{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 1.0, "class": 2 } ], "prob": 1.0, "class": 2, "models": [ { "m": "az", "prob": 0.8383554, "class": 0 }, { "m": "az/source", "prob": 0.9375, "class": 2 }, { "m": "az/kotlin", "prob": 1.0, "class": 2 } ], "version": "v17.17", "thresholds": [ 0.999503, 0.9998882 ], "analyzed_at": "2026-05-24T09:42:51Z" }, "path": "51b18e4525205e0b6f11e181a5b01b2b", "raw": { "v": "5", "fs": [ { "f": "O(C)H(Cm)Md", "x": 42, "ff": { "i": [ [ "", "binl2hex" ], [ "", "core_md5" ], [ "", "str2binl" ], [ "", "b64_md5" ], [ "", "binl2b64" ], [ "", "core_md5" ], [ "", "str2binl" ], [ "", "str_md5" ], [ "", "binl2str" ], [ "", "core_md5" ], [ "", "str2binl" ], [ "", "hex_hmac_md5" ], [ "", "binl2hex" ], [ "", "core_hmac_md5" ], [ "", "b64_hmac_md5" ], [ "", "binl2b64" ], [ "", "core_hmac_md5" ], [ "", "str_hmac_md5" ], [ "", "binl2str" ], [ "", "core_hmac_md5" ], [ "", "md5_vm_test" ], [ "", "hex_md5" ], [ "", "core_md5" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_ff" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_gg" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_hh" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "md5_ii" ], [ "", "safe_add" ], [ "", "safe_add" ], [ "", "safe_add" ], [ "", "safe_add" ], [ "", "Array" ], [ "", "md5_cmn" ], [ "", "safe_add" ], [ "", "bit_rol" ], [ "", "safe_add" ], [ "", "safe_add" ], [ "", "safe_add" ], [ "", "md5_ff" ], [ "", "md5_cmn" ], [ "", "md5_gg" ], [ "", "md5_cmn" ], [ "", "md5_hh" ], [ "", "md5_cmn" ], [ "", "md5_ii" ], [ "", "md5_cmn" ], [ "", "core_hmac_md5" ], [ "", "str2binl" ], [ "", "core_md5" ], [ "", "str2binl" ], [ "", "core_md5" ], [ "", "safe_add" ], [ "", "bit_rol" ], [ "", "str2binl" ], [ "", "binl2str" ], [ "", "binl2hex" ], [ "", "binl2b64" ], [ "", "console" ], [ "", "function" ], [ "", "profile_stack" ], [ "", "function" ], [ "", "jQuery" ], [ "", "function" ], [ "", "clearTimeout" ], [ "", "clearTimeout" ], [ "", "function" ], [ "", "jQuery" ], [ "", "function" ], [ "", "clearTimeout" ], [ "", "jQuery" ], [ "", "function" ], [ "", "setInterval" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "function" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "clearTimeout" ], [ "", "jQuery" ], [ "", "function" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "function" ], [ "", "jQuery" ], [ "", "function" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "load_js" ], [ "", "function" ], [ "", "function" ], [ "", "function" ], [ "", "jQuery" ], [ "", "function" ], [ "", "function" ], [ "", "jQuery" ], [ "", "else" ], [ "", "gravatar_id" ], [ "", "jQuery" ], [ "", "function" ], [ "", "jQuery" ], [ "", "jQuery" ], [ "", "gprofiles" ], [ "", "addComment" ], [ "", "moveForm" ], [ "", "function" ], [ "", "function" ], [ "", "test" ], [ "", "function" ], [ "", "RegExp" ], [ "", "ma" ], [ "", "function" ], [ "", "na" ], [ "", "Oa" ], [ "", "oa" ], [ "", "parseFloat" ], [ "", "parseFloat" ], [ "", "da" ], [ "", "da" ], [ "", "da" ], [ "", "qa" ], [ "", "fa" ], [ "", "setTimeout" ], [ "", "rv" ], [ "", "else" ], [ "", "setTimeout" ], [ "", "setTimeout" ], [ "", "isNaN" ], [ "", "browser" ], [ "", "noData" ], [ "", "data" ], [ "", "ka" ], [ "", "ka" ], [ "", "queue" ], [ "", "setTimeout" ], [ "", "attrFn" ], [ "", "add" ], [ "", "global" ], [ "", "RegExp" ], [ "", "for" ], [ "", "RegExp" ], [ "", "special" ], [ "", "ready" ], [ "", "preventDefault" ], [ "", "\"form\"" ], [ "", "la" ], [ "", "la" ], [ "", "xa" ], [ "", "filters" ], [ "", "xa" ], [ "", "setup" ], [ "", "else" ], [ "", "unbind" ], [ "", "else" ], [ "", "else" ], [ "", "child" ], [ "", "leftMatch" ], [ "", "attrMap" ], [ "", "attrHandle" ], [ "", "find" ], [ "", "ID" ], [ "", "else" ], [ "", "first" ], [ "", "PSEUDO" ], [ "", "switch" ], [ "", "\"~=\"" ], [ "", "RegExp" ], [ "", "getTime" ], [ "", "test" ], [ "", "ma" ], [ "", "ma" ], [ "", "\":\"" ], [ "", "firing" ], [ "", "jQuery" ], [ "", "WPGroHo" ], [ "", "xViewState" ], [ "", "parseInt" ], [ "", "write" ], [ "", "jQuery" ], [ "", "Array" ], [ "", "Array" ], [ "", "load" ], [ "", "slideshow" ], [ "", "exec" ], [ "", "exec" ], [ "", "parseInt" ], [ "", "linktracker_init" ], [ "", "addLoadEvent" ] ], "m": { "ast": { "max_depth": 102.0, "call_count": 1526.0, "node_count": 54756.0, "target_count": 111.0, "string_literal_count": 1394.0 }, "file": { "size": 147645.0, "entropy": 5.44, "size_bytes": 147645.0 }, "text": { "tab_count": 691.0, "digit_ratio": 0.03, "space_count": 2473.0, "total_lines": 378.0, "char_entropy": 5.44, "mixed_indent": 1.0, "unique_chars": 98.0, "escape_density": 0.01, "lines_over_200": 167.0, "lines_over_500": 162.0, "string_density": 3.69, "avg_line_length": 389.58, "lines_over_1000": 4.0, "max_line_length": 20668.0, "empty_line_ratio": 0.04, "hex_escape_count": 2.0, "last_line_length": 90.0, "long_token_count": 362.0, "whitespace_ratio": 0.02, "most_common_ratio": 0.07, "identifier_density": 25.34, "line_length_stddev": 1583.78, "octal_escape_count": 3.0, "encoded_string_ratio": 0.01, "unicode_escape_count": 13.0, "normalized_string_count": 71.7, "repeated_char_sequences": 5.0, "suspicious_string_ratio": 0.14, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.25, "max_inline_whitespace_run": 10.0, "trailing_whitespace_lines": 22.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.07, "normalized_unique_identifiers": 100.32 }, "strings": { "total": 1394.0, "url_count": 5.0, "avg_length": 52.47, "max_length": 3583.0, "path_count": 5.0, "avg_entropy": 2.63, "empty_count": 64.0, "hex_strings": 7.0, "sql_strings": 1.0, "total_bytes": 73149.0, "entropy_stddev": 1.53, "base64_candidates": 5.0, "very_long_strings": 10.0, "high_entropy_count": 26.0, "shell_command_strings": 38.0, "embedded_code_candidates": 150.0 }, "comments": { "chars": 4828.0, "lines": 51.0, "total": 20.0, "to_code_ratio": 0.16, "url_in_comments": 5.0, "code_in_comments": 1.0, "high_entropy_comments": 5.0 }, "identifiers": { "total": 9580.0, "avg_length": 6.87, "max_length": 29.0, "min_length": 1.0, "avg_entropy": 2.23, "reuse_ratio": 0.09, "unique_count": 859.0, "length_stddev": 4.2, "hex_like_names": 1.0, "has_digit_ratio": 0.03, "sequential_names": 52.0, "base64_like_names": 1.0, "single_char_count": 50.0, "single_char_ratio": 0.06, "high_entropy_count": 30.0, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.6, "all_uppercase_ratio": 0.05, "repeated_char_names": 3.0, "numeric_suffix_count": 13.0, "underscore_prefix_count": 2.0 } }, "s": [ [ 440, "u8", "900150983cd24fb0d6963f7d28e17f72" ], [ 441, "u8", "900150983cd24fb0d6963f7d28e17f72" ], [ 484, "u8", "abc" ], [ 485, "u8", "abc" ], [ 4298, "u8", "0123456789ABCDEF" ], [ 4299, "u8", "0123456789ABCDEF" ], [ 4317, "u8", "0123456789abcdef" ], [ 4318, "u8", "0123456789abcdef" ], [ 4463, "u8", "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" ], [ 4464, "u8", "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" ], [ 4728, "u8", "undefined" ], [ 4729, "u8", "undefined" ], [ 5036, "u8", "http://en" ], [ 5037, "u8", "http://en" ], [ 5154, "u8", "disable" ], [ 5155, "u8", "disable" ], [ 5231, "u8", "nohovercard=1; expires=" ], [ 5232, "u8", "nohovercard=1; expires=" ], [ 5273, "u8", ";" ], [ 5274, "u8", ";" ], [ 5293, "u8", "nohovercard=1; expires=" ], [ 5294, "u8", "nohovercard=1; expires=" ], [ 5335, "u8", "; domain=.wordpress.com; path=/" ], [ 5336, "u8", "; domain=.wordpress.com; path=/" ], [ 5562, "u8", ";" ], [ 5563, "u8", ";" ], [ 5602, "u8", " " ], [ 5603, "u8", " " ], [ 5662, "u8", "nohovercard=1" ], [ 5663, "u8", "nohovercard=1" ], [ 5686, "u8", "https:" ], [ 5687, "u8", "https:" ], [ 5739, "u8", "https://secure" ], [ 5740, "u8", "https://secure" ], [ 5810, "u8", "body" ], [ 5811, "u8", "body" ], [ 5821, "u8", "mouseenter.gravatar mouseleave.gravatar" ], [ 5822, "u8", "mouseenter.gravatar mouseleave.gravatar" ], [ 5863, "u8", "img.grav-hashed" ], [ 5864, "u8", "img.grav-hashed" ], [ 5958, "u8", "mouseleave" ], [ 5959, "u8", "mouseleave" ], [ 5980, "u8", "mouseout" ], [ 5981, "u8", "mouseout" ], [ 6095, "u8", "id" ], [ 6096, "u8", "id" ], [ 6147, "u8", "-" ], [ 6148, "u8", "-" ], [ 6243, "u8", "g" ], [ 6244, "u8", "g" ], [ 6285, "u8", "hover" ], [ 6286, "u8", "hover" ], [ 6506, "u8", "body" ], [ 6507, "u8", "body" ], [ 6517, "u8", "mouseenter.gravatar mouseleave.gravatar" ], [ 6518, "u8", "mouseenter.gravatar mouseleave.gravatar" ], [ 6559, "u8", "div.gcard, img.grav-clone" ], [ 6560, "u8", "div.gcard, img.grav-clone" ], [ 6658, "u8", "mouseenter" ], [ 6659, "u8", "mouseenter" ], [ 6680, "u8", "mouseover" ], [ 6681, "u8", "mouseover" ], [ 6811, "u8", "scroll" ], [ 6812, "u8", "scroll" ], [ 6953, "u8", "undefined" ], [ 6954, "u8", "undefined" ], [ 6975, "u8", "body" ], [ 6976, "u8", "body" ], [ 6987, "u8", "string" ], [ 6988, "u8", "string" ], [ 7026, "u8", "no-grav" ], [ 7027, "u8", "no-grav" ], [ 7057, "u8", "gravatar.com/avatar" ], [ 7058, "u8", "gravatar.com/avatar" ], [ 7086, "u8", ".no-grav, .no-grav img" ], [ 7087, "u8", ".no-grav, .no-grav img" ], [ 7178, "u8", "#grav-" ], [ 7179, "u8", "#grav-" ], [ 7192, "u8", "-" ], [ 7193, "u8", "-" ], [ 7221, "u8", "#grav-" ], [ 7222, "u8", "#grav-" ], [ 7235, "u8", "-" ], [ 7236, "u8", "-" ], [ 7284, "u8", "id" ], [ 7285, "u8", "id" ], [ 7289, "u8", "grav-" ], [ 7290, "u8", "grav-" ], [ 7302, "u8", "-" ], [ 7303, "u8", "-" ], [ 7317, "u8", "title" ], [ 7318, "u8", "title" ], [ 7340, "u8", "title" ], [ 7341, "u8", "title" ], [ 7358, "u8", "a" ], [ 7359, "u8", "a" ], [ 7380, "u8", "a" ], [ 7381, "u8", "a" ], [ 7390, "u8", "title" ], [ 7391, "u8", "title" ], [ 7413, "u8", "title" ], [ 7414, "u8", "title" ], [ 7433, "u8", "grav-hashed" ], [ 7434, "u8", "grav-hashed" ], [ 7459, "u8", "#comments, .comments, #commentlist, .commentlist, .grav-hijack" ], [ 7460, "u8", "#comments, .comments, #commentlist, .commentlist, .grav-hijack" ], [ 7544, "u8", "a:first" ], [ 7545, "u8", "a:first" ], [ 7575, "u8", "grav-hijack" ], [ 7576, "u8", "grav-hijack" ], [ 7664, "u8", "g" ], [ 7665, "u8", "g" ], [ 7697, "u8", ".gcard" ], [ 7698, "u8", ".gcard" ], [ 7714, "u8", "fetching" ], [ 7715, "u8", "fetching" ], [ 7745, "u8", "g" ], [ 7746, "u8", "g" ], [ 7836, "u8", "show_card" ], [ 7837, "u8", "show_card" ], [ 7868, "u8", "wait" ], [ 7869, "u8", "wait" ], [ 7879, "u8", "undefined" ], [ 7880, "u8", "undefined" ], [ 7918, "u8", "g" ], [ 7919, "u8", "g" ], [ 8009, "u8", "show_card" ], [ 8010, "u8", "show_card" ], [ 8097, "u8", "show" ], [ 8098, "u8", "show" ], [ 8137, "u8", "#profile-" ], [ 8138, "u8", "#profile-" ], [ 8227, "u8", "g" ], [ 8228, "u8", "g" ], [ 8284, "u8", "profile-" ], [ 8285, "u8", "profile-" ], [ 8401, "u8", "div.gcard" ], [ 8402, "u8", "div.gcard" ], [ 8421, "u8", "#profile-" ], [ 8422, "u8", "#profile-" ], [ 8481, "u8", "img.grav-large" ], [ 8482, "u8", "img.grav-large" ], [ 8527, "u8", "#profile-" ], [ 8528, "u8", "#profile-" ], [ 8604, "u8", "#" ], [ 8605, "u8", "#" ], [ 8779, "u8", "pos-right" ], [ 8780, "u8", "pos-right" ], [ 8875, "u8", "pos-left" ], [ 8876, "u8", "pos-left" ], [ 8906, "u8", "#" ], [ 8907, "u8", "#" ], [ 8925, "u8", "pos-right pos-left" ], [ 8926, "u8", "pos-right pos-left" ], [ 8972, "u8", "px" ], [ 8973, "u8", "px" ], [ 8984, "u8", "px" ], [ 8985, "u8", "px" ], [ 9097, "u8", "px" ], [ 9098, "u8", "px" ], [ 9103, "u8", "pos-right" ], [ 9104, "u8", "pos-right" ], [ 9127, "u8", "auto" ], [ 9128, "u8", "auto" ], [ 9141, "u8", "-7px" ], [ 9142, "u8", "-7px" ], [ 9150, "u8", "background-position" ], [ 9151, "u8", "background-position" ], [ 9173, "u8", "0px " ], [ 9174, "u8", "0px " ], [ 9182, "u8", "px" ], [ 9183, "u8", "px" ], [ 9197, "u8", "-10px" ], [ 9198, "u8", "-10px" ], [ 9212, "u8", "auto" ], [ 9213, "u8", "auto" ], [ 9221, "u8", "background-position" ], [ 9222, "u8", "background-position" ], [ 9244, "u8", "0px " ], [ 9245, "u8", "0px " ], [ 9253, "u8", "px" ], [ 9254, "u8", "px" ], [ 9266, "u8", "#" ], [ 9267, "u8", "#" ], [ 9272, "u8", " .grav-cardarrow" ], [ 9273, "u8", " .grav-cardarrow" ], [ 9356, "u8", "linear" ], [ 9357, "u8", "linear" ], [ 9402, "u8", "auto" ], [ 9403, "u8", "auto" ], [ 9575, "u8", "urls" ], [ 9576, "u8", "urls" ], [ 9599, "u8", "photos" ], [ 9600, "u8", "photos" ], [ 9622, "u8", "accounts" ], [ 9623, "u8", "accounts" ], [ 9730, "u8", "aboutMe" ], [ 9731, "u8", "aboutMe" ], [ 9822, "u8", "+GProfile.get(" ], [ 9823, "u8", "+GProfile.get(" ], [ 9849, "u8", ")+" ], [ 9850, "u8", ")+" ], [ 9862, "u8", "_blank" ], [ 9863, "u8", "_blank" ], [ 9891, "u8", "grav-inner" ], [ 9892, "u8", "grav-inner" ], [ 9947, "u8", " grav-is-user" ], [ 9948, "u8", " grav-is-user" ], [ 9976, "u8", "\u003cp\u003eWant a better profile? \u003ca class='grav-edit-profile' href='http://gravatar.com/profiles/edit/?noclose' target='_blank'\u003eClick h" ], [ 9977, "u8", "\u003cp\u003eWant a better profile? \u003ca class='grav-edit-profile' href='http://gravatar.com/profiles/edit/?noclose' target='_blank'\u003eClick h" ], [ 10135, "u8", " gcard-about" ], [ 10136, "u8", " gcard-about" ], [ 10169, "u8", "displayName" ], [ 10170, "u8", "displayName" ], [ 10216, "u8", "preferredUsername" ], [ 10217, "u8", "preferredUsername" ], [ 10253, "u8", "profile-'+a+" ], [ 10254, "u8", "profile-'+a+" ], [ 10275, "u8", "gcard grofile" ], [ 10276, "u8", "gcard grofile" ], [ 10309, "u8", "grav-inner" ], [ 10310, "u8", "grav-inner" ], [ 10341, "u8", "grav-grav" ], [ 10342, "u8", "grav-grav" ], [ 10370, "u8", "+GProfile.get(" ], [ 10371, "u8", "+GProfile.get(" ], [ 10397, "u8", ")+" ], [ 10398, "u8", ")+" ], [ 10410, "u8", "_blank" ], [ 10411, "u8", "_blank" ], [ 10438, "u8", "+GProfile.get(" ], [ 10439, "u8", "+GProfile.get(" ], [ 10467, "u8", ")+'?s=100\u0026r=pg\u0026d=mm" ], [ 10468, "u8", ")+'?s=100\u0026r=pg\u0026d=mm" ], [ 10495, "u8", "100" ], [ 10496, "u8", "100" ], [ 10508, "u8", "100" ], [ 10509, "u8", "100" ], [ 10562, "u8", "grav-info" ], [ 10563, "u8", "grav-info" ], [ 10595, "u8", "+GProfile.get(" ], [ 10596, "u8", "+GProfile.get(" ], [ 10622, "u8", ")+" ], [ 10623, "u8", ")+" ], [ 10635, "u8", "_blank" ], [ 10636, "u8", "_blank" ], [ 10679, "u8", "grav-loc" ], [ 10680, "u8", "grav-loc" ], [ 10705, "u8", "currentLocation" ], [ 10706, "u8", "currentLocation" ], [ 10747, "u8", "grav-about" ], [ 10748, "u8", "grav-about" ], [ 10789, "u8", "grav-view-complete-button" ], [ 10790, "u8", "grav-view-complete-button" ], [ 10835, "u8", "+GProfile.get(" ], [ 10836, "u8", "+GProfile.get(" ] ], "v": { "source.language": "kotlin", "source.imports[0]": "\":\"", "source.imports[1]": "\"form\"", "source.imports[2]": "\"~=\"", "source.imports[3]": "Array", "source.imports[4]": "ID", "source.imports[5]": "Oa", "source.imports[6]": "PSEUDO", "source.imports[7]": "RegExp", "source.imports[8]": "WPGroHo", "source.imports[9]": "add", "source.strings[0]": " \u003clink/\u003e\u003ctable\u003e\u003c/table\u003e\u003ca href='/a' style='color:red;float:left;opacity:.55;'\u003ea\u003c/a\u003e\u003cinput type='checkbox'/\u003e", "source.strings[1]": " .gcard-about", "source.strings[2]": " .gcard-links", "source.strings[3]": " .gcard-services", "source.strings[4]": " .grav-cardarrow", "source.strings[5]": " .grav-grav a", "source.strings[6]": " .grav-inner", "source.strings[7]": " .grav-leftcol", "source.strings[8]": " .grav-links a", "source.strings[9]": " .grav-rightcol", "source.has_imports": true, "source.imports[10]": "addComment", "source.imports[11]": "addLoadEvent", "source.imports[12]": "attrFn", "source.imports[13]": "attrHandle", "source.imports[14]": "attrMap", "source.imports[15]": "b64_hmac_md5", "source.imports[16]": "b64_md5", "source.imports[17]": "binl2b64", "source.imports[18]": "binl2hex", "source.imports[19]": "binl2str", "source.imports[20]": "bit_rol", "source.imports[21]": "browser", "source.imports[22]": "child", "source.imports[23]": "clearTimeout", "source.imports[24]": "console", "source.imports[25]": "core_hmac_md5", "source.imports[26]": "core_md5", "source.imports[27]": "da", "source.imports[28]": "data", "source.imports[29]": "else", "source.imports[30]": "exec", "source.imports[31]": "fa", "source.imports[32]": "filters", "source.imports[33]": "find", "source.imports[34]": "firing", "source.imports[35]": "first", "source.imports[36]": "for", "source.imports[37]": "function", "source.imports[38]": "getTime", "source.imports[39]": "global", "source.imports[40]": "gprofiles", "source.imports[41]": "gravatar_id", "source.imports[42]": "hex_hmac_md5", "source.imports[43]": "hex_md5", "source.imports[44]": "isNaN", "source.imports[45]": "jQuery", "source.imports[46]": "ka", "source.imports[47]": "la", "source.imports[48]": "leftMatch", "source.imports[49]": "linktracker_init", "source.imports[50]": "load", "source.imports[51]": "load_js", "source.imports[52]": "ma", "source.imports[53]": "md5_cmn", "source.imports[54]": "md5_ff", "source.imports[55]": "md5_gg", "source.imports[56]": "md5_hh", "source.imports[57]": "md5_ii", "source.imports[58]": "md5_vm_test", "source.imports[59]": "moveForm", "source.imports[60]": "na", "source.imports[61]": "noData", "source.imports[62]": "oa", "source.imports[63]": "parseFloat", "source.imports[64]": "parseInt", "source.imports[65]": "preventDefault", "source.imports[66]": "profile_stack", "source.imports[67]": "qa", "source.imports[68]": "queue", "source.imports[69]": "ready", "source.imports[70]": "rv", "source.imports[71]": "safe_add", "source.imports[72]": "setInterval", "source.imports[73]": "setTimeout", "source.imports[74]": "setup", "source.imports[75]": "slideshow", "source.imports[76]": "special", "source.imports[77]": "str2binl", "source.imports[78]": "str_hmac_md5", "source.imports[79]": "str_md5", "source.imports[80]": "switch", "source.imports[81]": "test", "source.imports[82]": "unbind", "source.imports[83]": "write", "source.imports[84]": "xViewState", "source.imports[85]": "xa", "source.strings[10]": " .grav-services a", "source.strings[11]": " .grav-tag", "source.strings[12]": " .grav-tag a", "source.strings[13]": " .grav-view-complete, #profile-", "source.strings[14]": " a.grav-edit-profile", "source.strings[15]": " a.grav-extra-comments", "source.strings[16]": " a.grav-extra-likes", "source.strings[17]": " gcard-about", "source.strings[18]": " grav-is-user", "source.strings[19]": " h4 a, #profile-", "source.strings[20]": "#comments, .comments, #commentlist, .commentlist, .grav-hijack", "source.strings[21]": "#grav-", "source.strings[22]": "#gravatar-card-css", "source.strings[23]": "#profile-", "source.strings[24]": "(?:\\d+|null)", "source.strings[25]": "(\\\\.|$)", "source.strings[26]": "(^|\\\\.)", "source.strings[27]": ")\u0026\u0026i.parentNode?i.parentNode:i,O);u=q.expr?k.filter(q.expr,\nq.set):q.set;if(D.length\u003e0)y=C(u);else N=false;for(;D.length;){q=M=D.pop();if(o.relative[M])q=D.pop();else M=", "source.strings[28]": "));\nreturn{set:m,expr:g}};k.filter=function(g,i,n,m){for(var p,q,u=g,y=[],F=i,M=i\u0026\u0026i[0]\u0026\u0026k.isXML(i[0]);g\u0026\u0026i.length;){for(var N in o.filter)if((p=o.leftMatch[N].exec(g))!=null\u0026\u0026p[2]){var O,D,R=o.filter[N];D=p[1];q=false;p.splice(1,1);if(D.substr(D.length-1)!==", "source.strings[29]": ")+'?s=100\u0026r=pg\u0026d=mm", "source.strings[30]": ").replace(/\\\\/g,", "source.strings[31]": ");break}}}}m||(m=i.getElementsByTagName(", "source.strings[32]": ");if(!q)return[];break}}}if(g===u)if(q==null)k.error(g);else break;u=g}return F};k.error=function(g){throw", "source.strings[33]": ");if(q=d.exec(R)){R=q[3];D.push(q[1]);if(q[2]){F=q[3];\nbreak}}}while(q);if(D.length\u003e1\u0026\u0026x.exec(g))if(D.length===2\u0026\u0026o.relative[D[0]])u=L(D[0]+D[1],i);else for(u=o.relative[D[0]]?[i]:k(D.shift(),i);D.length;){g=D.shift();if(o.relative[g])g+=D.shift();u=L(g,u)}else{if(!m\u0026\u0026D.length\u003e1\u0026\u0026i.nodeType===9\u0026\u0026!O\u0026\u0026o.match.ID.test(D[0])\u0026\u0026!o.match.ID.test(D[D.length-1])){q=k.find(D.shift(),i,O);i=q.expr?k.filter(q.expr,q.set)[0]:q.set[0]}if(i){q=m?{expr:D.pop(),set:C(m)}:k.find(D.pop(),D.length===1\u0026\u0026(D[0]===", "source.strings[34]": ");m=o.find[y](u,i,n);if(m!=null){g=g.replace(o.match[y],", "source.strings[35]": ")if(N)if(i\u0026\u0026i.nodeType===1)for(g=0;y[g]!=null;g++){if(y[g]\u0026\u0026(y[g]===true||y[g].nodeType===1\u0026\u0026k.contains(i,y[g])))n.push(u[g])}else for(g=0;y[g]!=null;g++)y[g]\u0026\u0026y[g].nodeType===1\u0026\u0026n.push(u[g]);else n.push.apply(n,y);else C(y,n);if(F){k(F,p,n,m);k.uniqueSort(n)}return n};k.uniqueSort=function(g){if(w){h=\nl;g.sort(w);if(h)for(var i=1;i\u003cg.length;i++)g[i]===g[i-1]\u0026\u0026g.splice(i--,1)}return g};k.matches=function(g,i){return k(g,null,null,i)};k.matchesSelector=function(g,i){return k(i,null,null,[g]).length\u003e0};k.find=function(g,i,n){var m;if(!g)return[];for(var p=0,q=o.order.length;p\u003cq;p++){var u,y=o.order[p];if(u=o.leftMatch[y].exec(g)){var F=u[1];u.splice(1,1);if(F.substr(F.length-1)!==", "source.strings[36]": ")return n;var q,u,y,F,M,N=true,O=k.isXML(i),D=[],R=g;do{d.exec(", "source.strings[37]": "){if(F===y)y=[];if(o.preFilter[N])if(p=o.preFilter[N](p,F,n,y,m,M)){if(p===true)continue}else q=O=true;if(p)for(var j=0;(D=F[j])!=null;j++)if(D){O=R(D,p,j,F);var s=m^!!O;if(n\u0026\u0026O!=null)if(s)q=true;else F[j]=false;else if(s){y.push(D);q=true}}if(O!==\nB){n||(F=y);g=g.replace(o.match[N],", "source.strings[38]": "){u[1]=(u[1]||", "source.strings[39]": "+GProfile.get(", "source.strings[40]": "+g;};var o=k.selectors={order:[", "source.strings[41]": "+this.url_prefix+'.gravatar.com/images/throbber.gif", "source.strings[42]": "-2px 0 0 -2px", "source.strings[43]": "-moz-box-shadow", "source.strings[44]": "-webkit-box-shadow", "source.strings[45]": ".gcard", "source.strings[46]": ".gravatar.com/", "source.strings[47]": ".json?callback=Gravatar.fetch_profile_callback", "source.strings[48]": ".no-grav, .no-grav img", "source.strings[49]": ".specialChange", "source.strings[50]": ".specialSubmit", "source.strings[51]": "//s.gravatar.com", "source.strings[52]": "/js/gprofiles.", "source.strings[53]": "0 0 4px rgba(0,0,0,.4)", "source.strings[54]": "0123456789ABCDEF", "source.strings[55]": "0123456789abcdef", "source.strings[56]": "2px 2px ", "source.strings[57]": "900150983cd24fb0d6963f7d28e17f72", "source.strings[58]": "; domain=.wordpress.com; path=/", "source.strings[59]": ";if(q==null)q=i;o.relative[M](y,q,O)}}else y=[]}y||(y=u);y||k.error(M||g);if(f.call(y)===", "source.strings[60]": "\u003ca href='#'\u003e\u003c/a\u003e", "source.strings[61]": "\u003ca name=", "source.strings[62]": "\u003cdiv class='test e'\u003e\u003c/div\u003e\u003cdiv class='test'\u003e\u003c/div\u003e", "source.strings[63]": "\u003cdiv style='width:4px;'\u003e\u003c/div\u003e", "source.strings[64]": "\u003cinput type='radio' name='radiotest' checked='checked'/\u003e", "source.strings[65]": "\u003cp class='TEST'\u003e\u003c/p\u003e", "source.strings[66]": "\u003cp\u003eWant a better profile? \u003ca class='grav-edit-profile' href='http://gravatar.com/profiles/edit/?noclose' target='_blank'\u003eClick here\u003c/a\u003e.\u003c/p\u003e", "source.strings[67]": "\u003ctable\u003e\u003ctr\u003e\u003ctd style='padding:0;display:none'\u003e\u003c/td\u003e\u003ctd\u003et\u003c/td\u003e\u003c/tr\u003e\u003c/table\u003e", "source.strings[68]": "='$1']", "source.strings[69]": "\u003e\\s]+\\/)\u003e/g,P={option:[1,\n", "source.strings[70]": "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", "source.strings[71]": "Boolean Number String Function Array Date RegExp Object", "source.strings[72]": "DOMContentLoaded", "source.strings[73]": "Gravatar.disable(); return false", "source.strings[74]": "Invalid JSON: ", "source.strings[75]": "Powered by Gravatar.com", "source.strings[76]": "Syntax error, unrecognized expression: ", "source.strings[77]": "[object ", "source.strings[78]": "[object Array]", "source.strings[79]": "[test!='']:sizzle", "source.strings[80]": "\\\\.(?:.*\\\\.)?", "source.strings[81]": "\\\\\\/bfnrt]|u[0-9a-fA-F]{4})/g,w=/", "source.strings[82]": "\\\\\\n\\r]*", "source.strings[83]": "\\u00a0", "source.strings[84]": "]+)+\\]|\\\\.|[^ \u003e+~,(\\[\\\\]+)+|[\u003e+~])(\\s*,\\s*)?((?:.|\\r|\\n)*)/g,e=0,f=Object.prototype.toString,h=false,l=true;[0,0].sort(function(){l=false;return 0});var k=function(g,i,n,m){n=n||[];var p=i=i||t;if(i.nodeType!==1\u0026\u0026i.nodeType!==9)return[];if(!g||typeof g!==", "source.strings[85]": "],legend:[1,", "source.strings[86]": "],match:{ID:/#((?:[\\w\\u00c0-\\uFFFF\\-]|\\\\.)+)/,CLASS:/\\.((?:[\\w\\u00c0-\\uFFFF\\-]|\\\\.)+)/,NAME:/\\[name=[", "source.strings[87]": "],thead:[1,", "source.strings[88]": "],tr:[2,", "source.strings[89]": "__className__", "source.strings[90]": "__events__", "source.strings[91]": "__sizzle__", "source.strings[92]": "_blank", "source.strings[93]": "_change_data", "source.strings[94]": "a:first", "source.strings[95]": "aboutMe", "source.strings[96]": "absolute", "source.strings[97]": "accounts", "source.strings[98]": "addClass", "source.strings[99]": "altKey attrChange attrName bubbles button cancelable charCode clientX clientY ctrlKey currentTarget data detail eventPhase fromElement handler keyCode layerX layerY metaKey newValue offsetX offsetY pageX pageY prevValue relatedNode relatedTarget screenX screenY shiftKey srcElement target toElement view wheelDelta which", "source.strings[100]": "background-color", "source.strings[101]": "background-image", "source.strings[102]": "background-position", "source.strings[103]": "background-repeat", "source.strings[104]": "blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup error", "source.strings[105]": "boolean", "source.strings[106]": "border", "source.strings[107]": "border-color", "source.strings[108]": "border-style", "source.strings[109]": "border-width", "source.strings[110]": "box-shadow", "source.strings[111]": "button", "source.strings[112]": "cancel-comment-reply-link", "source.strings[113]": "cellSpacing", "source.strings[114]": "change", "source.strings[115]": "changeData", "source.strings[116]": "checkbox", "source.strings[117]": "className", "source.strings[118]": "classid", "source.strings[119]": "clear:both", "source.strings[120]": "click.specialSubmit", "source.strings[121]": "click_comment", "source.strings[122]": "click_edit_profile", "source.strings[123]": "click_like", "source.strings[124]": "click_link", "source.strings[125]": "click_service", "source.strings[126]": "closest", "source.strings[127]": "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000", "source.strings[128]": "colSpan", "source.strings[129]": "comment", "source.strings[130]": "comment_parent", "source.strings[131]": "comment_post_ID", "source.strings[132]": "compatible", "source.strings[133]": "complete", "source.strings[134]": "constructor", "source.strings[135]": "contains", "source.strings[136]": "contextmenu", "source.strings[137]": "currentLocation", "source.strings[138]": "disable", "source.strings[139]": "disabled", "source.strings[140]": "display", "source.strings[141]": "displayName", "source.strings[142]": "div.gcard", "source.strings[143]": "div.gcard, img.grav-clone", "source.strings[144]": "events", "source.strings[145]": "fetching", "source.strings[146]": "filter", "source.strings[147]": "focusin", "source.strings[148]": "focusout", "source.strings[149]": "frameBorder", "source.strings[150]": "function", "source.strings[151]": "g.grav-clone, a.grav-clone-a", "source.strings[152]": "gcard grofile", "source.strings[153]": "getData", "source.strings[154]": "grav-about", "source.strings[155]": "grav-cardarrow", "source.strings[156]": "grav-clone", "source.strings[157]": "grav-clone-", "source.strings[158]": "grav-clone-a", "source.strings[159]": "grav-disable", "source.strings[160]": "grav-grav", "source.strings[161]": "grav-hashed", "source.strings[162]": "grav-hijack", "source.strings[163]": "grav-info", "source.strings[164]": "grav-inner", "source.strings[165]": "grav-loc", "source.strings[166]": "grav-tag", "source.strings[167]": "grav-throbber", "source.strings[168]": "grav-view-complete", "source.strings[169]": "grav-view-complete-button", "source.strings[170]": "gravatar.com/avatar", "source.strings[171]": "handle", "source.strings[172]": "hidden", "source.strings[173]": "htmlFor", "source.strings[174]": "http://en", "source.strings[175]": "http://gravatar.com/", "source.strings[176]": "http://gravatar.com/'+a+", "source.strings[177]": "http://gravatar.com/'+this.active_hash+", "source.strings[178]": "https:", "source.strings[179]": "https://secure", "source.strings[180]": "iframe", "source.strings[181]": "img#grav-clone-", "source.strings[182]": "img.grav-hashed", "source.strings[183]": "img.grav-large", "source.strings[184]": "inline", "source.strings[185]": "inprogress", "source.strings[186]": "isPrototypeOf", "source.strings[187]": "jQuery", "source.strings[188]": "keypress.specialSubmit", "source.strings[189]": "lastToggle", "source.strings[190]": "linear", "source.strings[191]": "margin", "source.strings[192]": "maxLength", "source.strings[193]": "mouseenter", "source.strings[194]": "mouseenter.gravatar mouseleave.gravatar", "source.strings[195]": "mouseleave", "source.strings[196]": "mouseout", "source.strings[197]": "mouseover", "source.strings[198]": "nextSibling", "source.strings[199]": "no-grav", "source.strings[200]": "nohovercard=1", "source.strings[201]": "nohovercard=1; expires=", "source.strings[202]": "number", "source.strings[203]": "object", "source.strings[204]": "onclick", "source.strings[205]": "onload", "source.strings[206]": "onreadystatechange", "source.strings[207]": "optgroup", "source.strings[208]": "option", "source.strings[209]": "padding", "source.strings[210]": "padding-left", "source.strings[211]": "padding-top", "source.strings[212]": "parentNode", "source.strings[213]": "password", "source.strings[214]": "photos", "source.strings[215]": "pos-left", "source.strings[216]": "pos-right", "source.strings[217]": "pos-right pos-left", "source.strings[218]": "position: absolute; z-index: 16", "source.strings[219]": "preferredUsername", "source.strings[220]": "previousSibling", "source.strings[221]": "profile-", "source.strings[222]": "profile-'+a+", "source.strings[223]": "profileBackground", "source.strings[224]": "profile_404", "source.strings[225]": "px 2px", "source.strings[226]": "readOnly", "source.strings[227]": "regexp", "source.strings[228]": "removeClass", "source.strings[229]": "return ", "source.strings[230]": "return;", "source.strings[231]": "rowSpan", "source.strings[232]": "script", "source.strings[233]": "scroll", "source.strings[234]": "select", "source.strings[235]": "select-multiple", "source.strings[236]": "select-one", "source.strings[237]": "setData", "source.strings[238]": "setInterval", "source.strings[239]": "show_card", "source.strings[240]": "string", "source.strings[241]": "submit", "source.strings[242]": "tabIndex", "source.strings[243]": "text-decoration", "source.strings[244]": "text/javascript", "source.strings[245]": "textarea", "source.strings[246]": "to_gravatar", "source.strings[247]": "to_profile", "source.strings[248]": "type property can't be changed", "source.strings[249]": "undefined", "source.strings[250]": "unload", "source.strings[251]": "useMap", "source.strings[252]": "window.", "source.strings[253]": "wp-temp-form-div", "source.strings[254]": "z-index", "source.strings[255]": "||D[0]===" }, "ct": [ "Array", "C", "H", "I", "ID", "Oa", "PSEUDO", "Q", "R", "RegExp", "S", "WPGroHo", "Y", "Y()", "a", "add", "addComment", "addLoadEvent", "attrFn", "attrHandle", "attrMap", "b", "b64_hmac_md5", "b64_md5", "binl2b64", "binl2hex", "binl2str", "bit_rol", "browser", "c", "child", "clearTimeout", "console", "core_hmac_md5", "core_md5", "d", "da", "data", "e", "else", "exec", "f", "f()", "fa", "filters", "find", "firing", "first", "for", "function", "function()", "g", "getTime", "global", "gprofiles", "gravatar_id", "h", "hex_hmac_md5", "hex_md5", "i", "isNaN", "jQuery", "k", "ka", "l", "la", "leftMatch", "linktracker_init", "load", "load_js", "ma", "md5_cmn", "md5_ff", "md5_gg", "md5_hh", "md5_ii", "md5_vm_test", "moveForm", "n", "na", "noData", "oa", "p", "parseFloat", "parseInt", "preventDefault", "profile_stack", "q", "qa", "queue", "r", "ready", "rv", "s", "safe_add", "setInterval", "setTimeout", "setup", "slideshow", "special", "str2binl", "str_hmac_md5", "str_md5", "switch", "t", "test", "unbind", "v", "write", "xViewState", "xa" ], "id": "kotlin" }, "id": 0, "sz": 147645, "ts": [ { "c": 0.8199999928474426, "d": "Hostname profile field", "e": [ "hostname" ], "i": "objectives/discovery/system/profile::host-profile-hostname-field", "l": 1 }, { "c": 1.0, "d": "JavaScript undefined literal", "e": [ "undefined" ], "i": "metadata/lang/scripted::undefined-literal", "l": 1 }, { "c": 0.30000001192092896, "d": "for loop (content)", "e": [ ";for(" ], "i": "micro-behaviors/data/control-flow/analysis::for-loop-content", "l": 2 }, { "a": "T1027", "c": 0.699999988079071, "d": "Many single-char params", "e": [ "functions.single_char_params = 13.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/functions::single-char-params", "l": 1, "m": "B0032" }, { "c": 0.30000001192092896, "d": "for loop (AST)", "e": [ "for(p in o){if(o.hasOwnProperty(p)){q.push(encodeURIComponent(p)+'='+encodeURIComponent(o[p]));}}" ], "i": "micro-behaviors/data/control-flow/analysis::for-loop-ast", "l": 2 }, { "c": 0.800000011920929, "d": "Short sidecar-sized source", "e": [ "text.total_lines = 3.00", "text.total_lines = 1.00" ], "i": "metadata/package/config::short-sidecar-file", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 3.00", "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "c": 0.8999999761581421, "d": "Tiny JavaScript file lines", "e": [ "text.total_lines = 1.00", "text.total_lines = 3.00" ], "i": "metadata/file/text/metrics::tiny-javascript-file-lines", "l": 1 }, { "c": 1.0, "d": "Math.random invocation", "e": [ "Math.random()" ], "i": "micro-behaviors/os/random/prng/stdlib::math-random-call", "l": 2 }, { "c": 0.8500000238418579, "d": "Uses serialise function", "e": [ "serialize" ], "i": "micro-behaviors/communications/ipc/message::js-serialise", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Last line is over 1000 chars", "e": [ "text.last_line_length = 2399.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "l": 1, "m": "B0032" }, { "c": 0.8199999928474426, "d": "JavaScript static key string assignment", "e": [ "='Microsoft Internet Explorer'" ], "i": "micro-behaviors/crypto/symmetric/aes/library::js-static-key-string-assignment", "l": 1 }, { "c": 1.0, "d": "Plain JavaScript identifier assignment", "e": [ "_blog=b;" ], "i": "metadata/lang/scripted::plain-js-identifier-assignment", "l": 1 }, { "c": 0.800000011920929, "d": "Sequential source identifier names", "e": [ "identifiers.sequential_names = 15.00" ], "i": "metadata/file/text/profile::sequential-identifiers", "l": 2 }, { "c": 0.30000001192092896, "d": "JavaScript Date object construction", "e": [ "new Date" ], "i": "micro-behaviors/time/query::js-new-date", "l": 2 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "join(" ], "i": "micro-behaviors/fs/file/read::require-cwd-package-json--rx-4", "l": 1 }, { "c": 0.699999988079071, "d": "URL-encodes data via encodeURIComponent", "e": [ "encodeURIComponent" ], "i": "micro-behaviors/data/encode/url::encode-uri-component-call", "l": 2 }, { "a": "T1005", "c": 0.800000011920929, "d": "Field filter returns true", "e": [ "return true" ], "i": "objectives/credential-access/financial/credit-card::card-filter-return-true", "l": 2, "m": "B0030" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "a": "T1071.001", "c": 0.4000000059604645, "d": "Port 443 (HTTPS)", "e": [ ":443" ], "i": "objectives/command-and-control/infrastructure/ip::port-443", "l": 1, "m": "C0002" }, { "a": "T1082", "c": 0.75, "d": "Reads browser User-Agent string", "e": [ "navigator.userAgent" ], "i": "micro-behaviors/communications/http/cookies::navigator-useragent-read", "l": 3, "m": "C0002" }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 2399.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 1.0, "d": "Infinite loop structure (e.g. for(;;) or while(1))", "e": [ "while(true)" ], "i": "micro-behaviors/data/control-flow/loop::infinite-loop-header", "l": 2 }, { "a": "T1195.002", "c": 0.7599999904632568, "d": "Decoder array push reconstruction (AST)", "e": [ "push" ], "i": "objectives/supply-chain/hidden-payload/trojan::decoder-array-push-ast", "l": 1, "m": "B0032" }, { "a": "T1195.002", "c": 0.9700000286102295, "d": "Empty catch hides loader errors", "e": [ "catch(e){}" ], "i": "objectives/supply-chain/trojanized/library/hidden-dep::swallowed-loader-errors", "l": 1 }, { "c": 0.8500000238418579, "d": "High function density", "e": [ "functions.density_per_100_lines = 400.00" ], "i": "metadata/file/text/metrics::high-function-density", "l": 2 }, { "c": 0.699999988079071, "d": "JavaScript file under 5KB", "e": [ "51b18e4525205e0b6f11e181a5b01b2b##plain@0x1ae35", "51b18e4525205e0b6f11e181a5b01b2b##plain@0x18a2a", "51b18e4525205e0b6f11e181a5b01b2b##plain@0x18a2b" ], "i": "metadata/file/text/metrics::javascript-small-file-5k", "l": 1 }, { "a": "T1195.002", "c": 0.699999988079071, "d": "Top-level try/catch empty handler", "e": [ "catch(e){}" ], "i": "objectives/supply-chain/install-hook/dropper/obfuscation::top-level-try-catch-empty", "l": 1, "m": "B0024" }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.02" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "c": 0.8999999761581421, "d": "Async I/O library (libevent, libev, etc.)", "e": [ "serialize" ], "i": "micro-behaviors/dylib/library/family::async-io-lib-marker", "l": 2 }, { "a": "T1071.001", "c": 0.949999988079071, "d": "Direct HTTP C2 infrastructure", "e": [ ":443" ], "i": "objectives/command-and-control/beacon/network/http::direct-http-c2", "l": 4, "m": "B0030" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Minified/compressed code (multiple indicators)", "e": [ "text.whitespace_ratio = 0.02", "functions.density_per_100_lines = 400.00", "identifiers.sequential_names = 15.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code", "l": 2, "m": "B0032" }, { "c": 1.0, "d": "javascript code embedded in string", "e": [ "Detected javascript at offset 0x18a2b", "Detected javascript at offset 0x1ae35", "Detected javascript at offset 0x18a2a" ], "i": "metadata/lang/embedded::javascript", "l": 2 }, { "c": 0.8999999761581421, "d": "WebKit debug() test helper", "e": [ "debug" ], "i": "metadata/package/testing/harness/webkit::webkit-debug-call", "l": 2 }, { "c": 0.949999988079071, "d": "File is a one-liner", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-one-liner", "l": 1 }, { "c": 1.0, "d": "JavaScript console object", "e": [ "console" ], "i": "micro-behaviors/os/console/io::js-console-object", "l": 1 }, { "a": "T1552.001,T1082,T1041", "c": 0.9399999976158142, "d": "Regex component marker", "e": [ "debug" ], "i": "objectives/supply-chain/recon-exfil/npm::console-output-silenced--rx-2", "l": 1 }, { "d": "password keyword", "e": [ "password" ], "i": "micro-behaviors/data/text/keywords/lexicon::password", "l": 1 }, { "d": "overflow keyword", "e": [ "overflow" ], "i": "micro-behaviors/data/text/keywords/lexicon::overflow", "l": 1 }, { "c": 0.20000000298023224, "d": "rust binary fs module vocabulary", "e": [ "services" ], "i": "micro-behaviors/data/text/keywords/lexicon::rust-bin-fs-vocab", "l": 1 }, { "d": "hide keyword", "e": [ "hide" ], "i": "micro-behaviors/data/text/keywords/lexicon::hide", "l": 1 }, { "c": 0.20000000298023224, "d": "crypto keyword (substr, catches imports)", "e": [ "crypto" ], "i": "micro-behaviors/data/text/keywords/lexicon::crypto-substr", "l": 1 }, { "c": 0.8399999737739563, "d": "password/token/api_key field keyword", "e": [ "password" ], "i": "micro-behaviors/data/text/keywords/credential::credential-field", "l": 1 }, { "c": 0.20000000298023224, "d": "crypto keyword (word match)", "e": [ "crypto" ], "i": "micro-behaviors/data/text/keywords/lexicon::crypto-word", "l": 1 }, { "c": 0.8999999761581421, "d": "Encoded payload detected: url", "e": [ "function hex_md5(a){return binl2hex(core \u003curl\u003e" ], "i": "metadata/encoded-payload/url", "l": 3 }, { "c": 0.8999999761581421, "d": "Decoded unicode-escape content", "e": [ "B){n||(F=y);g=g.replace(o.match[N],\"\");i \u003cunicode-escape\u003e", "[];return{browser:j[1]||\"\",version:j[2]| \u003cunicode-escape\u003e", "POS:/:(nth|eq|gt|lt|first|last|even|odd) \u003cunicode-escape\u003e" ], "i": "metadata/encoded-payload/unicode-escape", "l": 2 } ], "sha": "5a9bdb93658752c25f4b90cc4ce56d0cd5028b615024c6a32865195e1b827f04", "path": "51b18e4525205e0b6f11e181a5b01b2b", "type": "kotlin" } ], "tv": "9ea7c" } }