{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9893532991409302,
        "class": 0
      }
    ],
    "prob": 0.9893533,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.64341784,
        "class": 0
      },
      {
        "m": "az/source",
        "prob": 0.3508663,
        "class": 0
      },
      {
        "m": "az/csharp",
        "prob": 0.9893533,
        "class": 0
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961138,
      0.99909174
    ],
    "analyzed_at": "2026-05-10T12:46:09Z"
  },
  "path": "AssemblyInfo.cs",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(AsC)H(Db)",
        "k": {
          "source.strings[0]": "  2012",
          "source.strings[1]": "1.0.0.0",
          "source.strings[2]": "Copyright ",
          "source.strings[3]": "Copyright \\x00a9  2012",
          "source.strings[4]": "Microsoft Cooperation Inc.",
          "source.strings[5]": "Microsoft Security Essentials",
          "source.strings[6]": "Security Essentials",
          "source.strings[7]": "[assembly: System.Reflection.AssemblyCopyright(\"Copyright a9  2012\")]",
          "source.strings[8]": "d3d8a1cc-e123-4905-b3de-374749122fcf"
        },
        "x": 1,
        "id": 0,
        "ms": {
          "file": {
            "size": 1080.0
          },
          "text": {
            "digit_ratio": 0.05,
            "space_count": 27.0,
            "total_lines": 16.0,
            "char_entropy": 5.11,
            "unique_chars": 67.0,
            "escape_density": 0.09,
            "string_density": 0.94,
            "avg_line_length": 65.5,
            "high_byte_ratio": 0.0,
            "max_line_length": 192.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.13,
            "hex_escape_count": 1.0,
            "last_line_length": 87.0,
            "long_token_count": 1.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.1,
            "identifier_density": 3.38,
            "line_length_stddev": 41.59,
            "normalized_string_count": 3.75,
            "max_inline_whitespace_run": 2.0,
            "normalized_unique_identifiers": 6.0
          },
          "strings": {
            "total": 15.0,
            "ip_count": 4.0,
            "avg_length": 19.07,
            "max_length": 36.0,
            "avg_entropy": 3.03,
            "total_bytes": 286.0,
            "entropy_stddev": 1.07
          },
          "comments": {
            "chars": 31.0,
            "lines": 1.0,
            "total": 1.0,
            "to_code_ratio": 0.07
          },
          "functions": {},
          "identifiers": {
            "total": 54.0,
            "avg_length": 14.75,
            "max_length": 31.0,
            "min_length": 4.0,
            "avg_entropy": 3.31,
            "reuse_ratio": 0.44,
            "unique_count": 24.0,
            "length_stddev": 5.99,
            "high_entropy_count": 9.0,
            "high_entropy_ratio": 0.38
          }
        },
        "ss": [
          [
            84,
            "1.0.0.0"
          ],
          [
            85,
            "1.0.0.0"
          ],
          [
            197,
            "Copyright \\x00a9  2012"
          ],
          [
            198,
            "Copyright "
          ],
          [
            214,
            "  2012"
          ],
          [
            321,
            "Microsoft Cooperation Inc."
          ],
          [
            322,
            "Microsoft Cooperation Inc."
          ],
          [
            402,
            "Security Essentials"
          ],
          [
            403,
            "Security Essentials"
          ],
          [
            470,
            "Microsoft Security Essentials"
          ],
          [
            471,
            "Microsoft Security Essentials"
          ],
          [
            976,
            "1.0.0.0"
          ],
          [
            977,
            "1.0.0.0"
          ],
          [
            1036,
            "d3d8a1cc-e123-4905-b3de-374749122fcf"
          ],
          [
            1037,
            "d3d8a1cc-e123-4905-b3de-374749122fcf"
          ],
          [
            150,
            "unicode-escape",
            "[assembly: System.Reflection.AssemblyCopyright(\"Copyright a9  2012\")]"
          ]
        ],
        "sz": 1080,
        "ts": [
          {
            "c": 0.699999988079071,
            "d": "Reflection method namespace token",
            "e": [
              "System.Reflection"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/invoke::namespace-import",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "\"store\" doc cue (storage instruction)",
            "e": [
              "store"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11769",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "UUID formatted route segment",
            "e": [
              "d3d8a1cc-e123-4905-b3de-374749122fcf"
            ],
            "i": "objectives/command-and-control/channel/http/stego::uuid-format-route-segment",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.8999999761581421,
            "d": "Decoded unicode-escape content",
            "e": [
              "[assembly: System.Reflection.AssemblyCop \u003cunicode-escape\u003e"
            ],
            "i": "metadata/encoded-payload/unicode-escape",
            "l": 2
          }
        ],
        "sha": "717e61834b114692ce8015b0ec989863309c631ee09d4d7af7a6b1ddc394d944",
        "path": "AssemblyInfo.cs",
        "type": "csharp"
      }
    ],
    "tv": "51ad9"
  }
}