          },
          {
            "id": "metadata/file/data-blob::high-byte-script-text",
            "conf": 0.88,
            "crit": 3,
            "desc": "High-byte script text (\u003e=12%)"
          }
        ]
      }
    ]
  }
}