{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9341577887535095,
        "class": 0
      }
    ],
    "prob": 0.9341578,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-05-01T17:45:01Z"
  },
  "path": "rbu5.test",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(CI)",
        "id": 0,
        "is": [
          "eval",
          "eval",
          "args",
          "args",
          "eval",
          "eval",
          "eval",
          "pk",
          "cols",
          "EXISTS",
          "EXISTS",
          "eval"
        ],
        "ms": {
          "text": {
            "digit_ratio": 0.16,
            "space_count": 1588.0,
            "total_lines": 302.0,
            "char_entropy": 5.5,
            "unique_chars": 82.0,
            "import_density": 3.97,
            "string_density": 0.16,
            "ascii_art_lines": 3.0,
            "avg_line_length": 28.24,
            "max_line_length": 93.0,
            "empty_line_ratio": 0.16,
            "last_line_length": 11.0,
            "most_common_char": "t",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.04,
            "line_length_stddev": 25.93,
            "normalized_import_count": 0.69,
            "normalized_string_count": 2.82,
            "repeated_char_sequences": 14.0,
            "suspicious_string_ratio": 0.06,
            "max_inline_whitespace_run": 4.0,
            "trailing_whitespace_lines": 11.0
          },
          "imports": {
            "total": 12.0,
            "unique_modules": 5.0,
            "third_party_count": 12.0,
            "third_party_ratio": 1.0
          },
          "strings": {
            "total": 49.0,
            "avg_length": 110.27,
            "max_length": 3448.0,
            "avg_entropy": 2.62,
            "sql_strings": 3.0,
            "total_bytes": 5403.0,
            "entropy_stddev": 1.5,
            "very_long_strings": 1.0,
            "high_entropy_count": 2.0
          },
          "comments": {},
          "functions": {},
          "identifiers": {}
        },
        "ss": [
          [
            1358,
            " x {\n      lappend cols "
          ],
          [
            1359,
            " x {\n      lappend cols "
          ],
          [
            1521,
            "SELECT $cols FROM $name ORDER BY $order"
          ],
          [
            1522,
            "SELECT "
          ],
          [
            1534,
            " FROM "
          ],
          [
            1545,
            " ORDER BY "
          ],
          [
            1577,
            "[string length $txt]-[md5 $txt]"
          ],
          [
            1578,
            "[string length "
          ],
          [
            1597,
            "]-[md5 "
          ],
          [
            1608,
            "]"
          ],
          [
            2741,
            "main.$tbl.$c IS orig.$tbl.$c"
          ],
          [
            2742,
            "main."
          ],
          [
            2751,
            "."
          ],
          [
            2754,
            " IS orig."
          ],
          [
            2767,
            "."
          ],
          [
            2801,
            " AND "
          ],
          [
            2802,
            " AND "
          ],
          [
            2933,
            "main.$tbl.$c IS orig.$tbl.$c"
          ],
          [
            2934,
            "main."
          ],
          [
            2943,
            "."
          ],
          [
            2946,
            " IS orig."
          ],
          [
            2959,
            "."
          ],
          [
            2983,
            "ucontrol([join $where2 ,])"
          ],
          [
            2984,
            "ucontrol([join "
          ],
          [
            3006,
            " ,])"
          ],
          [
            3041,
            " AND "
          ],
          [
            3042,
            " AND "
          ],
          [
            3224,
            "\n\n    # Find all new rows INSERTed by the script.\n    dbRbu eval "
          ],
          [
            3225,
            "\n\n    # Find all new rows INSERTed by the script.\n    dbRbu eval "
          ],
          [
            3471,
            "\n    \n    # Find all old rows DELETEd by the script.\n    dbRbu eval "
          ],
          [
            3472,
            "\n    \n    # Find all old rows DELETEd by the script.\n    dbRbu eval "
          ],
          [
            3721,
            "\n    \n    # Find all rows UPDATEd by the script.\n    set origcols [list]\n    foreach c $cols { lappend origcols "
          ],
          [
            3722,
            "\n    \n    # Find all rows UPDATEd by the script.\n    set origcols [list]\n    foreach c "
          ],
          [
            3814,
            " { lappend origcols "
          ],
          [
            4072,
            "\n\n  }\n\n  dbRbu close\n  forcedelete copy.db\n\n  return "
          ],
          [
            4129,
            "\n}\n\n#-------------------------------------------------------------------------\n#\ndo_execsql_test 1.0 {\n  CREATE TABLE t1(a INTEG"
          ],
          [
            5049,
            "\n\n    do_test 1."
          ],
          [
            5068,
            "."
          ],
          [
            5073,
            ".1 {\n      "
          ],
          [
            5090,
            "_rbu test.db2 rbu.db2\n      datacksum db\n    } "
          ],
          [
            5143,
            "\n\n    do_test 1."
          ],
          [
            5162,
            "."
          ],
          [
            5167,
            ".2 {\n      db eval { PRAGMA integrity_check } \n    } {ok}\n\n    db close\n  }\n}\n\n#------------------------------------------------"
          ],
          [
            8619,
            "\n\n    do_test 2."
          ],
          [
            8638,
            "."
          ],
          [
            8643,
            ".1 {\n      "
          ],
          [
            8660,
            "_rbu test.db2 rbu.db2\n      datacksum db\n    } "
          ],
          [
            8713,
            "\n\n    do_test 2."
          ],
          [
            8732,
            "."
          ]
        ],
        "sz": 8829,
        "ts": [
          {
            "a": "T1059",
            "c": 0.7799999713897705,
            "d": "Update message type",
            "e": [
              "UPDATE"
            ],
            "i": "objectives/command-and-control/remote-command/protocol::update-message",
            "l": 1,
            "m": "B0022"
          },
          {
            "a": "T1485",
            "c": 0.8600000143051147,
            "d": "Android file delete method string",
            "e": [
              "delete"
            ],
            "i": "objectives/impact/wipe/disk/mass-delete::android-file-delete-method",
            "l": 1
          }
        ],
        "sha": "643feb2042229d7635c8a685f9017c8a0838b5a9a7646641a88585878dd0d993",
        "path": "rbu5.test",
        "type": "kotlin"
      }
    ],
    "tv": "feb13"
  }
}