{ "ml": { "v": "5", "fs": [ { "id": 0, "prob": 1.0, "class": 2, "threshold": 1.0 } ], "prob": 1.0, "class": 2, "level": 3, "models": [ { "m": "az", "prob": 0.9380215, "class": 0 }, { "m": "az/vbs", "prob": 1.0, "class": 2 } ], "version": "v17.17", "threshold": 1.0, "analyzed_at": "2026-05-30T18:38:18Z" }, "path": "5bb0effe85ce6e2aa2cee72b5a33d76de1ca198101a1b8359e8aebc5dd303d0f.vbe", "raw": { "v": "5", "fs": [ { "f": "O(As)Md", "x": 35, "ff": { "m": { "file": { "size": 499202.0, "entropy": 4.49, "size_bytes": 499202.0 }, "text": { "tab_count": 75.0, "digit_ratio": 0.23, "space_count": 9063.0, "total_lines": 1.0, "char_entropy": 4.49, "unique_chars": 100.0, "escape_density": 0.0, "lines_over_200": 1.0, "lines_over_500": 1.0, "avg_line_length": 499202.0, "high_byte_ratio": 0.0, "lines_over_1000": 1.0, "max_line_length": 499202.0, "non_ascii_ratio": 0.0, "null_byte_count": 1.0, "last_line_length": 499202.0, "long_token_count": 1232.0, "whitespace_ratio": 0.02, "most_common_ratio": 0.12, "octal_escape_count": 5.0, "non_printable_ratio": 0.02, "unicode_escape_count": 1.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 2.0, "most_common_char_codepoint": 38.0 } }, "s": [ [ 4, "u8", "50HA" ], [ 629, "u8", "6(\u0026Ib@#@\u0026~,P~qr\u0026qIcb1OkKxdR;DnCD+`ZbRhlY4~xP:Atp]`b@#@\u00262UN,jE(@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026KMk7lY" ], [ 1785, "u8", "zMJZS~y#@#@\u0026,~P,1naD@#@\u0026~~,P@#@\u0026,~,Pinf`2P{P;jqGH@#@\u0026Ax[~wEx1OkKx@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026?;4,]}zn6c*@#@\u0026~~,P9ks~~" ], [ 3375, "url", "~x,?YM]+7+Dkncq}q_Scq6(_Scq}(Cd`(6\u0026CScE2\u0026f\u00262f2Gf2\u0026W\u0026\u00262c2f\u00262\u0026f\u0026y\u0026ff2\u0026\u002621\u00262\u0026\u00262ffG2\u00262cf\u0026f+2\u0026f\u00262f\u0026F\u0026ffW\u0026\u0026f*2\u0026f\u00262f2*f2\u0026W\u0026\u00262c2f\u00262\u0026f\u0026F\u0026" ], [ 7936, "u8", "eoh9~',)DMlzc,{@#@\u0026~,P~P,~,?OMI" ], [ 11700, "u8", "Av1WcF\u0026GlGy{cFs+Z2!+Tyb!GT22,GW{1vyGlGfvX" ], [ 11998, "u8", "yGfvO" ], [ 12276, "u8", "ZGTFFW,GGcy+f2*" ], [ 12577, "u8", "cWX*l +92Gv3" ], [ 12692, "u8", "T!OvZ!fGTTyGT!l" ], [ 13064, "u8", "TZfvZTF+!!A" ], [ 13096, "u8", "TZFvTTAvT!O" ], [ 13160, "u8", "TZ GTT8vT!G" ], [ 13268, "u8", "T!FvZ!1vTTyGT!O{!Z!{TZsvTT2cT!ZTZ!*F!Z%vZ!F" ], [ 13332, "u8", "T!2cZ!/vTT8vT!F" ], [ 13640, "u8", "TZ*GZTs+!!;" ], [ 13704, "u8", "TZccZT*+!!;" ], [ 16093, "u8", "TA!9FyT\u0026Zfq3ZfFqTZ" ], [ 18985, "u8", "Zffq0yFq!8TZ" ], [ 20309, "u8", "!8FyFq!/qyFXF+T%Z qqZZF+qlF" ], [ 20724, "u8", "WvXW2ysvOvW" ], [ 20948, "u8", "qvWG2G3v1*w*o*l" ], [ 21038, "u8", "Ov/v2*ZG*FcF%cZG8" ], [ 21141, "u8", "cA WGfvX" ], [ 21278, "u8", "Av1vFX2yf" ], [ 21598, "u8", "FGXvG" ], [ 21646, "u8", "FsvF{XvGv8v+G" ], [ 21684, "u8", "wv1+\u0026F Glv+XZyA" ], [ 22621, "u8", "T2!0G8qf8vT*ZZGqqGF" ], [ 24520, "u8", "TZ*GZTZ+!!F" ], [ 25544, "u8", "TZfcZTF+!!l" ], [ 26580, "u8", "T!WvZ!fvTTyvT!8" ], [ 28206, "u8", "Z!TGZTZGTZFW!!z!ZTfZ\u0026" ], [ 39060, "u8", "T!;cZ!/*TTWGT!;" ], [ 39496, "u8", "TZcGZTF+!!W*T!Z Z!+GTTlvT!2{!Z*XTZZ*TT~vT!F{Z!q+!Z%cZ!~" ], [ 40308, "u8", "Z!+F!Z%vZ!2*!ZZX!Zs" ], [ 40532, "u8", "T!wvZ!1vTTWGT!8" ], [ 40808, "u8", "TZccTTZ T!A" ], [ 40859, "u8", "vTTlvT!W*!ZZXTZFvTTWGT!8" ], [ 41876, "u8", "T!WGZ!qvTT2vT!O" ], [ 42516, "u8", "T!AvZ!qvTTGvT!G" ], [ 42568, "u8", "TZZvZT*+!!R" ], [ 43080, "u8", "TZsvZTs+!!;" ], [ 43675, "u8", "\u0026TT8cT!yf!Z *TZc\u0026TTZ\u0026T!8fZ!T2!Z!\u0026Z!8*!Z%f!Z%fTZ cZT\u00262!!W" ], [ 44068, "u8", "!ZGXTZZ*TTWGT!+" ], [ 44596, "u8", "Z!Tl!Z! Z!ZX!ZcX!ZcXTZ%c~q!Z!!W" ], [ 44692, "u8", "T!FGZ!fGTT2GT!8" ], [ 45224, "u8", "TZ! TT2GT!l{Z!*F!ZFvZ!W{!Z\u0026{!Z!+TZ%vZTcF!!O" ], [ 45268, "u8", "T!FGZ!T TTWvT!l" ], [ 46408, "u8", "TZ! ZT\u0026F!!l{T!WGZ!qvTTWGT!2{!Z!+TZ%vTTWGT!O" ], [ 47086, "u8", "Z!T ZT2GTZ*F!!WGZTF+!TcF!TfF!!Z+!Z%vZT*GZ!OvT!{{Z!T ZTc+!TX+!!/" ], [ 47438, "u8", "!ZsvZT/vZ!ycT!q" ], [ 49774, "u8", "Z!0vZT2vTZsy!!w ZTb2!T!F!T*F!!W{!Z%vlfT!Z!O T!$fZ!X\u0026ZT!2!T{2!!ffZ!3 ZTZ\u0026TZ2y!!8\u0026ZT l!TZW!TfW!!Z+!Zc*ZTXcZ!AcT!3+Z!T ZTA2!T+2!!3+" ], [ 50014, "u8", "Z!*GZTF+!TTF!!9" ], [ 55272, "u8", "qWcGX" ], [ 55508, "u8", "qG2GZ!1G+{WG3vl" ], [ 55630, "u8", "cF!Gw*TGZ!OGTGo" ], [ 55774, "u8", "WG3vl" ], [ 55912, "u8", "1W%vTTOGXv~*WG+F,+v*FGZT,F*" ], [ 55950, "u8", "s+ GZXT!OGlv$cf{Av1v8" ], [ 56040, "u8", "$W%v*{Ov{*W{ZG1F F\u0026vlvW*!Z,{*+A*0+!GZT,F*v~*+vlG2*3vX" ], [ 56398, "u8", "%WcGR{XvAc;v/vq" ], [ 56532, "u8", "+GyGlGfcoXWGXvF" ], [ 56564, "u8", "AvXFs+ GFvl" ], [ 56580, "u8", "vWc{X+GcZTGFsvA*o*WGlv{vTTFGXvO" ], [ 56718, "u8", "cl Gl" ], [ 56782, "u8", "!ZcGR{XvW*;v/vq*Wvqvl" ], [ 56974, "u8", "ZWcvy{qvwvyv1GX" ], [ 57038, "u8", "cW!!W{fGwvRc1G+*2G/v8" ], [ 57550, "u8", "FW2vw" ], [ 57556, "u8", "1vWG8vfv1" ], [ 57614, "u8", "GW!!W{3vlGwvfcoXWGXvF" ], [ 57645, "u8", "{lcTGlXOGX+AW!!WGA" ], [ 57736, "u8", "TlcGl" ], [ 57940, "u8", "/v2cZG*G9" ], [ 58190, "u8", "vlcvy{qvwvyvTG1" ], [ 58728, "u8", "XF\u0026*TTWGqvG" ], [ 58846, "u8", "2GT!2{cF\u0026{o+%c*" ], [ 58910, "u8", "lGfvw" ], [ 58990, "u8", "Rv**ZT2GfF\u0026F%vWG8" ], [ 59156, "u8", "TGwcZ!fGf{8v/v2*2+s" ], [ 59220, "u8", "+GlvZGocTT2G+Gw" ], [ 59336, "u8", "TlccO*vlsc2*T!2GyGXv*" ], [ 59380, "u8", "RvfWslcGlvF" ], [ 59886, "u8", "WvXvy{2colcF*v2GZT\u0026FZ" ], [ 59956, "u8", "W*olcF*vFvZT\u0026FG" ], [ 60318, "u8", "yGXG2" ], [ 60638, "u8", "FvXGy" ], [ 60686, "u8", "l2 2{Xv2vOv" ], [ 60712, "u8", "/+\u0026cTT2GXv2" ], [ 60776, "u8", "f+ GX{wvfGl" ], [ 60814, "u8", "vF Gl" ], [ 60830, "u8", "OvfG8" ], [ 60894, "u8", "OvTGG" ], [ 61108, "u8", "ZGTFFW2 2vO" ], [ 61278, "u8", "lGfGO" ], [ 61316, "u8", "GF\u0026{fFFvZXA+svw" ], [ 61364, "u8", "8v1+cW2 Gvl" ], [ 61390, "u8", "cFFvW*T!yGWGf*3" ], [ 61534, "u8", "yGXvG" ], [ 61544, "u8", "XWcGX" ], [ 61726, "u8", "Avov2" ], [ 61748, "u8", "yGX+\u0026lcGZGO" ], [ 61828, "u8", "*+ XolcG2{s+%cZT+GlvWGXGT{Gvov2*,Ff*TZ GX" ], [ 61960, "u8", "Tl2vw" ], [ 62004, "u8", "FcTZ F*v2GlXcF2" ], [ 62164, "u8", "0cWGAvXv" ], [ 62292, "u8", "qv2GOv*coXyG{vG" ], [ 62485, "u8", "GyGlvf*TTyGXvF" ], [ 62558, "u8", "AvXcZT F*" ], [ 62830, "u8", "yvoc2{Gv+Fs+vcOGG*slf" ], [ 62862, "u8", "vFsvy{T*WG2vXv)" ], [ 62990, "u8", "sW Gl" ], [ 62996, "u8", "fGl*w*9vTTyGXvW" ], [ 63406, "u8", "WGqvW*zGfF!Z G8vR" ], [ 63643, "u8", "cTTwv" ], [ 63726, "u8", "wvfcZTwv*lslcGlvF" ], [ 63924, "u8", "RGXW F*vAvA" ], [ 63950, "u8", "s+,vW{TGlv2v0GX*AvovO" ], [ 64020, "u8", "ovOvWGqvf" ], [ 64072, "u8", "1+%vZ{F+ GF" ], [ 64084, "u8", "ovWGZG1G+{2cT!A" ], [ 64372, "u8", "wvfW F*vWv8" ], [ 64590, "u8", "cFFvz{1v;v8v+vo" ], [ 64798, "u8", "Ov/vZ{!FF*1FfcTTAvovO" ], [ 64852, "u8", "fGyGlv" ], [ 64859, "u8", "GoXWGXv2{!Z2" ], [ 65428, "u8", "qc2vOv+G*{lv9vG" ], [ 65518, "u8", "lv9cR" ], [ 65544, "u8", "X+ GW{\u0026l,Gy{ovGvlv9cTTGvqvl" ], [ 65572, "u8", "Fc{flcGf{lvXG8{lv+lcF*vFcZTf+F" ], [ 65652, "u8", "yGXFslcGlv2{!ZZ" ], [ 65716, "u8", "wv+FcF2vwv2*!ZZ" ], [ 66068, "u8", "fcA GvXv*{2G1G2X!ZZ" ], [ 66206, "u8", "RvfGy{F+f*TZZvq" ], [ 66270, "u8", "wvovR" ], [ 66292, "u8", "Ac/+Z+Fv2cZTA+s" ], [ 66324, "u8", "ovRcAvX*TT~vfvw" ], [ 66344, "u8", "XlZvq" ], [ 66600, "u8", "/+Fvf*AvovO" ], [ 66708, "u8", "/v8v2cXv*{8v{vl" ], [ 66804, "u8", "AvX+ZW%G8vG*GFc" ], [ 66846, "u8", "2co*W{*+\u0026{TZ%v*{Fv3vl" ], [ 66952, "u8", "TZ%vW{F+!*y{XvWv;vov" ], [ 66984, "u8", "*FFvTXlv/vO" ], [ 67092, "u8", "/cZ!Fv3v1" ], [ 67118, "u8", "Av1vy{WGflcF*vFcZTG+2" ], [ 67502, "u8", "WGfGO{2*TZG+Zv8vZTG+Z" ], [ 67528, "u8", "TZGv8" ], [ 67614, "u8", "wc0Gl" ], [ 67624, "u8", "1WcGf{8v/cZT+voW*+bGOv2X!Z*" ], [ 67656, "u8", "fFs*O{*+AvZTXvzGOvfGoXlv{v8" ], [ 67764, "u8", "WcTZ*+bGOv2XG+F" ], [ 67995, "u8", "**{lv{cZT*+*{/+Fv" ], [ 68013, "u8", "XWGfvl" ], [ 68148, "u8", "8vX+ F%vW*wXf+!T*+*{/+Fv+XslcGl" ], [ 68244, "u8", "Xv2G2GXvf" ], [ 68296, "u8", "TFfvw" ], [ 68436, "u8", "+GOGZGovf*OG/vy" ], [ 68564, "u8", "/vOvZG9vo" ], [ 68616, "u8", "1+ GW{cFFcy{XvWGAv1vo" ], [ 68872, "u8", "1+%cy{*+GvF" ], [ 69204, "u8", "qv2GFGov+{yc+Gw" ], [ 69256, "u8", "fFGGw" ], [ 69262, "u8", "F cy{XvFvFvXG+" ], [ 69422, "u8", "lv{cZTlv*F*F vOvy{cFc{FWc" ], [ 69576, "u8", "+F%vWXFWc*2XT!lvWGXG+" ], [ 69780, "u8", "XGyvlv*cTTlv*G8" ], [ 69934, "u8", "lG9cZTlv*FF+Gvlv;" ], [ 69982, "u8", "WGqv2" ], [ 70196, "u8", "ZGTFFW*v;vw" ], [ 70292, "u8", "fvyGlGovf{lv+GZT*+ {XFcG/" ], [ 70676, "u8", "T!lvZG1G*Xyvov;" ], [ 70692, "u8", "Wb{fF!GTTlvTGw" ], [ 70734, "u8", "cFFvW*T!lvAv1v0" ], [ 70798, "u8", "FG*ZTXvAvwcT!X" ], [ 70814, "u8", "Gv1vWX*+c{q+ccTTlv9vO" ], [ 70926, "u8", "slcGl" ], [ 70958, "u8", "GvqvA" ], [ 71144, "u8", "q+2voXGvXvW{OvTZ*+fv8vA" ], [ 71278, "u8", "GvqvA*ZGTFF+s*WGl" ], [ 71336, "u8", "XFvcoXWGXvF" ], [ 71380, "u8", "/vlcWGXv{*Z!XvG" ], [ 71518, "u8", "wvfGA" ], [ 71560, "u8", "0Wfvw" ], [ 71566, "u8", "Fvcl" ], [ 71636, "u8", "/vlvOv" ], [ 71700, "u8", "/vyv8vfGo" ], [ 71710, "u8", "ZGfGO" ], [ 71848, "u8", "X+ *TTlv/vy" ], [ 71956, "u8", "qvRv2v0GX*lv+G8" ], [ 72142, "u8", "s+fcy{XvRvZG1vf*Z!XvW" ], [ 72340, "u8", "ovAcyvTGTTlvfvA" ], [ 72494, "u8", "8v/vZ{lv+l!ZcvyGw" ], [ 72718, "u8", "FsvF{fG2G8vT*oXWGXv2{!Zc" ], [ 72852, "u8", "+vZGOv/vf*WGXvF*!Zc" ], [ 72878, "u8", "yvTGO" ], [ 73000, "u8", "9WcGX" ], [ 73076, "u8", "ZGTFFW!!WvA" ], [ 73140, "u8", "Wvq+*+%vw*W" ], [ 73173, "u8", "clvGvqv3" ], [ 73486, "u8", "cFFvl" ], [ 73736, "u8", "TZcvl" ], [ 73742, "u8", "F,vZ{0GlcyGXvf{l*fGO" ], [ 73806, "u8", "FsvF{fG2G8vT*X" ], [ 73822, "u8", "Gv1vW{slc{X+\u0026GTTWvXvF" ], [ 74196, "u8", "XvlvZGf*oXwv" ], [ 74324, "u8", "XvlvZGf*oXAvov~" ], [ 74350, "u8", "lvXvZ{2*ol2+FvyGlX!Zc" ], [ 74376, "u8", "TF\u0026*wXf+*GW{1vyvyGovTTWvXvl" ], [ 74432, "u8", "*+!{\u0026lsX9+*GO" ], [ 74484, "u8", "ZGflslZvOv8" ], [ 74580, "u8", "/vWGlGocTTWvXvl" ], [ 74606, "u8", "Av*Gl{ZGfl!Zcvlvl" ], [ 74804, "u8", "Gvo+ F%v2cZTc+*" ], [ 74868, "u8", "wvfW!Zcvlvl" ], [ 74910, "u8", "WGXvG" ], [ 75060, "u8", "lvTF\u0026ls*2clX!Zc" ], [ 75368, "u8", "{W2 f{AvovO" ], [ 75592, "u8", "*W%vW{*FFcy" ], [ 75726, "u8", "cWcv8" ], [ 75732, "u8", "ov;vZGX*TT8v*G8" ], [ 76484, "u8", "GF\u0026{fFFvZXslcGl" ], [ 77508, "u8", "\u0026+!TfW,cF*FWfcwX+cwc;c+coX8c**8*cWsX1l*c$*w***ZXO*+l\u0026W cZ!2*GW!T Ws*/W cwXFWc*8**cw*O*Xc$*w***ZX,l XfW cTT8c0Gl*~vo+s+%c2GF{s+c" ], [ 77915, "u8", "cf*lc*cFfG2v*X2G\u00260f8c" ], [ 78516, "u8", "wvfFs+ G2vO" ], [ 78686, "u8", "WGfvl" ], [ 80221, "u8", "TOGT!FXFZ!TT8cZTqAATFATw!0AsZffw!W1ZZf" ], [ 82324, "u8", "T!2s8!3vTTF2q!A" ], [ 82356, "u8", "Z!0zFZ2vZ!W0FZ2" ], [ 82376, "u8", "fZv\u0026ZTA~c Z0f!+\u0026Z!$A*+Zvf!+f!ZA$*y!cfT+\u0026T!~$W Ty\u0026Zv\u0026Z!~$cy!T\u0026ZvfTZAA2+!A\u0026!+fT!~AZ T%fT+\u0026T!~$!y!" ], [ 82568, "u8", "fZv\u0026ZTA~sFZ*f!+\u0026Z!$AoqZ f!+f!ZA$o8!!fT+\u0026T!~$AFTA\u0026Zv\u0026Z!~$28!/\u0026ZvfTZAAAq!z\u0026!+fT!~AAFT%fT+\u0026T!~$28!" ], [ 82907, "u8", "\u0026TT22XFW3GZZXTZAZ+q8%f!+fZ!$~ 8F%F!;X!ZA/ 8F" ], [ 83675, "u8", "\u0026TT~A*!Z)vZ!3TZ\u0026s*T2%f!+fZ!$~cZ!%2!+f!Z\u00261cZ\u0026" ], [ 83831, "u8", "2!ZAAy!83\u0026Zvf!ZA0+Z!2FT\u0026O!!29+!8ZF!/*TT~Z+!8/\u0026ZvfTZAA+T8ZX!A{Z!fR Z!Z2!+f!ZA0 Z!/{Zc%ZT\u0026G !8){!;*Z!$Z+T8bf!+f!ZA$+ZFbfT+\u0026T!~0y!T" ], [ 84525, "u8", "T;\u0026T!~)Z!f;*Z2GZ!20!Z\u0026/\u0026ZvfTZ\u0026AZTF;\u0026!+fT!~%Z!TZXTFZT!2)!Z,)XZ\u00262TT~bT!2)l!3F!Z\u0026%Z!2)\u0026Zvf!ZA0TZ!blT,~!!2)T!O%l!3*TT~GT!20\u0026ZvfTZA,T" ], [ 85092, "u8", "y%TTZZ%Tq8AXFl3l!qF!Zb!y Z+*ZF{ Z $+y! 2T,8!Fz)* AF2!q2qT2 TF8T*Z,{oZZG3qw!X!O*ZF*+F8Acl!8X!8AX%yGfXZF*ZqvlZ!;)*!OFZFq*fTZFX!8X!" ], [ 87872, "u8", "!Z20AyZf+ZFvZTbZ Z++!8vR!{A{qRF+!OXFZ\u0026+{ycGqTOs0!8$F $~ ZF*R!8$Gy21 ZFX0ZbbF+cFF!Ooq!A!A!0A+TOcT!zT y!+TZ,*TTz!+ Z+Z!ql!Zb!y Z+" ], [ 90075, "u8", "bTT8!T!ZTvZA" ], [ 90523, "u8", "!TTZ!X!+o!Z*TTZ!!9ql2T!WTZ!TZAy%!Z!2T!Z!TAy!qTZ !ZT!ZZ z/T!8!Z!T!/+zZT!8T!Z!T*y%fTTO!T!ZT~ 0Z!Z%!Z!ZTAy!q!ZGTTZ!!F+Fw!!+TT!Z!F 9" ], [ 93764, "u8", "!Zb9+Z Azq!Z%!+TT!Z!Z!T!f+2vT!z9!ZG118%s0T+!T!ZTZ!TZ\u0026y,*Z!O9 Z $sZ /0Zv!ZT!Z!!ZTf Z*Z!1fTTF,o!l$%ZvTTZ!!TTZ!f +*Z!0G\u0026Zc,z!~9%ZvT" ], [ 94199, "u8", "Z!Z!!Z!ZT yZf!Zc9TZs\u0026~qb+!!+qT!Z!Z!T!+/R,T!W9!Zsf9y cTT+FT!ZTZ!TZ!;%vZ!W9!ZsfZZ%TTZvFZT!Z!!ZT3AW Z!*fTTw\u0026/ ~*!ZvqTZ!!TTZ!$ARoZ!*" ], [ 97079, "u8", "y%8FFZ!ZT!Z!T yc*TZ%vZTbZ Z+0F+!Z!T!TTZ!+ ;f!Z*" ], [ 98420, "u8", "~ Tw!yvFZ!Z0!Z!T!Z!TTZ \u00268TZlb G3T +FZ!T%TTZ!T!ZT!Z!fqZ**{TAcT +qZ!TR!Z!!Z!ZT!ZZ+FZZ*$Z%!Z+v8!!Z0T!Z!Z!T!TTO q!W*Ayf{TyvFTTZ%T!ZT" ], [ 100763, "u8", "2TT+!T!O9sZ%fTZv!TTOfo!l*Z!" ], [ 100983, "u8", "ZFZZAAF;f!ZvT\u0026Z f*ybZZTvZ !~fXFwAZ!" ], [ 101211, "u8", "!+T~\u0026{FA$!ZvT+ZA\u0026{qF%T!+Ty!$2cy%fZ!+T Z*)vZc*TZv!yTA2 !G9T!+!y!$\u0026$+~%T!+TFZZ$$y%,TT+!+!~f+F*W!Zv!8!;$v8b*!ZvT+ZA\u0026+TbR!!+Tq!;A+!X" ], [ 101367, "u8", "Z ZA\u0026~FW{!ZvT ZAfX8sAZTvZ !~f0 GGZ!" ], [ 101745, "u8", "z$Z!q8!Z,f~FwX!ZFq!Z,9/ZcFZTF8!!O9o!R*Z!qFTTOf) W0!ZFqTZ,fq+FGT!8qZ!1GFy*%Z!8q!Z,9ZZAfTZFFZT,GsF;/T!8FZ!1f9q8fT!8q!Z,9q8%vTT8FT!" ], [ 102144, "u8", "!ZFf!Zs+o82GZTF8!!F+oFy\u0026Z!q\u0026TTwFoFAq!ZFfTZGFoqFcT!8f8!Xy!Z,,Z!GX!Z!T!Z,$TZ!!8T*8F!l+T!O,Z!9*TTZ!T!wX!Z!TqZ*FqTl T!O1Z!9l!Z!!Z!;f" ], [ 103497, "u8", "ycZZTvZG!2q9!RcZ!" ], [ 103991, "u8", "A!Zv!y 20AZso!ZvT" ], [ 104168, "u8", "/8s%TTA!1F2" ], [ 104285, "u8", "+lFq ;o!ZbT18!Z)+GbT!+qOFT;,yG*Z!+q%yG**ycfTZ2!R+GW%FWoT!A!R {c9TzAT!AT%yG*)y bTTA!*!2{AF+R!Zb!W!2{b8%f!ZbT0yGcA+bz!!AT{!2Fw!3fT" ], [ 104576, "u8", "sZb3!ZbT0yGcO+vZ!!AT+ FsRF/2TTz!)Fl" ], [ 104744, "u8", "98cvTTz!f +q+!/z!Zv!zFl" ] ], "v": { "file.stem": "5bb0effe85ce6e2aa2cee72b5a33d76de1ca198101a1b8359e8aebc5dd303d0f", "file.basename": "5bb0effe85ce6e2aa2cee72b5a33d76de1ca198101a1b8359e8aebc5dd303d0f.vbe" }, "id": "vbs" }, "id": 0, "sz": 499202, "ts": [ { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Last line is over 1000 chars", "e": [ "text.last_line_length = 499202.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "l": 1, "m": "B0032" }, { "c": 0.949999988079071, "d": "File is a one-liner", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-one-liner", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "a": "T1562.001", "c": 0.8199999928474426, "d": "PowerShell char arithmetic", "e": [ "fF\u0026*f+2c*F2*2,fWc8\u0026c2F2*\u00268\u0026*cW\u0026Xf8\u0026*2q\u0026W\u0026/f,Wcfcfq2cfF2*cW\u0026*f8\u0026*fT2c*F2{2GfWcy\u0026c2F2*\u00268\u0026*\u00268\u0026{fF\u0026c2f\u0026W..." ], "i": "objectives/evasion/anti-av/amsi::powershell-char-arithmetic", "l": 1, "m": "E1562", "el": [ "0x5efd1" ] }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 499202.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.02" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "c": 0.8500000238418579, "d": "PowerShell or VBScript line bloat", "e": [ "text.avg_line_length = 499202.00" ], "i": "objectives/anti-static/obfuscation/string/anomaly::script-host-line-bloat", "l": 4 }, { "c": 0.8999999761581421, "d": "Encoded payload detected: url", "e": [ "~x,?YM]+7+Dkncq}q_Scq6(_Scq}(Cd`(6\u0026CScE2 \u003curl\u003e", "fF\u0026*f+2c*F2*2,fWc8\u0026c2F2*\u00268\u0026*cW\u0026Xf8\u0026*2q\u0026W \u003curl\u003e", "2Gf*2f\u0026W\u0026qfl\u0026\u0026f*2FfG2f2cfO\u0026W\u0026 2c2q\u0026l\u0026f\u0026+ \u003curl\u003e", "WFf*2*\u0026W\u0026qfl\u0026\u0026f*2FfG2f2cfO\u0026W\u0026F2v2{\u0026l\u0026*\u0026l \u003curl\u003e", "2Gf*2*\u0026W\u0026qfl\u0026\u0026f*2FfG2f2cfO\u0026W\u0026 2c2q\u0026l\u0026*\u0026+ \u003curl\u003e" ], "i": "metadata/encoded-payload/url", "l": 3, "el": [ "offset:3375", "offset:389073", "offset:241921", "offset:243201", "offset:241793" ] } ], "sha": "5bb0effe85ce6e2aa2cee72b5a33d76de1ca198101a1b8359e8aebc5dd303d0f", "path": "/data/samples/bad/datasets/various/datalake.abuse.ch/2025-08/5bb0effe85ce6e2aa2cee72b5a33d76de1ca198101a1b8359e8aebc5dd303d0f.vbe", "type": "vbs" } ], "tv": "ca5ef" } }