{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9393483400344849, "class": 0 } ], "prob": 0.93934834, "class": 0, "version": "v16.16", "thresholds": [ 0.9815004, 0.99404883 ], "analyzed_at": "2026-04-30T07:17:34Z" }, "path": "22.big.js", "raw": { "v": "4", "fs": [ { "f": "O₂(As₂S)Md(Pa)", "x": 1, "id": 0, "is": [ "require", "require", "require", "require", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "Math.random", "hello.world", "test.a.b.c.d", "module.exports" ], "ms": { "text": { "digit_ratio": 0.09, "space_count": 302.0, "total_lines": 305.0, "char_entropy": 4.57, "unique_chars": 39.0, "import_density": 33.11, "string_density": 0.03, "avg_line_length": 72.16, "max_line_length": 73.0, "last_line_length": 20.0, "most_common_char": ",", "whitespace_ratio": 0.03, "most_common_ratio": 0.11, "identifier_density": 9.85, "line_length_stddev": 6.48, "dynamic_import_ratio": 0.04, "normalized_import_count": 5.78, "normalized_string_count": 0.46, "max_inline_whitespace_run": 1.0, "suspicious_identifier_ratio": 0.58, "normalized_unique_identifiers": 1.45 }, "imports": { "total": 101.0, "unique_modules": 5.0, "dynamic_imports": 4.0, "third_party_count": 101.0, "third_party_ratio": 1.0 }, "strings": { "total": 8.0, "avg_length": 10.5, "max_length": 11.0, "path_count": 8.0, "avg_entropy": 2.89, "total_bytes": 84.0, "entropy_stddev": 0.08 }, "comments": {}, "functions": {}, "identifiers": { "total": 3005.0, "avg_length": 2.75, "max_length": 7.0, "min_length": 1.0, "avg_entropy": 0.85, "reuse_ratio": 0.0, "unique_count": 12.0, "length_stddev": 2.2, "sequential_names": 7.0, "single_char_count": 7.0, "single_char_ratio": 0.58, "all_lowercase_ratio": 0.92 } }, "ss": [ [ 8, "./2.big.js" ], [ 9, "./2.big.js" ], [ 31, "./5.big.js" ], [ 32, "./5.big.js" ], [ 54, "./11.big.js" ], [ 55, "./11.big.js" ], [ 78, "./21.big.js" ], [ 79, "./21.big.js" ] ], "sz": 22314, "ts": [ { "c": 1.0, "d": "JavaScript file basename", "e": [ "22.big.js" ], "i": "metadata/lang/encoded/unicode-escape::javascript-or-dll-basename", "l": 2 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Low string density base64 context", "e": [ "text.string_density = 0.03" ], "i": "objectives/anti-static/obfuscation/code-metrics::js-base64-candidate-low-string-density", "l": 1, "m": "B0032" }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 305.00" ], "i": "metadata/package/metrics::file-has-30-plus-lines", "l": 1 }, { "a": "T1027.003", "c": 1.0, "d": "JavaScript or TypeScript source file extension", "e": [ "22.big.js" ], "i": "objectives/anti-static/obfuscation/payload::js-source-extension", "l": 1, "m": "B0032" }, { "a": "T1195.002", "c": 0.800000011920929, "d": "References JavaScript export boundary", "e": [ "module.exports" ], "i": "objectives/supply-chain/trojanized/application/config-injection::js-export-boundary", "l": 1 }, { "a": "T1027", "c": 0.6000000238418579, "d": "No comments in code", "e": [ "comments.total = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::no-comments", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.699999988079071, "d": "Low identifier reuse (each variable", "e": [ "identifiers.reuse_ratio = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::low-identifier-reuse", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "Sequential identifiers (a, b, c,", "e": [ "identifiers.sequential_names = 7.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::sequential-identifiers", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "Excessive single-character variable names (\u003e30%)", "e": [ "identifiers.single_char_ratio = 0.58" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::excessive-single-char-vars", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.03" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Minified/compressed code (multiple indicators)", "e": [ "comments.total = 0.00", "identifiers.sequential_names = 7.00", "text.whitespace_ratio = 0.03" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code", "l": 2, "m": "B0032" } ], "sha": "7f459b54ab84dc267d80cb96a8ead702c4c74496e22e8b9dfec70e3dc2feedfb", "path": "22.big.js", "type": "javascript" } ], "tv": "f6eaa" } }