{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 1.0, "class": 2 } ], "prob": 1.0, "class": 2, "models": [ { "m": "az", "prob": 0.8383554, "class": 0 }, { "m": "az/source", "prob": 0.83389264, "class": 0 }, { "m": "az/kotlin", "prob": 1.0, "class": 2 } ], "version": "v17.17", "thresholds": [ 0.999503, 0.9998882 ], "analyzed_at": "2026-05-24T05:50:34Z" }, "path": "40d2bb5b3821a28625937e574ea98932", "raw": { "v": "5", "fs": [ { "f": "O₂(As₃Xe)", "x": 33, "ff": { "i": [ [ "", "function" ], [ "", "excellenceservices0theyoke" ], [ "", "excellenceservices0theyoke" ], [ "", "function" ], [ "", "function" ], [ "", "pRomotedtrue" ], [ "", "decodeURIComponent" ], [ "", "function" ], [ "", "diedesigns" ], [ "", "DIedesigns" ], [ "", "DIedesigns" ], [ "", "COntroversialisthis" ], [ "", "excellenceservices0interestthe" ], [ "", "parseInt" ], [ "", "isNaN" ], [ "", "afsga3rvz" ], [ "", "function" ], [ "", "function" ], [ "", "decodeURIComponent" ], [ "", "function" ], [ "", "afSga3rvz" ], [ "", "sDFSvs4h" ], [ "", "sDFSvs4h" ], [ "", "SDFSvs4h" ], [ "", "sdfsvs4h" ], [ "", "afsga3rvz" ], [ "", "function" ], [ "", "afsga3rvz" ], [ "", "Elifetheirdownwardscase" ], [ "", "Elifetheirdownwardscase" ], [ "", "for" ], [ "", "Afsga3rvz" ], [ "", "Afsga3rvz" ], [ "", "Afsga3rvz" ], [ "", "excellenceservices0factorwas" ], [ "", "excellenceservices0controversialisthis" ], [ "", "excellenceservices0referwithin" ], [ "", "Create" ], [ "", "Create" ] ], "m": { "ast": { "max_depth": 39.0, "call_count": 66.0, "node_count": 4832.0, "target_count": 22.0, "string_literal_count": 364.0 }, "file": { "size": 230943.0, "entropy": 4.78, "size_bytes": 230943.0 }, "text": { "digit_ratio": 0.02, "space_count": 35854.0, "total_lines": 1111.0, "char_entropy": 4.78, "unique_chars": 93.0, "lines_over_200": 738.0, "lines_over_500": 2.0, "string_density": 0.33, "avg_line_length": 206.87, "high_byte_ratio": 0.0, "lines_over_1000": 1.0, "max_line_length": 1684.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.02, "last_line_length": 309.0, "whitespace_ratio": 0.16, "most_common_ratio": 0.1, "identifier_density": 0.41, "line_length_stddev": 133.39, "encoded_string_ratio": 0.2, "normalized_string_count": 10.92, "repeated_char_sequences": 95.0, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.4, "max_inline_whitespace_run": 1.0, "trailing_whitespace_lines": 2.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.3, "normalized_unique_identifiers": 12.06 }, "strings": { "total": 364.0, "avg_length": 6.98, "max_length": 16.0, "avg_entropy": 2.28, "empty_count": 5.0, "hex_strings": 71.0, "total_bytes": 2542.0, "entropy_stddev": 0.48 }, "comments": { "chars": 213201.0, "lines": 733.0, "total": 733.0, "to_code_ratio": 1.94, "high_entropy_comments": 296.0 }, "identifiers": { "total": 454.0, "avg_length": 13.17, "max_length": 67.0, "min_length": 2.0, "avg_entropy": 2.99, "reuse_ratio": 0.27, "unique_count": 122.0, "length_stddev": 10.39, "has_digit_ratio": 0.36, "base64_like_names": 36.0, "high_entropy_count": 30.0, "high_entropy_ratio": 0.25, "all_lowercase_ratio": 0.3, "numeric_suffix_count": 3.0 } }, "s": [ [ 9800, "u8", "1A16163" ], [ 9801, "u8", "1A16163" ], [ 9815, "u8", "D2501173" ], [ 9816, "u8", "D2501173" ], [ 9831, "u8", "00F3A6" ], [ 9832, "u8", "00F3A6" ], [ 9845, "u8", "4434747" ], [ 9846, "u8", "4434747" ], [ 9860, "u8", "4049702F" ], [ 9861, "u8", "4049702F" ], [ 9876, "u8", "312D4A50" ], [ 9877, "u8", "312D4A50" ], [ 9892, "u8", "3D070F" ], [ 9893, "u8", "3D070F" ], [ 9906, "u8", "39493B1" ], [ 9907, "u8", "39493B1" ], [ 9921, "u8", "40D1802" ], [ 9922, "u8", "40D1802" ], [ 9936, "u8", "1A131E4F" ], [ 9937, "u8", "1A131E4F" ], [ 9952, "u8", "2C7E6B" ], [ 9953, "u8", "2C7E6B" ], [ 9966, "u8", "525223" ], [ 9967, "u8", "525223" ], [ 9980, "u8", "1B2B3C0" ], [ 9981, "u8", "1B2B3C0" ], [ 9995, "u8", "3255F" ], [ 9996, "u8", "3255F" ], [ 10008, "u8", "0B0D4F2C" ], [ 10009, "u8", "0B0D4F2C" ], [ 10024, "u8", "172C44281" ], [ 10025, "u8", "172C44281" ], [ 10041, "u8", "73D1E3222" ], [ 10042, "u8", "73D1E3222" ], [ 10058, "u8", "5E46605" ], [ 10059, "u8", "5E46605" ], [ 10073, "u8", "E5E5862" ], [ 10074, "u8", "E5E5862" ], [ 10088, "u8", "64037" ], [ 10089, "u8", "64037" ], [ 10101, "u8", "8400C5A48" ], [ 10102, "u8", "8400C5A48" ], [ 10118, "u8", "7E7274" ], [ 10119, "u8", "7E7274" ], [ 10132, "u8", "46017" ], [ 10133, "u8", "46017" ], [ 10145, "u8", "243425C0" ], [ 10146, "u8", "243425C0" ], [ 10161, "u8", "15A794442" ], [ 10162, "u8", "15A794442" ], [ 10178, "u8", "51140" ], [ 10179, "u8", "51140" ], [ 10191, "u8", "C44005F5" ], [ 10192, "u8", "C44005F5" ], [ 10207, "u8", "147525E" ], [ 10208, "u8", "147525E" ], [ 10222, "u8", "54754E7" ], [ 10223, "u8", "54754E7" ], [ 10237, "u8", "65B564A62" ], [ 10238, "u8", "65B564A62" ], [ 10254, "u8", "075E451B" ], [ 10255, "u8", "075E451B" ], [ 10270, "u8", "4542066" ], [ 10271, "u8", "4542066" ], [ 10285, "u8", "B644B" ], [ 10286, "u8", "B644B" ], [ 10298, "u8", "734E7" ], [ 10299, "u8", "734E7" ], [ 10311, "u8", "4617B5" ], [ 10312, "u8", "4617B5" ], [ 10325, "u8", "E040460" ], [ 10326, "u8", "E040460" ], [ 10340, "u8", "6971040D" ], [ 10341, "u8", "6971040D" ], [ 10356, "u8", "4E5A6" ], [ 10357, "u8", "4E5A6" ], [ 10369, "u8", "7701F7B6C" ], [ 10370, "u8", "7701F7B6C" ], [ 10386, "u8", "09187" ], [ 10387, "u8", "09187" ], [ 10399, "u8", "061566" ], [ 10400, "u8", "061566" ], [ 10413, "u8", "B0D5E637" ], [ 10414, "u8", "B0D5E637" ], [ 10429, "u8", "94E4E" ], [ 10430, "u8", "94E4E" ], [ 10442, "u8", "565C5B0" ], [ 10443, "u8", "565C5B0" ], [ 10457, "u8", "D41650" ], [ 10458, "u8", "D41650" ], [ 10471, "u8", "D76585" ], [ 10472, "u8", "D76585" ], [ 10485, "u8", "A61417B6F" ], [ 10486, "u8", "A61417B6F" ], [ 10502, "u8", "5F77627A" ], [ 10503, "u8", "5F77627A" ], [ 10518, "u8", "52020" ], [ 10519, "u8", "52020" ], [ 10531, "u8", "01E4D73" ], [ 10532, "u8", "01E4D73" ], [ 10546, "u8", "605C05064" ], [ 10547, "u8", "605C05064" ], [ 10563, "u8", "47E5F" ], [ 10564, "u8", "47E5F" ], [ 10576, "u8", "0A637C6C" ], [ 10577, "u8", "0A637C6C" ], [ 10592, "u8", "66415C58" ], [ 10593, "u8", "66415C58" ], [ 10608, "u8", "75016" ], [ 10609, "u8", "75016" ], [ 10621, "u8", "54C7B58" ], [ 10622, "u8", "54C7B58" ], [ 10636, "u8", "7F7F6D5F5" ], [ 10637, "u8", "7F7F6D5F5" ], [ 10653, "u8", "A65004E" ], [ 10654, "u8", "A65004E" ], [ 10668, "u8", "1A0F4E541" ], [ 10669, "u8", "1A0F4E541" ], [ 10685, "u8", "A013A34" ], [ 10686, "u8", "A013A34" ], [ 10700, "u8", "2B386F" ], [ 10701, "u8", "2B386F" ], [ 10714, "u8", "64720446" ], [ 10715, "u8", "64720446" ], [ 10730, "u8", "013E2" ], [ 10731, "u8", "013E2" ], [ 10743, "u8", "249584" ], [ 10744, "u8", "249584" ], [ 10757, "u8", "125103046" ], [ 10758, "u8", "125103046" ], [ 10774, "u8", "092A0" ], [ 10775, "u8", "092A0" ], [ 10787, "u8", "10D3F" ], [ 10788, "u8", "10D3F" ], [ 10800, "u8", "426545707" ], [ 10801, "u8", "426545707" ], [ 10817, "u8", "23901" ], [ 10818, "u8", "23901" ], [ 10830, "u8", "13373" ], [ 10831, "u8", "13373" ], [ 10843, "u8", "F0111564B" ], [ 10844, "u8", "F0111564B" ], [ 10860, "u8", "4C25271" ], [ 10861, "u8", "4C25271" ], [ 10875, "u8", "F241A" ], [ 10876, "u8", "F241A" ], [ 10888, "u8", "3624063" ], [ 10889, "u8", "3624063" ], [ 10903, "u8", "A350A" ], [ 10904, "u8", "A350A" ], [ 10916, "u8", "2C08235" ], [ 10917, "u8", "2C08235" ], [ 10931, "u8", "6070B5" ], [ 10932, "u8", "6070B5" ], [ 10945, "u8", "9464528" ], [ 10946, "u8", "9464528" ], [ 10960, "u8", "0C2F3" ], [ 10961, "u8", "0C2F3" ], [ 10973, "u8", "21D0E15" ], [ 10974, "u8", "21D0E15" ], [ 10988, "u8", "3F1B2E13" ], [ 10989, "u8", "3F1B2E13" ], [ 11004, "u8", "2351470" ], [ 11005, "u8", "2351470" ], [ 11019, "u8", "E3A746" ], [ 11020, "u8", "E3A746" ], [ 11033, "u8", "B03311C38" ], [ 11034, "u8", "B03311C38" ], [ 11050, "u8", "2D58072F7" ], [ 11051, "u8", "2D58072F7" ], [ 11067, "u8", "A3547032" ], [ 11068, "u8", "A3547032" ], [ 11083, "u8", "D5F283A" ], [ 11084, "u8", "D5F283A" ], [ 11098, "u8", "270C351C" ], [ 11099, "u8", "270C351C" ], [ 11114, "u8", "1B50006F6" ], [ 11115, "u8", "1B50006F6" ], [ 11131, "u8", "03E001133" ], [ 11132, "u8", "03E001133" ], [ 11148, "u8", "4F00093" ], [ 11149, "u8", "4F00093" ], [ 11163, "u8", "6252A021" ], [ 11164, "u8", "6252A021" ], [ 11179, "u8", "0597576" ], [ 11180, "u8", "0597576" ], [ 11194, "u8", "023B0D011" ], [ 11195, "u8", "023B0D011" ], [ 11211, "u8", "536265A4" ], [ 11212, "u8", "536265A4" ], [ 11227, "u8", "7537436" ], [ 11228, "u8", "7537436" ], [ 11242, "u8", "2C18020A1" ], [ 11243, "u8", "2C18020A1" ], [ 11259, "u8", "93739247C" ], [ 11260, "u8", "93739247C" ], [ 11276, "u8", "2E223C0" ], [ 11277, "u8", "2E223C0" ], [ 11291, "u8", "540055" ], [ 11292, "u8", "540055" ], [ 11305, "u8", "D4B1F0F34" ], [ 11306, "u8", "D4B1F0F34" ], [ 11322, "u8", "291640381" ], [ 11323, "u8", "291640381" ], [ 11339, "u8", "3441B" ], [ 11340, "u8", "3441B" ], [ 11352, "u8", "25274604" ], [ 11353, "u8", "25274604" ], [ 11368, "u8", "554D5963" ], [ 11369, "u8", "554D5963" ], [ 11384, "u8", "411F035E" ], [ 11385, "u8", "411F035E" ], [ 11400, "u8", "15154E445" ], [ 11401, "u8", "15154E445" ], [ 11417, "u8", "6332C7B" ], [ 11418, "u8", "6332C7B" ], [ 11432, "u8", "511C3" ], [ 11433, "u8", "511C3" ], [ 11445, "u8", "43B2230" ], [ 11446, "u8", "43B2230" ], [ 11460, "u8", "471B3" ], [ 11461, "u8", "471B3" ], [ 11473, "u8", "7006F" ], [ 11474, "u8", "7006F" ], [ 11486, "u8", "725604" ], [ 11487, "u8", "725604" ], [ 11500, "u8", "262117570" ], [ 11501, "u8", "262117570" ], [ 11517, "u8", "6021F" ], [ 11518, "u8", "6021F" ], [ 11530, "u8", "115B046F" ], [ 11531, "u8", "115B046F" ], [ 11546, "u8", "585F5C26" ], [ 11547, "u8", "585F5C26" ], [ 11562, "u8", "403A0B2" ], [ 11563, "u8", "403A0B2" ], [ 11577, "u8", "D59562" ], [ 11578, "u8", "D59562" ], [ 11591, "u8", "74A7008" ], [ 11592, "u8", "74A7008" ], [ 11606, "u8", "295257" ], [ 11607, "u8", "295257" ], [ 11620, "u8", "2A12112A" ], [ 11621, "u8", "2A12112A" ], [ 11636, "u8", "1100104E6" ], [ 11637, "u8", "1100104E6" ], [ 11653, "u8", "E2B44" ], [ 11654, "u8", "E2B44" ], [ 11666, "u8", "013333" ], [ 11667, "u8", "013333" ], [ 11680, "u8", "163D20252" ], [ 11681, "u8", "163D20252" ], [ 11697, "u8", "10D411E16" ], [ 11698, "u8", "10D411E16" ], [ 11714, "u8", "1723581" ], [ 11715, "u8", "1723581" ] ], "v": { "source.language": "kotlin", "source.imports[0]": "Afsga3rvz", "source.imports[1]": "COntroversialisthis", "source.imports[2]": "Create", "source.imports[3]": "DIedesigns", "source.imports[4]": "Elifetheirdownwardscase", "source.imports[5]": "SDFSvs4h", "source.imports[6]": "afSga3rvz", "source.imports[7]": "afsga3rvz", "source.imports[8]": "decodeURIComponent", "source.imports[9]": "diedesigns", "source.strings[0]": "00F3A6", "source.strings[1]": "013333", "source.strings[2]": "01E4D73", "source.strings[3]": "021F171C2", "source.strings[4]": "023B0D011", "source.strings[5]": "03E001133", "source.strings[6]": "04F7547", "source.strings[7]": "052030E3B", "source.strings[8]": "058657565", "source.strings[9]": "059557", "source.has_imports": true, "source.imports[10]": "excellenceservices0controversialisthis", "source.imports[11]": "excellenceservices0factorwas", "source.imports[12]": "excellenceservices0interestthe", "source.imports[13]": "excellenceservices0referwithin", "source.imports[14]": "excellenceservices0theyoke", "source.imports[15]": "for", "source.imports[16]": "function", "source.imports[17]": "isNaN", "source.imports[18]": "pRomotedtrue", "source.imports[19]": "parseInt", "source.imports[20]": "sDFSvs4h", "source.imports[21]": "sdfsvs4h", "source.strings[10]": "0597576", "source.strings[11]": "05A676A6", "source.strings[12]": "061566", "source.strings[13]": "072657853", "source.strings[14]": "074564", "source.strings[15]": "075E451B", "source.strings[16]": "0A637C6C", "source.strings[17]": "0B0D4F2C", "source.strings[18]": "10D411E16", "source.strings[19]": "1100104E6", "source.strings[20]": "115B046F", "source.strings[21]": "125103046", "source.strings[22]": "1263033", "source.strings[23]": "145744A76", "source.strings[24]": "147525E", "source.strings[25]": "14E527", "source.strings[26]": "15154E445", "source.strings[27]": "15775415", "source.strings[28]": "15A794442", "source.strings[29]": "163D20252", "source.strings[30]": "16E61516", "source.strings[31]": "1723581", "source.strings[32]": "172C44281", "source.strings[33]": "1775A6F6", "source.strings[34]": "18442305", "source.strings[35]": "1A0F4E541", "source.strings[36]": "1A131E4F", "source.strings[37]": "1A16163", "source.strings[38]": "1A1843", "source.strings[39]": "1B2B3C0", "source.strings[40]": "1B50006F6", "source.strings[41]": "211B4D59", "source.strings[42]": "21D0E15", "source.strings[43]": "22D426E38", "source.strings[44]": "2351470", "source.strings[45]": "2356769", "source.strings[46]": "239335433", "source.strings[47]": "243425C0", "source.strings[48]": "249584", "source.strings[49]": "25274604", "source.strings[50]": "262117570", "source.strings[51]": "270C351C", "source.strings[52]": "291640381", "source.strings[53]": "295257", "source.strings[54]": "2A12112A", "source.strings[55]": "2B386F", "source.strings[56]": "2C08235", "source.strings[57]": "2C18020A1", "source.strings[58]": "2C7E6B", "source.strings[59]": "2D58072F7", "source.strings[60]": "2E223C0", "source.strings[61]": "30636C42", "source.strings[62]": "310F2F", "source.strings[63]": "312D4A50", "source.strings[64]": "31676636", "source.strings[65]": "32654B534", "source.strings[66]": "326A703", "source.strings[67]": "332417462", "source.strings[68]": "333279", "source.strings[69]": "33394B3", "source.strings[70]": "3354454", "source.strings[71]": "3374736B6", "source.strings[72]": "3437230", "source.strings[73]": "345A715", "source.strings[74]": "348726", "source.strings[75]": "35355A4E", "source.strings[76]": "3549794F6", "source.strings[77]": "3624063", "source.strings[78]": "36426C4B", "source.strings[79]": "36506135", "source.strings[80]": "3657765", "source.strings[81]": "39493B1", "source.strings[82]": "39676754", "source.strings[83]": "3D070F", "source.strings[84]": "3F1B2E13", "source.strings[85]": "403A0B2", "source.strings[86]": "4049702F", "source.strings[87]": "4052851", "source.strings[88]": "40D1802", "source.strings[89]": "411F035E", "source.strings[90]": "4136636", "source.strings[91]": "41366F525", "source.strings[92]": "426545707", "source.strings[93]": "427A4E30", "source.strings[94]": "43039626", "source.strings[95]": "436B4E53", "source.strings[96]": "43B2230", "source.strings[97]": "4430447", "source.strings[98]": "4434747", "source.strings[99]": "44517750", "source.strings[100]": "445663473", "source.strings[101]": "44636E55", "source.strings[102]": "446B6A", "source.strings[103]": "453173", "source.strings[104]": "4542066", "source.strings[105]": "4617B5", "source.strings[106]": "46432587", "source.strings[107]": "464697865", "source.strings[108]": "4664275", "source.strings[109]": "46756E55", "source.strings[110]": "46B4C544", "source.strings[111]": "472593", "source.strings[112]": "4765615A", "source.strings[113]": "476D70366", "source.strings[114]": "4A684250", "source.strings[115]": "4B41545A6", "source.strings[116]": "4B5970303", "source.strings[117]": "4C25271", "source.strings[118]": "4D4F75", "source.strings[119]": "4D7269", "source.strings[120]": "4D734A", "source.strings[121]": "4E4A32", "source.strings[122]": "4E583934", "source.strings[123]": "4E6251", "source.strings[124]": "4E78457B6", "source.strings[125]": "4F00093", "source.strings[126]": "50565164", "source.strings[127]": "505A6E7", "source.strings[128]": "516C6D49", "source.strings[129]": "517946", "source.strings[130]": "524357524", "source.strings[131]": "525223", "source.strings[132]": "536265A4", "source.strings[133]": "540055", "source.strings[134]": "544F6F49", "source.strings[135]": "5452726", "source.strings[136]": "5473560", "source.strings[137]": "54754E7", "source.strings[138]": "54C7B58", "source.strings[139]": "55244476", "source.strings[140]": "554D5963", "source.strings[141]": "5647364", "source.strings[142]": "565579645", "source.strings[143]": "565C5B0", "source.strings[144]": "566736", "source.strings[145]": "56A375", "source.strings[146]": "56F756", "source.strings[147]": "573647361", "source.strings[148]": "57573154", "source.strings[149]": "57776A77", "source.strings[150]": "585F5C26", "source.strings[151]": "586E39", "source.strings[152]": "5E46605", "source.strings[153]": "5F77627A", "source.strings[154]": "605C05064", "source.strings[155]": "6070B5", "source.strings[156]": "6137596", "source.strings[157]": "6252A021", "source.strings[158]": "6332C7B", "source.strings[159]": "63C162", "source.strings[160]": "64222557", "source.strings[161]": "644B46416", "source.strings[162]": "6456B733", "source.strings[163]": "64720446", "source.strings[164]": "647F4E53", "source.strings[165]": "64A6B79", "source.strings[166]": "653444E", "source.strings[167]": "65A311107", "source.strings[168]": "65A517A", "source.strings[169]": "65B564A62", "source.strings[170]": "66415C58", "source.strings[171]": "673839703", "source.strings[172]": "6744B397", "source.strings[173]": "675133", "source.strings[174]": "67765137", "source.strings[175]": "6971040D", "source.strings[176]": "6A39505", "source.strings[177]": "6A6E74", "source.strings[178]": "6B5957", "source.strings[179]": "6D1B5A", "source.strings[180]": "6E5044", "source.strings[181]": "6E6E4A694", "source.strings[182]": "7035644A", "source.strings[183]": "725604", "source.strings[184]": "726E54565", "source.strings[185]": "73D1E3222", "source.strings[186]": "74A7008", "source.strings[187]": "75149366", "source.strings[188]": "7537436", "source.strings[189]": "753869", "source.strings[190]": "76363259", "source.strings[191]": "765156", "source.strings[192]": "7654754B", "source.strings[193]": "7675666A6", "source.strings[194]": "76E69326", "source.strings[195]": "7701F7B6C", "source.strings[196]": "770703047", "source.strings[197]": "77620829", "source.strings[198]": "785559643", "source.strings[199]": "7933346A", "source.strings[200]": "7973683", "source.strings[201]": "7E7274", "source.strings[202]": "7F7F6D5F5", "source.strings[203]": "80B435A40", "source.strings[204]": "830785875", "source.strings[205]": "8400C5A48", "source.strings[206]": "841374953", "source.strings[207]": "93739247C", "source.strings[208]": "938456A", "source.strings[209]": "944345", "source.strings[210]": "9464528", "source.strings[211]": "9557170", "source.strings[212]": "96954557", "source.strings[213]": "969707056", "source.strings[214]": "9706D41", "source.strings[215]": "A013A34", "source.strings[216]": "A34417", "source.strings[217]": "A3547032", "source.strings[218]": "A497749", "source.strings[219]": "A4A4A6B7", "source.strings[220]": "A61417B6F", "source.strings[221]": "A65004E", "source.strings[222]": "A72793139", "source.strings[223]": "A77456", "source.strings[224]": "A7962706", "source.strings[225]": "B03311C38", "source.strings[226]": "B0D5E637", "source.strings[227]": "B534B5A", "source.strings[228]": "B666476", "source.strings[229]": "C44005F5", "source.strings[230]": "C5566346E", "source.strings[231]": "C7441336", "source.strings[232]": "D2501173", "source.strings[233]": "D32476", "source.strings[234]": "D41453532", "source.strings[235]": "D41650", "source.strings[236]": "D4B1F0F34", "source.strings[237]": "D59562", "source.strings[238]": "D5F283A", "source.strings[239]": "D667A3", "source.strings[240]": "D76585", "source.strings[241]": "E040460", "source.strings[242]": "E39714", "source.strings[243]": "E3A746", "source.strings[244]": "E544F763", "source.strings[245]": "E5E5862", "source.strings[246]": "E63694431", "source.strings[247]": "F0111564B", "source.strings[248]": "F4F5A4376", "source.strings[249]": "F544933" }, "ct": [ "Afsga3rvz", "COntroversialisthis", "Create", "DIedesigns", "Elifetheirdownwardscase", "SDFSvs4h", "afSga3rvz", "afsga3rvz", "decodeURIComponent", "diedesigns", "excellenceservices0controversialisthis", "excellenceservices0factorwas", "excellenceservices0interestthe", "excellenceservices0referwithin", "excellenceservices0theyoke", "for", "function", "isNaN", "pRomotedtrue", "parseInt", "sDFSvs4h", "sdfsvs4h" ], "id": "kotlin" }, "id": 0, "sz": 230943, "ts": [ { "a": "T1027", "c": 1.0, "d": "Comment-heavy source context", "e": [ "comments.to_code_ratio = 1.94" ], "i": "objectives/anti-static/obfuscation/code-metrics/strings::comment-heavy-source", "l": 1, "m": "B0032" }, { "d": "Join using empty string delimiter", "e": [ ".join('')" ], "i": "objectives/anti-static/obfuscation/string/encoding::js-array-join-symbol", "l": 1 }, { "a": "T1027", "c": 0.75, "d": "Array element assignment swap step", "e": [ "iNterestthe[DIedesigns] = iNterestthe[INterestthe]" ], "i": "objectives/anti-static/obfuscation/tools/js-obfuscator::array-swap-elements", "l": 1 }, { "c": 1.0, "d": "JavaScript undefined literal", "e": [ "undefined" ], "i": "metadata/lang/scripted::undefined-literal", "l": 1 }, { "c": 0.30000001192092896, "d": "for loop (content)", "e": [ " for (" ], "i": "micro-behaviors/data/control-flow/analysis::for-loop-content", "l": 2 }, { "a": "T1027", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "charCodeAt" ], "i": "objectives/anti-static/obfuscation/encoding/arithmetic::js-rot-n-charcode--rx-4", "l": 1, "m": "B0032" }, { "c": 1.0, "d": "parseInt with radix 16", "e": [ "parseInt(EcouldConstableonlyornamentsandtheand, 16)" ], "i": "micro-behaviors/data/encode/hex::parseint-16", "l": 2 }, { "c": 0.699999988079071, "d": "decodeURIComponent function", "e": [ "decodeURIComponent" ], "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-decodeuricomponent", "l": 2 }, { "a": "T1098.004", "c": 0.8999999761581421, "d": "JavaScript Windows drive enumeration marker", "e": [ "CDEFGHIJ" ], "i": "objectives/persistence/login/ssh/backdoor::js-windows-drive-enumeration", "l": 1 }, { "d": "0xff hex byte token", "e": [ "0xff" ], "i": "objectives/anti-static/obfuscation/encoding/hex::hex-byte-token-ff", "l": 1, "m": "B0032" }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 1111.00" ], "i": "metadata/file/text/metrics::file-has-30-plus-lines", "l": 1 }, { "c": 0.8999999761581421, "d": "Low string density in source", "e": [ "text.string_density = 0.33" ], "i": "metadata/file/text/metrics::low-string-density-large-file", "l": 1 }, { "a": "T1027", "c": 0.8399999737739563, "d": "Decoded property function alias", "e": [ "var promotedtrue = controversialisthis[factorwas]" ], "i": "objectives/supply-chain/hidden-payload/trojan::decoded-property-function-alias", "l": 1, "m": "B0032" }, { "c": 0.20000000298023224, "d": "rust binary fs module vocabulary", "e": [ "services" ], "i": "micro-behaviors/data/text/keywords/lexicon::rust-bin-fs-vocab", "l": 1 }, { "c": 1.0, "d": "HISTORY documentation reference", "e": [ "history" ], "i": "metadata/package/documentation::references-changelog-history", "l": 2 }, { "d": "Hex byte array literal opening", "e": [ "[0x0" ], "i": "objectives/anti-static/obfuscation/encoding/hex::hex-byte-array-open", "l": 1, "m": "B0032" }, { "a": "T1048.003", "c": 0.949999988079071, "d": "Regex component marker", "e": [ "live" ], "i": "objectives/supply-chain/recon-exfil/dns::dns-lookup-with-canary-domain--rx-6", "l": 1, "m": "E1041" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Comment-heavy base64 context", "e": [ "comments.to_code_ratio = 1.94" ], "i": "objectives/anti-static/obfuscation/code-metrics/string-blob::js-base64-candidate-comment-heavy", "l": 1, "m": "B0032" }, { "a": "T1005", "c": 0.75, "d": "Regex component marker", "e": [ "credit" ], "i": "objectives/credential-access/financial/credit-card::mastercard-bin--rx-1", "l": 1, "m": "B0030" }, { "c": 0.949999988079071, "d": "Source chunk token", "e": [ "chunk" ], "i": "metadata/file/text/string::chunk-token", "l": 1 }, { "c": 1.0, "d": "JavaScript length property", "e": [ "length" ], "i": "metadata/lang/scripted::length-prop", "l": 1 }, { "c": 0.8199999928474426, "d": "JavaScript static key string assignment", "e": [ "= 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/='" ], "i": "micro-behaviors/crypto/symmetric/aes/library::js-static-key-string-assignment", "l": 1 }, { "c": 1.0, "d": "Plain JavaScript identifier assignment", "e": [ "excellenceservices0controversialisthis = excellenceservices0interestthe;" ], "i": "metadata/lang/scripted::plain-js-identifier-assignment", "l": 1 }, { "c": 1.0, "d": "toString method token", "e": [ "toString" ], "i": "micro-behaviors/data/encode/tostring::tostring-token", "l": 1 }, { "a": "T1047", "c": 0.75, "d": "Process creation via Create", "e": [ ".Create(" ], "i": "objectives/execution/wmi::process-create-call", "l": 3, "m": "E1043" }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "join(" ], "i": "micro-behaviors/fs/file/read::require-cwd-package-json--rx-4", "l": 1 }, { "c": 0.8799999952316284, "d": "Indirect bracketed WScript command invocation", "e": [ "excellenceservices0interestthe['nMsBdX'](promotedtrue, referwithin)" ], "i": "micro-behaviors/process/create/shell/wsh::wscript-shell-run-indirect", "l": 1 }, { "a": "T1528", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "auth" ], "i": "objectives/credential-access/cloud/token::google-gmail-full-scope--rx-6", "l": 1 }, { "c": 1.0, "d": "substr with length 2", "e": [ "substr(Emonarchhashasstruggle, 2)" ], "i": "micro-behaviors/data/encode/hex::substr-2", "l": 2 }, { "c": 0.8999999761581421, "d": "Nested loops with multiple charAt calls", "e": [ "for (DIedesigns = -0xbcb + 0x17ab + -0xbe0; DIedesigns \u003c -0x72e * 0x3 + 0x1cc0 + 0x109 * -0x6; DIedesigns++) {\n " ], "i": "micro-behaviors/data/encode/permutation/loop::js-permutation-loop", "l": 2 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "Array of short encoded strings", "e": [ "var chunksre = [\n \"76363259\"" ], "i": "objectives/supply-chain/install-hook/dropper/obfuscation::encoded-string-array", "l": 1, "m": "B0024" }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 1684.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 1.0, "d": "Obfuscated String method call (String[...])", "e": [ "String[" ], "i": "micro-behaviors/data/source/syntax/keyword::js-obfuscated-string-method", "l": 2 }, { "a": "T1027", "c": 0.7699999809265137, "d": "Hexadecimal string concatenation", "e": [ "+ 0x198d" ], "i": "objectives/anti-static/obfuscation/encoding/hex::hex-concatenation", "l": 4, "m": "B0032" }, { "c": 0.8399999737739563, "d": "JavaScript unusually long average lines", "e": [ "text.avg_line_length = 206.87" ], "i": "objectives/anti-static/obfuscation/string/anomaly::javascript-line-bloat", "l": 3 }, { "c": 0.6000000238418579, "d": "+= string concatenation from array access", "e": [ "Theyoke += String['fromCharCode']" ], "i": "micro-behaviors/data/encode/skip-step::js-loop-string-plus-equals", "l": 3 }, { "a": "T1027", "c": 0.8399999737739563, "d": "Large JavaScript with repeated charCode decoder primitives", "e": [ "charCodeAt" ], "i": "objectives/anti-static/obfuscation/code-metrics/runtime-indirection::js-charcode-decoder-heavy", "l": 3, "m": "B0032" }, { "c": 0.8999999761581421, "d": "File has many comment characters", "e": [ "comments.chars = 213201.00" ], "i": "objectives/anti-static/obfuscation/string/reconstruct::many-comment-chars", "l": 1 }, { "c": 1.0, "d": "javascript code embedded in string", "e": [ "Detected javascript at offset 0x0" ], "i": "metadata/lang/embedded::javascript", "l": 2 } ], "sha": "6fdca658f9967bdc34cefc476b86108f0220d8cbfb23b4de3ac266e30059c66f", "path": "40d2bb5b3821a28625937e574ea98932", "type": "kotlin" } ], "tv": "9ea7c" } }