{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 2,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 3,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 4,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 5,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 6,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 7,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 8,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 9,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 10,
        "prob": 0.9896671772003174,
        "class": 1
      },
      {
        "id": 11,
        "prob": 0.9878935217857361,
        "class": 1
      },
      {
        "id": 12,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 13,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 14,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 15,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 16,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 17,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 18,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 19,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 20,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 21,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 22,
        "prob": 0.9971051812171936,
        "class": 2
      },
      {
        "id": 23,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 24,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 25,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 26,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 27,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 28,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 29,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 30,
        "prob": 0.9320656061172485,
        "class": 0
      },
      {
        "id": 31,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 32,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 33,
        "prob": 0.9320656061172485,
        "class": 0
      },
      {
        "id": 34,
        "prob": 0.9320656061172485,
        "class": 0
      },
      {
        "id": 35,
        "prob": 0.9320656061172485,
        "class": 0
      },
      {
        "id": 36,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 37,
        "prob": 0.9320656061172485,
        "class": 0
      },
      {
        "id": 38,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 39,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 40,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 41,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 42,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 43,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 44,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 45,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 46,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 47,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 48,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 49,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 50,
        "prob": 0.9320656061172485,
        "class": 0
      },
      {
        "id": 51,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 52,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 53,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 54,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 55,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 56,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 57,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 58,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 59,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 60,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 61,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 62,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 63,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 64,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 65,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 66,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 67,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 68,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 69,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 70,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 71,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 72,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 73,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 74,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 75,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 76,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 77,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 78,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 79,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 80,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 81,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 82,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 83,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 84,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 85,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 86,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 87,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 88,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 89,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 90,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 91,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 92,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 93,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 94,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 95,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 96,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 97,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 98,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 99,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 100,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 101,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 102,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 103,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 104,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 105,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 106,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 107,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 108,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 109,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 110,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 111,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 112,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 113,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 114,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 115,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 116,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 117,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 118,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 119,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 120,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 121,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 122,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 123,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 124,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 125,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 126,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 127,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 128,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 129,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 130,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 131,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 132,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 133,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 134,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 135,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 136,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 137,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 138,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 139,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 140,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 141,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 142,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 143,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 144,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 145,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 146,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 147,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 148,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 149,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 150,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 151,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 152,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 153,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 154,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 155,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 156,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 157,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 158,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 159,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 160,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 161,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 162,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 163,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 164,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 165,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 166,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 167,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 168,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 169,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 170,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 171,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 172,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 173,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 174,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 175,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 176,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 177,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 178,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 179,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 180,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 181,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 182,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 183,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 184,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 185,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 186,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 187,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 188,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 189,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 190,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 191,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 192,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 193,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 194,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 195,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 196,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 197,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 198,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 199,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 200,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 201,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 202,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 203,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 204,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 205,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 206,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 207,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 208,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 209,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 210,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 211,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 212,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 213,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 214,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 215,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 216,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 217,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 218,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 219,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 220,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 221,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 222,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 223,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 224,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 225,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 226,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 227,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 228,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 229,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 230,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 231,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 232,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 233,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 234,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 235,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 236,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 237,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 238,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 239,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 240,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 241,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 242,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 243,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 244,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 245,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 246,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 247,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 248,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 249,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 250,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 251,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 252,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 253,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 254,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 255,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 256,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 257,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 258,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 259,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 260,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 261,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 262,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 263,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 264,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 265,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 266,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 267,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 268,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 269,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 270,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 271,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 272,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 273,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 274,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 275,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 276,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 277,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 278,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 279,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 280,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 281,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 282,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 283,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 284,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 285,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 286,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 287,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 288,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 289,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 290,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 291,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 292,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 293,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 294,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 295,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 296,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 297,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 298,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 299,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 300,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 301,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 302,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 303,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 304,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 305,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 306,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 307,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 308,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 309,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 310,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 311,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 312,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 313,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 314,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 315,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 316,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 317,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 318,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 319,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 320,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 321,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 322,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 323,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 324,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 325,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 326,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 327,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 328,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 329,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 330,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 331,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 332,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 333,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 334,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 335,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 336,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 337,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 338,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 339,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 340,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 341,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 342,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 343,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 344,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 345,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 346,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 347,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 348,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 349,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 350,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 351,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 352,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 353,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 354,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 355,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 356,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 357,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 358,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 359,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 360,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 361,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 362,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 363,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 364,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 365,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 366,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 367,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 368,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 369,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 370,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 371,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 372,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 373,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 374,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 375,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 376,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 377,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 378,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 379,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 380,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 381,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 382,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 383,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 384,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 385,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 386,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 387,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 388,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 389,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 390,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 391,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 392,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 393,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 394,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 395,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 396,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 397,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 398,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 399,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 400,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 401,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 402,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 403,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 404,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 405,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 406,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 407,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 408,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 409,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 410,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 411,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 412,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 413,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 414,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 415,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 416,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 417,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 418,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 419,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 420,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 421,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 422,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 423,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 424,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 425,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 426,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 427,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 428,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 429,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 430,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 431,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 432,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 433,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 434,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 435,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 436,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 437,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 438,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 439,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 440,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 441,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 442,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 443,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 444,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 445,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 446,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 447,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 448,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 449,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 450,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 451,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 452,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 453,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 454,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 455,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 456,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 457,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 458,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 459,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 460,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 461,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 462,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 463,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 464,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 465,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 466,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 467,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 468,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 469,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 470,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 471,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 472,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 473,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 474,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 475,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 476,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 477,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 478,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 479,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 480,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 481,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 482,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 483,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 484,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 485,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 486,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 487,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 488,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 489,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 490,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 491,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 492,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 493,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 494,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 495,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 496,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 497,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 498,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 499,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 500,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 501,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 502,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 503,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 504,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 505,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 506,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 507,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 508,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 509,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 510,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 511,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 512,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 513,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 514,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 515,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 516,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 517,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 518,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 519,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 520,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 521,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 522,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 523,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 524,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 525,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 526,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 527,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 528,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 529,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 530,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 531,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 532,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 533,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 534,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 535,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 536,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 537,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 538,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 539,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 540,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 541,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 542,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 543,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 544,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 545,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 546,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 547,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 548,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 549,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 550,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 551,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 552,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 553,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 554,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 555,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 556,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 557,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 558,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 559,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 560,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 561,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 562,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 563,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 564,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 565,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 566,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 567,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 568,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 569,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 570,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 571,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 572,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 573,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 574,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 575,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 576,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 577,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 578,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 579,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 580,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 581,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 582,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 583,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 584,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 585,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 586,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 587,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 588,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 589,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 590,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 591,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 592,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 593,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 594,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 595,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 596,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 597,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 598,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 599,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 600,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 601,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 602,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 603,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 604,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 605,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 606,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 607,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 608,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 609,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 610,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 611,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 612,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 613,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 614,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 615,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 616,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 617,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 618,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 619,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 620,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 621,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 622,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 623,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 624,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 625,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 626,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 627,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 628,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 629,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 630,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 631,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 632,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 633,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 634,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 635,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 636,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 637,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 638,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 639,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 640,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 641,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 642,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 643,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 644,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 645,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 646,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 647,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 648,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 649,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 650,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 651,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 652,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 653,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 654,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 655,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 656,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 657,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 658,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 659,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 660,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 661,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 662,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 663,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 664,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 665,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 666,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 667,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 668,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 669,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 670,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 671,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 672,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 673,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 674,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 675,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 676,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 677,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 678,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 679,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 680,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 681,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 682,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 683,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 684,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 685,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 686,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 687,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 688,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 689,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 690,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 691,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 692,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 693,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 694,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 695,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 696,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 697,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 698,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 699,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 700,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 701,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 702,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 703,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 704,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 705,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 706,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 707,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 708,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 709,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 710,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 711,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 712,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 713,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 714,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 715,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 716,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 717,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 718,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 719,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 720,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 721,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 722,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 723,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 724,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 725,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 726,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 727,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 728,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 729,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 730,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 731,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 732,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 733,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 734,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 735,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 736,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 737,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 738,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 739,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 740,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 741,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 742,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 743,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 744,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 745,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 746,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 747,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 748,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 749,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 750,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 751,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 752,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 753,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 754,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 755,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 756,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 757,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 758,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 759,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 760,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 761,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 762,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 763,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 764,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 765,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 766,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 767,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 768,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 769,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 770,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 771,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 772,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 773,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 774,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 775,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 776,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 777,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 778,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 779,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 780,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 781,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 782,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 783,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 784,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 785,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 786,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 787,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 788,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 789,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 790,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 791,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 792,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 793,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 794,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 795,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 796,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 797,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 798,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 799,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 800,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 801,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 802,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 803,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 804,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 805,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 806,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 807,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 808,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 809,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 810,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 811,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 812,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 813,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 814,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 815,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 816,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 817,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 818,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 819,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 820,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 821,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 822,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 823,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 824,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 825,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 826,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 827,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 828,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 829,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 830,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 831,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 832,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 833,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 834,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 835,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 836,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 837,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 838,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 839,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 840,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 841,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 842,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 843,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 844,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 845,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 846,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 847,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 848,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 849,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 850,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 851,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 852,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 853,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 854,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 855,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 856,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 857,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 858,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 859,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 860,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 861,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 862,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 863,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 864,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 865,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 866,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 867,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 868,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 869,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 870,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 871,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 872,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 873,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 874,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 875,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 876,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 877,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 878,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 879,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 880,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 881,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 882,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 883,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 884,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 885,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 886,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 887,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 888,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 889,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 890,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 891,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 892,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 893,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 894,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 895,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 896,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 897,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 898,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 899,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 900,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 901,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 902,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 903,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 904,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 905,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 906,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 907,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 908,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 909,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 910,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 911,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 912,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 913,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 914,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 915,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 916,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 917,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 918,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 919,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 920,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 921,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 922,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 923,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 924,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 925,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 926,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 927,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 928,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 929,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 930,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 931,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 932,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 933,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 934,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 935,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 936,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 937,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 938,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 939,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 940,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 941,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 942,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 943,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 944,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 945,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 946,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 947,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 948,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 949,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 950,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 951,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 952,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 953,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 954,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 955,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 956,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 957,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 958,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 959,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 960,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 961,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 962,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 963,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 964,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 965,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 966,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 967,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 968,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 969,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 970,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 971,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 972,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 973,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 974,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 975,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 976,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 977,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 978,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 979,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 980,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 981,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 982,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 983,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 984,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 985,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 986,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 987,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 988,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 989,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 990,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 991,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 992,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 993,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 994,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 995,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 996,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 997,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 998,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 999,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1000,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1001,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1002,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1003,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1004,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1005,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1006,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1007,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1008,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1009,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1010,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1011,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1012,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1013,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1014,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1015,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1016,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1017,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1018,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1019,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1020,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1021,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1022,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1023,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1024,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1025,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1026,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1027,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1028,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1029,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1030,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1031,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1032,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1033,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1034,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1035,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1036,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1037,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1038,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1039,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1040,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1041,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1042,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1043,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1044,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1045,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1046,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1047,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1048,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1049,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1050,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1051,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1052,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1053,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1054,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1055,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1056,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1057,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1058,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1059,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1060,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1061,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1062,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1063,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1064,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1065,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1066,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1067,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1068,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1069,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1070,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1071,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1072,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1073,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1074,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1075,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1076,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1077,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1078,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1079,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1080,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1081,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1082,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1083,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1084,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1085,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1086,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1087,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1088,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1089,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1090,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1091,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1092,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1093,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1094,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1095,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1096,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1097,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1098,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1099,
        "prob": 0.997187077999115,
        "class": 2
      },
      {
        "id": 1100,
        "prob": 0.997187077999115,
        "class": 2
      }
    ],
    "prob": 0.9971871,
    "class": 2,
    "models": [
      {
        "m": "az",
        "prob": 0.1895533,
        "class": 0
      },
      {
        "m": "az/archive",
        "prob": 0.30010712,
        "class": 0
      },
      {
        "m": "az/zip",
        "prob": 0.38222995,
        "class": 0
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961138,
      0.99909174
    ],
    "analyzed_at": "2026-05-06T09:37:07Z"
  },
  "path": "80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "K₂O₁₀(C₁₃Co₂Er₉Al₇As₇Dy₅I₅Ca₃La₂S)H₈(Cm₁₅Cr₇Db₈Ds₂F₅Os₈Po₅Hf)Md₄(Bi₄HePaBk)",
        "x": 145,
        "id": 0,
        "ms": {
          "file": {
            "size": 24613433.0
          },
          "archive": {
            "file_count": 1655.0,
            "total_compressed": 24338397.0,
            "compression_ratio": 0.84,
            "total_uncompressed": 29019130.0,
            "max_filename_length": 69.0
          }
        },
        "ss": [
          [
            149669,
            "4.1.9.3"
          ],
          [
            815865,
            "2001:4860:4860::8888"
          ],
          [
            902298,
            "http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time"
          ],
          [
            902357,
            "http://www.webrtc.org/experiments/rtp-hdrext/abs-capture-time"
          ],
          [
            902446,
            "http://www.webrtc.org/experiments/rtp-hdrext/video-content-type"
          ],
          [
            902510,
            "http://www.webrtc.org/experiments/rtp-hdrext/video-timing"
          ],
          [
            902568,
            "http://www.webrtc.org/experiments/rtp-hdrext/generic-frame-descriptor-00"
          ],
          [
            902641,
            "https://aomediacodec.github.io/av1-rtp-spec/#dependency-descriptor-rtp-header-extension"
          ],
          [
            902729,
            "http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01"
          ],
          [
            902803,
            "http://www.webrtc.org/experiments/rtp-hdrext/transport-wide-cc-02"
          ],
          [
            902869,
            "http://www.webrtc.org/experiments/rtp-hdrext/playout-delay"
          ],
          [
            902928,
            "http://www.webrtc.org/experiments/rtp-hdrext/color-space"
          ],
          [
            906332,
            "http://www.webrtc.org/experiments/rtp-hdrext/inband-cn"
          ],
          [
            751872,
            "http://"
          ],
          [
            751880,
            "https://"
          ],
          [
            150901,
            "4.1.9.3"
          ],
          [
            674109,
            "8.8.8.8"
          ],
          [
            674117,
            "2001:4860:4860::8888"
          ],
          [
            759178,
            "http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time"
          ],
          [
            759237,
            "http://www.webrtc.org/experiments/rtp-hdrext/abs-capture-time"
          ],
          [
            759326,
            "http://www.webrtc.org/experiments/rtp-hdrext/video-content-type"
          ],
          [
            759390,
            "http://www.webrtc.org/experiments/rtp-hdrext/video-timing"
          ],
          [
            759448,
            "http://www.webrtc.org/experiments/rtp-hdrext/generic-frame-descriptor-00"
          ],
          [
            759521,
            "https://aomediacodec.github.io/av1-rtp-spec/#dependency-descriptor-rtp-header-extension"
          ],
          [
            759609,
            "http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01"
          ],
          [
            759683,
            "http://www.webrtc.org/experiments/rtp-hdrext/transport-wide-cc-02"
          ],
          [
            759749,
            "http://www.webrtc.org/experiments/rtp-hdrext/playout-delay"
          ],
          [
            759808,
            "http://www.webrtc.org/experiments/rtp-hdrext/color-space"
          ],
          [
            763124,
            "http://www.webrtc.org/experiments/rtp-hdrext/inband-cn"
          ],
          [
            62212,
            "http://"
          ],
          [
            62220,
            "https://"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            318,
            "http://schemas.android.com/aapt"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            186,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            300,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            177,
            "http://schemas.android.com/aapt"
          ],
          [
            159,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            318,
            "http://schemas.android.com/aapt"
          ],
          [
            186,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            300,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            177,
            "http://schemas.android.com/aapt"
          ],
          [
            159,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ]
        ],
        "sz": 24613433,
        "ts": [
          {
            "d": "Duplicate file descriptor (I/O redirection)",
            "e": [
              "dup2"
            ],
            "i": "micro-behaviors/process/fd/dup::dup2",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Looks up name with if_indextoname",
            "e": [
              "if_indextoname"
            ],
            "i": "micro-behaviors/communications/socket/interface::if-indextoname-symbol",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "c": 0.7799999713897705,
            "d": "Regex component marker",
            "e": [
              "list by maps file"
            ],
            "i": "objectives/evasion/kernel-hide/ebpf::bpf-rootkit-controller-actions--rx-8",
            "l": 1
          },
          {
            "a": "T1486",
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "GetFrameEncryptor",
              "Failed to set the crypto key params",
              "No stream found to attach frame encryptor",
              "SetFrameEncryptor",
              "Failed to parse the crypto key params",
              "common libcrypto routines",
              "cryptopro",
              "Java_org_webrtc_RtpReceiver_nativeSetFrameDecryptor",
              "SetFrameDecryptor",
              "No FrameEncryptor is attached to this video sending stream but one is required since require_frame_encryptor is set",
              "cryptocom",
              "GetFrameDecryptor",
              "crypto kernel",
              "generate cryptogram",
              "generic cryptogram",
              "Java_org_webrtc_RtpSender_nativeSetFrameEncryptor"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::rust-ransomware-module-set--rx-5",
            "l": 1,
            "m": "B0040"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "%s: ciphertext:   %s",
              "%s: ciphertext:    %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-1",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.699999988079071,
            "d": "BSD license reference",
            "e": [
              "BSD"
            ],
            "i": "metadata/package/license::bsd-word",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime",
              "sym.imp.localtime_r",
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for nanosecond duration",
            "e": [
              "nanosleep"
            ],
            "i": "micro-behaviors/time/query::nanosleep-func",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "X509_ function prefix",
            "e": [
              "X509_CRL",
              "X509_CRL_INFO",
              "X509_NAME_ENTRIES",
              "X509_ATTRIBUTE",
              "X509_SIG",
              "X509_NAME_ENTRY",
              "X509_LIB",
              "X509_CERT_AUX",
              "X509_NAME_INTERNAL",
              "X509_PUBKEY",
              "X509_REVOKED",
              "NO X509_NAME",
              "X509_VERIFICATION_SETUP_PROBLEMS",
              "X509_ALGOR",
              "X509_EXTENSION",
              "X509_VAL"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::x509-prefix",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "Generic probe keyword (probe scan/packet)",
            "e": [
              "Probe packet"
            ],
            "i": "objectives/discovery/network/scan/port::probe-word-core-suffix-2",
            "l": 3,
            "m": "E1046"
          },
          {
            "c": 0.800000011920929,
            "d": "Imports ptrace debugger API",
            "e": [
              "ptrace"
            ],
            "i": "micro-behaviors/os/syscall/invoke::ptrace-import",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 26.00",
              "binary.section_count = 25.00",
              "binary.section_count = 24.00",
              "binary.section_count = 22.00",
              "binary.section_count = 27.00",
              "binary.section_count = 23.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "Right string trimming",
            "e": [
              "right"
            ],
            "i": "micro-behaviors/process/create/shell/lang::right-string-call",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for specified duration",
            "e": [
              "sleep"
            ],
            "i": "micro-behaviors/time/query::sleep-func",
            "l": 2
          },
          {
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              ": Ignoring STUN binding response message on shared socket.",
              "Fail to shared lock [%s], assume it's ok",
              "assume_shared_link",
              "shared key",
              "Got a shared lock, but fail to exclusive lock [%s]",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "current API level = %d, libc++_shared=%d",
              "NSt3__114__shared_countE"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::runtime-shared-object-compile--rx-1",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Version information string",
            "e": [
              "v1.2"
            ],
            "i": "metadata/package/help::version-text",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_create function",
            "e": [
              "epoll_create",
              "sym.imp.epoll_create"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-create",
            "l": 2
          },
          {
            "a": "T1016",
            "c": 0.4000000059604645,
            "d": "ipAddress field (camelCase)",
            "e": [
              "ipAddress"
            ],
            "i": "objectives/discovery/host/geo::ip-address-camel",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 684.00",
              "binary.export_count = 430.00",
              "binary.export_count = 473.00",
              "binary.export_count = 287.00",
              "binary.export_count = 238.00",
              "binary.export_count = 171.00",
              "binary.export_count = 281.00",
              "binary.export_count = 289.00",
              "binary.export_count = 432.00",
              "binary.export_count = 736.00",
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              ".http://www2.public-trust.com/crl/ct/ctroot.crl0",
              "SSL_CTX creation failed: Failed to load any trusted ssl root certificates.",
              "prepare to load %s (id %s) from rootPath %s",
              "root dir: %s",
              "set-policy-root",
              "%http://crl.globalsign.net/root-r2.crl0",
              "set-rootKeyThumb",
              "/system/usr/we-need-root/su"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 289.00",
              "binary.export_count = 171.00",
              "binary.export_count = 473.00",
              "binary.export_count = 432.00",
              "binary.export_count = 287.00",
              "binary.export_count = 684.00",
              "binary.export_count = 475.00",
              "binary.export_count = 45.00",
              "binary.export_count = 430.00",
              "binary.export_count = 238.00",
              "binary.export_count = 281.00",
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.21",
              "binary.sentence_string_ratio = 0.23",
              "binary.sentence_string_ratio = 0.31",
              "binary.sentence_string_ratio = 0.43",
              "binary.sentence_string_ratio = 0.27",
              "binary.sentence_string_ratio = 0.38"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 1073.00",
              "binary.string_count = 689.00",
              "binary.string_count = 1364.00",
              "binary.string_count = 11689.00",
              "binary.string_count = 1145.00",
              "binary.string_count = 10218.00",
              "binary.string_count = 1141.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "a": "T1573",
            "c": 0.8799999952316284,
            "d": "X25519 key exchange marker",
            "e": [
              "X25519",
              "x25519"
            ],
            "i": "micro-behaviors/crypto/asymmetric/curve25519::x25519-key-exchange-term",
            "l": 3,
            "m": "C0027"
          },
          {
            "a": "T1059.004",
            "c": 0.949999988079071,
            "d": "Executes command and captures output",
            "e": [
              "popen"
            ],
            "i": "micro-behaviors/process/create/popen::c-popen",
            "l": 3,
            "m": "E1059.004"
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _connect socket call",
            "e": [
              "connect"
            ],
            "i": "micro-behaviors/communications/socket/connect::_connect-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.949999988079071,
            "d": "MD5 hashing functions",
            "e": [
              "sym.log_mbedtls_md5",
              "sym.log_mbedtls_md5_starts",
              "log_mbedtls_md5_clone",
              "log_mbedtls_md5_init",
              "log_mbedtls_md5",
              "log_mbedtls_md5_finish",
              "sym.log_mbedtls_md5_init",
              "sym.log_mbedtls_md5_update",
              "log_mbedtls_md5_process",
              "sym.log_mbedtls_md5_process",
              "sym.md5_to_string",
              "log_mbedtls_md5_update",
              "sym.log_mbedtls_md5_clone",
              "md5_to_string",
              "sym.log_mbedtls_md5_finish",
              "log_mbedtls_md5_starts"
            ],
            "i": "micro-behaviors/crypto/hash/digest::md5",
            "l": 3
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "trailerField"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-2",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Parse IP with inet_ntop",
            "e": [
              "inet_ntop"
            ],
            "i": "micro-behaviors/communications/ip/parse::inet-ntop-symbol",
            "l": 3
          },
          {
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 228.00",
              "binary.import_count = 245.00"
            ],
            "i": "objectives/anti-analysis/self-modify/runtime::elf-manual-loader-cond-0--inline-10757",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "Low average code complexity",
            "e": [
              "binary.avg_complexity = 2.73",
              "binary.avg_complexity = 3.00",
              "binary.avg_complexity = 2.72"
            ],
            "i": "metadata/binary/metrics/structural::low-average-complexity",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Memory advisory hints (madvise)",
            "e": [
              "madvise"
            ],
            "i": "micro-behaviors/mem/advise/hints::madvise",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "OpenSSL ChaCha20-Poly1305",
            "e": [
              "ChaCha20-Poly1305"
            ],
            "i": "micro-behaviors/crypto/symmetric/stream::openssl-chacha-poly",
            "l": 3
          },
          {
            "d": "certificate string reference",
            "e": [
              "certificate",
              "Certificate"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::certificate-ref",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses sendfile socket call",
            "e": [
              "sendfile"
            ],
            "i": "micro-behaviors/communications/socket/send::sendfile-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.699999988079071,
            "d": "Unix /tmp/ path reference",
            "e": [
              "/data/local/tmp/"
            ],
            "i": "micro-behaviors/fs/path/temp::unix-temp",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (legacy 64-bit)",
            "e": [
              "stat64",
              "fstat64"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-legacy64",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary is 500KB+",
            "e": [
              "libmmkv.so",
              "libjingle_peerconnection_so.so",
              "libsls_producer.so"
            ],
            "i": "metadata/binary/metrics/threshold::large-binary-500k",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "SSL function as hook target",
            "e": [
              "SSL_read",
              "SSL_write"
            ],
            "i": "objectives/collection/network/ssl-intercept::ssl-hook-target",
            "l": 3
          },
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.01",
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 11.94",
              "binary.avg_complexity = 2.73",
              "binary.avg_complexity = 7.60",
              "binary.avg_complexity = 5.94",
              "binary.avg_complexity = 10.92",
              "binary.avg_complexity = 8.12",
              "binary.avg_complexity = 10.76",
              "binary.avg_complexity = 7.10",
              "binary.avg_complexity = 3.12",
              "binary.avg_complexity = 4.93",
              "binary.avg_complexity = 2.72",
              "binary.avg_complexity = 8.81",
              "binary.avg_complexity = 5.39",
              "binary.avg_complexity = 0.00",
              "binary.avg_complexity = 3.36",
              "binary.avg_complexity = 7.67"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses connect socket call",
            "e": [
              "connect"
            ],
            "i": "micro-behaviors/communications/socket/connect::connect-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "d": "Content-Type header string",
            "e": [
              "Content-Type:application/x-protobuf"
            ],
            "i": "micro-behaviors/communications/http/request/client::content-type-header",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _send socket call",
            "e": [
              "send"
            ],
            "i": "micro-behaviors/communications/socket/send::_send-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1070.004",
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "_ping",
              " ping=",
              " PING ",
              "Ping ",
              "_ping_",
              " ping,",
              " ping "
            ],
            "i": "objectives/evasion/self-delete/file/delay::ping-self-delete--rx-2",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "XGETBV instruction bytes",
            "e": [
              "0F 01 D0"
            ],
            "i": "metadata/binary/instruction::xgetbv-instr",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 227.00",
              "binary.func_count = 388.00",
              "binary.func_count = 294.00",
              "binary.func_count = 458.00",
              "binary.func_count = 2514.00",
              "binary.func_count = 19311.00",
              "binary.func_count = 268.00",
              "binary.func_count = 617.00",
              "binary.func_count = 726.00",
              "binary.func_count = 2596.00",
              "binary.func_count = 15276.00",
              "binary.func_count = 396.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "d": "Get effective group ID",
            "e": [
              "getegid"
            ],
            "i": "micro-behaviors/os/privilege/query::getegid",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "store"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11769",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.75,
            "d": "URL with .xyz TLD",
            "e": [
              "https://featherhead.xyz/"
            ],
            "i": "objectives/command-and-control/infrastructure/domain/tld::tld-xyz",
            "l": 3
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "DtlsTransport in connected state has incomplete TLS information",
              "[ connected:",
              ": Received TURN message while the TURN port is disconnected",
              "Network disconnected for handle",
              "Ping interval of candidate pairs is shorter when ICE is strongly connected than that when ICE is weakly connected",
              "VideoReceiveStream not connected to a VideoSink.",
              "hanging to ICE connected state because all transports are writable.",
              ": Change connected_ to",
              "OnNetworkDisconnected",
              "TurnPort connected to",
              "Network connected:",
              "Ping interval of backup candidate pairs is shorter than that of general candidate pairs when ICE is strongly connected",
              "Ping interval of stable and writable candidate pairs is shorter than that of general candidate pairs when ICE is strongly connec"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-13",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "token keyword",
            "e": [
              "token",
              "Token"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::token",
            "l": 1
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libnmmp.so",
              "libxcrash_dumper.so",
              "libnmmvm.so",
              "libpl_droidsonroids_gif.so",
              "libmmkv.so",
              "libsls_producer.so",
              "libBugly_Native.so",
              "libimage_processing_util_jni.so",
              "libxcrash.so",
              "libx2.so",
              "libjingle_peerconnection_so.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8600000143051147,
            "d": "Procfs maps path template",
            "e": [
              "/proc/%d/maps"
            ],
            "i": "micro-behaviors/fs/proc/info/memory::c-procfs-maps-template",
            "l": 3
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "loop poll",
              "jmp to",
              "jb\tI",
              "jb\nFliO"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "ICMP service/protocol reference",
            "e": [
              "icmp",
              "ICMP"
            ],
            "i": "micro-behaviors/communications/ip/services::services-icmp",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "encrypt function",
            "e": [
              "encrypt"
            ],
            "i": "micro-behaviors/crypto/library/keyword::encrypt-fn",
            "l": 3
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "EXPORTER_SECRET",
              "SERVER_TRAFFIC_SECRET_0",
              "secretary",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "master secret",
              "CLIENT_TRAFFIC_SECRET_0",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "secretBag",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "extended master secret"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 19311.00",
              "binary.func_count = 77.00",
              "binary.func_count = 117.00",
              "binary.func_count = 2514.00",
              "binary.func_count = 15276.00",
              "binary.func_count = 85.00",
              "binary.func_count = 268.00",
              "binary.func_count = 294.00",
              "binary.func_count = 149.00",
              "binary.func_count = 2596.00",
              "binary.func_count = 31.00",
              "binary.func_count = 227.00",
              "binary.func_count = 458.00",
              "binary.func_count = 81.00",
              "binary.func_count = 53.00",
              "binary.func_count = 617.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.75,
            "d": "PLC device keyword reference",
            "e": [
              "PLC"
            ],
            "i": "objectives/discovery/network/scan/ics::plc-keyword",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary is 1MB or larger",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::file-size-1m-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE strcpy bounds check",
            "e": [
              "strcpy_chk"
            ],
            "i": "metadata/hardening/build::strcpy-chk",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "log_mbedtls_md5_clone",
              "fork",
              "sym.log_mbedtls_md5_clone",
              "clone"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Create directories",
            "e": [
              "mkdir"
            ],
            "i": "micro-behaviors/fs/directory/mkdir::mkdir-base",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "pclose",
              "OnClose",
              "closedir",
              "closeNativeLog",
              "closeCrashRecordFile",
              "closeBackupRecordFile",
              "OnTransportClosed",
              "close",
              "dlclose",
              "fclose",
              "Eventfd close failed",
              "PeerConnection::Close",
              "closeElfInfoParser",
              "fail to close [%s], %d(%s)",
              ": DTLS transport closed by remote",
              "mmkvClose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Get effective user ID",
            "e": [
              "geteuid"
            ],
            "i": "micro-behaviors/os/privilege/query::geteuid",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "zlib compression reference",
            "e": [
              "ZLIB",
              "zlib"
            ],
            "i": "micro-behaviors/dylib/library/family::zlib-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/hardening/missing::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GHC runtime string",
            "e": [
              "rts_native_handle",
              "rts_simulcast"
            ],
            "i": "metadata/lang/compiler/systems::ghc-runtime-string",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "String to integer conversion (atoi)",
            "e": [
              "atoi"
            ],
            "i": "micro-behaviors/data/string/conversion::atoi",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Go base64 encoding",
            "e": [
              ".Encode"
            ],
            "i": "micro-behaviors/data/encode/base64::go-base64-encode",
            "l": 2
          },
          {
            "a": "T1564.001",
            "c": 0.949999988079071,
            "d": "Hidden system binary path",
            "e": [
              "/bin/.ext"
            ],
            "i": "objectives/evasion/file-hiding/system-path::hidden-system-bin-reference",
            "l": 4,
            "m": "F0005"
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "a": "T1027.003",
            "c": 0.699999988079071,
            "d": "Image pixel entropy in steganographic range",
            "e": [
              "image.pixel_entropy = 7.57"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::high-pixel-entropy",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Full daemon behavior (fork + setsid + devnull)",
            "e": [
              "xcrash error:\n/dev/null fd NOT 0, errno=%d",
              "/dev/null",
              "/dev/null fd NOT 0, errno=%d",
              "open /dev/null failed, errno=%d",
              "clone",
              "xcrash error:\nopen /dev/null failed, errno=%d"
            ],
            "i": "micro-behaviors/process/daemonize/detach::full-daemon",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime",
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9399999976158142,
            "d": "AES-256-CTR cipher marker",
            "e": [
              "aes-256-ctr",
              "AES-256-CTR"
            ],
            "i": "micro-behaviors/crypto/symmetric/aes/ctr::aes-256-ctr-term",
            "l": 3,
            "m": "C0021.001"
          },
          {
            "c": 0.20000000298023224,
            "d": "output keyword",
            "e": [
              "Failed to write RTC event to output.",
              "(*engine_)-\u003eCreateOutputMix(engine_, output_mix_.Receive(), 0, nullptr, nullptr)",
              ", output_buffer_size:",
              "output: name =",
              "output_parameters-\u003eis_valid()",
              ", extra_output_delay_ms=",
              "output: guid =",
              "output_layout != CHANNEL_LAYOUT_STEREO_DOWNMIX",
              "Unable to rewind ivf output file.",
              ", low_latency_output:",
              ", output_channels:",
              ") != output_size_samples_ (",
              "Trying to retrieve the linear AEC output without properly configuring AEC3.",
              "output_",
              "Operation made no progress over multiple calls, due to output buffer being full",
              "No linear AEC output available"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::output",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "LZ4_compress function",
            "e": [
              "LOG_LZ4_compress_fast_extState",
              "LOG_LZ4_compress_limitedOutput_withState",
              "LOG_LZ4_compress_default",
              "LOG_LZ4_compress_limitedOutput_continue",
              "LOG_LZ4_compressBound",
              "LOG_LZ4_compress_destSize",
              "LOG_LZ4_compress_withState",
              "LOG_LZ4_compress_fast",
              "LOG_LZ4_compress_forceExtDict",
              "LOG_LZ4_compress",
              "LOG_LZ4_compress_fast_continue",
              "LOG_LZ4_compress_continue",
              "sym.LOG_LZ4_compress_fast_extState",
              "LOG_LZ4_compress_fast_force",
              "sym.LOG_LZ4_compress_fast",
              "LOG_LZ4_compress_limitedOutput"
            ],
            "i": "micro-behaviors/data/compress/library::lz4-compress",
            "l": 3
          },
          {
            "d": "Options: label",
            "e": [
              "WebRtcVoiceEngine::ApplyOptions:",
              "CreateMediaChannel. Options:"
            ],
            "i": "metadata/package/help::options-title",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "invalid send param, magic num not found",
              "bad packed switch magic",
              "[sender] invalid send param, magic num not found, num 0x%x",
              "bad sparse switch magic",
              "magic 2 compare wrong",
              "bad array data magic",
              "magic 1 compare wrong"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "public key routines",
              "Failed to write public key",
              "The resulting key pair is missing public key parameters.",
              "LOG_ZSTD_compressContinue_public",
              "PUBLIC KEY",
              "bytes).  To increase the limit (or to disable these warnings), see CodedInputStream::SetTotalBytesLimit() in net/proto2/io/publi",
              "PublicKeyToPEMString",
              "public_key",
              "WRONG_PUBLIC_KEY_TYPE",
              "UNKNOWN_PUBLIC_KEY_TYPE",
              "id-regCtrl-pkiPublicationInfo",
              "PKCS12_PUBLIC_KEY_INTEGRITY_NOT_SUPPORTED",
              "LOG_ZSTD_compressEnd_public",
              ".http://www2.public-trust.com/crl/ct/ctroot.crl0",
              "UNSUPPORTED_PUBLIC_KEY_TYPE",
              "PUBLIC_KEY_VALIDATION_FAILED"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Hardcoded external IPv4 address",
            "e": [
              "4.1.9.3"
            ],
            "i": "micro-behaviors/communications/ip/literal::external-ipv4-binary",
            "l": 3
          },
          {
            "a": "T1059.004",
            "c": 0.800000011920929,
            "d": "Terminal type screen identifier",
            "e": [
              "screen"
            ],
            "i": "objectives/command-and-control/reverse-shell/pty::terminal-type-screen",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.800000011920929,
            "d": "X.509 certificate handling (legitimate)",
            "e": [
              "X509_SIG",
              "X509_ATTRIBUTE",
              "NO X509_NAME",
              "X509_LIB",
              "X509_REVOKED",
              "BAD_X509_FILETYPE",
              "X509_PUBKEY",
              "X509_CERT_AUX",
              "X509_VERIFICATION_SETUP_PROBLEMS",
              "X509_VAL",
              "X509_EXTENSION",
              "X509_ALGOR",
              "X509_NAME_ENTRIES",
              "X509_NAME_ENTRY",
              "X509_NAME_INTERNAL",
              "X509_CRL_INFO"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::certificate-handling",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_CCtx type",
            "e": [
              "LOG_ZSTD_CCtx_setParameter",
              "LOG_ZSTD_CCtxParams_getParameter",
              "LOG_ZSTD_CCtx_setParametersUsingCCtxParams",
              "LOG_ZSTD_CCtx_loadDictionary_byReference",
              "LOG_ZSTD_CCtx_setPledgedSrcSize",
              "LOG_ZSTD_CCtx_setCParams",
              "LOG_ZSTD_CCtxParams_setParameter",
              "LOG_ZSTD_CCtx_refPrefix",
              "LOG_ZSTD_CCtx_getParameter",
              "LOG_ZSTD_CCtx_refThreadPool",
              "LOG_ZSTD_CCtxParams_init",
              "LOG_ZSTD_CCtx_reset",
              "LOG_ZSTD_CCtx_refCDict",
              "LOG_ZSTD_CCtx_loadDictionary_advanced",
              "LOG_ZSTD_CCtxParams_init_advanced",
              "LOG_ZSTD_CCtx_setParams"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-cctx",
            "l": 3
          },
          {
            "c": 0.8199999928474426,
            "d": "Generic weak-login username marker",
            "e": [
              "with bad local username",
              "Allocation can't be started without setting the TURN server credentials for the user.",
              ": Received STUN request with bad remote username",
              "userCertificate",
              "onlyuser",
              "userPassword",
              "TURN server with empty username or password",
              "Set native info: user ID(%s)",
              "userClass",
              "d.usernotice",
              "All fragments of a user message must be ordered or unordered (TSN=%8.8x)",
              "userNotice",
              "Note that user-info@ in turn:-urls is long-deprecated.",
              "without username/M-I from:"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-5",
            "l": 1
          },
          {
            "d": "Truncate file",
            "e": [
              "ftruncate"
            ],
            "i": "micro-behaviors/fs/file/truncate::truncate",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.overall_entropy = 3.05",
              "binary.overall_entropy = 3.93",
              "binary.func_count = 2514.00",
              "binary.overall_entropy = 3.01",
              "binary.overall_entropy = 3.34",
              "binary.func_count = 15276.00",
              "binary.func_count = 19311.00",
              "binary.func_count = 2596.00",
              "binary.func_count = 726.00",
              "binary.overall_entropy = 3.79",
              "binary.func_count = 617.00",
              "binary.overall_entropy = 2.97"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Executes shell command and captures",
            "e": [
              "popen",
              "fgets"
            ],
            "i": "micro-behaviors/process/create/shell/capture::capture-command-output",
            "l": 3
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr",
              "dl_iterate_phdr_wrapper",
              "init_dl_iterate_phdr_wrapper",
              "init_dl_iterate_phdr_wrapper."
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _recv socket call",
            "e": [
              "recv"
            ],
            "i": "micro-behaviors/communications/socket/receive::_recv-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.800000011920929,
            "d": "Go crypto/cipher import",
            "e": [
              "…ird_party/boringssl/src/crypto/cipher_extra/e_chacha20poly130…",
              "…ird_party/boringssl/src/crypto/cipher_extra/e_tls.c"
            ],
            "i": "objectives/impact/ransom/encrypt/threat-text::go-crypto-cipher",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "listen function symbol",
            "e": [
              "listen"
            ],
            "i": "micro-behaviors/communications/socket/listen::listen-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1498",
            "c": 0.699999988079071,
            "d": "Telemetry counters for attack progress",
            "e": [
              "bytes_sent"
            ],
            "i": "objectives/impact/dos/attack::attack-telemetry-a2",
            "l": 1,
            "m": "B0009"
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "%s: ciphertext:   %s",
              "%s: ciphertext:    %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-1",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "secretBag",
              "SERVER_TRAFFIC_SECRET_0",
              "secretary",
              "CLIENT_TRAFFIC_SECRET_0",
              "extended master secret",
              "master secret",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "EXPORTER_SECRET"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "x86_64 architecture string",
            "e": [
              "x86_64"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-x86-64",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.699999988079071,
            "d": "References packetsSent counter (Go DDoS",
            "e": [
              "packetsSent"
            ],
            "i": "objectives/impact/dos/attack::packets-sent",
            "l": 1
          },
          {
            "c": 0.7400000095367432,
            "d": "cBPF load ICMP identifier field",
            "e": [
              "28 00 00 00 26 00 00 00"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::cbpf-load-icmp-id-ethernet",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "Unsupported cpu speed setting, value ignored.",
              "WebRTC-VP8-CpuSpeed-Arm",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/experiments/cpu_speed_experiment.cc",
              "Java_pl_droidsonroids_gif_GifInfoHandle_setSpeedFactor"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-77",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses recv socket call",
            "e": [
              "recv"
            ],
            "i": "micro-behaviors/communications/socket/receive::recv-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.800000011920929,
            "d": "CRYPTOGAMS OpenSSL support marker",
            "e": [
              "SHA256 block transform for ARMv4/NEON/ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA1 block transform for ARMv4/NEON/ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "Montgomery Multiplication for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "ChaCha20 for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "Montgomery multiplication for ARMv4/NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "Bit-sliced AES for NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA512 block transform for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "GHASH for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA1 block transform for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "GHASH for ARMv4/NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA512 block transform for ARMv4/NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "AES for ARMv4, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA256 block transform for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e"
            ],
            "i": "micro-behaviors/crypto/library/provider::cryptogams-marker",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /lib64",
            "e": [
              "/lib64/libc.so",
              "/lib64/libart.so",
              "/lib64/libc",
              "/lib64/bionic/libc.so"
            ],
            "i": "micro-behaviors/fs/path/system::system-lib64",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "sym.imp.fseek",
              "fseeko",
              "sym.imp.fseeko",
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "a": "T1110.001",
            "c": 0.8999999761581421,
            "d": "Weak password master",
            "e": [
              "master"
            ],
            "i": "objectives/lateral-movement/brute-force/password::weak-pass-master",
            "l": 1,
            "m": "E1110"
          },
          {
            "d": "overflow keyword",
            "e": [
              "_ZNSt14overflow_errorD1Ev",
              "ZNSt14overflow_errorD1Ev",
              "_ZTISt14overflow_error",
              "ZTVSt14overflow_error",
              "ZNSt14overflow_errorD2Ev",
              "input buffer overflow",
              "__next_prime overflow",
              "ZTSSt14overflow_error",
              "_ZTVSt14overflow_error",
              "Input buffer overflow",
              "_ZNSt14overflow_errorD2Ev",
              "_ZTSSt14overflow_error",
              "Buffer overflow while parsing packet.",
              "St14overflow_error",
              "ZNSt14overflow_errorD0Ev",
              "buffered_amount overflowed jlong!"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "a": "T1565.001",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Call::DeliverRtp",
              "stunKeepaliveResponsesReceived",
              "stunKeepaliveRttSquaredTotal",
              "physicalDeliveryOfficeName",
              "id-smime-cti-ets-proofOfDelivery",
              "stunKeepaliveRequestsSent",
              "AudioDeviceBuffer::DeliverRecordedData failed",
              "Call::DeliverRtcp",
              "Delivered MID=%8.8x, got TSN=%8.8x, SID=%4.4x, MID=%8.8x",
              "preferredDeliveryMethod",
              "Delivered SSN=%4.4x, got TSN=%8.8x, SID=%4.4x, SSN=%4.4x",
              "getStunCandidateKeepaliveInterval",
              "Failed to deliver RTP packet on re-delivery.",
              "stunKeepaliveRttTotal",
              "onStatsDelivered",
              "Proxy-Connection: Keep-Alive"
            ],
            "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-5",
            "l": 1,
            "m": "F0004"
          },
          {
            "c": 0.800000011920929,
            "d": "C-style exec family functions",
            "e": [
              "execl"
            ],
            "i": "micro-behaviors/process/create/execv::c-exec-variants",
            "l": 3
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 1.0,
            "d": "/dev/null (legitimate discard device)",
            "e": [
              "xcrash error:\nopen /dev/null failed, errno=%d",
              "/dev/null",
              "/dev/null fd NOT 0, errno=%d",
              "xcrash error:\n/dev/null fd NOT 0, errno=%d",
              "open /dev/null failed, errno=%d"
            ],
            "i": "micro-behaviors/fs/path/device/special::dev-null",
            "l": 2
          },
          {
            "a": "T1027.003",
            "c": 0.6000000238418579,
            "d": "Red channel entropy above normal",
            "e": [
              "image.r_entropy = 7.57"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::r-channel-high",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/limits",
              "/proc/%d/task",
              "/proc/%d/comm",
              "/proc/%d/cmdline",
              "/proc/%d/maps",
              "/proc/%d/smaps",
              "/proc/%d/fd",
              "/proc/%d/fd/%d",
              "/proc/%d/net/udp6",
              "/proc/%d/net/unix",
              "/proc/%d/net/tcp",
              "/proc/%d/net/icmp6",
              "/proc/%d/status",
              "/proc/%d/net/tcp6",
              "/proc/%d/net/icmp",
              "/proc/%d/net/udp"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (substr, catches imports)",
            "e": [
              "…ird_party/boringssl/src/crypto/x509v3/v3_skey.c",
              "…ird_party/boringssl/src/crypto/x509/x_pubkey.c",
              "…ird_party/boringssl/src/crypto/x509/a_verify.c",
              "…ird_party/boringssl/src/crypto/pem/pem_pkey.c",
              "…ird_party/boringssl/src/crypto/asn1/tasn_new.c",
              "…ird_party/boringssl/src/crypto/fipsmodule/bn/div.c",
              "No crypto keys are provided for SDES.",
              "Unknown crypto suite(s) received: send cipher_suite",
              "cryptopro",
              "crypto",
              "…ird_party/boringssl/src/crypto/x509/a_strex.c",
              "Called with SDP without SDES crypto.",
              "MaybeAttachFrameDecryptorToMediaChannel",
              "common libcrypto routines",
              "…ird_party/boringssl/src/crypto/fipsmodule/bn/montgomer…",
              "cryptocom"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-substr",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "cursor"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-url-navigation-action--rx-19",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "d": "pthread threading library",
            "e": [
              "sym.imp.pthread_create",
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "remove"
            ],
            "i": "micro-behaviors/fs/file/delete::remove",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 0.550000011920929,
            "d": "High basic blocks per function",
            "e": [
              "binary.avg_basic_blocks = 54.33"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::many-basic-blocks",
            "l": 3,
            "m": "B0032"
          },
          {
            "c": 0.800000011920929,
            "d": "64-bit division helper symbol",
            "e": [
              "divdi3"
            ],
            "i": "objectives/anti-static/obfuscation/control-flow/logic::complex-arithmetic-div",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 245.00",
              "binary.import_count = 50.00",
              "binary.import_count = 70.00",
              "binary.import_count = 121.00",
              "binary.import_count = 91.00",
              "binary.import_count = 90.00",
              "binary.import_count = 75.00",
              "binary.import_count = 103.00",
              "binary.import_count = 228.00",
              "binary.import_count = 41.00",
              "binary.import_count = 54.00",
              "binary.import_count = 52.00",
              "binary.import_count = 86.00",
              "binary.import_count = 39.00",
              "binary.import_count = 119.00",
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 430.00",
              "binary.export_count = 171.00",
              "binary.export_count = 736.00",
              "binary.export_count = 281.00",
              "binary.export_count = 45.00",
              "binary.export_count = 289.00",
              "binary.export_count = 475.00",
              "binary.export_count = 684.00",
              "binary.export_count = 432.00",
              "binary.export_count = 287.00",
              "binary.export_count = 238.00",
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.05",
              "binary.overall_entropy = 2.99",
              "binary.overall_entropy = 3.11",
              "binary.overall_entropy = 3.44",
              "binary.overall_entropy = 3.93",
              "binary.overall_entropy = 3.18",
              "binary.overall_entropy = 2.97",
              "binary.overall_entropy = 3.61",
              "binary.overall_entropy = 3.34",
              "binary.overall_entropy = 2.86",
              "binary.overall_entropy = 3.01",
              "binary.overall_entropy = 3.03",
              "binary.overall_entropy = 3.23",
              "binary.overall_entropy = 2.94",
              "binary.overall_entropy = 3.39",
              "binary.overall_entropy = 3.65"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "libc version string pattern",
            "e": [
              "bionic"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-version-string",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 617.00",
              "binary.func_count = 53.00",
              "binary.func_count = 77.00",
              "binary.func_count = 458.00",
              "binary.func_count = 396.00",
              "binary.func_count = 726.00",
              "binary.func_count = 294.00",
              "binary.func_count = 388.00",
              "binary.func_count = 85.00",
              "binary.func_count = 15276.00",
              "binary.func_count = 2596.00",
              "binary.func_count = 81.00",
              "binary.func_count = 2514.00",
              "binary.func_count = 268.00",
              "binary.func_count = 19311.00",
              "binary.func_count = 227.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Go crypto/rsa import",
            "e": [
              "…ird_party/boringssl/src/crypto/rsa_extra/rsa_asn1.c"
            ],
            "i": "objectives/impact/ransom/encrypt/threat-text::go-crypto-rsa",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "XOR loop pattern variant 2",
            "e": [
              "58 3f 23 70"
            ],
            "i": "well-known/malware/botnet/mozi::xor-pattern-2",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Window duration must be between 100 and 2000 ms",
              "WebRTC.BWE.RampUpTimeTo2000kbpsInMs",
              "id-mod-cmp2000",
              "assertion failed: st-\u003eDecControl.internalSampleRate == 0 || st-\u003eDecControl.internalSampleRate == 16000 || st-\u003eDecControl.interna"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-10",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "AES S-box start bytes",
            "e": [
              "63 7C 77 7B F2 6B 6F C5"
            ],
            "i": "micro-behaviors/crypto/symmetric/aes/constant::aes-sbox-bytes",
            "l": 3,
            "m": "C0021.001"
          },
          {
            "c": 0.6000000238418579,
            "d": "payload keyword",
            "e": [
              "payload"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::payload",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "d": "Characteristic system library export exp2f",
            "e": [
              "exp2f"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-exp2f",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /bin/su",
            "e": [
              "/bin/su"
            ],
            "i": "micro-behaviors/fs/path/binary::binary-bin-su",
            "l": 3
          },
          {
            "c": 0.949999988079071,
            "d": "ChaCha20/Salsa20 cipher constant",
            "e": [
              "expand 32-byte k"
            ],
            "i": "micro-behaviors/crypto/symmetric/stream::chacha-salsa-constant",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1",
              "libstdc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "pipe keyword",
            "e": [
              "pipe"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::pipe",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "please"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-27",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Parse IP with inet_pton",
            "e": [
              "inet_pton"
            ],
            "i": "micro-behaviors/communications/ip/parse::inet-pton-symbol",
            "l": 3
          },
          {
            "d": "usage: label in binary strings",
            "e": [
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::usage-lower-string",
            "l": 1
          },
          {
            "d": "Get user ID",
            "e": [
              "getuid"
            ],
            "i": "micro-behaviors/os/privilege/query::getuid",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "d": "Options: label in binary strings",
            "e": [
              "WebRtcVoiceEngine::ApplyOptions:",
              "CreateMediaChannel. Options:"
            ],
            "i": "metadata/package/help::options-title-string",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "Random number generation (rand)",
            "e": [
              "rand"
            ],
            "i": "micro-behaviors/os/random/crypto::rand-symbol",
            "l": 2
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID",
              "_ID(",
              " ID ",
              " ID(",
              " ID:",
              "ID "
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 1.0,
            "d": "File contains a PEM-encoded certificate.",
            "e": [
              "-----BEGIN",
              "-----END"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::has-pem-certificate",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (word match)",
            "e": [
              "crypto"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-word",
            "l": 1
          },
          {
            "a": "T1562",
            "c": 0.6000000238418579,
            "d": "Send signal to process",
            "e": [
              "kill"
            ],
            "i": "micro-behaviors/process/terminate/signal::kill",
            "l": 2,
            "m": "E1562"
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "aarch64 architecture string",
            "e": [
              "_Uaarch64_local_access_addr_space_init",
              "_Uaarch64_get_reg",
              "_Uaarch64_local_addr_space",
              "_Uaarch64_regname",
              "_Uaarch64_init_local",
              "_Uaarch64_flush_cache",
              "_Uaarch64_is_fpreg",
              "_Uaarch64_create_addr_space",
              "_Uaarch64_dwarf_find_debug_frame",
              "_Uaarch64_step",
              "_Uaarch64_dwarf_search_unwind_table",
              "_Uaarch64_handle_signal_frame",
              "_Uaarch64_resume",
              "_Uaarch64_is_signal_frame",
              "_Uaarch64_get_accessors",
              "_Uaarch64_get_elf_image"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-aarch64",
            "l": 2,
            "m": "E1082"
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary has 1000 or more functions",
            "e": [
              "binary.func_count = 15276.00",
              "binary.func_count = 2596.00",
              "binary.func_count = 19311.00",
              "binary.func_count = 2514.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::function-count-1000-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "Shared_Dirty: %zu kB",
              "NO_SHARED_GROUP",
              "PRE_SHARED_KEY_MUST_BE_LAST",
              "NSt3__114__shared_countE",
              "ASharedMemory_getSize",
              "Shared",
              "SharedModThread",
              ": Ignoring STUN binding response message on shared socket.",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "shared key",
              "Shared_Clean: %zu kB",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "ASharedMemory_create",
              "assume_shared_link",
              "current API level = %d, libc++_shared=%d",
              "fail to ASharedMemory_create %s with size %zu, errno:%s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.699999988079071,
            "d": "PEM begin marker",
            "e": [
              "-----BEGIN"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::pem-begin",
            "l": 2
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code MD token",
            "e": [
              "_MD"
            ],
            "i": "objectives/anti-analysis/geofencing/region/country-code-b::country-code-md",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1071.001",
            "d": "User-Agent header",
            "e": [
              "User-Agent:"
            ],
            "i": "micro-behaviors/communications/http/request/client::user-agent-header",
            "l": 2,
            "m": "C0002"
          },
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libx2.so",
              "libnmmvm.so",
              "libimage_processing_util_jni.so",
              "libxcrash_dumper.so",
              "libsls_producer.so",
              "libxcrash.so",
              "libnmmp.so",
              "libpl_droidsonroids_gif.so",
              "libjingle_peerconnection_so.so",
              "libBugly_Native.so",
              "libmmkv.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Resolve endpoint with getaddrinfo",
            "e": [
              "getaddrinfo"
            ],
            "i": "micro-behaviors/communications/ip/resolve::resolve-getaddrinfo",
            "l": 3
          },
          {
            "a": "T1095",
            "c": 0.6200000047683716,
            "d": "HIP routing field reference",
            "e": [
              "hiP"
            ],
            "i": "objectives/command-and-control/channel/covert::hip-routing-field",
            "l": 1,
            "m": "C0014"
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_wait function",
            "e": [
              "epoll_wait"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-wait",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "API route for crypt operation",
            "e": [
              "…e/webrtc-aar-release/src/api/crypto/crypto_options.cc"
            ],
            "i": "objectives/impact/ransom/tactics::api-route-crypt",
            "l": 3
          },
          {
            "a": "T1573",
            "c": 0.550000011920929,
            "d": "Uppercase key environment variable",
            "e": [
              "READ_KEY"
            ],
            "i": "objectives/command-and-control/infrastructure/config::uppercase-key-env",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "Code section comprises most binary",
            "e": [
              "binary.largest_section_ratio = 0.84"
            ],
            "i": "metadata/binary/section/content::dominant",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 91.00",
              "binary.import_count = 228.00",
              "binary.import_count = 108.00",
              "binary.import_count = 103.00",
              "binary.import_count = 119.00",
              "binary.import_count = 121.00",
              "binary.import_count = 86.00",
              "binary.import_count = 90.00",
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Zero recovered functions",
            "e": [
              "binary.func_count = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/payload/encrypted::zero-function-count",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.11",
              "binary.avg_string_entropy = 3.46",
              "binary.avg_string_entropy = 3.39",
              "binary.avg_string_entropy = 3.50",
              "binary.avg_string_entropy = 2.89",
              "binary.avg_string_entropy = 3.61",
              "binary.avg_string_entropy = 3.01",
              "binary.avg_string_entropy = 3.23",
              "binary.avg_string_entropy = 3.42",
              "binary.avg_string_entropy = 3.48",
              "binary.avg_string_entropy = 3.33",
              "binary.avg_string_entropy = 3.59",
              "binary.avg_string_entropy = 3.40",
              "binary.avg_string_entropy = 3.25",
              "binary.avg_string_entropy = 3.14",
              "binary.avg_string_entropy = 3.65"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 149.00",
              "binary.func_count = 77.00",
              "binary.func_count = 31.00",
              "binary.func_count = 19311.00",
              "binary.func_count = 294.00",
              "binary.func_count = 2514.00",
              "binary.func_count = 117.00",
              "binary.func_count = 617.00",
              "binary.func_count = 2596.00",
              "binary.func_count = 15276.00",
              "binary.func_count = 53.00",
              "binary.func_count = 85.00",
              "binary.func_count = 81.00",
              "binary.func_count = 227.00",
              "binary.func_count = 458.00",
              "binary.func_count = 268.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Schedule alarm timer",
            "e": [
              "alarm"
            ],
            "i": "micro-behaviors/time/schedule/timeout::alarm",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.8500000238418579,
            "d": "Extremely large average function size",
            "e": [
              "binary.avg_func_size = 14791.22"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::massive-code-blob",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 54.00",
              "binary.import_count = 86.00",
              "binary.import_count = 41.00",
              "binary.import_count = 108.00",
              "binary.import_count = 47.00",
              "binary.import_count = 228.00",
              "binary.import_count = 90.00",
              "binary.import_count = 52.00",
              "binary.import_count = 119.00",
              "binary.import_count = 50.00",
              "binary.import_count = 79.00",
              "binary.import_count = 103.00",
              "binary.import_count = 121.00",
              "binary.import_count = 39.00",
              "binary.import_count = 91.00",
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "File larger than 1MB",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/metrics/size::large-file-1mb",
            "l": 2
          },
          {
            "a": "T1105",
            "c": 0.8799999952316284,
            "d": "Android local tmp path",
            "e": [
              "/data/local/tmp/"
            ],
            "i": "micro-behaviors/data/text/dropper::android-local-tmp-path",
            "l": 1
          },
          {
            "a": "T1486",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "RSA_PSS_PARAMS"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::encrypted-trailer-layout-cond-0--inline-9319",
            "l": 1,
            "m": "B0040"
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_decompress function",
            "e": [
              "LOG_ZSTD_decompressBlock_internal",
              "LOG_ZSTD_decompressBlock",
              "LOG_ZSTD_decompress_usingDict",
              "LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_decompressBound",
              "LOG_ZSTD_decompressBegin_usingDDict",
              "LOG_ZSTD_decompressContinue",
              "LOG_ZSTD_decompressBlock_deprecated",
              "LOG_ZSTD_decompressionMargin",
              "LOG_ZSTD_decompressStream",
              "LOG_ZSTD_decompressBegin",
              "LOG_ZSTD_decompressBegin_usingDict",
              "sym.LOG_ZSTD_decompressBound",
              "LOG_ZSTD_decompress",
              "LOG_ZSTD_decompressDCtx",
              "LOG_ZSTD_decompress_usingDDict"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-decompress",
            "l": 3
          },
          {
            "d": "password keyword",
            "e": [
              ", password_=",
              "TURN server with empty username or password",
              "INCORRECT_PASSWORD",
              "BAD_PASSWORD_READ",
              "userPassword",
              "getPassword",
              "password based MAC",
              "id-PasswordBasedMAC",
              "challengePassword"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::password",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "access",
              "log_producer_config_set_access_id",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/third_party/abseil-cpp/absl/types/bad_variant_access.cc",
              "log_producer_config_set_access_key",
              "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1id",
              "_UPT_access_fpreg",
              "_Uarm_local_access_addr_space_init",
              "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1key",
              "_Uarm_get_accessors",
              "_UPT_accessors",
              "Unable to access speaker.",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/third_party/abseil-cpp/absl/types/bad_optional_access.cc",
              "id-aca-accessIdentity",
              "Bad optional access",
              "Failed to access the global OpenSL engine",
              "Trying to access encoder in uninitialized fallback wrapper."
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic linker error handling",
            "e": [
              "dlerror"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlerror",
            "l": 3
          },
          {
            "a": "T1027.002",
            "c": 0.6000000238418579,
            "d": "Many high complexity functions (\u003e80)",
            "e": [
              "binary.high_complexity_funcs = 127.00",
              "binary.high_complexity_funcs = 93.00",
              "binary.high_complexity_funcs = 138.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::many-complex-functions",
            "l": 2,
            "m": "B0032"
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "ead, config",
              "eam::OnEncoderConfig",
              "eam_StreamConfig",
              "eam, but not yet config",
              "ease/src/modules/video_coding/codecs/vp9/svc_config",
              "eate_log_producer_config",
              "eamConfig",
              "eate_1log_1producer_1config",
              "eate producer client success, config",
              "eate encoder config",
              "each size limit:%zu, consider config",
              "ear AEC output without properly config",
              "eAimdRateControlConfig",
              "eaderExtensionConfig"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code BY token",
            "e": [
              "_BY_"
            ],
            "i": "objectives/anti-analysis/geofencing/region/country-code-a::country-code-by",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code IN token",
            "e": [
              "IN_",
              "_IN_",
              "_IN"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-in",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1055",
            "c": 0.25,
            "d": "Repeated 0x07 code constant (possible PROT_RWX)",
            "e": [
              "07 00 00 00"
            ],
            "i": "micro-behaviors/mem/protect/modify::rwx-prot-bytes",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "ADB OPEN packet marker",
            "e": [
              "OPEN"
            ],
            "i": "micro-behaviors/communications/socket/tcp::open-token",
            "l": 1,
            "m": "C0001"
          },
          {
            "a": "T1071.001",
            "d": "Authorization header",
            "e": [
              "Authorization:LOG %s:%s",
              "Proxy-Authorization:"
            ],
            "i": "micro-behaviors/communications/http/headers::auth-header",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 0.4000000059604645,
            "d": "cipher keyword",
            "e": [
              "Cipher",
              "cipher"
            ],
            "i": "micro-behaviors/crypto/library/keyword::cipher-keyword",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 0.20000000298023224,
            "d": "Hardcoded hex encoding charset (encoding/decoding)",
            "e": [
              "-0123456789abcdef",
              "~?0123456789abcdefABCDEFxX+-pPiInN"
            ],
            "i": "objectives/anti-static/obfuscation/encoding/stream::hardcoded-hex-charset",
            "l": 2,
            "m": "C0026"
          },
          {
            "c": 0.699999988079071,
            "d": "OpenSSL function names",
            "e": [
              "SSL_read",
              "SSL_write"
            ],
            "i": "objectives/collection/network/ssl-intercept::ssl-openssl-fn-a",
            "l": 3
          },
          {
            "a": "T1071.001",
            "c": 0.8500000238418579,
            "d": "Hardcoded external IPv4 address",
            "e": [
              "4.1.9.3"
            ],
            "i": "objectives/command-and-control/infrastructure/ip::hardcoded-ipv4-binary",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 1.0,
            "d": "Binary has 2000+ strings",
            "e": [
              "binary.string_count = 11689.00",
              "binary.string_count = 10218.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-strings-2000",
            "l": 1
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sysconf",
              "sym.imp.sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "accept function symbol",
            "e": [
              "accept"
            ],
            "i": "micro-behaviors/communications/socket/listen::accept-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.6600000262260437,
            "d": "Get socket options",
            "e": [
              "sym.imp.getsockopt",
              "getsockopt"
            ],
            "i": "micro-behaviors/communications/socket/options::options-get",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 90.00",
              "binary.import_count = 52.00",
              "binary.import_count = 79.00",
              "binary.import_count = 119.00",
              "binary.import_count = 108.00",
              "binary.import_count = 103.00",
              "binary.import_count = 245.00",
              "binary.import_count = 86.00",
              "binary.import_count = 91.00",
              "binary.import_count = 50.00",
              "binary.import_count = 228.00",
              "binary.import_count = 75.00",
              "binary.import_count = 54.00",
              "binary.import_count = 70.00",
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "Large binary with few imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/package/metrics::import-count-under-80",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Failed to allocate lf_sync-\u003enum_tiles_done",
              "Failed to allocate lf_sync-\u003elf_mutex",
              "Failed to allocate lf_sync-\u003erecon_done_mutex",
              "Unexpected AsyncResolver signal",
              "Failed to allocate lf_sync-\u003ecur_sb_col",
              "Failed to allocate row_mt_worker_data-\u003erecon_sync_cond",
              "AsyncHttpsProxySocket::OnConnectEvent",
              "Failed to allocate lf_sync-\u003emutex",
              "Failed to allocate row_mt_sync-\u003emutex",
              "fail to msync [%s], %s",
              "Failed to allocate row_mt_worker_data-\u003erecon_sync_mutex",
              "Failed to allocate row_mt_sync-\u003econd",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "Failed to allocate lf_sync-\u003erecon_done_cond",
              "Invalid frame sync code",
              "Failed to allocate row_mt_sync-\u003ecur_col"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-5",
            "l": 1,
            "m": "B0030"
          },
          {
            "a": "T1486",
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "pkcs7-encryptedData",
              "Creating UnencryptedRtpTransport, becayse encryption is disabled.",
              "?urn:ietf:params:rtp-hdrext:encrypt",
              "smimeencrypt",
              "Recursive encrypted header.",
              "S/MIME encryption",
              "id-cmc-encryptedPOP",
              "No FrameEncryptor is attached to this video sending stream but one is required since require_frame_encryptor is set",
              "No stream found to attach frame encryptor",
              "%s: testing encryption",
              "encrypted track 2",
              "Retrying stashed encrypted frames. Count:"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::rust-ransomware-module-set--rx-4",
            "l": 1,
            "m": "B0040"
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "HTTP port number (80)",
            "e": [
              "port below 1024, but not 80"
            ],
            "i": "objectives/discovery/network/scan/port::port-number-http",
            "l": 1,
            "m": "E1046"
          },
          {
            "c": 0.8199999928474426,
            "d": "Hostname profile field",
            "e": [
              "hostname"
            ],
            "i": "objectives/discovery/system/profile::host-profile-hostname-field",
            "l": 1
          },
          {
            "d": "Get group ID",
            "e": [
              "getgid"
            ],
            "i": "micro-behaviors/os/privilege/query::getgid",
            "l": 2
          },
          {
            "a": "T1565.001",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "ms to dispatch. Posted from:",
              "Thread::Dispatch",
              "PhysicalSocketServer asked to remove a unknown dispatcher, potentially from a duplicate call to Add."
            ],
            "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-4",
            "l": 1,
            "m": "F0004"
          },
          {
            "c": 0.6600000262260437,
            "d": "Apply or remove advisory lock",
            "e": [
              "flock"
            ],
            "i": "micro-behaviors/fs/lock/flock::flock-fn",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Discarding recovered packet with RED encapsulation",
              "Remote encapsulation port changed"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-3",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_ctl function",
            "e": [
              "epoll_ctl"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-ctl",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Documented command line program",
            "e": [
              "CreateMediaChannel. Options:",
              "binary.string_count = 10218.00",
              "binary.func_count = 2514.00",
              "binary.sentence_string_ratio = 0.27",
              "WebRtcVoiceEngine::ApplyOptions:",
              "binary.import_count = 121.00",
              "binary.string_count = 11689.00",
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu",
              "binary.string_count = 1145.00",
              "binary.import_count = 228.00",
              "binary.string_count = 1141.00",
              "binary.sentence_string_ratio = 0.31",
              "binary.func_count = 15276.00",
              "binary.func_count = 19311.00",
              "binary.import_count = 103.00",
              "binary.func_count = 2596.00"
            ],
            "i": "metadata/package/help::documented-cli-binary",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "libcrypto library reference",
            "e": [
              "common libcrypto routines"
            ],
            "i": "micro-behaviors/dylib/library/ssl::libcrypto-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/binary/linking/static::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Tiny C string section ratio",
            "e": [
              " = 0.0% of total (0 / 30172 bytes)",
              " = 0.0% of total (0 / 21692 bytes)",
              " = 0.0% of total (0 / 28944 bytes)",
              " = 0.0% of total (0 / 41024 bytes)"
            ],
            "i": "metadata/binary/section/metrics::tiny-cstring-section",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 47.00",
              "binary.import_count = 70.00",
              "binary.import_count = 52.00",
              "binary.import_count = 75.00",
              "binary.import_count = 41.00",
              "binary.import_count = 54.00",
              "binary.import_count = 91.00",
              "binary.import_count = 86.00",
              "binary.import_count = 90.00",
              "binary.import_count = 121.00",
              "binary.import_count = 103.00",
              "binary.import_count = 50.00",
              "binary.import_count = 119.00",
              "binary.import_count = 245.00",
              "binary.import_count = 108.00",
              "binary.import_count = 79.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "x509 string reference",
            "e": [
              "X509",
              "x509"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::x509-string",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 289.00",
              "binary.export_count = 684.00",
              "binary.export_count = 430.00",
              "binary.export_count = 287.00",
              "binary.export_count = 736.00",
              "binary.export_count = 473.00",
              "binary.export_count = 281.00",
              "binary.export_count = 238.00",
              "binary.export_count = 432.00",
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "a": "T1552.003",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "whitelist"
            ],
            "i": "objectives/credential-access/shell/history::zsh-history-unless-cond-2--rx-8",
            "l": 1
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "usleep",
              "gettimeofday",
              "sleep",
              "clock_gettime",
              "nanosleep"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          },
          {
            "c": 0.6499999761581421,
            "d": "Direct epoll event notification",
            "e": [
              "epoll_ctl",
              "epoll_wait",
              "epoll_create",
              "sym.imp.epoll_create"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-usage",
            "l": 3
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "register native abi method error, please upgrade bugly jar version",
              "looks like [%s] been downgrade \u0026 upgrade again"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-15",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/system/",
              "/apex/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "c": 0.8399999737739563,
            "d": "ICMP sequential heartbeat payload",
            "e": [
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefhjlnprtvxz|~",
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@abcdefghijklmno…",
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijk"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::icmp-heartbeat-payload-ascii",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "fstat",
              "lstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1364.00",
              "binary.string_count = 1317.00",
              "binary.string_count = 1141.00",
              "binary.string_count = 11689.00",
              "binary.string_count = 1145.00",
              "binary.string_count = 1073.00",
              "binary.string_count = 10218.00",
              "binary.string_count = 1131.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "write",
              "sym.imp.fseek",
              "fwrite",
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 3
          },
          {
            "c": 0.4000000059604645,
            "d": "socket function symbol",
            "e": [
              "socket"
            ],
            "i": "micro-behaviors/communications/socket/listen::socket-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00",
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "c": 0.7799999713897705,
            "d": "Regex component marker",
            "e": [
              "list of support",
              "FlushRtcp"
            ],
            "i": "objectives/evasion/kernel-hide/ebpf::bpf-rootkit-controller-actions--rx-9",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 22.00",
              "binary.section_count = 26.00",
              "binary.section_count = 24.00",
              "binary.section_count = 27.00",
              "binary.section_count = 25.00",
              "binary.section_count = 23.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses sendto socket call",
            "e": [
              "sendto"
            ],
            "i": "micro-behaviors/communications/socket/send::sendto-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 1.0,
            "d": "Makefile all target",
            "e": [
              "Call::DestroyVideoReceiveStream",
              "Call::DestroyVideoSendStream",
              "Call::CreateFlexfecReceiveStream",
              "Call::DeliverRtp",
              "Call::DestroyAudioSendStream",
              "Call::CreateVideoReceiveStream",
              "Call::DestroyFlexfecReceiveStream",
              "Call::CreateVideoSendStream",
              "Failed to call: %s",
              "Call::CreateAudioReceiveStream",
              "Call::DeliverRtcp",
              "Call::DestroyAudioReceiveStream",
              "Call::CreateAudioSendStream"
            ],
            "i": "metadata/build/make::all-target-assignment",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses send socket call",
            "e": [
              "send"
            ],
            "i": "micro-behaviors/communications/socket/send::send-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 1.0,
            "d": "bridge interface",
            "e": [
              "bridge"
            ],
            "i": "micro-behaviors/os/container/namespace::bridge-str",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "QUIC protocol reference",
            "e": [
              "QUIC_TRANSPORT_PARAMETERS_MISCONFIGURED",
              "QUIC_INTERNAL_ERROR"
            ],
            "i": "objectives/command-and-control/channel/quic::quic-protocol-reference",
            "l": 1
          },
          {
            "a": "T1069",
            "c": 0.699999988079071,
            "d": "User/group ID gathering",
            "e": [
              "geteuid",
              "getgid",
              "getegid"
            ],
            "i": "objectives/discovery/host/permissions::uid-gid-gathering",
            "l": 3
          },
          {
            "a": "T1497.001",
            "c": 0.800000011920929,
            "d": "Extremely low logic density (function sparsity)",
            "e": [
              "binary.complexity_per_kb = 0.00"
            ],
            "i": "objectives/anti-analysis/vm-detect/instruction::sparse-logic-density",
            "l": 1
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Microsoft Smartcardlogin"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-4",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 473.00",
              "binary.export_count = 684.00",
              "binary.export_count = 171.00",
              "binary.export_count = 432.00",
              "binary.export_count = 736.00",
              "binary.export_count = 430.00",
              "binary.export_count = 287.00",
              "binary.export_count = 289.00",
              "binary.export_count = 281.00",
              "binary.export_count = 238.00",
              "binary.export_count = 475.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Listen on a socket",
            "e": [
              "listen",
              "socket"
            ],
            "i": "micro-behaviors/communications/socket/listen::listen",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.6600000262260437,
            "d": "Get CPU info from /proc/cpuinfo",
            "e": [
              "/proc/cpuinfo"
            ],
            "i": "micro-behaviors/fs/proc/system::system-cpuinfo",
            "l": 3
          },
          {
            "c": 0.30000001192092896,
            "d": "getenv function (read environment variable)",
            "e": [
              "getenv"
            ],
            "i": "micro-behaviors/os/env/vars/access::getenv",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 5000+ functions",
            "e": [
              "binary.func_count = 15276.00",
              "binary.func_count = 19311.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-5000",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 2596.00",
              "binary.func_count = 19311.00",
              "binary.func_count = 617.00",
              "binary.func_count = 726.00",
              "binary.func_count = 2514.00",
              "binary.func_count = 15276.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "secret keyword",
            "e": [
              "SERVER_TRAFFIC_SECRET_0",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "secretBag",
              "secretary",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "EXPORTER_SECRET",
              "CLIENT_TRAFFIC_SECRET_0",
              "extended master secret",
              "master secret"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::secret",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Huawei vendor string",
            "e": [
              "huawei",
              "_Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii",
              "Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
            ],
            "i": "objectives/command-and-control/channel/p2p::huawei-str",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "URL with .php endpoint",
            "e": [
              "http://www.aeda.ae/eng/aepolicy.php"
            ],
            "i": "objectives/command-and-control/infrastructure/domain/tld::php-endpoint-url",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "ZSTD core decompression support",
            "e": [
              "LOG_ZSTD_decompressStream_simpleArgs",
              "sym.LOG_ZSTD_initDStream_usingDDict",
              "sym.LOG_ZSTD_decompressStream",
              "LOG_ZSTD_initDStream_usingDict",
              "sym.LOG_ZSTD_decompressStream_simpleArgs",
              "sym.LOG_ZSTD_initDStream",
              "LOG_ZSTD_createDStream",
              "LOG_ZSTD_createDStream_advanced",
              "sym.LOG_ZSTD_initDStream_usingDict",
              "LOG_ZSTD_decompressStream",
              "sym.LOG_ZSTD_createDStream_advanced",
              "sym.LOG_ZSTD_createDStream",
              "LOG_ZSTD_initDStream_usingDDict",
              "LOG_ZSTD_initDStream"
            ],
            "i": "micro-behaviors/data/embedded/runtime::zstd-core-support",
            "l": 3
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk",
              "sym.imp.__memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Get memory info from /proc/meminfo",
            "e": [
              "/proc/meminfo",
              "System Summary (From: /proc/meminfo)"
            ],
            "i": "micro-behaviors/fs/proc/system::system-meminfo",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "References to worker pools",
            "e": [
              "ThreadPool"
            ],
            "i": "micro-behaviors/process/create/workers::worker-pool",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libxcrash.so",
              "libpl_droidsonroids_gif.so",
              "libnmmp.so",
              "libimage_processing_util_jni.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "Bind socket to address",
            "e": [
              "bind"
            ],
            "i": "micro-behaviors/communications/socket/bind/function::bind",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 47.00",
              "binary.import_count = 70.00",
              "binary.import_count = 75.00",
              "binary.import_count = 245.00",
              "binary.import_count = 121.00",
              "binary.import_count = 79.00",
              "binary.import_count = 52.00",
              "binary.import_count = 86.00",
              "binary.import_count = 90.00",
              "binary.import_count = 24.00",
              "binary.import_count = 91.00",
              "binary.import_count = 41.00",
              "binary.import_count = 50.00",
              "binary.import_count = 23.00",
              "binary.import_count = 103.00",
              "binary.import_count = 39.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "/boot directory reference",
            "e": [
              "/boot"
            ],
            "i": "micro-behaviors/fs/path/system::boot-dir",
            "l": 2
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Disk partitioning utility context",
            "e": [
              "partition"
            ],
            "i": "well-known/tool/sysadmin/disk-utility::disk-partition-context",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Access /dev/urandom",
            "e": [
              "failed to open /dev/urandom"
            ],
            "i": "micro-behaviors/os/random/crypto::urandom",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_",
              "libc++.so",
              "libc++abi"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "a": "T1027.003",
            "c": 0.699999988079071,
            "d": "Image histogram near-uniform distribution",
            "e": [
              "image.histogram_flatness = 0.95"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::high-histogram-flatness",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "c": 0.800000011920929,
            "d": "Abnormally low logic density for binary size",
            "e": [
              "binary.complexity_per_kb = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/control-flow/logic::low-complexity-large-binary",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "a": "T1552.003",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "whitelist"
            ],
            "i": "objectives/credential-access/shell/history::shell-history-unless-cond-1--rx-4",
            "l": 1
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 90.00",
              "binary.import_count = 121.00",
              "binary.import_count = 228.00",
              "binary.import_count = 119.00",
              "binary.import_count = 108.00",
              "binary.import_count = 245.00",
              "binary.import_count = 91.00",
              "binary.import_count = 86.00",
              "binary.import_count = 103.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 287.00",
              "binary.export_count = 473.00",
              "binary.export_count = 45.00",
              "binary.export_count = 432.00",
              "binary.export_count = 171.00",
              "binary.export_count = 289.00",
              "binary.export_count = 430.00",
              "binary.export_count = 238.00",
              "binary.export_count = 281.00",
              "binary.export_count = 736.00",
              "binary.export_count = 684.00",
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.79",
              "binary.overall_entropy = 3.39",
              "binary.overall_entropy = 3.01",
              "binary.overall_entropy = 3.93",
              "binary.overall_entropy = 3.05",
              "binary.overall_entropy = 3.34",
              "binary.overall_entropy = 2.97"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Go base64 decoding",
            "e": [
              ".Decode"
            ],
            "i": "micro-behaviors/data/encode/base64::go-base64-decode",
            "l": 2
          },
          {
            "a": "T1082",
            "c": 0.8500000238418579,
            "d": "Multi-architecture runtime wordlist",
            "e": [
              "mips64"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist",
            "l": 3,
            "m": "E1082"
          },
          {
            "d": "select() I/O multiplexing",
            "e": [
              "select"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::select-multiplex",
            "l": 3
          },
          {
            "c": 0.20000000298023224,
            "d": "Format time as string",
            "e": [
              "strftime",
              "sym.imp.strftime"
            ],
            "i": "micro-behaviors/time/query::strftime",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "lstat",
              "fstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1071.001",
            "c": 0.75,
            "d": "Proxy-Connection keep-alive header",
            "e": [
              "Proxy-Connection: Keep-Alive"
            ],
            "i": "micro-behaviors/communications/http/request/client::proxy-connection-keepalive",
            "l": 3,
            "m": "C0002"
          },
          {
            "d": "poll() I/O multiplexing",
            "e": [
              "poll"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::poll-multiplex",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Set socket options",
            "e": [
              "setsockopt"
            ],
            "i": "micro-behaviors/communications/socket/options::options-set",
            "l": 3
          },
          {
            "a": "T1027",
            "d": "Unusual character combinations",
            "e": [
              ";\u003c\u003c\u003c===\u003e\u003e\u003e???",
              "!!!\"\"\"###$$$%%%\u0026\u0026\u0026'''((()))***+++",
              "^șŧèăƛćƛƛƛ",
              "ȀȂȂȂȂȌȂȓ"
            ],
            "i": "micro-behaviors/data/encode/xor::unusual-character-combinations",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "LZ4_decompress function",
            "e": [
              "LOG_LZ4_decompress_fast",
              "LOG_LZ4_decompress_safe_forceExtDict",
              "sym.LOG_LZ4_decompress_fast_continue",
              "LOG_LZ4_decompress_safe_partial",
              "LOG_LZ4_decompress_safe_withPrefix64k",
              "LOG_LZ4_decompress_safe_usingDict",
              "sym.LOG_LZ4_decompress_safe_continue",
              "LOG_LZ4_decompress_fast_withPrefix64k",
              "sym.LOG_LZ4_decompress_safe_partial",
              "sym.LOG_LZ4_decompress_safe_usingDict",
              "sym.LOG_LZ4_decompress_safe",
              "LOG_LZ4_decompress_safe_continue",
              "LOG_LZ4_decompress_fast_usingDict",
              "LOG_LZ4_decompress_fast_continue",
              "sym.LOG_LZ4_decompress_fast",
              "LOG_LZ4_decompress_safe"
            ],
            "i": "micro-behaviors/data/compress/library::lz4-decompress",
            "l": 3
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1145.00",
              "binary.string_count = 1317.00",
              "binary.string_count = 10218.00",
              "binary.string_count = 1141.00",
              "binary.string_count = 1073.00",
              "binary.string_count = 1364.00",
              "binary.string_count = 11689.00",
              "binary.string_count = 1131.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 6.00",
              "binary.export_count = 432.00",
              "binary.export_count = 171.00",
              "binary.export_count = 736.00",
              "binary.export_count = 475.00",
              "binary.export_count = 4.00",
              "binary.export_count = 8.00",
              "binary.export_count = 238.00",
              "binary.export_count = 430.00",
              "binary.export_count = 684.00",
              "binary.export_count = 287.00",
              "binary.export_count = 281.00",
              "binary.export_count = 289.00",
              "binary.export_count = 45.00",
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "PBKDF2 key derivation",
            "e": [
              "PBKDF2"
            ],
            "i": "micro-behaviors/crypto/kdf/algorithm::pbkdf2",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "getrandom syscall",
            "e": [
              "%s: getrandom indicates that the entr…",
              "getrandom"
            ],
            "i": "micro-behaviors/os/random/crypto::getrandom",
            "l": 2
          },
          {
            "d": "Duplicate file descriptor",
            "e": [
              "dup"
            ],
            "i": "micro-behaviors/process/fd/dup::dup",
            "l": 2
          },
          {
            "d": "Seeded random number generation",
            "e": [
              "rand",
              "srand"
            ],
            "i": "micro-behaviors/os/random/crypto::seeded-random",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "getauxval function reference",
            "e": [
              "getauxval",
              "sym.imp.getauxval"
            ],
            "i": "metadata/binary/linking/runtime::getauxval-ref",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlsym",
              "dlclose",
              "dlerror"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          },
          {
            "a": "T1046",
            "c": 0.75,
            "d": "Probing keyword (explicit scanning intent)",
            "e": [
              "Probing",
              "probing"
            ],
            "i": "objectives/discovery/network/scan/port::probing-keyword",
            "l": 1,
            "m": "E1046"
          },
          {
            "c": 0.699999988079071,
            "d": "HTTP REQUEST method",
            "e": [
              "REQUEST"
            ],
            "i": "micro-behaviors/communications/http/request/client::request",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses recvfrom socket call",
            "e": [
              "recvfrom"
            ],
            "i": "micro-behaviors/communications/socket/receive::recvfrom-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/checks.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/rtp_transceiver.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/safe_conversions.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_track_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/sdk/android/native_api/jni/java_types.h",
              "homePostalAddress",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/buildtools/third_party/libc++abi/trunk/src/abort_message.cpp",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/moving_median_filter.h",
              "homeTelephoneNumber",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_factory_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/jitter_buffer_delay_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/video_track_source_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/unique_id_generator.h"
            ],
            "i": "objectives/evasion/masquerade/process/path::systemd-masquerade-path--rx-5",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF .gnu_debugdata section (mini debug info)",
            "e": [
              ".gnu_debugdata"
            ],
            "i": "micro-behaviors/data/embedded/payload/compression::gnu-debugdata-section",
            "l": 2
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 103.00",
              "binary.import_count = 108.00",
              "binary.import_count = 245.00",
              "binary.import_count = 121.00",
              "binary.import_count = 228.00",
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "d": "usage: label (lowercase)",
            "e": [
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::usage-lower",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "PEM end marker",
            "e": [
              "-----END"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::pem-end",
            "l": 2
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "directory"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-21",
            "l": 1
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "HTTPS port (443) variants (https/port/ssl)",
            "e": [
              "port of 80 or 443"
            ],
            "i": "objectives/discovery/network/scan/port::port-number-https-1",
            "l": 1,
            "m": "E1046"
          },
          {
            "a": "T1082",
            "c": 0.6000000238418579,
            "d": "Query system name and information",
            "e": [
              "uname"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/kernel::uname",
            "l": 3,
            "m": "E1082"
          },
          {
            "a": "T1497.001",
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "binary.string_count = 10218.00",
              "binary.string_count = 11689.00"
            ],
            "i": "objectives/anti-analysis/vm-detect/vendor::comprehensive-evasion-cond-1--inline-17219",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.8500000238418579,
            "d": ".su URL",
            "e": [
              "https://en.wikipedia.org/wiki/.su\n"
            ],
            "i": "objectives/command-and-control/infrastructure/domain/tld::tld-su",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Create temporary file securely",
            "e": [
              "mkstemp"
            ],
            "i": "micro-behaviors/fs/temp/mktemp::mkstemp-fn",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 66785.00",
              "binary.total_basic_blocks = 2113.00",
              "binary.total_basic_blocks = 29231.00",
              "binary.total_basic_blocks = 3482.00",
              "binary.total_basic_blocks = 2748.00",
              "binary.total_basic_blocks = 2178.00",
              "binary.total_basic_blocks = 13251.00",
              "binary.total_basic_blocks = 33524.00",
              "binary.total_basic_blocks = 155043.00",
              "binary.total_basic_blocks = 3092.00",
              "binary.total_basic_blocks = 4710.00",
              "binary.total_basic_blocks = 3728.00",
              "binary.total_basic_blocks = 3899.00",
              "binary.total_basic_blocks = 15274.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "a": "T1105",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "amazonaws.com"
            ],
            "i": "objectives/command-and-control/dropper/delivery/http::suspicious-cloud-image-object--rx-3",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.7200000286102295,
            "d": "cBPF load ICMP sequence field",
            "e": [
              "28 00 00 00 28 00 00 00"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::cbpf-load-icmp-seq-ethernet",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "Random seed initialization (srand)",
            "e": [
              "srand"
            ],
            "i": "micro-behaviors/os/random/crypto::srand-symbol",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic library unload",
            "e": [
              "dlclose"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlclose",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "RAR member contains WSH script",
            "e": [
              ".js"
            ],
            "i": "micro-behaviors/data/archive/rar::wsh-script-member-extension",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "homePostalAddress",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_proxy.h",
              "homeTelephoneNumber",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/rtp_transceiver.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/moving_median_filter.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/video_track_source_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/safe_conversions.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/buildtools/third_party/libc++abi/trunk/src/abort_message.cpp",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/unique_id_generator.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/used_ids.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_track_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_factory_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/checks.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/jitter_buffer_delay_proxy.h"
            ],
            "i": "objectives/evasion/masquerade/process/path::systemd-masquerade-reference--rx-9",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "assume_shared_link",
              "Got a shared lock, but fail to exclusive lock [%s]",
              "NO_SHARED_CIPHER",
              "Shared_Dirty: %zu kB",
              "NO_SHARED_GROUP",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "PRE_SHARED_KEY_MUST_BE_LAST",
              "ASharedMemory_create",
              "Shared",
              "current API level = %d, libc++_shared=%d",
              "ASharedMemory_getName",
              "Shared_Clean: %zu kB",
              "ASharedMemory_getSize",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              ": Ignoring STUN binding response message on shared socket.",
              "shared key"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_compress function",
            "e": [
              "LOG_ZSTD_compressBlock_btopt",
              "LOG_ZSTD_compressBlock_lazy2",
              "LOG_ZSTD_compressBlock_doubleFast_extDict",
              "LOG_ZSTD_compressBlock_doubleFast_dictMatchState",
              "LOG_ZSTD_compressBound",
              "LOG_ZSTD_compressSuperBlock",
              "LOG_ZSTD_compressBlock_lazy_dictMatchState",
              "LOG_ZSTD_compressBegin_advanced",
              "LOG_ZSTD_compressBlock_fast",
              "LOG_ZSTD_compressLiterals",
              "LOG_ZSTD_compressBlock_lazy2_dedicatedDictSearch",
              "LOG_ZSTD_compressBegin_usingCDict_deprecated",
              "LOG_ZSTD_compressBlock_fast_extDict",
              "LOG_ZSTD_compressStream2_simpleArgs",
              "LOG_ZSTD_compress_advanced",
              "LOG_ZSTD_compressBlock_btlazy2"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-compress",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "Convert time to UTC time",
            "e": [
              "gmtime_r",
              "sym.imp.gmtime_r"
            ],
            "i": "micro-behaviors/time/query::gmtime",
            "l": 2
          },
          {
            "c": 0.8799999952316284,
            "d": "Java invoke reference",
            "e": [
              "invoke"
            ],
            "i": "objectives/command-and-control/backdoor/loader/classloader::invoke-string",
            "l": 1
          },
          {
            "a": "T1485",
            "c": 0.8600000143051147,
            "d": "Android file delete method string",
            "e": [
              "delete"
            ],
            "i": "objectives/impact/wipe/disk/mass-delete::android-file-delete-method",
            "l": 1
          },
          {
            "c": 0.8799999952316284,
            "d": "Android audio MIME targeting",
            "e": [
              "audio/utility"
            ],
            "i": "objectives/collection/file-targeting/filter::android-audio-mime",
            "l": 4
          },
          {
            "a": "T1566",
            "c": 0.8500000238418579,
            "d": "Cordova config allows external domain origin",
            "e": [
              "http://www.ietf.org/",
              "http://www.webrtc.org/",
              "https://aomediacodec.github.io/"
            ],
            "i": "objectives/credential-access/phishing/workflow::cordova-external-origin",
            "l": 1
          },
          {
            "a": "T1070.004",
            "c": 0.7200000286102295,
            "d": "Java JAR extension string",
            "e": [
              ".jar"
            ],
            "i": "objectives/evasion/self-delete/file/script::java-jar-extension",
            "l": 1,
            "m": "F0007"
          },
          {
            "c": 0.8799999952316284,
            "d": "Android video MIME targeting",
            "e": [
              "video/send_statistics_proxy.cc"
            ],
            "i": "objectives/collection/file-targeting/filter::android-video-mime",
            "l": 4
          },
          {
            "c": 0.9200000166893005,
            "d": "Android backup path name",
            "e": [
              " backup "
            ],
            "i": "objectives/collection/file-targeting/filter::android-backup-path-name",
            "l": 1
          },
          {
            "a": "T1027.002",
            "c": 0.8999999761581421,
            "d": "APK resources with dense short obfuscated names",
            "e": [
              "res/--.xml"
            ],
            "i": "objectives/command-and-control/dropper/staging/encrypted::apk-obfuscated-resource-names",
            "l": 1,
            "m": "B0024"
          },
          {
            "a": "T1102.002",
            "c": 0.8399999737739563,
            "d": "Android OkHttp client reference",
            "e": [
              "okhttp3"
            ],
            "i": "objectives/command-and-control/channel/deaddrop/cloud-storage::android-okhttp-client-reference",
            "l": 3,
            "m": "B0030"
          },
          {
            "c": 0.8799999952316284,
            "d": "Android AudioManager reference",
            "e": [
              "Landroid/media/AudioManager;"
            ],
            "i": "micro-behaviors/hardware/input/audio::android-audio-manager-reference",
            "l": 1
          },
          {
            "a": "T1406",
            "c": 0.8399999737739563,
            "d": "Reflective declared field access",
            "e": [
              "getDeclaredField"
            ],
            "i": "micro-behaviors/process/create/loader::reflective-field-access",
            "l": 1
          },
          {
            "a": "T1059",
            "c": 0.7799999713897705,
            "d": "Update message type",
            "e": [
              "UPDATE"
            ],
            "i": "objectives/command-and-control/remote-command/protocol::update-message",
            "l": 1,
            "m": "B0022"
          },
          {
            "c": 0.8799999952316284,
            "d": "Android image MIME target filter",
            "e": [
              "image/okhttp"
            ],
            "i": "objectives/collection/file-targeting/filter::android-image-mime",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 0.7400000095367432,
            "d": "Java decodeString method",
            "e": [
              "decodeString"
            ],
            "i": "objectives/anti-static/obfuscation/string/crypto::java-decode-string-method",
            "l": 1,
            "m": "F0001"
          },
          {
            "c": 0.8999999761581421,
            "d": "Exact ClassLoader API reference",
            "e": [
              "java/lang/ClassLoader"
            ],
            "i": "objectives/command-and-control/backdoor/loader/classloader::classloader-string",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Java getDeclaredConstructor reference",
            "e": [
              "getDeclaredConstructor"
            ],
            "i": "objectives/command-and-control/backdoor/loader/classloader::getdeclaredconstructor-string",
            "l": 1
          },
          {
            "c": 0.8799999952316284,
            "d": "Thread.currentThread reference",
            "e": [
              "currentThread"
            ],
            "i": "objectives/command-and-control/backdoor/loader/classloader::currentthread-string",
            "l": 1
          },
          {
            "a": "T1027.002",
            "c": 0.8999999761581421,
            "d": "APK nine-patch resources with short obfuscated names",
            "e": [
              "res/09.9.png"
            ],
            "i": "objectives/command-and-control/dropper/staging/encrypted::apk-obfuscated-ninepatch-names",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.8799999952316284,
            "d": "Android logcat command",
            "e": [
              "logcat"
            ],
            "i": "micro-behaviors/os/event/log::android-logcat-command",
            "l": 1
          },
          {
            "a": "T1406",
            "c": 0.8399999737739563,
            "d": "Reflective declared method access",
            "e": [
              "getDeclaredMethod"
            ],
            "i": "micro-behaviors/process/create/loader::reflective-method-access",
            "l": 1
          },
          {
            "c": 0.9800000190734863,
            "d": "JAR has many archive members",
            "e": [
              "archive.file_count = 1655.00"
            ],
            "i": "metadata/package/metrics::jar-many-members",
            "l": 1
          },
          {
            "a": "T1059",
            "c": 0.8600000143051147,
            "d": "Java Runtime class reference",
            "e": [
              "java/lang/Runtime"
            ],
            "i": "micro-behaviors/process/create/spawn::java-runtime-class",
            "l": 1,
            "m": "E1203"
          },
          {
            "a": "T1406",
            "c": 0.8600000143051147,
            "d": "Reflection accessibility bypass",
            "e": [
              "setAccessible"
            ],
            "i": "micro-behaviors/process/create/loader::reflective-access-bypass",
            "l": 1
          },
          {
            "a": "T1027.002",
            "c": 0.949999988079071,
            "d": "APK resource table uses dense short-name obfuscation",
            "e": [
              "res/--.xml",
              "res/09.9.png"
            ],
            "i": "objectives/command-and-control/dropper/staging/encrypted::apk-obfuscated-resource-pack",
            "l": 4,
            "m": "B0024"
          },
          {
            "c": 0.9599999785423279,
            "d": "Android targets files by MIME category",
            "e": [
              "video/send_statistics_proxy.cc",
              "image/okhttp",
              "audio/utility"
            ],
            "i": "objectives/collection/file-targeting/filter::android-mime-file-exfil-targeting",
            "l": 4
          },
          {
            "c": 0.8500000238418579,
            "d": "Contains help or usage information",
            "e": [
              "WebRtcVoiceEngine::ApplyOptions:",
              "CreateMediaChannel. Options:",
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/quality::has-help",
            "l": 3
          }
        ],
        "sha": "80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk",
        "type": "zip"
      },
      {
        "f": "O₇(Al₂C₂Er₄AsDy₂LaS)H₇(Cm₂Ds₂F₂Os₃PoCrDb)Md₂(Bi₃Bk)",
        "x": 13,
        "dp": 1,
        "id": 1,
        "is": [
          "",
          "sleep",
          "pthread_detach",
          "putc",
          "sigemptyset",
          "pthread_create",
          "pthread_join",
          "realloc",
          "gettid",
          "open",
          "pthread_key_create",
          "U_dyn_info_list_addr",
          "pthread_once",
          "cxa_finalize",
          "ptrace",
          "siglongjmp",
          "pthread_rwlock_wrlock",
          "calloc",
          "fread",
          "strncmp",
          "pthread_sigmask",
          "read",
          "strtoul",
          "fstat",
          "isascii",
          "pthread_mutex_init",
          "abort",
          "vsnprintf",
          "sigaltstack",
          "closedir",
          "strerror",
          "qsort",
          "exit",
          "errno",
          "snprintf",
          "getpid",
          "dl_iterate_phdr",
          "strcat",
          "sscanf",
          "write",
          "strrchr",
          "access",
          "time",
          "fclose",
          "stack_chk_fail",
          "fgets",
          "dup",
          "fork",
          "gettimeofday",
          "bsearch",
          "pthread_key_delete",
          "strftime",
          "memchr",
          "prctl",
          "pthread_setspecific",
          "strncpy",
          "opendir",
          "dlsym",
          "localtime_r",
          "dlerror",
          "unlink",
          "android_log_vprint",
          "strchr",
          "fseek",
          "strcmp",
          "syscall",
          "sigaddset",
          "sprintf",
          "strncat",
          "sigaction",
          "pthread_mutex_lock",
          "mmap",
          "pthread_getspecific",
          "memmove",
          "pthread_rwlock_unlock",
          "strstr",
          "getpagesize",
          "strdup",
          "usleep",
          "dladdr",
          "kill",
          "readdir",
          "strlen",
          "close",
          "dlopen",
          "stat",
          "pthread_rwlock_init",
          "localtime",
          "munmap",
          "malloc",
          "execl",
          "memcpy",
          "waitpid",
          "dup2",
          "memset",
          "fopen",
          "pthread_rwlock_rdlock",
          "fwrite",
          "sigsetjmp",
          "pthread_kill",
          "free",
          "pthread_self",
          "strcpy",
          "system_property_get",
          "sigfillset",
          "pthread_mutex_unlock",
          "cxa_atexit",
          "isspace"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libc.so",
              "libm.so",
              "libdl.so"
            ],
            "soname": "libBugly_Native.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 34080.0,
            "needed_libs": 4.0,
            "dynsym_count": 348.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 233.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 222.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 26.0,
            "load_segment_max_p_memsz": 234728.0,
            "load_segment_max_p_filesz": 186304.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 195200.0
          },
          "binary": {
            "code_size": 119108.0,
            "func_count": 294.0,
            "entry_point": 34080.0,
            "has_overlay": true,
            "code_entropy": 5.75,
            "data_entropy": 3.07,
            "export_count": 238.0,
            "func_density": 2.53,
            "import_count": 108.0,
            "overlay_size": 1670.0,
            "string_count": 1131.0,
            "avg_func_size": 1670.64,
            "overlay_ratio": 0.01,
            "section_count": 24.0,
            "avg_complexity": 8.12,
            "import_density": 0.93,
            "max_complexity": 112.0,
            "string_density": 9.72,
            "aliased_exports": 7.0,
            "overall_entropy": 3.23,
            "overlay_entropy": 1.62,
            "avg_basic_blocks": 13.26,
            "avg_section_size": 7951.71,
            "dependency_count": 4.0,
            "entropy_variance": 1.71,
            "avg_string_length": 23.45,
            "complexity_per_kb": 0.07,
            "max_string_length": 263.0,
            "avg_string_entropy": 3.48,
            "code_to_data_ratio": 1.66,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.59,
            "total_basic_blocks": 3899.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 16.68,
            "high_complexity_funcs": 6.0,
            "largest_section_ratio": 0.59,
            "provenance_id_present": true,
            "sentence_string_count": 485.0,
            "sentence_string_ratio": 0.43,
            "behavioral_import_ratio": 0.07,
            "nonstandard_section_name_count": 4.0
          }
        },
        "ss": [
          [
            0,
            "snprintf"
          ],
          [
            13377,
            "__cxa_finalize"
          ],
          [
            13392,
            "__cxa_atexit"
          ],
          [
            13405,
            "AnrDumpThreadArgs"
          ],
          [
            13423,
            "HandleAnr"
          ],
          [
            13433,
            "JAR_JNI_VERSION"
          ],
          [
            13460,
            "SendSigquitToSignalCatcher"
          ],
          [
            13487,
            "UnblockSigquit"
          ],
          [
            13502,
            "__emutls_get_address"
          ],
          [
            13523,
            "__emutls_v.isDumpingTrace"
          ],
          [
            13549,
            "__emutls_v.jmpBuf"
          ],
          [
            13567,
            "__errno"
          ],
          [
            13575,
            "__stack_chk_fail"
          ],
          [
            13598,
            "access"
          ],
          [
            13605,
            "backtraceStack"
          ],
          [
            13620,
            "backtraceStackMini"
          ],
          [
            13639,
            "backupJavaClasses"
          ],
          [
            13657,
            "calloc"
          ],
          [
            13664,
            "checkJavaException"
          ],
          [
            13683,
            "closeCrashRecordFile"
          ],
          [
            13704,
            "closeElfInfoParser"
          ],
          [
            13723,
            "closeMapRecordFile"
          ],
          [
            13742,
            "closeNativeLog"
          ],
          [
            13757,
            "closeRegisterRecordFile"
          ],
          [
            13781,
            "concatString"
          ],
          [
            13794,
            "delayRestoreSIGILLHandler"
          ],
          [
            13820,
            "doACrash"
          ],
          [
            13829,
            "doANativeCrash"
          ],
          [
            13844,
            "dumpAbortMessage"
          ],
          [
            13861,
            "eupInfo"
          ],
          [
            13869,
            "free"
          ],
          [
            13874,
            "freeNativeKeyValueList"
          ],
          [
            13897,
            "getAndroidApiLevel"
          ],
          [
            13916,
            "getBuglyClassPathPrefix"
          ],
          [
            13940,
            "getErrorMsg"
          ],
          [
            13952,
            "getJavaThreadStack"
          ],
          [
            13971,
            "getPendingExceptionStack"
          ],
          [
            13996,
            "getProcessName"
          ],
          [
            14011,
            "getSigCode"
          ],
          [
            14022,
            "getSignalName"
          ],
          [
            14036,
            "getThreadName"
          ],
          [
            14050,
            "getpid"
          ],
          [
            14057,
            "gettid"
          ],
          [
            14064,
            "gettimeofday"
          ],
          [
            14077,
            "initCrashRecordFile"
          ],
          [
            14097,
            "initMapRecordFile"
          ],
          [
            14115,
            "initRegisterRecordFile"
          ],
          [
            14138,
            "initStackBuffer"
          ],
          [
            14154,
            "javaCall_NativeCrashHandler_GetMHandle"
          ],
          [
            14193,
            "javaObjectCall_NativeExceptionHandler_handleNativeException"
          ],
          [
            14253,
            "javaStaticCall_NativeCrashHandler_GetInstance"
          ],
          [
            14299,
            "jc_Class"
          ],
          [
            14308,
            "jc_NativeCrashHandler"
          ],
          [
            14330,
            "jc_NativeExceptionHandler"
          ],
          [
            14356,
            "jc_Object"
          ],
          [
            14366,
            "jc_StackTraceElement"
          ],
          [
            14387,
            "jc_Thread"
          ],
          [
            14397,
            "jc_Throwable"
          ],
          [
            14410,
            "jm_Class_getName"
          ],
          [
            14427,
            "jm_Object_getClass"
          ],
          [
            14446,
            "jm_currentThread"
          ],
          [
            14463,
            "jm_getAndUpdateAnrState"
          ],
          [
            14487,
            "jm_getInstance"
          ],
          [
            14502,
            "jm_getMHandle"
          ],
          [
            14516,
            "jm_getStackTrace"
          ],
          [
            14533,
            "jm_handleNativeException"
          ],
          [
            14558,
            "jm_handleNativeException2"
          ],
          [
            14584,
            "jm_throwable_getMessage"
          ],
          [
            14608,
            "jm_throwable_getStackTrace"
          ],
          [
            14635,
            "jm_throwable_toString"
          ],
          [
            14657,
            "jm_toString"
          ],
          [
            14669,
            "jniLogPath"
          ],
          [
            14680,
            "jni_appendNativeLog"
          ],
          [
            14700,
            "jni_appendWholeNativeLog"
          ],
          [
            14725,
            "jni_getNativeKeyValueList"
          ],
          [
            14751,
            "jni_getNativeLog"
          ],
          [
            14768,
            "jni_getProperties"
          ],
          [
            14786,
            "jni_getSoCpuAbi"
          ],
          [
            14802,
            "jni_putNativeKeyValue"
          ],
          [
            14824,
            "jni_regist"
          ],
          [
            14835,
            "jni_removeNativeKeyValue"
          ],
          [
            14860,
            "jni_setNativeInfo"
          ],
          [
            14878,
            "jni_testCrash"
          ],
          [
            14892,
            "jni_unregist"
          ],
          [
            14909,
            "lockFilePath"
          ],
          [
            14922,
            "log2Console"
          ],
          [
            14934,
            "parseBoolString"
          ],
          [
            14950,
            "printBuglySoArch"
          ],
          [
            14967,
            "pthread_create"
          ],
          [
            14982,
            "pthread_join"
          ],
          [
            14995,
            "pthread_kill"
          ],
          [
            15008,
            "pthread_self"
          ],
          [
            15021,
            "recordFileDir"
          ],
          [
            15035,
            "recordRegisterInfo"
          ],
          [
            15054,
            "recordSystemLogWithFd"
          ],
          [
            15076,
            "recordTombStoneFileHeader"
          ],
          [
            15102,
            "resetError"
          ],
          [
            15113,
            "saveAppInfo2File"
          ],
          [
            15130,
            "saveEupInfo2File"
          ],
          [
            15147,
            "saveJavaDump2File"
          ],
          [
            15165,
            "saveKeyValue2File"
          ],
          [
            15183,
            "saveNativeLog2File"
          ],
          [
            15202,
            "setLogMode"
          ],
          [
            15213,
            "sigaction"
          ],
          [
            15223,
            "sigaltstack"
          ],
          [
            15235,
            "sigemptyset"
          ],
          [
            15247,
            "siglongjmp"
          ],
          [
            15258,
            "strcat"
          ],
          [
            15265,
            "strerror"
          ],
          [
            15274,
            "strlen"
          ],
          [
            15281,
            "strncat"
          ],
          [
            15296,
            "sysLogPath"
          ],
          [
            15307,
            "toJavaString"
          ],
          [
            15327,
            "unlockFile"
          ],
          [
            15338,
            "unregistSignalHanlder"
          ],
          [
            15360,
            "usleep"
          ],
          [
            15367,
            "_Uaarch64_get_reg"
          ],
          [
            15385,
            "_Uaarch64_init_local"
          ],
          [
            15406,
            "_Uaarch64_step"
          ],
          [
            15421,
            "backtraceStackWithLibUnwind"
          ],
          [
            15449,
            "dladdr"
          ],
          [
            15456,
            "findModuleInMapInfoList"
          ],
          [
            15480,
            "freeMapInfoList"
          ],
          [
            15496,
            "getAbortMessage"
          ],
          [
            15512,
            "getBackTraceMapInfoList"
          ],
          [
            15536,
            "getElfInfoWithSymbolTable"
          ],
          [
            15562,
            "initCurrentMapInfoList"
          ],
          [
            15585,
            "initLocalMapInfoList"
          ],
          [
            15606,
            "init_dl_iterate_phdr_wrapper"
          ],
          [
            15635,
            "isascii"
          ],
          [
            15643,
            "localMapInfoList"
          ],
          [
            15671,
            "memcpy"
          ],
          [
            15678,
            "memset"
          ],
          [
            15685,
            "miniBacktraceStackWithLibUnwind"
          ],
          [
            15717,
            "recordAllMapInfo"
          ],
          [
            15734,
            "searchSymbolInElfFile"
          ],
          [
            15763,
            "strdup"
          ],
          [
            15770,
            "closeBackupRecordFile"
          ],
          [
            15792,
            "fclose"
          ],
          [
            15799,
            "fopen"
          ],
          [
            15805,
            "initBackupRecordFile"
          ],
          [
            15826,
            "initCurrentXMapInfoList"
          ],
          [
            15859,
            "recordBackupInfo"
          ],
          [
            15876,
            "recordMapInfo2File"
          ],
          [
            15895,
            "recordRegisterInfo2File"
          ],
          [
            15919,
            "recordHead"
          ],
          [
            15930,
            "recordProperty"
          ],
          [
            15945,
            "recordLine"
          ],
          [
            15962,
            "getElfInfo"
          ],
          [
            15973,
            "recordMapInfo"
          ],
          [
            15987,
            "recordMapLine"
          ],
          [
            16001,
            "sprintf"
          ],
          [
            16016,
            "GetAbortMessageAfterQ"
          ],
          [
            16038,
            "GetAbortMessageBeforeQ"
          ],
          [
            16061,
            "searchSymbol"
          ],
          [
            16074,
            "strncpy"
          ],
          [
            16082,
            "bsearch"
          ],
          [
            16090,
            "createSymbolTable"
          ],
          [
            16108,
            "freeSymbolTable"
          ],
          [
            16130,
            "getElfInfoWithinStackLine"
          ],
          [
            16156,
            "get_elf_exec_load_bias"
          ],
          [
            16179,
            "malloc"
          ],
          [
            16191,
            "munmap"
          ],
          [
            16198,
            "parseElf"
          ],
          [
            16207,
            "parseElfVersion"
          ],
          [
            16229,
            "searchSymbolTable"
          ],
          [
            16247,
            "strncmp"
          ],
          [
            16255,
            "checkMemoryReadable"
          ],
          [
            16275,
            "initMapInfoList"
          ],
          [
            16291,
            "initXMapInfoList"
          ],
          [
            16308,
            "isspace"
          ],
          [
            16316,
            "sscanf"
          ],
          [
            16323,
            "pthread_mutex_lock"
          ],
          [
            16342,
            "pthread_mutex_unlock"
          ],
          [
            16363,
            "createCircularQueue"
          ],
          [
            16383,
            "freeCircularQueue"
          ],
          [
            16401,
            "insertCircularQueue"
          ],
          [
            16421,
            "locateCircularQueue"
          ],
          [
            16441,
            "readCircularQueue"
          ],
          [
            16459,
            "BUGLY_CHANNEL_SESSION"
          ],
          [
            16481,
            "BUGLY_VERSION_SESSION"
          ],
          [
            16503,
            "__android_log_vprint"
          ],
          [
            16524,
            "currentMode"
          ],
          [
            16536,
            "fwrite"
          ],
          [
            16548,
            "recordEnd"
          ],
          [
            16558,
            "recordStr"
          ],
          [
            16568,
            "vsnprintf"
          ],
          [
            16578,
            "GetAndUpdateAnrState"
          ],
          [
            16599,
            "constructJavaObjectArray"
          ],
          [
            16624,
            "constructUploadExtraMessage"
          ],
          [
            16652,
            "getIndexOfIntArray"
          ],
          [
            16671,
            "getJavaMainThread"
          ],
          [
            16689,
            "getJavaMethodID"
          ],
          [
            16705,
            "getJavaStaticMethodID"
          ],
          [
            16727,
            "getJavaThread"
          ],
          [
            16741,
            "getJavaThreadByName"
          ],
          [
            16761,
            "getJavaThreadId"
          ],
          [
            16777,
            "getJavaThreadName"
          ],
          [
            16795,
            "getJavaThreadStackByThreadObject"
          ],
          [
            16828,
            "getKeySetArrayOfMap"
          ],
          [
            16848,
            "getSameNameThreadIdArray"
          ],
          [
            16873,
            "insertToJavaObjectArray"
          ],
          [
            16897,
            "intArrayCompare"
          ],
          [
            16913,
            "javaObjectCall_Thread_GetStackTrace"
          ],
          [
            16949,
            "javaObjectCall_getClassName"
          ],
          [
            16977,
            "javaStaticCall_Thread_CurrentThread"
          ],
          [
            17013,
            "javaTheadDump"
          ],
          [
            17027,
            "note"
          ],
          [
            17032,
            "localtime"
          ],
          [
            17042,
            "strftime"
          ],
          [
            17051,
            "__system_property_get"
          ],
          [
            17073,
            "closedir"
          ],
          [
            17082,
            "dlopen"
          ],
          [
            17100,
            "execl"
          ],
          [
            17111,
            "get_libraray_function"
          ],
          [
            17133,
            "get_opened_libraray_function"
          ],
          [
            17162,
            "localtime_r"
          ],
          [
            17174,
            "open_library"
          ],
          [
            17187,
            "opendir"
          ],
          [
            17201,
            "print_dlerror"
          ],
          [
            17215,
            "ptrace"
          ],
          [
            17222,
            "readdir"
          ],
          [
            17230,
            "recordSystemLog"
          ],
          [
            17246,
            "strtoul"
          ],
          [
            17254,
            "suspendAllThread"
          ],
          [
            17276,
            "unlink"
          ],
          [
            17283,
            "waitpid"
          ],
          [
            17291,
            "dynamic_load_create"
          ],
          [
            17311,
            "dynamic_load_destroy"
          ],
          [
            17332,
            "dynamic_load_sym"
          ],
          [
            17349,
            "pthread_detach"
          ],
          [
            17364,
            "pthread_sigmask"
          ],
          [
            17380,
            "sigaddset"
          ],
          [
            17390,
            "sigsetjmp"
          ],
          [
            17400,
            "syscall"
          ],
          [
            17408,
            "dl_iterate_phdr"
          ],
          [
            17424,
            "_Uaarch64_local_addr_space"
          ],
          [
            17451,
            "_Uaarch64_handle_signal_frame"
          ],
          [
            17481,
            "_Uaarch64_is_signal_frame"
          ],
          [
            17507,
            "_Uaarch64_get_accessors"
          ],
          [
            17531,
            "sigfillset"
          ],
          [
            17542,
            "_Uaarch64_flush_cache"
          ],
          [
            17564,
            "_Uaarch64_is_fpreg"
          ],
          [
            17583,
            "_Uaarch64_local_access_addr_space_init"
          ],
          [
            17622,
            "_Uaarch64_regname"
          ],
          [
            17640,
            "_Uaarch64_resume"
          ],
          [
            17657,
            "_Uaarch64_get_elf_image"
          ],
          [
            17681,
            "_Uelf64_memory_read"
          ],
          [
            17701,
            "memchr"
          ],
          [
            17708,
            "_Uaarch64_dwarf_find_debug_frame"
          ],
          [
            17741,
            "_Uaarch64_dwarf_search_unwind_table"
          ],
          [
            17777,
            "abort"
          ],
          [
            17783,
            "fread"
          ],
          [
            17789,
            "fseek"
          ],
          [
            17795,
            "realloc"
          ],
          [
            17810,
            "strrchr"
          ]
        ],
        "sz": 195200,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code IN token",
            "e": [
              "_IN"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-in",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "register native abi method error, please upgrade bugly jar version"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-15",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.43"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.48"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 294.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "libc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libBugly_Native.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "d": "Duplicate file descriptor",
            "e": [
              "dup"
            ],
            "i": "micro-behaviors/process/fd/dup::dup",
            "l": 2
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "x86_64 architecture string",
            "e": [
              "x86_64"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-x86-64",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 8.12"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "Format time as string",
            "e": [
              "strftime"
            ],
            "i": "micro-behaviors/time/query::strftime",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 3899.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r",
              "localtime"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/apex/",
              "/system/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "aarch64 architecture string",
            "e": [
              "_Uaarch64_get_elf_image",
              "_Uaarch64_resume",
              "_Uaarch64_is_fpreg",
              "_Uaarch64_local_access_addr_space_init",
              "_Uaarch64_regname",
              "_Uaarch64_dwarf_find_debug_frame",
              "_Uaarch64_init_local",
              "_Uaarch64_create_addr_space",
              "_Uaarch64_flush_cache",
              "_Uaarch64_dwarf_search_unwind_table",
              "_Uaarch64_is_signal_frame",
              "_Uaarch64_local_addr_space",
              "_Uaarch64_get_accessors",
              "_Uaarch64_get_reg",
              "_Uaarch64_handle_signal_frame",
              "_Uaarch64_step"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-aarch64",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.8600000143051147,
            "d": "Procfs maps path template",
            "e": [
              "/proc/%d/maps"
            ],
            "i": "micro-behaviors/fs/proc/info/memory::c-procfs-maps-template",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r",
              "localtime"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "_UPT_access_mem",
              "_UPT_access_reg",
              "_Uaarch64_local_access_addr_space_init",
              "_UPT_accessors",
              "_Uaarch64_get_accessors",
              "_UPT_access_fpreg",
              "access"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /lib64",
            "e": [
              "/lib64/libart.so",
              "/lib64/libc.so",
              "/lib64/libc"
            ],
            "i": "micro-behaviors/fs/path/system::system-lib64",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "init_dl_iterate_phdr_wrapper",
              "dl_iterate_phdr_wrapper",
              "dl_iterate_phdr",
              "init_dl_iterate_phdr_wrapper."
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "C-style exec family functions",
            "e": [
              "execl"
            ],
            "i": "micro-behaviors/process/create/execv::c-exec-variants",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 294.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "fork"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Makefile all target",
            "e": [
              "Failed to call: %s"
            ],
            "i": "metadata/build/make::all-target-assignment",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "magic 1 compare wrong",
              "magic 2 compare wrong"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write",
              "fwrite"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for specified duration",
            "e": [
              "sleep"
            ],
            "i": "micro-behaviors/time/query::sleep-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libBugly_Native.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.23"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 294.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1131.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Generic weak-login username marker",
            "e": [
              "Set native info: user ID(%s)"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-5",
            "l": 1
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.7799999713897705,
            "d": "Regex component marker",
            "e": [
              "list by maps file"
            ],
            "i": "objectives/evasion/kernel-hide/ebpf::bpf-rootkit-controller-actions--rx-8",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 108.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "fstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "d": "Duplicate file descriptor (I/O redirection)",
            "e": [
              "dup2"
            ],
            "i": "micro-behaviors/process/fd/dup::dup2",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/comm",
              "/proc/%d/task",
              "/proc/%d/maps",
              "/proc/%d/cmdline"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "closeCrashRecordFile",
              "closedir",
              "Native log had closed.",
              "fclose",
              "closeNativeLog",
              "closeBackupRecordFile",
              "closeElfInfoParser",
              "closeRegisterRecordFile",
              "closeMapRecordFile"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 238.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID ",
              " ID(",
              " ID:",
              "_ID(",
              "ID "
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "d": "overflow keyword",
            "e": [
              "Stack overflow"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Hardcoded external IPv4 address",
            "e": [
              "4.1.9.3"
            ],
            "i": "micro-behaviors/communications/ip/literal::external-ipv4-binary",
            "l": 3
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 294.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1131.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "a": "T1562",
            "c": 0.6000000238418579,
            "d": "Send signal to process",
            "e": [
              "kill"
            ],
            "i": "micro-behaviors/process/terminate/signal::kill",
            "l": 2,
            "m": "E1562"
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "stat",
              "fstat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic linker error handling",
            "e": [
              "dlerror"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlerror",
            "l": 3
          },
          {
            "a": "T1082",
            "c": 0.8500000238418579,
            "d": "Multi-architecture runtime wordlist",
            "e": [
              "mips64"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist",
            "l": 3,
            "m": "E1082"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Imports ptrace debugger API",
            "e": [
              "ptrace"
            ],
            "i": "micro-behaviors/os/syscall/invoke::ptrace-import",
            "l": 3
          },
          {
            "a": "T1071.001",
            "c": 0.8500000238418579,
            "d": "Hardcoded external IPv4 address",
            "e": [
              "4.1.9.3"
            ],
            "i": "objectives/command-and-control/infrastructure/ip::hardcoded-ipv4-binary",
            "l": 3,
            "m": "C0002"
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "fseek",
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "sleep",
              "gettimeofday",
              "usleep"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlerror",
              "dlsym"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          }
        ],
        "sha": "119ee21151537ae6a173882fdb4e21491a27f220a4250fe4a4fa84fdea616178",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libBugly_Native.so",
        "type": "elf"
      },
      {
        "f": "O₂(DyS)Md₂(Bi₄He)",
        "x": 3,
        "dp": 1,
        "id": 2,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "AndroidBitmap_lockPixels",
          "AndroidBitmap_unlockPixels",
          "ANativeWindow_fromSurface",
          "android_log_print",
          "ANativeWindow_setBuffersGeometry",
          "ANativeWindow_lock",
          "ANativeWindow_release",
          "ANativeWindow_unlockAndPost",
          "malloc",
          "free",
          "stack_chk_fail",
          "memcpy",
          "memcpy_chk",
          "memmove"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libandroid.so",
              "libjnigraphics.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libimage_processing_util_jni.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 1.0,
            "nx_enabled": true,
            "entry_point": 10556.0,
            "needed_libs": 6.0,
            "dynsym_count": 23.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 36.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 16.0,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 10.0,
            "section_header_count": 24.0,
            "load_segment_max_p_memsz": 19508.0,
            "load_segment_max_p_filesz": 19508.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 28944.0
          },
          "binary": {
            "code_size": 19508.0,
            "func_count": 31.0,
            "entry_point": 10556.0,
            "has_overlay": true,
            "code_entropy": 5.59,
            "data_entropy": 2.77,
            "export_count": 6.0,
            "func_density": 1.63,
            "import_count": 17.0,
            "overlay_size": 1543.0,
            "string_count": 62.0,
            "avg_func_size": 807.35,
            "overlay_ratio": 0.05,
            "section_count": 23.0,
            "avg_complexity": 11.48,
            "import_density": 0.89,
            "max_complexity": 55.0,
            "string_density": 3.25,
            "overall_entropy": 2.64,
            "overlay_entropy": 1.52,
            "avg_basic_blocks": 18.52,
            "avg_section_size": 1163.57,
            "dependency_count": 6.0,
            "entropy_variance": 1.89,
            "avg_string_length": 22.37,
            "complexity_per_kb": 0.6,
            "max_string_length": 157.0,
            "avg_string_entropy": 3.14,
            "code_to_data_ratio": 2.69,
            "text_to_file_ratio": 0.66,
            "total_basic_blocks": 574.0,
            "func_analysis_depth": 1.0,
            "string_length_stddev": 28.53,
            "high_complexity_funcs": 1.0,
            "largest_section_ratio": 0.66,
            "sentence_string_count": 5.0,
            "sentence_string_ratio": 0.08,
            "nonstandard_section_name_count": 3.0
          }
        },
        "ss": [
          [
            636,
            "Android"
          ],
          [
            648,
            "r23b"
          ],
          [
            712,
            "7779620"
          ],
          [
            1717,
            "__cxa_atexit"
          ],
          [
            1730,
            "__cxa_finalize"
          ],
          [
            1745,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeCopyBetweenByteBufferAndBitmap"
          ],
          [
            1828,
            "AndroidBitmap_lockPixels"
          ],
          [
            1853,
            "AndroidBitmap_unlockPixels"
          ],
          [
            1880,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeShiftPixel"
          ],
          [
            1943,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeWriteJpegToSurface"
          ],
          [
            2014,
            "ANativeWindow_fromSurface"
          ],
          [
            2040,
            "__android_log_print"
          ],
          [
            2060,
            "ANativeWindow_setBuffersGeometry"
          ],
          [
            2093,
            "ANativeWindow_lock"
          ],
          [
            2112,
            "ANativeWindow_release"
          ],
          [
            2134,
            "ANativeWindow_unlockAndPost"
          ],
          [
            2162,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeConvertAndroid420ToABGR"
          ],
          [
            2238,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeConvertAndroid420ToBitmap"
          ],
          [
            2316,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeRotateYUV"
          ],
          [
            2378,
            "malloc"
          ],
          [
            2385,
            "free"
          ],
          [
            2390,
            "__stack_chk_fail"
          ],
          [
            2407,
            "memcpy"
          ],
          [
            2414,
            "__memcpy_chk"
          ],
          [
            2427,
            "memmove"
          ],
          [
            2435,
            "libimage_processing_util_jni.so"
          ],
          [
            2467,
            "VERS_1.0"
          ],
          [
            2476,
            "libc.so"
          ],
          [
            2484,
            "LIBC"
          ],
          [
            2489,
            "liblog.so"
          ],
          [
            2499,
            "libandroid.so"
          ],
          [
            2513,
            "libjnigraphics.so"
          ],
          [
            2531,
            "libm.so"
          ],
          [
            2539,
            "libdl.so"
          ],
          [
            3968,
            "Failed to get ANativeWindow"
          ],
          [
            3996,
            "Failed to lock window."
          ],
          [
            4031,
            "Failed to get JPEG bytes array pointer."
          ],
          [
            24581,
            "h38s"
          ],
          [
            24944,
            "zj989"
          ],
          [
            26904,
            "Android (7714059, based on r416183c1) clang version 12.0.8 (https://android.googlesource.com/toolchain/llvm-project c935d99d7cf2"
          ],
          [
            27063,
            "Linker: LLD 12.0.8 (/buildbot/src/android/llvm-r416183/out/llvm-project/lld c935d99d7cf2016289302412d708641d52d2f7ee)"
          ],
          [
            27182,
            ".fini_array"
          ],
          [
            27194,
            ".text"
          ],
          [
            27200,
            ".got"
          ],
          [
            27205,
            ".comment"
          ],
          [
            27214,
            ".note.android.ident"
          ],
          [
            27234,
            ".got.plt"
          ],
          [
            27243,
            ".rela.plt"
          ],
          [
            27253,
            ".bss"
          ],
          [
            27258,
            ".dynstr"
          ],
          [
            27266,
            ".eh_frame_hdr"
          ],
          [
            27280,
            ".gnu.version_r"
          ],
          [
            27295,
            ".data.rel.ro"
          ],
          [
            27308,
            ".rela.dyn"
          ],
          [
            27318,
            ".gnu.version"
          ],
          [
            27331,
            ".dynsym"
          ],
          [
            27339,
            ".gnu.hash"
          ],
          [
            27349,
            ".eh_frame"
          ],
          [
            27359,
            ".gnu.version_d"
          ],
          [
            27374,
            ".dynamic"
          ],
          [
            27383,
            ".shstrtab"
          ],
          [
            27393,
            ".rodata"
          ]
        ],
        "sz": 28944,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libimage_processing_util_jni.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 23.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.14"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 31.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libimage_processing_util_jni.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 11.48"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 23.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libimage_processing_util_jni.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.64"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 31.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 6.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Tiny C string section ratio",
            "e": [
              " = 0.0% of total (0 / 28944 bytes)"
            ],
            "i": "metadata/binary/section/metrics::tiny-cstring-section",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "2ead62ff358ae3a9e9cb5b0278a1d5132a7b410288bc74add8f6356d668fdc39",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libimage_processing_util_jni.so",
        "type": "elf"
      },
      {
        "f": "KO₁₀(Al₆CoDy₄Er₇I₄AsC₃CaLa₂S)H₆(Cm₁₄Cr₅Ds₂FOs₂Db₂)Md₃(Bi₃HeBk)",
        "x": 19,
        "dp": 1,
        "id": 3,
        "is": [
          "",
          "cxa_finalize",
          "cxa_atexit",
          "stack_chk_fail",
          "memset",
          "nan",
          "strlen",
          "memcpy",
          "memmove",
          "malloc",
          "memchr",
          "memcmp",
          "abort",
          "vsnprintf",
          "write",
          "close",
          "open",
          "read",
          "strtol",
          "syscall",
          "pthread_getspecific",
          "pthread_key_create",
          "pthread_setspecific",
          "pthread_sigmask",
          "sigfillset",
          "errno",
          "dlopen",
          "dlsym",
          "free",
          "pthread_once",
          "memcpy_chk",
          "log10f",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "clock_gettime",
          "pthread_cond_broadcast",
          "pthread_cond_signal",
          "pthread_cond_timedwait",
          "pthread_cond_wait",
          "pthread_cond_destroy",
          "sF",
          "calloc",
          "fprintf",
          "realloc",
          "wmemcpy",
          "fflush",
          "fwrite",
          "getc",
          "ungetc",
          "ctype_get_mb_cur_max",
          "freelocale",
          "islower",
          "isupper",
          "iswlower",
          "isxdigit",
          "mbrlen",
          "mbrtowc",
          "mbsnrtowcs",
          "mbsrtowcs",
          "mbtowc",
          "newlocale",
          "snprintf",
          "sscanf",
          "strcmp",
          "strftime",
          "strtod",
          "strtof",
          "strtold_l",
          "strtoll_l",
          "strtoull_l",
          "tolower",
          "toupper",
          "uselocale",
          "vasprintf",
          "vsscanf",
          "wcrtomb",
          "wcslen",
          "wcsnrtombs",
          "pthread_mutex_trylock",
          "sched_yield",
          "pthread_equal",
          "pthread_mutex_destroy",
          "pthread_mutex_init",
          "pthread_mutexattr_destroy",
          "pthread_mutexattr_init",
          "pthread_mutexattr_settype",
          "pthread_self",
          "posix_memalign",
          "strtoll",
          "strtoul",
          "strtoull",
          "wmemmove",
          "wmemset",
          "strerror_r",
          "nanosleep",
          "pthread_join",
          "sysconf",
          "android_set_abort_message",
          "closelog",
          "fputc",
          "openlog",
          "syslog",
          "vfprintf",
          "vsnprintf_chk",
          "closedir",
          "opendir",
          "readdir",
          "rename",
          "stat",
          "unlink",
          "vsprintf_chk",
          "isspace",
          "time",
          "freeaddrinfo",
          "getaddrinfo",
          "inet_ntop",
          "inet_pton",
          "strncmp",
          "FD_CLR_chk",
          "FD_ISSET_chk",
          "FD_SET_chk",
          "read_chk",
          "accept",
          "bind",
          "connect",
          "epoll_create",
          "epoll_ctl",
          "epoll_wait",
          "fcntl",
          "getpeername",
          "getsockname",
          "getsockopt",
          "ioctl",
          "listen",
          "pipe",
          "poll",
          "recvfrom",
          "select",
          "sendto",
          "setsockopt",
          "socket",
          "strspn",
          "pthread_attr_init",
          "pthread_create",
          "if_indextoname",
          "strncpy",
          "prctl",
          "android_log_print",
          "fputs",
          "fclose",
          "fopen",
          "cos",
          "log",
          "gettid",
          "strerror",
          "strrchr",
          "gettimeofday",
          "pthread_attr_destroy",
          "pthread_attr_setstacksize",
          "pthread_setschedparam",
          "sched_get_priority_max",
          "sched_get_priority_min",
          "pthread_cond_init",
          "pthread_condattr_destroy",
          "pthread_condattr_init",
          "pthread_condattr_setclock",
          "dladdr",
          "getpid",
          "sigaction",
          "sigemptyset",
          "tgkill",
          "strchr_chk",
          "fread",
          "fseek",
          "exp",
          "powf",
          "bsearch",
          "qsort",
          "gmtime_r",
          "recv",
          "send",
          "strchr",
          "isdigit",
          "getauxval",
          "madvise",
          "mmap",
          "munmap",
          "perror",
          "OPENSSL_memory_alloc",
          "OPENSSL_memory_free",
          "OPENSSL_memory_get_size",
          "sdallocx",
          "pthread_rwlock_destroy",
          "pthread_rwlock_init",
          "pthread_rwlock_rdlock",
          "pthread_rwlock_unlock",
          "pthread_rwlock_wrlock",
          "getenv",
          "log10",
          "longjmp",
          "setjmp",
          "exit",
          "isalnum",
          "strnlen",
          "slCreateEngine",
          "SL_IID_ANDROIDCONFIGURATION",
          "SL_IID_BUFFERQUEUE",
          "SL_IID_ENGINE",
          "SL_IID_PLAY",
          "SL_IID_VOLUME",
          "SL_IID_ANDROIDSIMPLEBUFFERQUEUE",
          "SL_IID_RECORD",
          "cosf",
          "sincosf",
          "sin",
          "expf",
          "exp2f",
          "pow",
          "sincos",
          "tanhf",
          "android_log_write",
          "asin",
          "memset_chk",
          "sem_destroy",
          "sem_init",
          "sem_post",
          "sem_wait",
          "logf",
          "printf",
          "rand",
          "log2f",
          "sigaddset",
          "getegid",
          "geteuid",
          "getgid",
          "getuid",
          "socketpair",
          "random",
          "fdopen",
          "expm1",
          "srandom",
          "localtime_r",
          "isalpha",
          "dl_iterate_phdr",
          "pthread_key_delete"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libdl.so",
              "libm.so",
              "liblog.so",
              "libOpenSLES.so",
              "libc.so"
            ],
            "soname": "libjingle_peerconnection_so.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 2204352.0,
            "needed_libs": 5.0,
            "dynsym_count": 416.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 18819.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 233.0,
            "build_id_length": 8.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 2.0,
            "program_header_count": 9.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 6920688.0,
            "load_segment_max_p_filesz": 6920688.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 7135240.0
          },
          "binary": {
            "code_size": 4716324.0,
            "func_count": 19311.0,
            "entry_point": 2204352.0,
            "has_overlay": true,
            "code_entropy": 5.85,
            "data_entropy": 2.49,
            "export_count": 171.0,
            "func_density": 4.19,
            "import_count": 245.0,
            "overlay_size": 1729.0,
            "string_count": 10218.0,
            "avg_func_size": 7568.66,
            "overlay_ratio": 0.0,
            "section_count": 25.0,
            "avg_complexity": 4.68,
            "import_density": 0.05,
            "max_complexity": 422.0,
            "string_density": 2.22,
            "aliased_exports": 9.0,
            "overall_entropy": 3.01,
            "overlay_entropy": 1.75,
            "avg_basic_blocks": 8.03,
            "avg_section_size": 285309.19,
            "dependency_count": 5.0,
            "entropy_variance": 2.17,
            "avg_string_length": 32.65,
            "complexity_per_kb": 0.0,
            "max_string_length": 309.0,
            "wide_string_count": 26.0,
            "avg_string_entropy": 3.61,
            "code_to_data_ratio": 1.95,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.66,
            "total_basic_blocks": 155043.0,
            "func_analysis_depth": 1.0,
            "high_entropy_strings": 5.0,
            "provenance_id_length": 8.0,
            "string_length_stddev": 27.95,
            "high_complexity_funcs": 138.0,
            "largest_section_ratio": 0.66,
            "provenance_id_present": true,
            "sentence_string_count": 3118.0,
            "sentence_string_ratio": 0.31,
            "behavioral_import_ratio": 0.04,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            580,
            "Android"
          ],
          [
            656,
            "5594570"
          ],
          [
            16373,
            "__cxa_finalize"
          ],
          [
            16388,
            "__cxa_atexit"
          ],
          [
            16412,
            "__stack_chk_fail"
          ],
          [
            16429,
            "memset"
          ],
          [
            16440,
            "strlen"
          ],
          [
            16447,
            "memcpy"
          ],
          [
            16454,
            "memmove"
          ],
          [
            16462,
            "malloc"
          ],
          [
            16469,
            "memchr"
          ],
          [
            16476,
            "memcmp"
          ],
          [
            16483,
            "abort"
          ],
          [
            16489,
            "vsnprintf"
          ],
          [
            16499,
            "write"
          ],
          [
            16505,
            "close"
          ],
          [
            16511,
            "open"
          ],
          [
            16516,
            "read"
          ],
          [
            16521,
            "strtol"
          ],
          [
            16528,
            "syscall"
          ],
          [
            16536,
            "pthread_getspecific"
          ],
          [
            16556,
            "pthread_key_create"
          ],
          [
            16575,
            "pthread_setspecific"
          ],
          [
            16595,
            "pthread_sigmask"
          ],
          [
            16611,
            "sigfillset"
          ],
          [
            16622,
            "__errno"
          ],
          [
            16630,
            "dlopen"
          ],
          [
            16643,
            "free"
          ],
          [
            16648,
            "pthread_once"
          ],
          [
            16661,
            "__memcpy_chk"
          ],
          [
            16674,
            "log10f"
          ],
          [
            16681,
            "pthread_mutex_lock"
          ],
          [
            16700,
            "pthread_mutex_unlock"
          ],
          [
            16721,
            "clock_gettime"
          ],
          [
            16735,
            "pthread_cond_broadcast"
          ],
          [
            16758,
            "pthread_cond_signal"
          ],
          [
            16778,
            "pthread_cond_timedwait"
          ],
          [
            16801,
            "pthread_cond_wait"
          ],
          [
            16819,
            "pthread_cond_destroy"
          ],
          [
            16845,
            "calloc"
          ],
          [
            16852,
            "fprintf"
          ],
          [
            16860,
            "realloc"
          ],
          [
            16868,
            "wmemcpy"
          ],
          [
            16876,
            "fflush"
          ],
          [
            16883,
            "fwrite"
          ],
          [
            16895,
            "ungetc"
          ],
          [
            16902,
            "__ctype_get_mb_cur_max"
          ],
          [
            16925,
            "freelocale"
          ],
          [
            16936,
            "islower"
          ],
          [
            16944,
            "isupper"
          ],
          [
            16952,
            "iswlower"
          ],
          [
            16961,
            "isxdigit"
          ],
          [
            16970,
            "mbrlen"
          ],
          [
            16977,
            "mbrtowc"
          ],
          [
            16985,
            "mbsnrtowcs"
          ],
          [
            16996,
            "mbsrtowcs"
          ],
          [
            17006,
            "mbtowc"
          ],
          [
            17013,
            "newlocale"
          ],
          [
            17023,
            "snprintf"
          ],
          [
            17032,
            "sscanf"
          ],
          [
            17046,
            "strftime"
          ],
          [
            17055,
            "strtod"
          ],
          [
            17062,
            "strtof"
          ],
          [
            17069,
            "strtold_l"
          ],
          [
            17079,
            "strtoll_l"
          ],
          [
            17089,
            "strtoull_l"
          ],
          [
            17100,
            "tolower"
          ],
          [
            17108,
            "toupper"
          ],
          [
            17116,
            "uselocale"
          ],
          [
            17126,
            "vasprintf"
          ],
          [
            17136,
            "vsscanf"
          ],
          [
            17144,
            "wcrtomb"
          ],
          [
            17152,
            "wcslen"
          ],
          [
            17159,
            "wcsnrtombs"
          ],
          [
            17170,
            "pthread_mutex_trylock"
          ],
          [
            17192,
            "sched_yield"
          ],
          [
            17204,
            "pthread_equal"
          ],
          [
            17218,
            "pthread_mutex_destroy"
          ],
          [
            17240,
            "pthread_mutex_init"
          ],
          [
            17259,
            "pthread_mutexattr_destroy"
          ],
          [
            17285,
            "pthread_mutexattr_init"
          ],
          [
            17308,
            "pthread_mutexattr_settype"
          ],
          [
            17334,
            "pthread_self"
          ],
          [
            17347,
            "posix_memalign"
          ],
          [
            17362,
            "strtoll"
          ],
          [
            17370,
            "strtoul"
          ],
          [
            17378,
            "strtoull"
          ],
          [
            17387,
            "wmemmove"
          ],
          [
            17396,
            "wmemset"
          ],
          [
            17404,
            "strerror_r"
          ],
          [
            17415,
            "nanosleep"
          ],
          [
            17425,
            "pthread_join"
          ],
          [
            17438,
            "sysconf"
          ],
          [
            17446,
            "android_set_abort_message"
          ],
          [
            17472,
            "closelog"
          ],
          [
            17487,
            "openlog"
          ],
          [
            17495,
            "syslog"
          ],
          [
            17502,
            "vfprintf"
          ],
          [
            17511,
            "Java_org_webrtc_Metrics_nativeEnable"
          ],
          [
            17548,
            "Java_org_webrtc_Metrics_nativeGetAndReset"
          ],
          [
            17590,
            "__vsnprintf_chk"
          ],
          [
            17606,
            "closedir"
          ],
          [
            17615,
            "opendir"
          ],
          [
            17623,
            "readdir"
          ],
          [
            17631,
            "rename"
          ],
          [
            17643,
            "unlink"
          ],
          [
            17650,
            "__vsprintf_chk"
          ],
          [
            17665,
            "isspace"
          ],
          [
            17673,
            "time"
          ],
          [
            17678,
            "freeaddrinfo"
          ],
          [
            17691,
            "getaddrinfo"
          ],
          [
            17703,
            "inet_ntop"
          ],
          [
            17713,
            "inet_pton"
          ],
          [
            17723,
            "strncmp"
          ],
          [
            17731,
            "__FD_CLR_chk"
          ],
          [
            17744,
            "__FD_ISSET_chk"
          ],
          [
            17759,
            "__FD_SET_chk"
          ],
          [
            17772,
            "__read_chk"
          ],
          [
            17783,
            "accept"
          ],
          [
            17795,
            "connect"
          ],
          [
            17803,
            "epoll_create"
          ],
          [
            17816,
            "epoll_ctl"
          ],
          [
            17826,
            "epoll_wait"
          ],
          [
            17843,
            "getpeername"
          ],
          [
            17855,
            "getsockname"
          ],
          [
            17867,
            "getsockopt"
          ],
          [
            17878,
            "ioctl"
          ],
          [
            17884,
            "listen"
          ],
          [
            17891,
            "pipe"
          ],
          [
            17901,
            "recvfrom"
          ],
          [
            17910,
            "select"
          ],
          [
            17917,
            "sendto"
          ],
          [
            17924,
            "setsockopt"
          ],
          [
            17935,
            "socket"
          ],
          [
            17949,
            "pthread_attr_init"
          ],
          [
            17967,
            "pthread_create"
          ],
          [
            17982,
            "if_indextoname"
          ],
          [
            17997,
            "strncpy"
          ],
          [
            18005,
            "Java_org_webrtc_Histogram_nativeAddSample"
          ],
          [
            18047,
            "Java_org_webrtc_Histogram_nativeCreateCounts"
          ],
          [
            18092,
            "Java_org_webrtc_Histogram_nativeCreateEnumeration"
          ],
          [
            18142,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyConnectionTypeChanged"
          ],
          [
            18207,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfActiveNetworkList"
          ],
          [
            18270,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfNetworkConnect"
          ],
          [
            18330,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfNetworkDisconnect"
          ],
          [
            18393,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfNetworkPreference"
          ],
          [
            18456,
            "Java_org_webrtc_JniCommon_nativeAddRef"
          ],
          [
            18495,
            "Java_org_webrtc_JniCommon_nativeAllocateByteBuffer"
          ],
          [
            18546,
            "Java_org_webrtc_JniCommon_nativeFreeByteBuffer"
          ],
          [
            18593,
            "Java_org_webrtc_JniCommon_nativeReleaseRef"
          ],
          [
            18636,
            "Java_org_webrtc_Logging_nativeEnableLogThreads"
          ],
          [
            18683,
            "Java_org_webrtc_Logging_nativeEnableLogTimeStamps"
          ],
          [
            18733,
            "Java_org_webrtc_Logging_nativeEnableLogToDebugOutput"
          ],
          [
            18786,
            "Java_org_webrtc_Logging_nativeLog"
          ],
          [
            18826,
            "__android_log_print"
          ],
          [
            18852,
            "fclose"
          ],
          [
            18859,
            "fopen"
          ],
          [
            18873,
            "gettid"
          ],
          [
            18880,
            "strerror"
          ],
          [
            18889,
            "strrchr"
          ],
          [
            18897,
            "gettimeofday"
          ],
          [
            18910,
            "pthread_attr_destroy"
          ],
          [
            18931,
            "pthread_attr_setstacksize"
          ],
          [
            18957,
            "pthread_setschedparam"
          ],
          [
            18979,
            "sched_get_priority_max"
          ],
          [
            19002,
            "sched_get_priority_min"
          ],
          [
            19025,
            "pthread_cond_init"
          ],
          [
            19043,
            "pthread_condattr_destroy"
          ],
          [
            19068,
            "pthread_condattr_init"
          ],
          [
            19090,
            "pthread_condattr_setclock"
          ],
          [
            19116,
            "dladdr"
          ],
          [
            19123,
            "getpid"
          ],
          [
            19130,
            "sigaction"
          ],
          [
            19140,
            "sigemptyset"
          ],
          [
            19152,
            "tgkill"
          ],
          [
            19159,
            "__strchr_chk"
          ],
          [
            19172,
            "fread"
          ],
          [
            19178,
            "fseek"
          ],
          [
            19193,
            "bsearch"
          ],
          [
            19207,
            "gmtime_r"
          ],
          [
            19233,
            "isdigit"
          ],
          [
            19241,
            "getauxval"
          ],
          [
            19251,
            "madvise"
          ],
          [
            19264,
            "munmap"
          ],
          [
            19271,
            "perror"
          ],
          [
            19278,
            "OPENSSL_memory_alloc"
          ],
          [
            19299,
            "OPENSSL_memory_free"
          ],
          [
            19319,
            "OPENSSL_memory_get_size"
          ],
          [
            19343,
            "sdallocx"
          ],
          [
            19352,
            "pthread_rwlock_destroy"
          ],
          [
            19375,
            "pthread_rwlock_init"
          ],
          [
            19395,
            "pthread_rwlock_rdlock"
          ],
          [
            19417,
            "pthread_rwlock_unlock"
          ],
          [
            19439,
            "pthread_rwlock_wrlock"
          ],
          [
            19461,
            "getenv"
          ],
          [
            19468,
            "log10"
          ],
          [
            19474,
            "longjmp"
          ],
          [
            19482,
            "setjmp"
          ],
          [
            19489,
            "exit"
          ],
          [
            19494,
            "isalnum"
          ],
          [
            19502,
            "strnlen"
          ],
          [
            19510,
            "slCreateEngine"
          ],
          [
            19525,
            "SL_IID_ANDROIDCONFIGURATION"
          ],
          [
            19553,
            "SL_IID_BUFFERQUEUE"
          ],
          [
            19572,
            "SL_IID_ENGINE"
          ],
          [
            19586,
            "SL_IID_PLAY"
          ],
          [
            19598,
            "SL_IID_VOLUME"
          ],
          [
            19612,
            "SL_IID_ANDROIDSIMPLEBUFFERQUEUE"
          ],
          [
            19644,
            "SL_IID_RECORD"
          ],
          [
            19663,
            "sincosf"
          ],
          [
            19680,
            "exp2f"
          ],
          [
            19690,
            "sincos"
          ],
          [
            19703,
            "__android_log_write"
          ],
          [
            19723,
            "Java_org_webrtc_BuiltinAudioDecoderFactoryFactory_nativeCreateBuiltinAudioDecoderFactory"
          ],
          [
            19812,
            "Java_org_webrtc_BuiltinAudioEncoderFactoryFactory_nativeCreateBuiltinAudioEncoderFactory"
          ],
          [
            19901,
            "asin"
          ],
          [
            19906,
            "__memset_chk"
          ],
          [
            19919,
            "Java_org_webrtc_LibvpxVp8Decoder_nativeCreateDecoder"
          ],
          [
            19972,
            "Java_org_webrtc_LibvpxVp8Encoder_nativeCreateEncoder"
          ],
          [
            20025,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeAdaptFrame"
          ],
          [
            20088,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeAdaptOutputFormat"
          ],
          [
            20158,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeOnFrameCaptured"
          ],
          [
            20226,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeSetIsScreencast"
          ],
          [
            20294,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeSetState"
          ],
          [
            20355,
            "Java_org_webrtc_H264Utils_nativeIsSameH264Profile"
          ],
          [
            20405,
            "Java_org_webrtc_JavaI420Buffer_nativeCropAndScaleI420"
          ],
          [
            20459,
            "Java_org_webrtc_NV12Buffer_nativeCropAndScale"
          ],
          [
            20505,
            "Java_org_webrtc_NV21Buffer_nativeCropAndScale"
          ],
          [
            20551,
            "Java_org_webrtc_TimestampAligner_nativeCreateTimestampAligner"
          ],
          [
            20613,
            "Java_org_webrtc_TimestampAligner_nativeReleaseTimestampAligner"
          ],
          [
            20676,
            "Java_org_webrtc_TimestampAligner_nativeRtcTimeNanos"
          ],
          [
            20728,
            "Java_org_webrtc_TimestampAligner_nativeTranslateTimestamp"
          ],
          [
            20786,
            "Java_org_webrtc_VideoDecoderFallback_nativeCreateDecoder"
          ],
          [
            20843,
            "Java_org_webrtc_VideoDecoderWrapper_nativeOnDecodedFrame"
          ],
          [
            20900,
            "Java_org_webrtc_VideoEncoderFallback_nativeCreateEncoder"
          ],
          [
            20957,
            "Java_org_webrtc_VideoEncoderWrapper_nativeOnEncodedFrame"
          ],
          [
            21014,
            "Java_org_webrtc_VideoTrack_nativeAddSink"
          ],
          [
            21055,
            "Java_org_webrtc_VideoTrack_nativeFreeSink"
          ],
          [
            21097,
            "Java_org_webrtc_VideoTrack_nativeRemoveSink"
          ],
          [
            21141,
            "Java_org_webrtc_VideoTrack_nativeWrapSink"
          ],
          [
            21183,
            "Java_org_webrtc_YuvHelper_nativeABGRToI420"
          ],
          [
            21226,
            "Java_org_webrtc_YuvHelper_nativeCopyPlane"
          ],
          [
            21268,
            "Java_org_webrtc_YuvHelper_nativeI420Copy"
          ],
          [
            21309,
            "Java_org_webrtc_YuvHelper_nativeI420Rotate"
          ],
          [
            21352,
            "Java_org_webrtc_YuvHelper_nativeI420ToNV12"
          ],
          [
            21395,
            "sem_destroy"
          ],
          [
            21407,
            "sem_init"
          ],
          [
            21416,
            "sem_post"
          ],
          [
            21425,
            "sem_wait"
          ],
          [
            21439,
            "printf"
          ],
          [
            21451,
            "Java_org_webrtc_LibvpxVp9Decoder_nativeCreateDecoder"
          ],
          [
            21504,
            "Java_org_webrtc_LibvpxVp9Decoder_nativeIsSupported"
          ],
          [
            21555,
            "Java_org_webrtc_LibvpxVp9Encoder_nativeCreateEncoder"
          ],
          [
            21608,
            "Java_org_webrtc_LibvpxVp9Encoder_nativeIsSupported"
          ],
          [
            21659,
            "log2f"
          ],
          [
            21665,
            "Java_org_webrtc_audio_JavaAudioDeviceModule_nativeCreateAudioDeviceModule"
          ]
        ],
        "sz": 7135240,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _recv socket call",
            "e": [
              "recv"
            ],
            "i": "micro-behaviors/communications/socket/receive::_recv-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code IN token",
            "e": [
              "IN_",
              "_IN_"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-in",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Microsoft Smartcardlogin"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-4",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.30000001192092896,
            "d": "token keyword",
            "e": [
              "Token",
              "token"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::token",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 2000+ strings",
            "e": [
              "binary.string_count = 10218.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-strings-2000",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _send socket call",
            "e": [
              "send"
            ],
            "i": "micro-behaviors/communications/socket/send::_send-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "trailerField"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-2",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.30000001192092896,
            "d": "libcrypto library reference",
            "e": [
              "common libcrypto routines"
            ],
            "i": "micro-behaviors/dylib/library/ssl::libcrypto-ref",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "Bind socket to address",
            "e": [
              "bind"
            ],
            "i": "micro-behaviors/communications/socket/bind/function::bind",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "x509 string reference",
            "e": [
              "X509",
              "x509"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::x509-string",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.01"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1486",
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "Creating UnencryptedRtpTransport, becayse encryption is disabled.",
              "id-cmc-encryptedPOP",
              "smimeencrypt",
              "No FrameEncryptor is attached to this video sending stream but one is required since require_frame_encryptor is set",
              "S/MIME encryption",
              "Retrying stashed encrypted frames. Count:",
              "?urn:ietf:params:rtp-hdrext:encrypt",
              "pkcs7-encryptedData",
              "%s: testing encryption",
              "encrypted track 2",
              "No stream found to attach frame encryptor",
              "Recursive encrypted header."
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::rust-ransomware-module-set--rx-4",
            "l": 1,
            "m": "B0040"
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.75,
            "d": "PLC device keyword reference",
            "e": [
              "PLC"
            ],
            "i": "objectives/discovery/network/scan/ics::plc-keyword",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "assume_shared_link",
              "NO_SHARED_CIPHER",
              "shared key",
              "NSt3__114__shared_countE",
              "NO_SHARED_GROUP",
              "SharedModThread",
              "PRE_SHARED_KEY_MUST_BE_LAST",
              ": Ignoring STUN binding response message on shared socket."
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "eam, but not yet config",
              "ease/src/modules/video_coding/codecs/vp9/svc_config",
              "eam::OnEncoderConfig",
              "eam_StreamConfig",
              "eamConfig",
              "ear AEC output without properly config",
              "eAimdRateControlConfig",
              "eaderExtensionConfig",
              "eate encoder config"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.31"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "d": "Get group ID",
            "e": [
              "getgid"
            ],
            "i": "micro-behaviors/os/privilege/query::getgid",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "c": 0.6600000262260437,
            "d": "Parse IP with inet_ntop",
            "e": [
              "inet_ntop"
            ],
            "i": "micro-behaviors/communications/ip/parse::inet-ntop-symbol",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "SSL function as hook target",
            "e": [
              "SSL_read",
              "SSL_write"
            ],
            "i": "objectives/collection/network/ssl-intercept::ssl-hook-target",
            "l": 3
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Resolve endpoint with getaddrinfo",
            "e": [
              "getaddrinfo"
            ],
            "i": "micro-behaviors/communications/ip/resolve::resolve-getaddrinfo",
            "l": 3
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseek",
              "sym.imp.fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is 500KB+",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/metrics/threshold::large-binary-500k",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "OpenSSL function names",
            "e": [
              "SSL_read",
              "SSL_write"
            ],
            "i": "objectives/collection/network/ssl-intercept::ssl-openssl-fn-a",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "d": "Characteristic system library export exp2f",
            "e": [
              "exp2f"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-exp2f",
            "l": 2
          },
          {
            "c": 0.9399999976158142,
            "d": "AES-256-CTR cipher marker",
            "e": [
              "aes-256-ctr",
              "AES-256-CTR"
            ],
            "i": "micro-behaviors/crypto/symmetric/aes/ctr::aes-256-ctr-term",
            "l": 3,
            "m": "C0021.001"
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "PEM end marker",
            "e": [
              "-----END"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::pem-end",
            "l": 2
          },
          {
            "a": "T1498",
            "c": 0.699999988079071,
            "d": "Telemetry counters for attack progress",
            "e": [
              "bytes_sent"
            ],
            "i": "objectives/impact/dos/attack::attack-telemetry-a2",
            "l": 1,
            "m": "B0009"
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "%s: ciphertext:    %s",
              "%s: ciphertext:   %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-1",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1573",
            "c": 0.8799999952316284,
            "d": "X25519 key exchange marker",
            "e": [
              "x25519",
              "X25519"
            ],
            "i": "micro-behaviors/crypto/asymmetric/curve25519::x25519-key-exchange-term",
            "l": 3,
            "m": "C0027"
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_wait function",
            "e": [
              "epoll_wait"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-wait",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.61"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Parse IP with inet_pton",
            "e": [
              "inet_pton"
            ],
            "i": "micro-behaviors/communications/ip/parse::inet-pton-symbol",
            "l": 3
          },
          {
            "a": "T1486",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "RSA_PSS_PARAMS"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::encrypted-trailer-layout-cond-0--inline-9319",
            "l": 1,
            "m": "B0040"
          },
          {
            "d": "Get user ID",
            "e": [
              "getuid"
            ],
            "i": "micro-behaviors/os/privilege/query::getuid",
            "l": 2
          },
          {
            "a": "T1071.001",
            "c": 0.75,
            "d": "Proxy-Connection keep-alive header",
            "e": [
              "Proxy-Connection: Keep-Alive"
            ],
            "i": "micro-behaviors/communications/http/request/client::proxy-connection-keepalive",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "GHC runtime string",
            "e": [
              "rts_native_handle",
              "rts_simulcast"
            ],
            "i": "metadata/lang/compiler/systems::ghc-runtime-string",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "PRE_SHARED_KEY_MUST_BE_LAST",
              "SharedModThread",
              "NSt3__114__shared_countE",
              "NO_SHARED_GROUP",
              ": Ignoring STUN binding response message on shared socket.",
              "assume_shared_link",
              "shared key",
              "NO_SHARED_CIPHER"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sysconf",
              "sym.imp.sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "d": "Options: label in binary strings",
            "e": [
              "CreateMediaChannel. Options:",
              "WebRtcVoiceEngine::ApplyOptions:"
            ],
            "i": "metadata/package/help::options-title-string",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code MD token",
            "e": [
              "_MD"
            ],
            "i": "objectives/anti-analysis/geofencing/region/country-code-b::country-code-md",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses recvfrom socket call",
            "e": [
              "recvfrom"
            ],
            "i": "micro-behaviors/communications/socket/receive::recvfrom-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/safe_conversions.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/rtp_transceiver.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/checks.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/used_ids.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/sdk/android/native_api/jni/java_types.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_track_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_factory_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/jitter_buffer_delay_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/video_track_source_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "homePostalAddress",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/unique_id_generator.h",
              "homeTelephoneNumber",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/moving_median_filter.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_proxy.h"
            ],
            "i": "objectives/evasion/masquerade/process/path::systemd-masquerade-reference--rx-9",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/experiments/cpu_speed_experiment.cc",
              "Unsupported cpu speed setting, value ignored.",
              "WebRTC-VP8-CpuSpeed-Arm"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-77",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 4.68"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (substr, catches imports)",
            "e": [
              "cryptopro",
              "…rtc-aar-release/src/api/crypto/crypto_options.cc",
              "No crypto keys are provided for SDES.",
              "SetFrameEncryptor",
              "…ird_party/boringssl/src/crypto/fipsmodule/ec/ec_montgo…",
              "…ird_party/boringssl/src/crypto/x509/a_strex.c",
              "common libcrypto routines",
              "generic cryptogram",
              "crypto",
              "…ird_party/boringssl/src/crypto/x509/x_pubkey.c",
              "…ird_party/boringssl/src/crypto/fipsmodule/bn/montgomer…",
              "Could not get lengths for crypto suite(s): recv cipher_suite",
              "…ird_party/boringssl/src/crypto/fipsmodule/bn/div.c",
              "…ird_party/boringssl/src/crypto/asn1/tasn_new.c",
              "Failed to set the crypto key params",
              "…ird_party/boringssl/src/crypto/x509v3/v3_skey.c"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-substr",
            "l": 1
          },
          {
            "a": "T1071.001",
            "d": "User-Agent header",
            "e": [
              "User-Agent:"
            ],
            "i": "micro-behaviors/communications/http/request/client::user-agent-header",
            "l": 2,
            "m": "C0002"
          },
          {
            "d": "select() I/O multiplexing",
            "e": [
              "select"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::select-multiplex",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Access /dev/urandom",
            "e": [
              "failed to open /dev/urandom"
            ],
            "i": "micro-behaviors/os/random/crypto::urandom",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "X509_ function prefix",
            "e": [
              "X509_VERIFICATION_SETUP_PROBLEMS",
              "X509_REVOKED",
              "X509_ATTRIBUTE",
              "X509_ALGOR",
              "X509_LIB",
              "NO X509_NAME",
              "X509_NAME_ENTRY",
              "X509_CRL",
              "X509_EXTENSION",
              "X509_CRL_INFO",
              "X509_NAME_INTERNAL",
              "X509_VAL",
              "X509_PUBKEY",
              "X509_SIG",
              "X509_CERT_AUX",
              "X509_NAME_ENTRIES"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::x509-prefix",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "getrandom syscall",
            "e": [
              "getrandom",
              "%s: getrandom indicates that the entr…"
            ],
            "i": "micro-behaviors/os/random/crypto::getrandom",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "Format time as string",
            "e": [
              "strftime"
            ],
            "i": "micro-behaviors/time/query::strftime",
            "l": 2
          },
          {
            "d": "certificate string reference",
            "e": [
              "Certificate",
              "certificate"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::certificate-ref",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 155043.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "PEM begin marker",
            "e": [
              "-----BEGIN"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::pem-begin",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.7400000095367432,
            "d": "cBPF load ICMP identifier field",
            "e": [
              "28 00 00 00 26 00 00 00"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::cbpf-load-icmp-id-ethernet",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 10218.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 5000+ functions",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-5000",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create",
              "sym.imp.pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for nanosecond duration",
            "e": [
              "nanosleep"
            ],
            "i": "micro-behaviors/time/query::nanosleep-func",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "secretary",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "secretBag",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "extended master secret",
              "master secret",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "SERVER_TRAFFIC_SECRET_0",
              "CLIENT_TRAFFIC_SECRET_0",
              "EXPORTER_SECRET"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (word match)",
            "e": [
              "crypto"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-word",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Go base64 encoding",
            "e": [
              ".Encode"
            ],
            "i": "micro-behaviors/data/encode/base64::go-base64-encode",
            "l": 2
          },
          {
            "d": "Get effective user ID",
            "e": [
              "geteuid"
            ],
            "i": "micro-behaviors/os/privilege/query::geteuid",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "a": "T1565.001",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "stunKeepaliveResponsesReceived",
              "Call::DeliverRtp",
              "getStunCandidateKeepaliveInterval",
              "Delivered MID=%8.8x, got TSN=%8.8x, SID=%4.4x, MID=%8.8x",
              "stunKeepaliveRttTotal",
              "physicalDeliveryOfficeName",
              "Proxy-Connection: Keep-Alive",
              "Delivered SSN=%4.4x, got TSN=%8.8x, SID=%4.4x, SSN=%4.4x",
              "stunKeepaliveRequestsSent",
              "AudioDeviceBuffer::DeliverRecordedData failed",
              "stunKeepaliveRttSquaredTotal",
              "id-smime-cti-ets-proofOfDelivery",
              "onStatsDelivered",
              "preferredDeliveryMethod",
              "Failed to deliver RTP packet on re-delivery.",
              "Call::DeliverRtcp"
            ],
            "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-5",
            "l": 1,
            "m": "F0004"
          },
          {
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "homeTelephoneNumber",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_factory_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/checks.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_track_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/unique_id_generator.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/used_ids.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/video_track_source_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/sdk/android/native_api/jni/java_types.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/moving_median_filter.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/rtp_transceiver.h",
              "homePostalAddress",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/jitter_buffer_delay_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/safe_conversions.h"
            ],
            "i": "objectives/evasion/masquerade/process/path::systemd-masquerade-path--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "File larger than 1MB",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/metrics/size::large-file-1mb",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "a": "T1016",
            "c": 0.4000000059604645,
            "d": "ipAddress field (camelCase)",
            "e": [
              "ipAddress"
            ],
            "i": "objectives/discovery/host/geo::ip-address-camel",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses sendto socket call",
            "e": [
              "sendto"
            ],
            "i": "micro-behaviors/communications/socket/send::sendto-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "CLIENT_TRAFFIC_SECRET_0",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "EXPORTER_SECRET",
              "SERVER_TRAFFIC_SECRET_0",
              "extended master secret",
              "master secret",
              "secretBag",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "secretary"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "a": "T1110.001",
            "c": 0.8999999761581421,
            "d": "Weak password master",
            "e": [
              "master"
            ],
            "i": "objectives/lateral-movement/brute-force/password::weak-pass-master",
            "l": 1,
            "m": "E1110"
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Window duration must be between 100 and 2000 ms",
              "id-mod-cmp2000",
              "WebRTC.BWE.RampUpTimeTo2000kbpsInMs",
              "assertion failed: st-\u003eDecControl.internalSampleRate == 0 || st-\u003eDecControl.internalSampleRate == 16000 || st-\u003eDecControl.interna"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-10",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Go crypto/cipher import",
            "e": [
              "…ird_party/boringssl/src/crypto/cipher_extra/e_chacha20poly130…",
              "…ird_party/boringssl/src/crypto/cipher_extra/e_tls.c"
            ],
            "i": "objectives/impact/ransom/encrypt/threat-text::go-crypto-cipher",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Go crypto/rsa import",
            "e": [
              "…ird_party/boringssl/src/crypto/rsa_extra/rsa_asn1.c"
            ],
            "i": "objectives/impact/ransom/encrypt/threat-text::go-crypto-rsa",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Trying to access encoder in uninitialized fallback wrapper.",
              "id-aca-accessIdentity",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/third_party/abseil-cpp/absl/types/bad_optional_access.cc",
              "Bad variant access",
              "Failed to access the global OpenSL engine",
              "Unable to access microphone.",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/third_party/abseil-cpp/absl/types/bad_variant_access.cc",
              "Unable to access speaker.",
              "Bad optional access"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "getauxval function reference",
            "e": [
              "getauxval",
              "sym.imp.getauxval"
            ],
            "i": "metadata/binary/linking/runtime::getauxval-ref",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Looks up name with if_indextoname",
            "e": [
              "if_indextoname"
            ],
            "i": "micro-behaviors/communications/socket/interface::if-indextoname-symbol",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "listen function symbol",
            "e": [
              "listen"
            ],
            "i": "micro-behaviors/communications/socket/listen::listen-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.30000001192092896,
            "d": "secret keyword",
            "e": [
              "EXPORTER_SECRET",
              "CLIENT_TRAFFIC_SECRET_0",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "SERVER_TRAFFIC_SECRET_0",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "master secret",
              "secretBag",
              "extended master secret",
              "secretary"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::secret",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr"
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 0.7200000286102295,
            "d": "cBPF load ICMP sequence field",
            "e": [
              "28 00 00 00 28 00 00 00"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::cbpf-load-icmp-seq-ethernet",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "References packetsSent counter (Go DDoS",
            "e": [
              "packetsSent"
            ],
            "i": "objectives/impact/dos/attack::packets-sent",
            "l": 1
          },
          {
            "a": "T1059.004",
            "c": 0.800000011920929,
            "d": "Terminal type screen identifier",
            "e": [
              "screen"
            ],
            "i": "objectives/command-and-control/reverse-shell/pty::terminal-type-screen",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "d": "poll() I/O multiplexing",
            "e": [
              "poll"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::poll-multiplex",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "payload keyword",
            "e": [
              "payload"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::payload",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "a": "T1565.001",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "PhysicalSocketServer asked to remove a unknown dispatcher, potentially from a duplicate call to Add.",
              "ms to dispatch. Posted from:",
              "Thread::Dispatch"
            ],
            "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-4",
            "l": 1,
            "m": "F0004"
          },
          {
            "a": "T1046",
            "c": 0.75,
            "d": "Probing keyword (explicit scanning intent)",
            "e": [
              "probing",
              "Probing"
            ],
            "i": "objectives/discovery/network/scan/port::probing-keyword",
            "l": 1,
            "m": "E1046"
          },
          {
            "d": "Get effective group ID",
            "e": [
              "getegid"
            ],
            "i": "micro-behaviors/os/privilege/query::getegid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "OnNetworkDisconnected",
              "[ connected:",
              "TurnPort connected to",
              ": Received TURN message while the TURN port is disconnected",
              "VideoReceiveStream not connected to a VideoSink.",
              "Ping interval of backup candidate pairs is shorter than that of general candidate pairs when ICE is strongly connected",
              "hanging to ICE connected state because all transports are writable.",
              "DtlsTransport in connected state has incomplete TLS information",
              "Ping interval of candidate pairs is shorter when ICE is strongly connected than that when ICE is weakly connected",
              ": Change connected_ to",
              "Network disconnected for handle",
              "Network connected:",
              "Ping interval of stable and writable candidate pairs is shorter than that of general candidate pairs when ICE is strongly connec"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-13",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "output keyword",
            "e": [
              "(*engine_)-\u003eCreateOutputMix(engine_, output_mix_.Receive(), 0, nullptr, nullptr)",
              ", low_latency_output:",
              "output_parameters-\u003eis_valid()",
              "output: name =",
              "Failed to write RTC event to output.",
              "…usrsctplib/netinet/sctp_output.c",
              "output: guid =",
              ", output_channels:",
              "frame-\u003esamples_per_channel() * output_channels_ \u003c= frame-\u003emax_16bit_samples()",
              "output_",
              "Unable to rewind ivf output file.",
              "%s: output: %s",
              "output_layout != CHANNEL_LAYOUT_STEREO_DOWNMIX",
              "…e/src/api/rtc_event_log_output_file.cc",
              "Trying to retrieve the linear AEC output without properly configuring AEC3.",
              "No linear AEC output available"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::output",
            "l": 1
          },
          {
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "assume_shared_link",
              "NSt3__114__shared_countE",
              ": Ignoring STUN binding response message on shared socket.",
              "shared key"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::runtime-shared-object-compile--rx-1",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "ADB OPEN packet marker",
            "e": [
              "OPEN"
            ],
            "i": "micro-behaviors/communications/socket/tcp::open-token",
            "l": 1,
            "m": "C0001"
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Makefile all target",
            "e": [
              "Call::CreateFlexfecReceiveStream",
              "Call::DestroyVideoReceiveStream",
              "Call::DestroyVideoSendStream",
              "Call::CreateAudioReceiveStream",
              "Call::DestroyFlexfecReceiveStream",
              "Call::CreateVideoSendStream",
              "Call::DeliverRtcp",
              "Call::DestroyAudioReceiveStream",
              "Call::CreateAudioSendStream",
              "Call::DeliverRtp",
              "Call::CreateVideoReceiveStream",
              "Call::DestroyAudioSendStream"
            ],
            "i": "metadata/build/make::all-target-assignment",
            "l": 1
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "HTTP REQUEST method",
            "e": [
              "REQUEST"
            ],
            "i": "micro-behaviors/communications/http/request/client::request",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Get socket options",
            "e": [
              "sym.imp.getsockopt",
              "getsockopt"
            ],
            "i": "micro-behaviors/communications/socket/options::options-get",
            "l": 3
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "set-policy-root",
              "set-rootKeyThumb",
              ".http://www2.public-trust.com/crl/ct/ctroot.crl0",
              "SSL_CTX creation failed: Failed to load any trusted ssl root certificates.",
              "%http://crl.globalsign.net/root-r2.crl0"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "a": "T1070.004",
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              " ping,",
              "Ping ",
              "_ping_",
              " PING ",
              " ping=",
              "_ping",
              " ping "
            ],
            "i": "objectives/evasion/self-delete/file/delay::ping-self-delete--rx-2",
            "l": 1
          },
          {
            "d": "Options: label",
            "e": [
              "CreateMediaChannel. Options:",
              "WebRtcVoiceEngine::ApplyOptions:"
            ],
            "i": "metadata/package/help::options-title",
            "l": 2
          },
          {
            "c": 0.7799999713897705,
            "d": "Regex component marker",
            "e": [
              "FlushRtcp",
              "list of support"
            ],
            "i": "objectives/evasion/kernel-hide/ebpf::bpf-rootkit-controller-actions--rx-9",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write",
              "fwrite"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.800000011920929,
            "d": "API route for crypt operation",
            "e": [
              "…e/webrtc-aar-release/src/api/crypto/crypto_options.cc"
            ],
            "i": "objectives/impact/ransom/tactics::api-route-crypt",
            "l": 3
          },
          {
            "c": 0.4000000059604645,
            "d": "cipher keyword",
            "e": [
              "Cipher",
              "cipher"
            ],
            "i": "micro-behaviors/crypto/library/keyword::cipher-keyword",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "%s: ciphertext:   %s",
              "%s: ciphertext:    %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-1",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Set socket options",
            "e": [
              "setsockopt"
            ],
            "i": "micro-behaviors/communications/socket/options::options-set",
            "l": 3
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 1.0,
            "d": "Memory advisory hints (madvise)",
            "e": [
              "madvise"
            ],
            "i": "micro-behaviors/mem/advise/hints::madvise",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.01"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_ctl function",
            "e": [
              "epoll_ctl"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-ctl",
            "l": 2
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Invalid frame sync code",
              "Failed to allocate lf_sync-\u003erecon_done_cond",
              "Unexpected AsyncResolver signal",
              "to be a valid Rapid Resynchronisation Request",
              "Failed to allocate lf_sync-\u003elf_mutex",
              "Failed to allocate row_mt_sync-\u003emutex",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "Failed to allocate row_mt_sync-\u003econd",
              "Failed to allocate row_mt_worker_data-\u003erecon_sync_mutex",
              "Failed to allocate lf_sync-\u003emutex",
              "Failed to allocate row_mt_worker_data-\u003erecon_sync_cond",
              "Failed to allocate row_mt_sync-\u003ecur_col",
              "Failed to allocate lf_sync-\u003enum_tiles_done",
              "AsyncHttpsProxySocket::OnConnectEvent",
              "Failed to allocate lf_sync-\u003erecon_done_mutex",
              "Failed to allocate lf_sync-\u003ecur_sb_col"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-5",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 10218.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code BY token",
            "e": [
              "_BY_"
            ],
            "i": "objectives/anti-analysis/geofencing/region/country-code-a::country-code-by",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "objectives/anti-analysis/self-modify/runtime::elf-manual-loader-cond-0--inline-10757",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Generic weak-login username marker",
            "e": [
              "TURN server with empty username or password",
              "d.usernotice",
              "All fragments of a user message must be ordered or unordered (TSN=%8.8x)",
              "without username/M-I from:",
              "onlyuser",
              "Allocation can't be started without setting the TURN server credentials for the user.",
              "Note that user-info@ in turn:-urls is long-deprecated.",
              "userNotice",
              "with bad local username",
              "userPassword",
              ": Received STUN request with bad remote username",
              "userClass",
              "userCertificate"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-5",
            "l": 1
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "a": "T1497.001",
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "binary.string_count = 10218.00"
            ],
            "i": "objectives/anti-analysis/vm-detect/vendor::comprehensive-evasion-cond-1--inline-17219",
            "l": 1
          },
          {
            "a": "T1486",
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "Java_org_webrtc_RtpSender_nativeSetFrameEncryptor",
              "SetFrameEncryptor",
              "common libcrypto routines",
              "No FrameEncryptor is attached to this video sending stream but one is required since require_frame_encryptor is set",
              "generate cryptogram",
              "Failed to set the crypto key params",
              "No stream found to attach frame encryptor",
              "SetFrameDecryptor",
              "Failed to parse the crypto key params",
              "crypto kernel",
              "generic cryptogram",
              "cryptopro",
              "Java_org_webrtc_RtpReceiver_nativeSetFrameDecryptor",
              "cryptocom",
              "GetFrameDecryptor",
              "GetFrameEncryptor"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::rust-ransomware-module-set--rx-5",
            "l": 1,
            "m": "B0040"
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses send socket call",
            "e": [
              "send"
            ],
            "i": "micro-behaviors/communications/socket/send::send-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.699999988079071,
            "d": "Go base64 decoding",
            "e": [
              ".Decode"
            ],
            "i": "micro-behaviors/data/encode/base64::go-base64-decode",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Random number generation (rand)",
            "e": [
              "rand"
            ],
            "i": "micro-behaviors/os/random/crypto::rand-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 245.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses recv socket call",
            "e": [
              "recv"
            ],
            "i": "micro-behaviors/communications/socket/receive::recv-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "stat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "QUIC protocol reference",
            "e": [
              "QUIC_INTERNAL_ERROR",
              "QUIC_TRANSPORT_PARAMETERS_MISCONFIGURED"
            ],
            "i": "objectives/command-and-control/channel/quic::quic-protocol-reference",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "id-ecPublicKey",
              "PUBLIC KEY",
              "WRONG_PUBLIC_KEY_TYPE",
              "The resulting key pair is missing public key parameters.",
              "Failed to write public key",
              "UNSUPPORTED_PUBLIC_KEY_TYPE",
              "dhpublicnumber",
              "UNKNOWN_PUBLIC_KEY_TYPE",
              "public_key",
              "id-regCtrl-pkiPublicationInfo",
              "bytes).  To increase the limit (or to disable these warnings), see CodedInputStream::SetTotalBytesLimit() in net/proto2/io/publi",
              "public key routines",
              ".http://www2.public-trust.com/crl/ct/ctroot.crl0",
              "PublicKeyToPEMString",
              "PKCS12_PUBLIC_KEY_INTEGRITY_NOT_SUPPORTED",
              "PUBLIC_KEY_VALIDATION_FAILED"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.30000001192092896,
            "d": "zlib compression reference",
            "e": [
              "zlib",
              "ZLIB"
            ],
            "i": "micro-behaviors/dylib/library/family::zlib-ref",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "ICMP sequential heartbeat payload",
            "e": [
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@abcdefghijklmno…",
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefhjlnprtvxz|~"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::icmp-heartbeat-payload-ascii",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_create function",
            "e": [
              "epoll_create",
              "sym.imp.epoll_create"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-create",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "Convert time to UTC time",
            "e": [
              "gmtime_r"
            ],
            "i": "micro-behaviors/time/query::gmtime",
            "l": 2
          },
          {
            "d": "password keyword",
            "e": [
              "getPassword",
              ", password_=",
              "challengePassword",
              "TURN server with empty username or password",
              "password based MAC",
              "id-PasswordBasedMAC",
              "INCORRECT_PASSWORD",
              "BAD_PASSWORD_READ",
              "userPassword"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::password",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Disk partitioning utility context",
            "e": [
              "partition"
            ],
            "i": "well-known/tool/sysadmin/disk-utility::disk-partition-context",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Discarding recovered packet with RED encapsulation",
              "Remote encapsulation port changed"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-3",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.800000011920929,
            "d": "CRYPTOGAMS OpenSSL support marker",
            "e": [
              "SHA1 block transform for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "ChaCha20 for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA256 block transform for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA512 block transform for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "GHASH for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "Montgomery Multiplication for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e"
            ],
            "i": "micro-behaviors/crypto/library/provider::cryptogams-marker",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "Generic probe keyword (probe scan/packet)",
            "e": [
              "Probe packet"
            ],
            "i": "objectives/discovery/network/scan/port::probe-word-core-suffix-2",
            "l": 3,
            "m": "E1046"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "Java_org_webrtc_PeerConnection_nativeClose",
              "EOF from socket; deferring close event",
              "OnTransportClosed",
              ": DTLS transport closed",
              "Transport channel closed",
              "Java_org_webrtc_DataChannel_nativeClose",
              "-- remote side closed",
              "closelog",
              "closedir",
              ": TCP Connection with remote is closed, trying to reconnect",
              "fclose",
              ": DTLS transport closed by remote",
              "dataChannelsClosed",
              "close",
              "OnClose",
              "PeerConnection::Close"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "accept function symbol",
            "e": [
              "accept"
            ],
            "i": "micro-behaviors/communications/socket/listen::accept-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.699999988079071,
            "d": "BSD license reference",
            "e": [
              "BSD"
            ],
            "i": "metadata/package/license::bsd-word",
            "l": 2
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID ",
              " ID",
              " ID:"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "d": "overflow keyword",
            "e": [
              "Input buffer overflow",
              "input buffer overflow",
              "buffered_amount overflowed jlong!",
              "St14overflow_error",
              "Buffer overflow while parsing packet.",
              "__next_prime overflow",
              "Bitrate must be smaller enough to avoid overflows."
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "pipe keyword",
            "e": [
              "pipe"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::pipe",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "PBKDF2 key derivation",
            "e": [
              "PBKDF2"
            ],
            "i": "micro-behaviors/crypto/kdf/algorithm::pbkdf2",
            "l": 3
          },
          {
            "a": "T1071.001",
            "d": "Authorization header",
            "e": [
              "Proxy-Authorization:"
            ],
            "i": "micro-behaviors/communications/http/headers::auth-header",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 0.30000001192092896,
            "d": "getenv function (read environment variable)",
            "e": [
              "getenv"
            ],
            "i": "micro-behaviors/os/env/vars/access::getenv",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.550000011920929,
            "d": "Uppercase key environment variable",
            "e": [
              "READ_KEY"
            ],
            "i": "objectives/command-and-control/infrastructure/config::uppercase-key-env",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "encrypt function",
            "e": [
              "encrypt"
            ],
            "i": "micro-behaviors/crypto/library/keyword::encrypt-fn",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses connect socket call",
            "e": [
              "connect"
            ],
            "i": "micro-behaviors/communications/socket/connect::connect-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.4000000059604645,
            "d": "socket function symbol",
            "e": [
              "socket"
            ],
            "i": "micro-behaviors/communications/socket/listen::socket-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary is 1MB or larger",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::file-size-1m-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "HTTP port number (80)",
            "e": [
              "port below 1024, but not 80"
            ],
            "i": "objectives/discovery/network/scan/port::port-number-http",
            "l": 1,
            "m": "E1046"
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary has 1000 or more functions",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::function-count-1000-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1027.002",
            "c": 0.6000000238418579,
            "d": "Many high complexity functions (\u003e80)",
            "e": [
              "binary.high_complexity_funcs = 138.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::many-complex-functions",
            "l": 2,
            "m": "B0032"
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "HTTPS port (443) variants (https/port/ssl)",
            "e": [
              "port of 80 or 443"
            ],
            "i": "objectives/discovery/network/scan/port::port-number-https-1",
            "l": 1,
            "m": "E1046"
          },
          {
            "c": 0.8999999761581421,
            "d": "OpenSSL ChaCha20-Poly1305",
            "e": [
              "ChaCha20-Poly1305"
            ],
            "i": "micro-behaviors/crypto/symmetric/stream::openssl-chacha-poly",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 19311.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 10218.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _connect socket call",
            "e": [
              "connect"
            ],
            "i": "micro-behaviors/communications/socket/connect::_connect-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1027",
            "c": 0.20000000298023224,
            "d": "Hardcoded hex encoding charset (encoding/decoding)",
            "e": [
              "~?0123456789abcdefABCDEFxX+-pPiInN",
              "-0123456789abcdef"
            ],
            "i": "objectives/anti-static/obfuscation/encoding/stream::hardcoded-hex-charset",
            "l": 2,
            "m": "C0026"
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "c": 0.949999988079071,
            "d": "ChaCha20/Salsa20 cipher constant",
            "e": [
              "expand 32-byte k"
            ],
            "i": "micro-behaviors/crypto/symmetric/stream::chacha-salsa-constant",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "stat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Abnormally low logic density for binary size",
            "e": [
              "binary.complexity_per_kb = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/control-flow/logic::low-complexity-large-binary",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.6499999761581421,
            "d": "Direct epoll event notification",
            "e": [
              "epoll_create",
              "sym.imp.epoll_create",
              "epoll_wait",
              "epoll_ctl"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-usage",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Listen on a socket",
            "e": [
              "socket",
              "listen"
            ],
            "i": "micro-behaviors/communications/socket/listen::listen",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "fwrite",
              "sym.imp.fseek",
              "fseek",
              "write"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "X.509 certificate handling (legitimate)",
            "e": [
              "X509_EXTENSION",
              "NO X509_NAME",
              "X509_NAME_ENTRIES",
              "X509_PUBKEY",
              "X509_REVOKED",
              "X509_CRL_INFO",
              "X509_ALGOR",
              "X509_ATTRIBUTE",
              "X509_CERT_AUX",
              "X509_VERIFICATION_SETUP_PROBLEMS",
              "X509_LIB",
              "X509_NAME_INTERNAL",
              "X509_CRL",
              "X509_SIG",
              "X509_NAME_ENTRY",
              "X509_VAL"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::certificate-handling",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlopen",
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "File contains a PEM-encoded certificate.",
            "e": [
              "-----BEGIN",
              "-----END"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::has-pem-certificate",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Documented command line program",
            "e": [
              "binary.import_count = 245.00",
              "WebRtcVoiceEngine::ApplyOptions:",
              "binary.func_count = 19311.00",
              "binary.string_count = 10218.00",
              "binary.sentence_string_ratio = 0.31",
              "CreateMediaChannel. Options:"
            ],
            "i": "metadata/package/help::documented-cli-binary",
            "l": 1
          },
          {
            "a": "T1069",
            "c": 0.699999988079071,
            "d": "User/group ID gathering",
            "e": [
              "getgid",
              "getegid",
              "geteuid"
            ],
            "i": "objectives/discovery/host/permissions::uid-gid-gathering",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.overall_entropy = 3.01",
              "binary.func_count = 19311.00"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "gettimeofday",
              "nanosleep",
              "clock_gettime"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          }
        ],
        "sha": "a7832a09e1a92483d226756f4ca4f4155b9ea82fab739e89d5533f90037289b9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libjingle_peerconnection_so.so",
        "type": "elf"
      },
      {
        "f": "KO₇(AlAs₂CaDy₂Er₂LaS)H₆(Cm₂DsF₂CrDb₄Os)Md₂(Bi₃He)",
        "x": 8,
        "dp": 1,
        "id": 4,
        "is": [
          "",
          "cxa_finalize",
          "cxa_atexit",
          "stack_chk_fail",
          "vsnprintf_chk",
          "strlen",
          "malloc",
          "errno",
          "strerror",
          "free",
          "memcpy_chk",
          "android_log_print",
          "getauxval",
          "strnlen",
          "strlen_chk",
          "strchr_chk",
          "strchr",
          "strcat_chk",
          "memcmp",
          "memset",
          "close",
          "memmove_chk",
          "memset_chk",
          "realloc",
          "flock",
          "fcntl",
          "open",
          "fstat",
          "ftruncate",
          "munmap",
          "lseek",
          "write",
          "mmap",
          "msync",
          "lstat",
          "strdup",
          "strspn",
          "strcspn",
          "stat",
          "mkdir",
          "open_2",
          "read_chk",
          "getpagesize",
          "unlink",
          "mkstemp",
          "opendir",
          "strncpy_chk",
          "strncpy_chk2",
          "readdir",
          "strcpy_chk",
          "strcmp",
          "closedir",
          "strstr",
          "dlsym",
          "ioctl",
          "dlopen",
          "syscall",
          "rename",
          "sendfile",
          "pthread_mutexattr_init",
          "pthread_mutexattr_settype",
          "pthread_mutex_init",
          "pthread_mutexattr_destroy",
          "pthread_mutex_destroy",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "pthread_once",
          "time",
          "srand",
          "rand",
          "crc32",
          "posix_memalign",
          "memcpy",
          "memmove",
          "memchr",
          "wmemmove",
          "wmemcpy",
          "wcslen",
          "wmemchr",
          "wmemset",
          "wmemcmp",
          "strtoul",
          "wcstoul",
          "strtoll",
          "wcstoll",
          "strtoull",
          "wcstoull",
          "strtof",
          "wcstof",
          "strtod",
          "wcstod",
          "strtold",
          "wcstold",
          "snprintf",
          "swprintf",
          "strtol",
          "wcstol",
          "pthread_cond_wait",
          "pthread_cond_broadcast",
          "sF",
          "vfprintf",
          "fputc",
          "vasprintf",
          "android_set_abort_message",
          "openlog",
          "syslog",
          "closelog",
          "abort",
          "pthread_getspecific",
          "pthread_setspecific",
          "pthread_key_delete",
          "pthread_key_create",
          "system_property_get",
          "strncmp",
          "fprintf",
          "fflush",
          "pthread_rwlock_wrlock",
          "pthread_rwlock_unlock",
          "dl_iterate_phdr",
          "pthread_rwlock_rdlock",
          "fwrite"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libz.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libmmkv.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "needed_libs": 5.0,
            "dynsym_count": 688.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 1718.0,
            "little_endian": true,
            "pltreloc_count": 189.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 3.0,
            "program_header_count": 9.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 697408.0,
            "load_segment_max_p_filesz": 697408.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 716680.0
          },
          "binary": {
            "code_size": 439924.0,
            "func_count": 2596.0,
            "has_overlay": true,
            "code_entropy": 5.49,
            "data_entropy": 2.12,
            "export_count": 430.0,
            "func_density": 6.04,
            "import_count": 121.0,
            "overlay_size": 1731.0,
            "string_count": 1141.0,
            "avg_func_size": 521.48,
            "overlay_ratio": 0.0,
            "section_count": 25.0,
            "avg_complexity": 3.12,
            "import_density": 0.28,
            "max_complexity": 105.0,
            "string_density": 2.66,
            "aliased_exports": 52.0,
            "overall_entropy": 2.97,
            "overlay_entropy": 1.7,
            "avg_basic_blocks": 5.88,
            "avg_section_size": 28573.04,
            "dependency_count": 5.0,
            "entropy_variance": 2.15,
            "avg_string_length": 30.07,
            "complexity_per_kb": 0.01,
            "max_string_length": 166.0,
            "wide_string_count": 4.0,
            "avg_string_entropy": 3.61,
            "code_to_data_ratio": 1.6,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.61,
            "total_basic_blocks": 15274.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 24.73,
            "high_complexity_funcs": 7.0,
            "largest_section_ratio": 0.61,
            "provenance_id_present": true,
            "sentence_string_count": 180.0,
            "sentence_string_ratio": 0.16,
            "behavioral_import_ratio": 0.04,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            580,
            "Android"
          ],
          [
            656,
            "8775105"
          ],
          [
            28097,
            "__cxa_finalize"
          ],
          [
            28112,
            "__cxa_atexit"
          ],
          [
            28136,
            "__stack_chk_fail"
          ],
          [
            28153,
            "__vsnprintf_chk"
          ],
          [
            28169,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED1Ev"
          ],
          [
            28240,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6resizeEmc"
          ],
          [
            28317,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKcm"
          ],
          [
            28396,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcm"
          ],
          [
            28475,
            "strlen"
          ],
          [
            28482,
            "malloc"
          ],
          [
            28489,
            "__errno"
          ],
          [
            28497,
            "strerror"
          ],
          [
            28506,
            "free"
          ],
          [
            28511,
            "__cxa_begin_catch"
          ],
          [
            28529,
            "_ZSt9terminatev"
          ],
          [
            28574,
            "__cxa_allocate_exception"
          ],
          [
            28599,
            "_ZTISt12length_error"
          ],
          [
            28620,
            "_ZNSt12length_errorD1Ev"
          ],
          [
            28644,
            "__cxa_throw"
          ],
          [
            28656,
            "__cxa_free_exception"
          ],
          [
            28704,
            "_ZTVSt12length_error"
          ],
          [
            28725,
            "_ZNSt11logic_errorC2EPKc"
          ],
          [
            28750,
            "_ZNKSt6__ndk120__vector_base_commonILb1EE20__throw_length_errorEv"
          ],
          [
            28816,
            "__gxx_personality_v0"
          ],
          [
            28837,
            "mmkvInitialize_v1"
          ],
          [
            28855,
            "mmkvInitialize"
          ],
          [
            28870,
            "getMMKVWithID"
          ],
          [
            28884,
            "getDefaultMMKV"
          ],
          [
            28906,
            "encodeBool"
          ],
          [
            28917,
            "decodeBool"
          ],
          [
            28928,
            "encodeInt32"
          ],
          [
            28940,
            "decodeInt32"
          ],
          [
            28952,
            "encodeInt64"
          ],
          [
            28964,
            "decodeInt64"
          ],
          [
            28976,
            "encodeDouble"
          ],
          [
            28989,
            "decodeDouble"
          ],
          [
            29002,
            "encodeBytes"
          ],
          [
            29014,
            "decodeBytes"
          ],
          [
            29026,
            "__memcpy_chk"
          ],
          [
            29045,
            "cryptKey"
          ],
          [
            29054,
            "checkReSetCryptKey"
          ],
          [
            29073,
            "valueSize"
          ],
          [
            29083,
            "writeValueToNB"
          ],
          [
            29098,
            "allKeys"
          ],
          [
            29106,
            "containsKey"
          ],
          [
            29118,
            "count"
          ],
          [
            29124,
            "totalSize"
          ],
          [
            29134,
            "actualSize"
          ],
          [
            29145,
            "removeValueForKey"
          ],
          [
            29163,
            "removeValuesForKeys"
          ],
          [
            29183,
            "clearAll"
          ],
          [
            29192,
            "mmkvSync"
          ],
          [
            29201,
            "clearMemoryCache"
          ],
          [
            29218,
            "pageSize"
          ],
          [
            29227,
            "version"
          ],
          [
            29240,
            "mmkvClose"
          ],
          [
            29250,
            "mmkvMemcpy"
          ],
          [
            29261,
            "backupOne"
          ],
          [
            29271,
            "restoreOne"
          ],
          [
            29282,
            "backupAll"
          ],
          [
            29292,
            "restoreAll"
          ],
          [
            29303,
            "__android_log_print"
          ],
          [
            29323,
            "getauxval"
          ],
          [
            29333,
            "openssl_aes_armv8_set_encrypt_key"
          ],
          [
            29367,
            "openssl_aes_armv8_set_decrypt_key"
          ],
          [
            29401,
            "openssl_aes_armv8_encrypt"
          ],
          [
            29427,
            "openssl_aes_armv8_decrypt"
          ],
          [
            29453,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSERKS5_"
          ],
          [
            29528,
            "strnlen"
          ],
          [
            29536,
            "__strlen_chk"
          ],
          [
            29549,
            "__cxa_end_catch"
          ],
          [
            29565,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcmm"
          ],
          [
            29645,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKcm"
          ],
          [
            29724,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_"
          ],
          [
            29799,
            "__strchr_chk"
          ],
          [
            29819,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEmmPKcm"
          ],
          [
            29902,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_mmRKS4_"
          ],
          [
            29984,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKc"
          ],
          [
            30062,
            "__strcat_chk"
          ],
          [
            30075,
            "memcmp"
          ],
          [
            30082,
            "_ZNSt6__ndk112__next_primeEm"
          ],
          [
            30111,
            "_ZTVN10__cxxabiv117__class_type_infoE"
          ],
          [
            30149,
            "_ZTVN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            30190,
            "__cxa_pure_virtual"
          ],
          [
            30209,
            "_ZTISt9exception"
          ],
          [
            30226,
            "memset"
          ],
          [
            30233,
            "close"
          ],
          [
            30239,
            "__emutls_get_address"
          ],
          [
            30260,
            "__cxa_guard_acquire"
          ],
          [
            30280,
            "__cxa_guard_release"
          ],
          [
            30300,
            "__cxa_guard_abort"
          ],
          [
            30318,
            "__memmove_chk"
          ],
          [
            30332,
            "_ZTISt12out_of_range"
          ],
          [
            30377,
            "_ZTVSt12out_of_range"
          ],
          [
            30398,
            "_ZTISt16invalid_argument"
          ],
          [
            30423,
            "_ZNSt16invalid_argumentD1Ev"
          ],
          [
            30451,
            "_ZNSt6__ndk19to_stringEm"
          ],
          [
            30476,
            "_ZTVSt16invalid_argument"
          ],
          [
            30501,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEmPKc"
          ],
          [
            30580,
            "_ZNSt11logic_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            30671,
            "_ZNSt13runtime_errorC1EPKc"
          ],
          [
            30698,
            "_ZTISt13runtime_error"
          ],
          [
            30720,
            "_ZNSt13runtime_errorD1Ev"
          ],
          [
            30745,
            "__memset_chk"
          ],
          [
            30758,
            "realloc"
          ],
          [
            30778,
            "open"
          ],
          [
            30789,
            "ftruncate"
          ],
          [
            30799,
            "munmap"
          ],
          [
            30806,
            "lseek"
          ],
          [
            30812,
            "write"
          ],
          [
            30835,
            "strdup"
          ],
          [
            30849,
            "strcspn"
          ],
          [
            30868,
            "__open_2"
          ],
          [
            30877,
            "__read_chk"
          ],
          [
            30888,
            "getpagesize"
          ],
          [
            30900,
            "unlink"
          ],
          [
            30907,
            "mkstemp"
          ],
          [
            30915,
            "opendir"
          ],
          [
            30923,
            "__strncpy_chk"
          ],
          [
            30937,
            "__strncpy_chk2"
          ],
          [
            30952,
            "readdir"
          ],
          [
            30960,
            "__strcpy_chk"
          ],
          [
            30980,
            "closedir"
          ],
          [
            30989,
            "_ZNSt6__ndk117bad_function_callC2Ev"
          ],
          [
            31025,
            "_ZTINSt6__ndk117bad_function_callE"
          ],
          [
            31060,
            "_ZNSt6__ndk117bad_function_callD2Ev"
          ],
          [
            31096,
            "_ZTVNSt6__ndk117bad_function_callE"
          ],
          [
            31131,
            "_ZNSt9exceptionD2Ev"
          ],
          [
            31151,
            "_ZTVSt9exception"
          ],
          [
            31168,
            "_ZNSt6__ndk117bad_function_callD0Ev"
          ],
          [
            31204,
            "_ZTSNSt6__ndk117bad_function_callE"
          ],
          [
            31239,
            "_ZNKSt9exception4whatEv"
          ],
          [
            31276,
            "ioctl"
          ],
          [
            31282,
            "dlopen"
          ],
          [
            31289,
            "syscall"
          ],
          [
            31297,
            "rename"
          ],
          [
            31304,
            "sendfile"
          ],
          [
            31313,
            "pthread_mutexattr_init"
          ],
          [
            31336,
            "pthread_mutexattr_settype"
          ],
          [
            31362,
            "pthread_mutex_init"
          ],
          [
            31381,
            "pthread_mutexattr_destroy"
          ],
          [
            31407,
            "pthread_mutex_destroy"
          ],
          [
            31429,
            "pthread_mutex_lock"
          ],
          [
            31448,
            "pthread_mutex_unlock"
          ],
          [
            31469,
            "pthread_once"
          ],
          [
            31482,
            "time"
          ],
          [
            31570,
            "_ZTISt14overflow_error"
          ],
          [
            31593,
            "_ZNSt14overflow_errorD1Ev"
          ],
          [
            31619,
            "_ZNSt13runtime_errorC2EPKc"
          ],
          [
            31646,
            "_ZTVSt14overflow_error"
          ],
          [
            31669,
            "_ZSt17__throw_bad_allocv"
          ],
          [
            31714,
            "_ZTISt9bad_alloc"
          ],
          [
            31751,
            "_ZSt15get_new_handlerv"
          ],
          [
            31774,
            "_ZnwmRKSt9nothrow_t"
          ],
          [
            31800,
            "_ZnamRKSt9nothrow_t"
          ],
          [
            31885,
            "posix_memalign"
          ],
          [
            31900,
            "_ZnwmSt11align_val_tRKSt9nothrow_t"
          ],
          [
            31956,
            "_ZnamSt11align_val_tRKSt9nothrow_t"
          ],
          [
            32131,
            "_ZSt7nothrow"
          ],
          [
            32144,
            "_ZTVSt11logic_error"
          ],
          [
            32164,
            "memcpy"
          ],
          [
            32171,
            "_ZNSt11logic_errorC2ERKS_"
          ],
          [
            32197,
            "_ZNSt11logic_erroraSERKS_"
          ],
          [
            32223,
            "_ZNSt13runtime_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            32316,
            "_ZTVSt13runtime_error"
          ],
          [
            32338,
            "_ZNSt13runtime_errorC2ERKS_"
          ],
          [
            32366,
            "_ZNSt13runtime_erroraSERKS_"
          ],
          [
            32394,
            "_ZNSt11logic_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            32485,
            "_ZNSt11logic_errorC1EPKc"
          ],
          [
            32510,
            "_ZNSt11logic_errorC1ERKS_"
          ],
          [
            32536,
            "_ZNSt13runtime_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            32629,
            "_ZNSt13runtime_errorC1ERKS_"
          ],
          [
            32657,
            "_ZNKSt6__ndk121__basic_string_commonILb1EE20__throw_length_errorEv"
          ],
          [
            32724,
            "_ZNKSt6__ndk121__basic_string_commonILb1EE20__throw_out_of_rangeEv"
          ],
          [
            32791,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEmmPKcm"
          ],
          [
            32873,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE21__grow_by_and_replaceEmmmmmmPKc"
          ],
          [
            32973,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5rfindEPKcmm"
          ],
          [
            33053,
            "memmove"
          ],
          [
            33061,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_"
          ],
          [
            33136,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEmmPKc"
          ],
          [
            33217,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_RKS4_"
          ],
          [
            33297,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE16find_last_not_ofEPKcmm"
          ],
          [
            33389,
            "memchr"
          ],
          [
            33396,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED2Ev"
          ],
          [
            33467,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE17find_first_not_ofEPKcmm"
          ],
          [
            33560,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEmmc"
          ],
          [
            33638,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9__grow_byEmmmmmm"
          ],
          [
            33722,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSEc"
          ],
          [
            33793,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE2atEm"
          ],
          [
            33866,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEmPKcm"
          ],
          [
            33946,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE13find_first_ofEPKcmm"
          ],
          [
            34035,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEmmmc"
          ],
          [
            34115,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7reserveEm"
          ],
          [
            34192,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignERKS5_mm"
          ],
          [
            34274,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4copyEPcmm"
          ],
          [
            34352,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_mmRKS4_"
          ],
          [
            34434,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4findEcm"
          ],
          [
            34510,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEmc"
          ],
          [
            34587,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE12find_last_ofEPKcmm"
          ],
          [
            34675,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9push_backEc"
          ],
          [
            34754,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEmc"
          ],
          [
            34831,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5rfindEcm"
          ],
          [
            34908,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEmc"
          ],
          [
            34985,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5eraseEmm"
          ],
          [
            35061,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendERKS5_mm"
          ],
          [
            35143,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEPKc"
          ],
          [
            35223,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEmmPKc"
          ],
          [
            35305,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE2atEm"
          ],
          [
            35377,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKc"
          ],
          [
            35455,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4findEPKcmm"
          ],
          [
            35534,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEmmRKS5_mm"
          ],
          [
            35620,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEmmRKS5_mm"
          ],
          [
            35705,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertENS_11__wrap_iterIPKcEEc"
          ],
          [
            35803,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEmRKS5_mm"
          ],
          [
            35886,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7replaceEmmPKwm"
          ],
          [
            35968,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE21__grow_by_and_replaceEmmmmmmPKw"
          ],
          [
            36068,
            "wmemmove"
          ],
          [
            36077,
            "_ZNSt6__ndk111char_traitsIwE4moveEPwPKwm"
          ],
          [
            36118,
            "wmemcpy"
          ],
          [
            36126,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE5rfindEPKwmm"
          ],
          [
            36206,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEPKwmm"
          ],
          [
            36286,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC2ERKS5_"
          ],
          [
            36361,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7replaceEmmPKw"
          ],
          [
            36442,
            "wcslen"
          ],
          [
            36449,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC2ERKS5_RKS4_"
          ],
          [
            36529,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE16find_last_not_ofEPKwmm"
          ],
          [
            36621,
            "wmemchr"
          ],
          [
            36629,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEED2Ev"
          ],
          [
            36700,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE17find_first_not_ofEPKwmm"
          ],
          [
            36793,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6insertEmmw"
          ],
          [
            36871,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE9__grow_byEmmmmmm"
          ],
          [
            36955,
            "wmemset"
          ],
          [
            36963,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEaSEw"
          ],
          [
            37034,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEPKwm"
          ],
          [
            37113,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE2atEm"
          ],
          [
            37186,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6insertEmPKwm"
          ],
          [
            37266,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE13find_first_ofEPKwmm"
          ],
          [
            37355,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7replaceEmmmw"
          ],
          [
            37435,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6assignEPKwm"
          ],
          [
            37514,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7reserveEm"
          ],
          [
            37591,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6appendEPKwm"
          ],
          [
            37670,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6assignERKS5_mm"
          ],
          [
            37752,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE4copyEPwmm"
          ],
          [
            37830,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC2ERKS5_mmRKS4_"
          ],
          [
            37912,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE4findEwm"
          ],
          [
            37988,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEmw"
          ],
          [
            38065,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6insertEmPKw"
          ],
          [
            38144,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE12find_last_ofEPKwmm"
          ],
          [
            38232,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE9push_backEw"
          ],
          [
            38311,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6appendEmw"
          ],
          [
            38388,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE5rfindEwm"
          ],
          [
            38465,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6assignEmw"
          ],
          [
            38542,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE5eraseEmm"
          ],
          [
            38618,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6appendERKS5_mm"
          ]
        ],
        "sz": 716680,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1105",
            "c": 0.8799999952316284,
            "d": "Android local tmp path",
            "e": [
              "/data/local/tmp/"
            ],
            "i": "micro-behaviors/data/text/dropper::android-local-tmp-path",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 2.97"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Create directories",
            "e": [
              "mkdir"
            ],
            "i": "micro-behaviors/fs/directory/mkdir::mkdir-base",
            "l": 2
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "looks like [%s] been downgrade \u0026 upgrade again"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-15",
            "l": 1
          },
          {
            "d": "Truncate file",
            "e": [
              "ftruncate"
            ],
            "i": "micro-behaviors/fs/file/truncate::truncate",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "ASharedMemory_create",
              "ASharedMemory_getName",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "ASharedMemory_getSize",
              "current API level = %d, libc++_shared=%d",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "fail to ASharedMemory_getSize:%d, %s",
              "Got a shared lock, but fail to exclusive lock [%s]",
              "Fail to shared lock [%s], assume it's ok",
              "fail to ASharedMemory_create %s with size %zu, errno:%s",
              "fail to locate ASharedMemory_create() from loading libandroid.so"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "each size limit:%zu, consider config"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Apply or remove advisory lock",
            "e": [
              "flock"
            ],
            "i": "micro-behaviors/fs/lock/flock::flock-fn",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Version information string",
            "e": [
              "v1.2"
            ],
            "i": "metadata/package/help::version-text",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1027",
            "d": "Unusual character combinations",
            "e": [
              "^șŧèăƛćƛƛƛ",
              "ȀȂȂȂȂȌȂȓ"
            ],
            "i": "micro-behaviors/data/encode/xor::unusual-character-combinations",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is 500KB+",
            "e": [
              "libmmkv.so"
            ],
            "i": "metadata/binary/metrics/threshold::large-binary-500k",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.61"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE strcpy bounds check",
            "e": [
              "strcpy_chk"
            ],
            "i": "metadata/hardening/build::strcpy-chk",
            "l": 3
          },
          {
            "c": 0.4000000059604645,
            "d": "Random seed initialization (srand)",
            "e": [
              "srand"
            ],
            "i": "micro-behaviors/os/random/crypto::srand-symbol",
            "l": 2
          },
          {
            "d": "usage: label (lowercase)",
            "e": [
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::usage-lower",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 2596.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libmmkv.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "fail to ASharedMemory_create %s with size %zu, errno:%s",
              "fail to ASharedMemory_getSize:%d, %s",
              "ASharedMemory_create",
              "Got a shared lock, but fail to exclusive lock [%s]",
              "ASharedMemory_getSize",
              "ASharedMemory_getName",
              "fail to locate ASharedMemory_create() from loading libandroid.so",
              "current API level = %d, libc++_shared=%d",
              "Fail to shared lock [%s], assume it's ok",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "d": "usage: label in binary strings",
            "e": [
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::usage-lower-string",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 3.12"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 15274.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 1141.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "getauxval function reference",
            "e": [
              "getauxval",
              "sym.imp.getauxval"
            ],
            "i": "metadata/binary/linking/runtime::getauxval-ref",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr"
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 2596.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "sym.imp.__memcpy_chk",
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses sendfile socket call",
            "e": [
              "sendfile"
            ],
            "i": "micro-behaviors/communications/socket/send::sendfile-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "bridge interface",
            "e": [
              "bridge"
            ],
            "i": "micro-behaviors/os/container/namespace::bridge-str",
            "l": 1
          },
          {
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "current API level = %d, libc++_shared=%d",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "Fail to shared lock [%s], assume it's ok",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "Got a shared lock, but fail to exclusive lock [%s]"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::runtime-shared-object-compile--rx-1",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "root dir: %s",
              "prepare to load %s (id %s) from rootPath %s"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Unix /tmp/ path reference",
            "e": [
              "/data/local/tmp/"
            ],
            "i": "micro-behaviors/fs/path/temp::unix-temp",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libmmkv.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.97"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "fail to msync [%s], %s"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-5",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 2596.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1141.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Create temporary file securely",
            "e": [
              "mkstemp"
            ],
            "i": "micro-behaviors/fs/temp/mktemp::mkstemp-fn",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Random number generation (rand)",
            "e": [
              "rand"
            ],
            "i": "micro-behaviors/os/random/crypto::rand-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 121.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "lstat",
              "stat",
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "close",
              "mmkvClose",
              "closelog",
              "closedir",
              "fail to close [%s], %d(%s)",
              "close [%s]"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 430.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID "
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "d": "overflow keyword",
            "e": [
              "_ZNSt14overflow_errorD0Ev",
              "ZNSt14overflow_errorD2Ev",
              "ZTVSt14overflow_error",
              "ZTSSt14overflow_error",
              "ZNSt14overflow_errorD0Ev",
              "ZTISt14overflow_error",
              "_ZNSt14overflow_errorD2Ev",
              "_ZNSt14overflow_errorD1Ev",
              "_ZTVSt14overflow_error",
              "_ZTISt14overflow_error",
              "St14overflow_error",
              "_ZTSSt14overflow_error",
              "ZNSt14overflow_errorD1Ev",
              "__next_prime overflow"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary has 1000 or more functions",
            "e": [
              "binary.func_count = 2596.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::function-count-1000-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 2596.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 2596.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1141.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "lstat",
              "fstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "d": "Seeded random number generation",
            "e": [
              "rand",
              "srand"
            ],
            "i": "micro-behaviors/os/random/crypto::seeded-random",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlopen",
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "c": 0.8500000238418579,
            "d": "Documented command line program",
            "e": [
              "binary.import_count = 121.00",
              "binary.string_count = 1141.00",
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu",
              "binary.func_count = 2596.00"
            ],
            "i": "metadata/package/help::documented-cli-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.func_count = 2596.00",
              "binary.overall_entropy = 2.97"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          }
        ],
        "sha": "6916a82db984970eb581f0f079b0a890846545dcfdb05b9c04f7210260a35a1f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libmmkv.so",
        "type": "elf"
      },
      {
        "f": "O₂(DyS)Md(Bi₃)",
        "x": 3,
        "dp": 1,
        "id": 5,
        "is": [
          "",
          "cxa_finalize",
          "calloc",
          "cacheInitial",
          "getCacheClass",
          "stack_chk_fail",
          "vmInterpret",
          "gVm",
          "pthread_mutex_lock",
          "strlen",
          "strncpy_chk",
          "free",
          "pthread_mutex_unlock",
          "cxa_atexit"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libnmmvm.so",
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libnmmp.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 2800.0,
            "needed_libs": 5.0,
            "dynsym_count": 24.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 22.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 12.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 23.0,
            "load_segment_max_p_memsz": 15464.0,
            "load_segment_max_p_filesz": 15464.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 18256.0
          },
          "binary": {
            "code_size": 3960.0,
            "func_count": 23.0,
            "entry_point": 2800.0,
            "has_overlay": true,
            "code_entropy": 5.37,
            "data_entropy": 3.7,
            "export_count": 8.0,
            "func_density": 5.95,
            "import_count": 14.0,
            "overlay_size": 1476.0,
            "string_count": 202.0,
            "avg_func_size": 159.48,
            "overlay_ratio": 0.08,
            "section_count": 22.0,
            "avg_complexity": 3.0,
            "import_density": 3.62,
            "max_complexity": 8.0,
            "string_density": 52.23,
            "aliased_exports": 7.0,
            "overall_entropy": 2.97,
            "overlay_entropy": 1.45,
            "avg_basic_blocks": 4.04,
            "avg_section_size": 811.82,
            "dependency_count": 5.0,
            "entropy_variance": 1.66,
            "avg_string_length": 19.75,
            "complexity_per_kb": 0.78,
            "max_string_length": 180.0,
            "avg_string_entropy": 3.23,
            "code_to_data_ratio": 0.28,
            "text_to_file_ratio": 0.2,
            "total_basic_blocks": 93.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 18.09,
            "largest_section_ratio": 0.43,
            "provenance_id_present": true,
            "sentence_string_count": 1.0,
            "sentence_string_ratio": 0.0,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            1377,
            "__cxa_finalize"
          ],
          [
            1392,
            "__cxa_atexit"
          ],
          [
            1405,
            "__stack_chk_fail"
          ],
          [
            1422,
            "__strncpy_chk"
          ],
          [
            1436,
            "calloc"
          ],
          [
            1443,
            "free"
          ],
          [
            1452,
            "getCacheClass"
          ],
          [
            1466,
            "pthread_mutex_lock"
          ],
          [
            1485,
            "pthread_mutex_unlock"
          ],
          [
            1506,
            "strlen"
          ],
          [
            1513,
            "vmInterpret"
          ],
          [
            1536,
            "cacheInitial"
          ],
          [
            1549,
            "libnmmvm.so"
          ],
          [
            1561,
            "liblog.so"
          ],
          [
            1571,
            "libm.so"
          ],
          [
            1579,
            "libdl.so"
          ],
          [
            1588,
            "libc.so"
          ],
          [
            1596,
            "_edata"
          ],
          [
            1603,
            "__bss_start"
          ],
          [
            1615,
            "__bss_start__"
          ],
          [
            1629,
            "__bss_end__"
          ],
          [
            1641,
            "__end__"
          ],
          [
            1654,
            "libnmmp.so"
          ],
          [
            1665,
            "LIBC"
          ],
          [
            5585,
            "j48h"
          ],
          [
            6536,
            "com/nmmedit/protect/NativeUtil"
          ],
          [
            6567,
            "classesInit0"
          ],
          [
            6624,
            "\u003cinit\u003e"
          ],
          [
            6631,
            "BRAND"
          ],
          [
            6642,
            "Class"
          ],
          [
            6650,
            "INSTANCE"
          ],
          [
            6686,
            "Landroid/content/Context;"
          ],
          [
            6712,
            "Landroid/graphics/Rect;"
          ],
          [
            6736,
            "Landroid/os/Build$VERSION;"
          ],
          [
            6763,
            "Landroid/os/Build;"
          ],
          [
            6782,
            "Landroid/text/TextUtils;"
          ],
          [
            6807,
            "Landroid/util/Pair;"
          ],
          [
            6827,
            "Landroid/view/View;"
          ],
          [
            6847,
            "Landroid/view/WindowManager$LayoutParams;"
          ],
          [
            6889,
            "Landroidx/arch/core/util/Arch;"
          ],
          [
            6920,
            "Landroidx/arch/core/util/ArchCore;"
          ],
          [
            6955,
            "Lcom/cx/utils/FloatWindowUtils;"
          ],
          [
            6995,
            "Lf/z/x/PAuto;"
          ],
          [
            7009,
            "Lf/z/x/do$new;"
          ],
          [
            7033,
            "Ljava/lang/Boolean;"
          ],
          [
            7053,
            "Ljava/lang/CharSequence;"
          ],
          [
            7078,
            "Ljava/lang/Class;"
          ],
          [
            7096,
            "Ljava/lang/IllegalArgumentException;"
          ],
          [
            7133,
            "Ljava/lang/Integer;"
          ],
          [
            7153,
            "Ljava/lang/Object;"
          ],
          [
            7172,
            "Ljava/lang/RuntimeException;"
          ],
          [
            7201,
            "Ljava/lang/String;"
          ],
          [
            7220,
            "Ljava/lang/StringBuilder;"
          ],
          [
            7246,
            "Ljava/lang/Throwable;"
          ],
          [
            7268,
            "Ljava/lang/reflect/AccessibleObject;"
          ],
          [
            7305,
            "Ljava/lang/reflect/Constructor;"
          ],
          [
            7337,
            "Ljava/lang/reflect/Field;"
          ],
          [
            7363,
            "Ljava/lang/reflect/Method;"
          ],
          [
            7390,
            "Ljava/util/ArrayList;"
          ],
          [
            7412,
            "Ljava/util/Arrays;"
          ],
          [
            7431,
            "Ljava/util/Collection;"
          ],
          [
            7454,
            "Ljava/util/List;"
          ],
          [
            7471,
            "Ljava/util/concurrent/atomic/AtomicBoolean;"
          ],
          [
            7515,
            "Ljava/util/function/Function;"
          ],
          [
            7545,
            "MODEL"
          ],
          [
            7551,
            "RELEASE"
          ],
          [
            7559,
            "SDK_INT"
          ],
          [
            7567,
            "TRUE"
          ],
          [
            7572,
            "TYPE"
          ],
          [
            7577,
            "TYPE_PATTERN"
          ],
          [
            7590,
            "TYPE_PIN"
          ],
          [
            7599,
            "TYPE_TEXT"
          ],
          [
            7621,
            "VLLIZZLLI"
          ],
          [
            7648,
            "ZLLLIZ"
          ],
          [
            7655,
            "[Ljava/lang/Class;"
          ],
          [
            7674,
            "[Ljava/lang/Object;"
          ],
          [
            7694,
            "[Ljava/lang/reflect/Method;"
          ],
          [
            7726,
            "also"
          ],
          [
            7731,
            "append"
          ],
          [
            7738,
            "bottom"
          ],
          [
            7745,
            "centerX"
          ],
          [
            7753,
            "centerY"
          ],
          [
            7768,
            "concat"
          ],
          [
            7778,
            "equals"
          ],
          [
            7785,
            "f1480b"
          ],
          [
            7792,
            "forName"
          ],
          [
            7800,
            "format"
          ],
          [
            7811,
            "getApplicationContext"
          ],
          [
            7833,
            "getClass"
          ],
          [
            7842,
            "getDeclaredConstructor"
          ],
          [
            7865,
            "getDeclaredField"
          ],
          [
            7882,
            "getDeclaredMethod"
          ],
          [
            7900,
            "getDeclaredMethods"
          ],
          [
            7919,
            "getName"
          ],
          [
            7927,
            "getSimpleName"
          ],
          [
            7941,
            "getSystemPropertyValue"
          ],
          [
            7967,
            "init"
          ],
          [
            7972,
            "initSDK"
          ],
          [
            7980,
            "inited"
          ],
          [
            7991,
            "invoke"
          ],
          [
            7998,
            "isEmpty"
          ],
          [
            8006,
            "isOplus"
          ],
          [
            8019,
            "length"
          ],
          [
            8035,
            "newInstance"
          ],
          [
            8057,
            "setAccessible"
          ],
          [
            8071,
            "setLayoutParams"
          ],
          [
            8087,
            "toLowerCase"
          ],
          [
            8099,
            "toString"
          ],
          [
            8112,
            "unlock"
          ],
          [
            8119,
            "valueOf"
          ],
          [
            8127,
            "android/util/Pair"
          ],
          [
            8145,
            "java/lang/Integer"
          ],
          [
            8163,
            "java/lang/StringBuilder"
          ],
          [
            8187,
            "()Ljava/lang/String;"
          ],
          [
            8213,
            "(II)Landroid/util/Pair;"
          ],
          [
            8237,
            "java/util/ArrayList"
          ],
          [
            8257,
            "java/lang/reflect/Constructor"
          ],
          [
            8287,
            "java/util/Collection"
          ],
          [
            8308,
            "android/content/Context"
          ],
          [
            8332,
            "(Ljava/lang/String;[Ljava/lang/Class;)Ljava/lang/reflect/Method;"
          ],
          [
            8397,
            "java/util/Arrays"
          ],
          [
            8414,
            "(Ljava/lang/String;Ljava/lang/Throwable;)V"
          ],
          [
            8457,
            "java/lang/reflect/Method"
          ],
          [
            8482,
            "java/lang/Throwable"
          ],
          [
            8502,
            "(Ljava/lang/String;)Ljava/lang/StringBuilder;"
          ],
          [
            8548,
            "(J)Ljava/lang/String;"
          ],
          [
            8570,
            "java/lang/reflect/Field"
          ],
          [
            8594,
            "(Landroid/content/Context;)V"
          ],
          [
            8623,
            "androidx/arch/core/util/Arch"
          ],
          [
            8652,
            "(Ljava/lang/CharSequence;)Z"
          ],
          [
            8680,
            "(Ljava/lang/String;)V"
          ],
          [
            8702,
            "com/cx/utils/FloatWindowUtils"
          ],
          [
            8732,
            "java/lang/Object"
          ],
          [
            8749,
            "java/util/concurrent/atomic/AtomicBoolean"
          ],
          [
            8791,
            "(Landroid/graphics/Rect;Ljava/lang/String;)Ljava/util/List;"
          ],
          [
            8851,
            "([Ljava/lang/Object;)Ljava/lang/Object;"
          ],
          [
            8891,
            "(Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;"
          ],
          [
            8955,
            "java/lang/reflect/AccessibleObject"
          ],
          [
            8990,
            "java/lang/RuntimeException"
          ],
          [
            9017,
            "android/os/Build"
          ],
          [
            9034,
            "(Ljava/lang/String;Landroid/view/WindowManager$LayoutParams;IZZLjava/lang/String;Ljava/lang/String;I)V"
          ],
          [
            9137,
            "java/util/List"
          ],
          [
            9157,
            "(Landroid/view/WindowManager$LayoutParams;I)Z"
          ],
          [
            9203,
            "android/view/WindowManager$LayoutParams"
          ],
          [
            9243,
            "android/view/View"
          ],
          [
            9261,
            "(Ljava/lang/Object;)V"
          ],
          [
            9283,
            "java/lang/Boolean"
          ],
          [
            9301,
            "f/z/x/do$new"
          ],
          [
            9314,
            "(Ljava/lang/Object;)Z"
          ],
          [
            9336,
            "()[Ljava/lang/reflect/Method;"
          ],
          [
            9366,
            "for/do"
          ],
          [
            9373,
            "(Z)Ljava/lang/Boolean;"
          ],
          [
            9396,
            "(Ljava/lang/Object;)Ljava/lang/Object;"
          ],
          [
            9435,
            "()Landroid/content/Context;"
          ],
          [
            9463,
            "java/lang/String"
          ],
          [
            9480,
            "()Ljava/lang/Class;"
          ],
          [
            9500,
            "android/graphics/Rect"
          ],
          [
            9522,
            "(Ljava/lang/String;)Ljava/lang/Class;"
          ],
          [
            9560,
            "(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;"
          ],
          [
            9618,
            "java/util/function/Function"
          ],
          [
            9650,
            "java/lang/IllegalArgumentException"
          ],
          [
            9685,
            "([Ljava/lang/Class;)Ljava/lang/reflect/Constructor;"
          ],
          [
            9742,
            "java/lang/CharSequence"
          ],
          [
            9765,
            "(Ljava/lang/String;)Ljava/lang/String;"
          ],
          [
            9804,
            "android/text/TextUtils"
          ],
          [
            9827,
            "androidx/arch/core/util/ArchCore"
          ],
          [
            9860,
            "(Ljava/lang/String;)Ljava/lang/reflect/Field;"
          ],
          [
            9906,
            "(Ljava/lang/String;Ljava/lang/String;Ljava/util/function/Function;)V"
          ],
          [
            9979,
            "([Ljava/lang/Object;)Ljava/lang/String;"
          ],
          [
            10023,
            "(I)Ljava/lang/Integer;"
          ],
          [
            10046,
            "(C)Ljava/lang/StringBuilder;"
          ],
          [
            10075,
            "java/lang/Class"
          ],
          [
            10091,
            "(Landroid/content/Context;Ljava/lang/Object;Ljava/lang/Object;IZ)Z"
          ],
          [
            10158,
            "android/os/Build$VERSION"
          ],
          [
            10183,
            "f/z/x/PAuto"
          ],
          [
            11186,
            "160.2.112.147:2304"
          ],
          [
            11232,
            "160.5.112.153:2304"
          ],
          [
            15324,
            "Android"
          ],
          [
            15336,
            "r21e"
          ],
          [
            15400,
            "7075529"
          ],
          [
            16384,
            "Android (7019983 based on r365631c3) clang version 9.0.9 (https://android.googlesource.com/toolchain/llvm-project a2a1e703c0edb0"
          ],
          [
            16566,
            ".fini_array"
          ],
          [
            16578,
            ".text"
          ],
          [
            16584,
            ".got"
          ],
          [
            16589,
            ".comment"
          ],
          [
            16598,
            ".note.android.ident"
          ],
          [
            16618,
            ".rela.plt"
          ],
          [
            16628,
            ".bss"
          ],
          [
            16633,
            ".dynstr"
          ],
          [
            16641,
            ".eh_frame_hdr"
          ],
          [
            16655,
            ".gnu.version_r"
          ],
          [
            16670,
            ".data.rel.ro"
          ],
          [
            16683,
            ".rela.dyn"
          ],
          [
            16693,
            ".gnu.version"
          ],
          [
            16706,
            ".dynsym"
          ],
          [
            16714,
            ".gnu.hash"
          ],
          [
            16724,
            ".eh_frame"
          ],
          [
            16734,
            ".note.gnu.build-id"
          ],
          [
            16753,
            ".dynamic"
          ],
          [
            16762,
            ".shstrtab"
          ],
          [
            16772,
            ".rodata"
          ],
          [
            22128,
            "_bss_end__"
          ]
        ],
        "sz": 18256,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libnmmp.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 22.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.23"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libnmmp.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 3.00"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 22.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libnmmp.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.97"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 23.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 8.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "Low average code complexity",
            "e": [
              "binary.avg_complexity = 3.00"
            ],
            "i": "metadata/binary/metrics/structural::low-average-complexity",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "1f63eb61d57be7e5cc55d34578c55d1f39383d337449eb3dcc38dbf707611498",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libnmmp.so",
        "type": "elf"
      },
      {
        "f": "O₃(Dy₂ErS)H(Cr)Md(Bi₃)",
        "x": 3,
        "dp": 1,
        "id": 6,
        "is": [
          "",
          "fmodf",
          "pthread_create",
          "realloc",
          "pthread_key_create",
          "vsnprintf_chk",
          "pthread_once",
          "cxa_finalize",
          "calloc",
          "syslog",
          "posix_memalign",
          "strlen_chk",
          "fmod",
          "abort",
          "vsnprintf",
          "dl_iterate_phdr",
          "android_set_abort_message",
          "islower",
          "memmove_chk",
          "sF",
          "fputc",
          "stack_chk_fail",
          "pthread_setspecific",
          "openlog",
          "strcmp",
          "pthread_mutex_lock",
          "closelog",
          "pthread_getspecific",
          "memmove",
          "isxdigit",
          "strlen",
          "vasprintf",
          "malloc",
          "memcpy",
          "memset",
          "free",
          "vfprintf",
          "pthread_mutex_unlock",
          "cxa_atexit"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libnmmvm.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 62272.0,
            "needed_libs": 4.0,
            "dynsym_count": 350.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 1634.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 65.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 25.0,
            "load_segment_max_p_memsz": 237128.0,
            "load_segment_max_p_filesz": 237128.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 256056.0
          },
          "binary": {
            "code_size": 140516.0,
            "func_count": 268.0,
            "entry_point": 62272.0,
            "has_overlay": true,
            "code_entropy": 5.64,
            "data_entropy": 3.3,
            "export_count": 289.0,
            "func_density": 1.95,
            "import_count": 39.0,
            "overlay_size": 1605.0,
            "string_count": 488.0,
            "avg_func_size": 882.55,
            "overlay_ratio": 0.01,
            "section_count": 24.0,
            "avg_complexity": 8.81,
            "import_density": 0.28,
            "max_complexity": 149.0,
            "string_density": 3.56,
            "aliased_exports": 29.0,
            "overall_entropy": 3.39,
            "overlay_entropy": 1.6,
            "avg_basic_blocks": 13.91,
            "avg_section_size": 10565.63,
            "dependency_count": 4.0,
            "entropy_variance": 1.7,
            "avg_string_length": 23.07,
            "complexity_per_kb": 0.06,
            "max_string_length": 180.0,
            "avg_string_entropy": 3.46,
            "code_to_data_ratio": 1.24,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.54,
            "total_basic_blocks": 3728.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 17.67,
            "high_complexity_funcs": 8.0,
            "largest_section_ratio": 0.54,
            "provenance_id_present": true,
            "sentence_string_count": 33.0,
            "sentence_string_ratio": 0.07,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            13977,
            "__cxa_finalize"
          ],
          [
            13992,
            "__cxa_atexit"
          ],
          [
            14005,
            "_ZSt9terminatev"
          ],
          [
            14021,
            "__cxa_begin_catch"
          ],
          [
            14039,
            "__gxx_personality_v0"
          ],
          [
            14060,
            "__stack_chk_fail"
          ],
          [
            14081,
            "vsnprintf"
          ],
          [
            14091,
            "abort"
          ],
          [
            14097,
            "memcpy"
          ],
          [
            14115,
            "free"
          ],
          [
            14120,
            "getJNIWrapper"
          ],
          [
            14134,
            "malloc"
          ],
          [
            14141,
            "vmInterpret"
          ],
          [
            14153,
            "cacheInitial"
          ],
          [
            14166,
            "getCacheClass"
          ],
          [
            14180,
            "liblog.so"
          ],
          [
            14190,
            "libm.so"
          ],
          [
            14198,
            "_ZN10__cxxabiv119__getExceptionClassEPK17_Unwind_Exception"
          ],
          [
            14257,
            "_ZN10__cxxabiv119__setExceptionClassEP17_Unwind_Exceptionm"
          ],
          [
            14316,
            "_ZN10__cxxabiv121__isOurExceptionClassEPK17_Unwind_Exception"
          ],
          [
            14377,
            "_ZSt13get_terminatev"
          ],
          [
            14398,
            "_ZSt14get_unexpectedv"
          ],
          [
            14420,
            "__cxa_allocate_dependent_exception"
          ],
          [
            14455,
            "__cxa_allocate_exception"
          ],
          [
            14480,
            "__cxa_call_unexpected"
          ],
          [
            14502,
            "__cxa_current_exception_type"
          ],
          [
            14531,
            "__cxa_current_primary_exception"
          ],
          [
            14563,
            "__cxa_decrement_exception_refcount"
          ],
          [
            14598,
            "__cxa_end_catch"
          ],
          [
            14614,
            "__cxa_free_dependent_exception"
          ],
          [
            14645,
            "__cxa_free_exception"
          ],
          [
            14666,
            "__cxa_get_exception_ptr"
          ],
          [
            14690,
            "__cxa_get_globals"
          ],
          [
            14708,
            "__cxa_get_globals_fast"
          ],
          [
            14731,
            "__cxa_increment_exception_refcount"
          ],
          [
            14766,
            "__cxa_rethrow"
          ],
          [
            14780,
            "__cxa_rethrow_primary_exception"
          ],
          [
            14812,
            "__cxa_throw"
          ],
          [
            14824,
            "__cxa_uncaught_exception"
          ],
          [
            14849,
            "__cxa_uncaught_exceptions"
          ],
          [
            14875,
            "memset"
          ],
          [
            14882,
            "pthread_getspecific"
          ],
          [
            14902,
            "pthread_key_create"
          ],
          [
            14921,
            "pthread_once"
          ],
          [
            14934,
            "pthread_setspecific"
          ],
          [
            14954,
            "_ZSt10unexpectedv"
          ],
          [
            14972,
            "_ZSt15get_new_handlerv"
          ],
          [
            14995,
            "_ZSt15set_new_handlerPFvvE"
          ],
          [
            15022,
            "__cxa_new_handler"
          ],
          [
            15040,
            "__cxa_terminate_handler"
          ],
          [
            15064,
            "__cxa_unexpected_handler"
          ],
          [
            15089,
            "_ZNSt13bad_exceptionD1Ev"
          ],
          [
            15114,
            "_ZTISt13bad_exception"
          ],
          [
            15136,
            "_ZTVSt13bad_exception"
          ],
          [
            15158,
            "calloc"
          ],
          [
            15165,
            "posix_memalign"
          ],
          [
            15180,
            "pthread_mutex_lock"
          ],
          [
            15199,
            "pthread_mutex_unlock"
          ],
          [
            15220,
            "_ZNKSt13bad_exception4whatEv"
          ],
          [
            15249,
            "_ZNKSt20bad_array_new_length4whatEv"
          ],
          [
            15285,
            "_ZNKSt9bad_alloc4whatEv"
          ],
          [
            15309,
            "_ZNKSt9exception4whatEv"
          ],
          [
            15333,
            "_ZNSt13bad_exceptionD0Ev"
          ],
          [
            15358,
            "_ZNSt13bad_exceptionD2Ev"
          ],
          [
            15383,
            "_ZNSt20bad_array_new_lengthC1Ev"
          ],
          [
            15415,
            "_ZNSt20bad_array_new_lengthC2Ev"
          ],
          [
            15447,
            "_ZNSt20bad_array_new_lengthD0Ev"
          ],
          [
            15479,
            "_ZNSt20bad_array_new_lengthD1Ev"
          ],
          [
            15511,
            "_ZNSt20bad_array_new_lengthD2Ev"
          ],
          [
            15643,
            "_ZNSt9exceptionD0Ev"
          ],
          [
            15663,
            "_ZNSt9exceptionD1Ev"
          ],
          [
            15683,
            "_ZNSt9exceptionD2Ev"
          ],
          [
            15703,
            "_ZTISt20bad_array_new_length"
          ],
          [
            15732,
            "_ZTISt9bad_alloc"
          ],
          [
            15749,
            "_ZTISt9exception"
          ],
          [
            15766,
            "_ZTSSt13bad_exception"
          ],
          [
            15788,
            "_ZTSSt20bad_array_new_length"
          ],
          [
            15817,
            "_ZTSSt9bad_alloc"
          ],
          [
            15834,
            "_ZTSSt9exception"
          ],
          [
            15851,
            "_ZTVN10__cxxabiv117__class_type_infoE"
          ],
          [
            15889,
            "_ZTVN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            15930,
            "_ZTVSt20bad_array_new_length"
          ],
          [
            15959,
            "_ZTVSt9bad_alloc"
          ],
          [
            15976,
            "_ZTVSt9exception"
          ],
          [
            16233,
            "_ZnamRKSt9nothrow_t"
          ],
          [
            16274,
            "_ZnamSt11align_val_tRKSt9nothrow_t"
          ],
          [
            16315,
            "_ZnwmRKSt9nothrow_t"
          ],
          [
            16356,
            "_ZnwmSt11align_val_tRKSt9nothrow_t"
          ],
          [
            16396,
            "android_set_abort_message"
          ],
          [
            16422,
            "closelog"
          ],
          [
            16437,
            "openlog"
          ],
          [
            16445,
            "syslog"
          ],
          [
            16452,
            "vasprintf"
          ],
          [
            16462,
            "vfprintf"
          ],
          [
            16471,
            "_ZSt13set_terminatePFvvE"
          ],
          [
            16496,
            "_ZSt14set_unexpectedPFvvE"
          ],
          [
            16522,
            "__cxa_demangle"
          ],
          [
            16537,
            "__memmove_chk"
          ],
          [
            16551,
            "__strlen_chk"
          ],
          [
            16564,
            "__vsnprintf_chk"
          ],
          [
            16580,
            "islower"
          ],
          [
            16588,
            "isxdigit"
          ],
          [
            16597,
            "memmove"
          ],
          [
            16605,
            "realloc"
          ],
          [
            16613,
            "strlen"
          ],
          [
            16675,
            "_ZTIN10__cxxabiv116__enum_type_infoE"
          ],
          [
            16712,
            "_ZTIN10__cxxabiv116__shim_type_infoE"
          ],
          [
            16749,
            "_ZTIN10__cxxabiv117__array_type_infoE"
          ],
          [
            16787,
            "_ZTIN10__cxxabiv117__class_type_infoE"
          ],
          [
            16825,
            "_ZTIN10__cxxabiv117__pbase_type_infoE"
          ],
          [
            16863,
            "_ZTIN10__cxxabiv119__pointer_type_infoE"
          ],
          [
            16903,
            "_ZTIN10__cxxabiv120__function_type_infoE"
          ],
          [
            16944,
            "_ZTIN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            16985,
            "_ZTIN10__cxxabiv121__vmi_class_type_infoE"
          ],
          [
            17027,
            "_ZTIN10__cxxabiv123__fundamental_type_infoE"
          ],
          [
            17071,
            "_ZTIN10__cxxabiv129__pointer_to_member_type_infoE"
          ],
          [
            17121,
            "_ZTIPDh"
          ],
          [
            17129,
            "_ZTIPDi"
          ],
          [
            17137,
            "_ZTIPDn"
          ],
          [
            17145,
            "_ZTIPDs"
          ],
          [
            17153,
            "_ZTIPDu"
          ],
          [
            17161,
            "_ZTIPKDh"
          ],
          [
            17170,
            "_ZTIPKDi"
          ],
          [
            17179,
            "_ZTIPKDn"
          ],
          [
            17188,
            "_ZTIPKDs"
          ],
          [
            17197,
            "_ZTIPKDu"
          ],
          [
            17206,
            "_ZTIPKa"
          ],
          [
            17214,
            "_ZTIPKb"
          ],
          [
            17222,
            "_ZTIPKc"
          ],
          [
            17230,
            "_ZTIPKd"
          ],
          [
            17238,
            "_ZTIPKe"
          ],
          [
            17246,
            "_ZTIPKf"
          ],
          [
            17254,
            "_ZTIPKg"
          ],
          [
            17262,
            "_ZTIPKh"
          ],
          [
            17270,
            "_ZTIPKi"
          ],
          [
            17278,
            "_ZTIPKj"
          ],
          [
            17286,
            "_ZTIPKl"
          ],
          [
            17294,
            "_ZTIPKm"
          ],
          [
            17302,
            "_ZTIPKn"
          ],
          [
            17310,
            "_ZTIPKo"
          ],
          [
            17318,
            "_ZTIPKs"
          ],
          [
            17326,
            "_ZTIPKt"
          ],
          [
            17334,
            "_ZTIPKv"
          ],
          [
            17342,
            "_ZTIPKw"
          ],
          [
            17350,
            "_ZTIPKx"
          ],
          [
            17358,
            "_ZTIPKy"
          ],
          [
            17506,
            "_ZTISt9type_info"
          ],
          [
            17678,
            "_ZTSN10__cxxabiv116__enum_type_infoE"
          ],
          [
            17715,
            "_ZTSN10__cxxabiv116__shim_type_infoE"
          ],
          [
            17752,
            "_ZTSN10__cxxabiv117__array_type_infoE"
          ],
          [
            17790,
            "_ZTSN10__cxxabiv117__class_type_infoE"
          ],
          [
            17828,
            "_ZTSN10__cxxabiv117__pbase_type_infoE"
          ],
          [
            17866,
            "_ZTSN10__cxxabiv119__pointer_type_infoE"
          ],
          [
            17906,
            "_ZTSN10__cxxabiv120__function_type_infoE"
          ],
          [
            17947,
            "_ZTSN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            17988,
            "_ZTSN10__cxxabiv121__vmi_class_type_infoE"
          ],
          [
            18030,
            "_ZTSN10__cxxabiv123__fundamental_type_infoE"
          ],
          [
            18074,
            "_ZTSN10__cxxabiv129__pointer_to_member_type_infoE"
          ],
          [
            18124,
            "_ZTSPDh"
          ],
          [
            18132,
            "_ZTSPDi"
          ],
          [
            18140,
            "_ZTSPDn"
          ],
          [
            18148,
            "_ZTSPDs"
          ],
          [
            18156,
            "_ZTSPDu"
          ],
          [
            18164,
            "_ZTSPKDh"
          ],
          [
            18173,
            "_ZTSPKDi"
          ],
          [
            18182,
            "_ZTSPKDn"
          ],
          [
            18191,
            "_ZTSPKDs"
          ],
          [
            18200,
            "_ZTSPKDu"
          ],
          [
            18209,
            "_ZTSPKa"
          ],
          [
            18217,
            "_ZTSPKb"
          ],
          [
            18225,
            "_ZTSPKc"
          ],
          [
            18233,
            "_ZTSPKd"
          ],
          [
            18241,
            "_ZTSPKe"
          ],
          [
            18249,
            "_ZTSPKf"
          ],
          [
            18257,
            "_ZTSPKg"
          ],
          [
            18265,
            "_ZTSPKh"
          ],
          [
            18273,
            "_ZTSPKi"
          ],
          [
            18281,
            "_ZTSPKj"
          ],
          [
            18289,
            "_ZTSPKl"
          ],
          [
            18297,
            "_ZTSPKm"
          ],
          [
            18305,
            "_ZTSPKn"
          ],
          [
            18313,
            "_ZTSPKo"
          ],
          [
            18321,
            "_ZTSPKs"
          ],
          [
            18329,
            "_ZTSPKt"
          ],
          [
            18337,
            "_ZTSPKv"
          ],
          [
            18345,
            "_ZTSPKw"
          ],
          [
            18353,
            "_ZTSPKx"
          ],
          [
            18361,
            "_ZTSPKy"
          ],
          [
            18629,
            "_ZTVN10__cxxabiv116__enum_type_infoE"
          ],
          [
            18666,
            "_ZTVN10__cxxabiv116__shim_type_infoE"
          ],
          [
            18703,
            "_ZTVN10__cxxabiv117__array_type_infoE"
          ],
          [
            18741,
            "_ZTVN10__cxxabiv117__pbase_type_infoE"
          ],
          [
            18779,
            "_ZTVN10__cxxabiv119__pointer_type_infoE"
          ],
          [
            18819,
            "_ZTVN10__cxxabiv120__function_type_infoE"
          ],
          [
            18860,
            "_ZTVN10__cxxabiv121__vmi_class_type_infoE"
          ],
          [
            18902,
            "_ZTVN10__cxxabiv123__fundamental_type_infoE"
          ],
          [
            18946,
            "_ZTVN10__cxxabiv129__pointer_to_member_type_infoE"
          ],
          [
            18996,
            "__cxa_pure_virtual"
          ],
          [
            19015,
            "__dynamic_cast"
          ],
          [
            19037,
            "_ZNKSt10bad_typeid4whatEv"
          ],
          [
            19063,
            "_ZNKSt8bad_cast4whatEv"
          ],
          [
            19331,
            "_ZTISt10bad_typeid"
          ],
          [
            19350,
            "_ZTISt8bad_cast"
          ],
          [
            19366,
            "_ZTSSt10bad_typeid"
          ],
          [
            19385,
            "_ZTSSt8bad_cast"
          ],
          [
            19401,
            "_ZTSSt9type_info"
          ],
          [
            19418,
            "_ZTVSt10bad_typeid"
          ],
          [
            19437,
            "_ZTVSt8bad_cast"
          ],
          [
            19453,
            "_ZTVSt9type_info"
          ],
          [
            19470,
            "__cxa_deleted_virtual"
          ],
          [
            19492,
            "pthread_create"
          ],
          [
            19507,
            "dl_iterate_phdr"
          ],
          [
            19523,
            "libdl.so"
          ],
          [
            19532,
            "libc.so"
          ],
          [
            19540,
            "_edata"
          ],
          [
            19547,
            "__bss_start"
          ],
          [
            19559,
            "__bss_start__"
          ],
          [
            19573,
            "__bss_end__"
          ],
          [
            19585,
            "__end__"
          ],
          [
            19598,
            "libnmmvm.so"
          ],
          [
            19610,
            "LIBC"
          ],
          [
            67929,
            "i48h"
          ],
          [
            97812,
            "eid8"
          ],
          [
            118516,
            "Lyixk"
          ],
          [
            201720,
            "length=%d; index=%d"
          ],
          [
            201748,
            "bad packed switch magic"
          ],
          [
            201772,
            "bad sparse switch magic"
          ],
          [
            201796,
            "bad array data magic"
          ],
          [
            201828,
            "UUUUUU)UUUUUU\u0026"
          ],
          [
            202007,
            "l*llllll\u003ellelll["
          ],
          [
            202161,
            "b\u0026bbbbbb9bb\\bbbS"
          ],
          [
            202734,
            "Can't new array"
          ],
          [
            202750,
            "divide by zero"
          ],
          [
            202765,
            "bad filled array req"
          ],
          [
            202786,
            "filled-new-array not implemented for anything but 'int'"
          ],
          [
            202867,
            "java/lang/Boolean"
          ],
          [
            202885,
            "java/lang/Byte"
          ],
          [
            202900,
            "java/lang/Character"
          ],
          [
            202920,
            "java/lang/Short"
          ],
          [
            202936,
            "java/lang/Integer"
          ],
          [
            202954,
            "java/lang/Float"
          ],
          [
            202970,
            "java/lang/Long"
          ],
          [
            202985,
            "java/lang/Double"
          ],
          [
            203002,
            "java/lang/NoClassDefFoundError"
          ],
          [
            203033,
            "java/lang/NoSuchFieldError"
          ],
          [
            203060,
            "java/lang/NoSuchFieldException"
          ],
          [
            203091,
            "java/lang/NoSuchMethodError"
          ],
          [
            203119,
            "java/lang/NullPointerException"
          ],
          [
            203150,
            "java/lang/ArithmeticException"
          ],
          [
            203180,
            "java/lang/InternalError"
          ],
          [
            203204,
            "java/lang/NegativeArraySizeException"
          ],
          [
            203241,
            "java/lang/ArrayIndexOutOfBoundsException"
          ],
          [
            203282,
            "java/lang/ClassCastException"
          ],
          [
            203311,
            "java/lang/ClassNotFoundException"
          ],
          [
            203344,
            "java/lang/RuntimeException"
          ],
          [
            203371,
            "TYPE"
          ]
        ],
        "sz": 256056,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.39"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.46"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 39.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 268.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libnmmvm.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 39.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 8.81"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 3728.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr"
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 268.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "bad array data magic",
              "bad packed switch magic",
              "bad sparse switch magic"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libnmmvm.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.39"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 268.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 39.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "closelog"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 289.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 268.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "3ddb6258412f548fe33b117575d5d480c70ca34668b2dcb12f7421599ad46816",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libnmmvm.so",
        "type": "elf"
      },
      {
        "f": "O₃(Dy₂ErS)H₃(CmFDb)Md₂(Bi₄He)",
        "x": 5,
        "dp": 1,
        "id": 7,
        "is": [
          "",
          "cxa_finalize",
          "cxa_atexit",
          "AndroidBitmap_getInfo",
          "AndroidBitmap_lockPixels",
          "stack_chk_fail",
          "AndroidBitmap_unlockPixels",
          "free",
          "strlen",
          "strncmp",
          "memcpy",
          "fclose",
          "memset",
          "calloc",
          "errno",
          "strncat_chk",
          "strerror_r",
          "fseeko",
          "fopen",
          "stat64",
          "ftell",
          "malloc",
          "dup",
          "close",
          "eventfd",
          "lseek64",
          "fdopen",
          "fstat64",
          "fread",
          "memcpy_chk",
          "realloc",
          "clock_gettime",
          "pthread_mutex_lock",
          "glTexImage2D",
          "pthread_mutex_unlock",
          "glTexSubImage2D",
          "pthread_mutex_init",
          "pthread_create",
          "pthread_mutex_destroy",
          "poll",
          "pthread_join",
          "pthread_cond_init",
          "eventfd_read",
          "ANativeWindow_fromSurface",
          "ANativeWindow_setBuffersGeometry",
          "ANativeWindow_release",
          "ANativeWindow_lock",
          "ANativeWindow_unlockAndPost",
          "pthread_cond_wait",
          "pthread_cond_signal",
          "pthread_cond_destroy",
          "eventfd_write"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libjnigraphics.so",
              "libandroid.so",
              "libGLESv2.so",
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libpl_droidsonroids_gif.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "needed_libs": 7.0,
            "dynsym_count": 97.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 9.0,
            "little_endian": true,
            "pltreloc_count": 51.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 9.0,
            "section_header_count": 25.0,
            "load_segment_max_p_memsz": 37984.0,
            "load_segment_max_p_filesz": 37984.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 41024.0
          },
          "binary": {
            "code_size": 22720.0,
            "func_count": 81.0,
            "has_overlay": true,
            "code_entropy": 5.41,
            "data_entropy": 2.55,
            "export_count": 45.0,
            "func_density": 3.65,
            "import_count": 52.0,
            "overlay_size": 1600.0,
            "string_count": 182.0,
            "avg_func_size": 305.33,
            "overlay_ratio": 0.04,
            "section_count": 24.0,
            "avg_complexity": 7.6,
            "import_density": 2.34,
            "max_complexity": 70.0,
            "string_density": 8.2,
            "overall_entropy": 2.86,
            "overlay_entropy": 1.51,
            "avg_basic_blocks": 12.11,
            "avg_section_size": 1619.21,
            "dependency_count": 7.0,
            "entropy_variance": 1.99,
            "avg_string_length": 26.25,
            "complexity_per_kb": 0.34,
            "max_string_length": 157.0,
            "avg_string_entropy": 3.4,
            "code_to_data_ratio": 1.41,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.53,
            "total_basic_blocks": 981.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 21.03,
            "high_complexity_funcs": 1.0,
            "largest_section_ratio": 0.53,
            "provenance_id_present": true,
            "sentence_string_count": 31.0,
            "sentence_string_ratio": 0.17,
            "behavioral_import_ratio": 0.04,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            580,
            "Android"
          ],
          [
            592,
            "r25c"
          ],
          [
            656,
            "9519653"
          ],
          [
            4473,
            "__cxa_finalize"
          ],
          [
            4488,
            "__cxa_atexit"
          ],
          [
            4501,
            "AndroidBitmap_getInfo"
          ],
          [
            4523,
            "AndroidBitmap_lockPixels"
          ],
          [
            4548,
            "__stack_chk_fail"
          ],
          [
            4565,
            "AndroidBitmap_unlockPixels"
          ],
          [
            4592,
            "Java_pl_droidsonroids_gif_GifInfoHandle_renderFrame"
          ],
          [
            4644,
            "Java_pl_droidsonroids_gif_GifInfoHandle_reset"
          ],
          [
            4690,
            "Java_pl_droidsonroids_gif_GifInfoHandle_setSpeedFactor"
          ],
          [
            4745,
            "Java_pl_droidsonroids_gif_GifInfoHandle_seekToTime"
          ],
          [
            4796,
            "Java_pl_droidsonroids_gif_GifInfoHandle_seekToFrame"
          ],
          [
            4848,
            "Java_pl_droidsonroids_gif_GifInfoHandle_saveRemainder"
          ],
          [
            4902,
            "Java_pl_droidsonroids_gif_GifInfoHandle_restoreRemainder"
          ],
          [
            4959,
            "free"
          ],
          [
            4964,
            "strlen"
          ],
          [
            4971,
            "strncmp"
          ],
          [
            4979,
            "memcpy"
          ],
          [
            4986,
            "Java_pl_droidsonroids_gif_GifInfoHandle_free"
          ],
          [
            5031,
            "fclose"
          ],
          [
            5038,
            "memset"
          ],
          [
            5045,
            "calloc"
          ],
          [
            5052,
            "__errno"
          ],
          [
            5060,
            "__strncat_chk"
          ],
          [
            5074,
            "strerror_r"
          ],
          [
            5085,
            "fseeko"
          ],
          [
            5092,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openFile"
          ],
          [
            5141,
            "fopen"
          ],
          [
            5147,
            "stat64"
          ],
          [
            5160,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openByteArray"
          ],
          [
            5214,
            "malloc"
          ],
          [
            5221,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openDirectByteBuffer"
          ],
          [
            5282,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openStream"
          ],
          [
            5333,
            "Java_pl_droidsonroids_gif_GifInfoHandle_extractNativeFileDescriptor"
          ],
          [
            5405,
            "close"
          ],
          [
            5411,
            "Java_pl_droidsonroids_gif_GifInfoHandle_createTempNativeFileDescriptor"
          ],
          [
            5482,
            "eventfd"
          ],
          [
            5490,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openNativeFileDescriptor"
          ],
          [
            5555,
            "lseek64"
          ],
          [
            5563,
            "fdopen"
          ],
          [
            5570,
            "fstat64"
          ],
          [
            5578,
            "fread"
          ],
          [
            5584,
            "__memcpy_chk"
          ],
          [
            5597,
            "realloc"
          ],
          [
            5605,
            "Java_pl_droidsonroids_gif_GifInfoHandle_setOptions"
          ],
          [
            5667,
            "clock_gettime"
          ],
          [
            5681,
            "JNI_OnUnload"
          ],
          [
            5694,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getComment"
          ],
          [
            5745,
            "Java_pl_droidsonroids_gif_GifInfoHandle_isAnimationCompleted"
          ],
          [
            5806,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getLoopCount"
          ],
          [
            5859,
            "Java_pl_droidsonroids_gif_GifInfoHandle_setLoopCount"
          ],
          [
            5912,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getDuration"
          ],
          [
            5964,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getSourceLength"
          ],
          [
            6020,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getCurrentPosition"
          ],
          [
            6079,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getMetadataByteCount"
          ],
          [
            6140,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getAllocationByteCount"
          ],
          [
            6203,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getNativeErrorCode"
          ],
          [
            6262,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getCurrentLoop"
          ],
          [
            6317,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getCurrentFrameIndex"
          ],
          [
            6378,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getSavedState"
          ],
          [
            6432,
            "Java_pl_droidsonroids_gif_GifInfoHandle_restoreSavedState"
          ],
          [
            6490,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getFrameDuration"
          ],
          [
            6547,
            "Java_pl_droidsonroids_gif_GifInfoHandle_isOpaque"
          ],
          [
            6596,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getWidth"
          ],
          [
            6645,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getHeight"
          ],
          [
            6695,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getNumberOfFrames"
          ],
          [
            6753,
            "Java_pl_droidsonroids_gif_GifInfoHandle_glTexImage2D"
          ],
          [
            6806,
            "pthread_mutex_lock"
          ],
          [
            6825,
            "glTexImage2D"
          ],
          [
            6838,
            "pthread_mutex_unlock"
          ],
          [
            6859,
            "Java_pl_droidsonroids_gif_GifInfoHandle_glTexSubImage2D"
          ],
          [
            6915,
            "glTexSubImage2D"
          ],
          [
            6931,
            "Java_pl_droidsonroids_gif_GifInfoHandle_initTexImageDescriptor"
          ],
          [
            6994,
            "pthread_mutex_init"
          ],
          [
            7013,
            "Java_pl_droidsonroids_gif_GifInfoHandle_startDecoderThread"
          ],
          [
            7072,
            "pthread_create"
          ],
          [
            7087,
            "pthread_mutex_destroy"
          ],
          [
            7114,
            "Java_pl_droidsonroids_gif_GifInfoHandle_stopDecoderThread"
          ],
          [
            7172,
            "pthread_join"
          ],
          [
            7185,
            "Java_pl_droidsonroids_gif_GifInfoHandle_seekToFrameGL"
          ],
          [
            7239,
            "Java_pl_droidsonroids_gif_GifInfoHandle_bindSurface"
          ],
          [
            7291,
            "pthread_cond_init"
          ],
          [
            7309,
            "eventfd_read"
          ],
          [
            7322,
            "ANativeWindow_fromSurface"
          ],
          [
            7348,
            "ANativeWindow_setBuffersGeometry"
          ],
          [
            7381,
            "ANativeWindow_release"
          ],
          [
            7403,
            "ANativeWindow_lock"
          ],
          [
            7422,
            "ANativeWindow_unlockAndPost"
          ],
          [
            7450,
            "pthread_cond_wait"
          ],
          [
            7468,
            "pthread_cond_signal"
          ],
          [
            7488,
            "pthread_cond_destroy"
          ],
          [
            7509,
            "Java_pl_droidsonroids_gif_GifInfoHandle_postUnbindSurface"
          ],
          [
            7567,
            "eventfd_write"
          ],
          [
            7581,
            "libc.so"
          ],
          [
            7589,
            "LIBC"
          ],
          [
            7594,
            "libjnigraphics.so"
          ],
          [
            7612,
            "libandroid.so"
          ],
          [
            7626,
            "libGLESv2.so"
          ],
          [
            7639,
            "liblog.so"
          ],
          [
            7649,
            "libm.so"
          ],
          [
            7657,
            "libdl.so"
          ],
          [
            7666,
            "libpl_droidsonroids_gif.so"
          ],
          [
            9143,
            "$java/lang/NullPointerException"
          ],
          [
            9175,
            "read"
          ],
          [
            9188,
            "Render mutex destroy failed"
          ],
          [
            9217,
            "Could not write to eventfd"
          ],
          [
            9245,
            "(ILjava/lang/String;)V"
          ],
          [
            9268,
            "NewGlobalRef failed"
          ],
          [
            9288,
            "Failed to allocate native memory"
          ],
          [
            9327,
            "Could not poll on eventfd"
          ],
          [
            9354,
            "Slurp mutex initialization failed"
          ],
          [
            9389,
            "\u003cinit\u003e"
          ],
          [
            9396,
            "Eventfd creation failed"
          ],
          [
            9438,
            "Could not create state array"
          ],
          [
            9467,
            "Lock pixels error"
          ],
          [
            9485,
            "Could not read from eventfd"
          ],
          [
            9518,
            "Display loop poll failed"
          ],
          [
            9544,
            "GetStringUTFChars failed"
          ],
          [
            9569,
            "Slurp condition variable initialization failed"
          ],
          [
            9619,
            "Eventfd close failed"
          ],
          [
            9641,
            "CLOCK_MONOTONIC_RAW is not present"
          ],
          [
            9676,
            "Input source is null"
          ],
          [
            9697,
            "Lock pixels error, bad parameter"
          ],
          [
            9730,
            "Unlock pixels error"
          ],
          [
            9750,
            "pl/droidsonroids/gif/GifIOException"
          ],
          [
            9786,
            "Slurp thread creation failed"
          ],
          [
            9816,
            "Lock pixels error, JNI exception"
          ],
          [
            9849,
            "ANIMEXTS1.0"
          ],
          [
            9861,
            "Buffers geometry setting failed"
          ],
          [
            9894,
            "Unlock pixels error, bad parameter"
          ],
          [
            9929,
            "java/lang/OutOfMemoryError"
          ],
          [
            9956,
            "GifIOThread"
          ],
          [
            9968,
            "Animation end poll failed"
          ],
          [
            9995,
            "Slurp mutex destroy failed"
          ],
          [
            10023,
            "Unlock pixels error, JNI exception"
          ],
          [
            10058,
            "java/lang/RuntimeException"
          ],
          [
            10085,
            "Slurp thread join failed"
          ],
          [
            10110,
            "reset"
          ],
          [
            10116,
            "Render cond  destroy failed"
          ],
          [
            10145,
            "Could not get bitmap info"
          ],
          [
            10171,
            "Render mutex initialization failed"
          ],
          [
            10207,
            "Render condition variable initialization failed"
          ],
          [
            10256,
            "Slurp cond destroy failed"
          ],
          [
            10309,
            "NETSCAPE2.0"
          ],
          [
            10321,
            "descriptor"
          ],
          [
            10336,
            "QQQRRRSSSTTTUUUV;\u003c\u003c\u003c===\u003e\u003e\u003e???@@@FFGGGHHHIIIJJJKK"
          ],
          [
            10416,
            "vvwwwxxxyyyzzz{{"
          ],
          [
            10493,
            "hex",
            "\u0011\u0012\"34DUV"
          ],
          [
            10640,
            "VVWWWXXXYYYZZZ[["
          ],
          [
            10704,
            "66777888999:::;;KLLLMMMNNNOOOPPP"
          ],
          [
            10752,
            "+,,,---...///000klllmmmnnnoooppp"
          ],
          [
            10880,
            "ffggghhhiiijjjkk{|||}}}~~~"
          ],
          [
            10912,
            "aaabbbcccdddeeef"
          ],
          [
            10992,
            "AAABBBCCCDDDEEEF"
          ],
          [
            18821,
            "j98w6"
          ],
          [
            28785,
            "C_8B"
          ],
          [
            39016,
            "Linker: LLD 14.0.7"
          ],
          [
            39035,
            "Android (9352603, based on r450784d1) clang version 14.0.7 (https://android.googlesource.com/toolchain/llvm-project 4c603efb0cca"
          ],
          [
            39195,
            ".fini_array"
          ],
          [
            39207,
            ".text"
          ],
          [
            39213,
            ".got"
          ],
          [
            39218,
            ".comment"
          ],
          [
            39227,
            ".note.android.ident"
          ],
          [
            39247,
            ".got.plt"
          ],
          [
            39256,
            ".rela.plt"
          ],
          [
            39266,
            ".bss"
          ],
          [
            39271,
            ".dynstr"
          ],
          [
            39279,
            ".eh_frame_hdr"
          ],
          [
            39293,
            ".gnu.version_r"
          ],
          [
            39308,
            ".data.rel.ro"
          ],
          [
            39321,
            ".rela.dyn"
          ],
          [
            39331,
            ".gnu.version"
          ],
          [
            39344,
            ".dynsym"
          ],
          [
            39352,
            ".gnu.hash"
          ],
          [
            39362,
            ".eh_frame"
          ],
          [
            39372,
            ".note.gnu.build-id"
          ],
          [
            39391,
            ".dynamic"
          ],
          [
            39400,
            ".shstrtab"
          ],
          [
            39410,
            ".rodata"
          ],
          [
            39418,
            ".data"
          ]
        ],
        "sz": 41024,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (legacy 64-bit)",
            "e": [
              "stat64",
              "fstat64"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-legacy64",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libpl_droidsonroids_gif.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1027",
            "d": "Unusual character combinations",
            "e": [
              ";\u003c\u003c\u003c===\u003e\u003e\u003e???"
            ],
            "i": "micro-behaviors/data/encode/xor::unusual-character-combinations",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "sym.imp.fseeko",
              "fseeko"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "loop poll"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.40"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 52.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 81.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libpl_droidsonroids_gif.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "d": "Duplicate file descriptor",
            "e": [
              "dup"
            ],
            "i": "micro-behaviors/process/fd/dup::dup",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 52.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "Java_pl_droidsonroids_gif_GifInfoHandle_setSpeedFactor"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-77",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 7.60"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 81.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "d": "poll() I/O multiplexing",
            "e": [
              "poll"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::poll-multiplex",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 52.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 52.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libpl_droidsonroids_gif.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.86"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 81.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 52.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "Eventfd close failed",
              "close",
              "fclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Tiny C string section ratio",
            "e": [
              " = 0.0% of total (0 / 41024 bytes)"
            ],
            "i": "metadata/binary/section/metrics::tiny-cstring-section",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "7b81f0e8c4c306ce5cdbc14a8dc35283efa3a19a6432b1902e40c56986a16032",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libpl_droidsonroids_gif.so",
        "type": "elf"
      },
      {
        "f": "O₆(AlAs₂CaDy₂Er₂S)H₄(Cm₂Cr₂Db₂F)Md(Bi₃)",
        "x": 9,
        "dp": 1,
        "id": 8,
        "is": [
          "",
          "pthread_mutex_destroy",
          "pipe",
          "pthread_create",
          "pthread_join",
          "realloc",
          "open",
          "ALooper_addFd",
          "cxa_finalize",
          "ftell",
          "ALooper_acquire",
          "calloc",
          "fread",
          "pthread_cond_destroy",
          "strncmp",
          "read",
          "clock",
          "pthread_mutex_init",
          "pthread_cond_init",
          "vsnprintf",
          "strerror",
          "qsort",
          "errno",
          "srand",
          "snprintf",
          "strcat",
          "write",
          "time",
          "gmtime_r",
          "rand",
          "sF",
          "memcmp",
          "pthread_cond_timedwait",
          "ALooper_forThread",
          "fclose",
          "lseek",
          "fflush",
          "fputc",
          "stack_chk_fail",
          "gettimeofday",
          "pthread_cond_wait",
          "strncpy",
          "android_log_print",
          "strchr",
          "fseek",
          "sprintf",
          "pthread_mutex_lock",
          "memmove",
          "strstr",
          "strdup",
          "usleep",
          "strlen",
          "close",
          "remove",
          "fsync",
          "rename",
          "fprintf",
          "isprint",
          "malloc",
          "memcpy",
          "memset",
          "fopen",
          "fwrite",
          "pthread_cond_broadcast",
          "free",
          "strcpy",
          "pthread_cond_signal",
          "pthread_mutex_unlock",
          "clock_gettime",
          "cxa_atexit"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libz.so",
              "liblog.so",
              "libandroid.so",
              "libstdc++.so",
              "libc.so",
              "libm.so",
              "libdl.so"
            ],
            "soname": "libsls_producer.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 61456.0,
            "needed_libs": 7.0,
            "dynsym_count": 757.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 101.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 299.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "init_array_count": 1.0,
            "program_header_count": 8.0,
            "section_header_count": 24.0,
            "load_segment_max_p_memsz": 816368.0,
            "load_segment_max_p_filesz": 816368.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 825280.0
          },
          "binary": {
            "code_size": 694504.0,
            "func_count": 617.0,
            "entry_point": 61456.0,
            "has_overlay": true,
            "code_entropy": 5.87,
            "data_entropy": 2.84,
            "export_count": 684.0,
            "func_density": 0.91,
            "import_count": 70.0,
            "overlay_size": 1543.0,
            "string_count": 1073.0,
            "avg_func_size": 7265.78,
            "overlay_ratio": 0.0,
            "section_count": 23.0,
            "avg_complexity": 31.64,
            "import_density": 0.1,
            "max_complexity": 864.0,
            "string_density": 1.58,
            "aliased_exports": 8.0,
            "overall_entropy": 3.05,
            "overlay_entropy": 1.64,
            "avg_basic_blocks": 54.33,
            "avg_section_size": 35675.61,
            "dependency_count": 7.0,
            "entropy_variance": 1.88,
            "avg_string_length": 30.9,
            "complexity_per_kb": 0.05,
            "max_string_length": 277.0,
            "avg_string_entropy": 3.65,
            "code_to_data_ratio": 5.51,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.84,
            "total_basic_blocks": 33524.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 25.62,
            "high_complexity_funcs": 127.0,
            "largest_section_ratio": 0.84,
            "provenance_id_present": true,
            "sentence_string_count": 181.0,
            "sentence_string_ratio": 0.17,
            "behavioral_import_ratio": 0.07,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            0,
            "snprintf"
          ],
          [
            23841,
            "__cxa_finalize"
          ],
          [
            23856,
            "__cxa_atexit"
          ],
          [
            23869,
            "ALooper_forThread"
          ],
          [
            23898,
            "_ZN7_JNIEnv19CallStaticIntMethodEP7_jclassP10_jmethodIDz"
          ],
          [
            23955,
            "__stack_chk_fail"
          ],
          [
            23977,
            "log_set_http_post_func"
          ],
          [
            24000,
            "main_thread_looper"
          ],
          [
            24019,
            "os_http_post"
          ],
          [
            24039,
            "ALooper_acquire"
          ],
          [
            24055,
            "ALooper_addFd"
          ],
          [
            24069,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_create_1log_1producer"
          ],
          [
            24146,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_destroy_1log_1producer"
          ],
          [
            24224,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_get_1log_1producer_1client"
          ],
          [
            24306,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_log_1producer_1client_1add_1log_1with_1len"
          ],
          [
            24404,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_log_1producer_1client_1add_1log_1with_1len_1time_1int32"
          ],
          [
            24515,
            "create_log_producer"
          ],
          [
            24535,
            "destroy_log_producer"
          ],
          [
            24556,
            "get_log_producer_client"
          ],
          [
            24580,
            "log_producer_client_add_log_with_len_time_int32"
          ],
          [
            24628,
            "on_log_send_done"
          ],
          [
            24645,
            "pipe"
          ],
          [
            24650,
            "strlen"
          ],
          [
            24657,
            "strncpy"
          ],
          [
            24665,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_create_1log_1producer_1config"
          ],
          [
            24750,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1add_1tag"
          ],
          [
            24837,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1is_1valid"
          ],
          [
            24925,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1reset_1security_1token"
          ],
          [
            25026,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1id"
          ],
          [
            25120,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1key"
          ],
          [
            25215,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1callback_1from_1sender_1thread"
          ],
          [
            25329,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1compress_1type"
          ],
          [
            25427,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1connect_1timeout_1sec"
          ],
          [
            25532,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1destroy_1flusher_1wait_1sec"
          ],
          [
            25643,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1destroy_1sender_1wait_1sec"
          ],
          [
            25753,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1drop_1delay_1log"
          ],
          [
            25853,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1drop_1unauthorized_1log"
          ],
          [
            25960,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1endpoint"
          ],
          [
            26052,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1get_1time_1unix_1func"
          ],
          [
            26157,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1http_1header_1inject"
          ],
          [
            26261,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1logstore"
          ],
          [
            26353,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1max_1buffer_1limit"
          ],
          [
            26455,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1max_1log_1delay_1time"
          ],
          [
            26560,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1net_1interface"
          ],
          [
            26658,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1ntp_1time_1offset"
          ],
          [
            26759,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1packet_1log_1bytes"
          ],
          [
            26861,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1packet_1log_1count"
          ],
          [
            26963,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1packet_1timeout"
          ],
          [
            27062,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent"
          ],
          [
            27156,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1file_1path"
          ],
          [
            27262,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1force_1flush"
          ],
          [
            27370,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1max_1file_1count"
          ],
          [
            27482,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1max_1file_1size"
          ],
          [
            27593,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1max_1log_1count"
          ],
          [
            27704,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1project"
          ],
          [
            27795,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1send_1thread_1count"
          ],
          [
            27898,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1send_1timeout_1sec"
          ],
          [
            28000,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1source"
          ],
          [
            28090,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1topic"
          ],
          [
            28179,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1using_1http"
          ],
          [
            28274,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1debug"
          ],
          [
            28350,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1persistent_1config_1is_1enabled"
          ],
          [
            28452,
            "aos_log_set_level"
          ],
          [
            28470,
            "create_log_producer_config"
          ],
          [
            28497,
            "g_time_func"
          ],
          [
            28509,
            "log_producer_config_add_tag"
          ],
          [
            28537,
            "log_producer_config_is_valid"
          ],
          [
            28566,
            "log_producer_config_reset_security_token"
          ],
          [
            28607,
            "log_producer_config_set_access_id"
          ],
          [
            28641,
            "log_producer_config_set_access_key"
          ],
          [
            28676,
            "log_producer_config_set_callback_from_sender_thread"
          ],
          [
            28728,
            "log_producer_config_set_compress_type"
          ],
          [
            28766,
            "log_producer_config_set_connect_timeout_sec"
          ],
          [
            28810,
            "log_producer_config_set_destroy_flusher_wait_sec"
          ],
          [
            28859,
            "log_producer_config_set_destroy_sender_wait_sec"
          ],
          [
            28907,
            "log_producer_config_set_drop_delay_log"
          ],
          [
            28946,
            "log_producer_config_set_drop_unauthorized_log"
          ],
          [
            28992,
            "log_producer_config_set_endpoint"
          ],
          [
            29025,
            "log_producer_config_set_logstore"
          ],
          [
            29058,
            "log_producer_config_set_max_buffer_limit"
          ],
          [
            29099,
            "log_producer_config_set_max_log_delay_time"
          ],
          [
            29142,
            "log_producer_config_set_net_interface"
          ],
          [
            29180,
            "log_producer_config_set_ntp_time_offset"
          ],
          [
            29220,
            "log_producer_config_set_packet_log_bytes"
          ],
          [
            29261,
            "log_producer_config_set_packet_log_count"
          ],
          [
            29302,
            "log_producer_config_set_packet_timeout"
          ],
          [
            29341,
            "log_producer_config_set_persistent"
          ],
          [
            29376,
            "log_producer_config_set_persistent_file_path"
          ],
          [
            29421,
            "log_producer_config_set_persistent_force_flush"
          ],
          [
            29468,
            "log_producer_config_set_persistent_max_file_count"
          ],
          [
            29518,
            "log_producer_config_set_persistent_max_file_size"
          ],
          [
            29567,
            "log_producer_config_set_persistent_max_log_count"
          ],
          [
            29616,
            "log_producer_config_set_project"
          ],
          [
            29648,
            "log_producer_config_set_send_thread_count"
          ],
          [
            29690,
            "log_producer_config_set_send_timeout_sec"
          ],
          [
            29731,
            "log_producer_config_set_source"
          ],
          [
            29762,
            "log_producer_config_set_topic"
          ],
          [
            29792,
            "log_producer_config_set_using_http"
          ],
          [
            29827,
            "log_producer_persistent_config_is_enabled"
          ],
          [
            29869,
            "log_set_get_time_unix_func"
          ],
          [
            29896,
            "sls_set_android_http_inject"
          ],
          [
            29924,
            "__android_log_print"
          ],
          [
            29944,
            "aos_print_log_android"
          ],
          [
            29966,
            "log_set_http_header_inject_func"
          ],
          [
            29998,
            "log_set_http_header_release_inject_func"
          ],
          [
            30038,
            "memset"
          ],
          [
            30045,
            "sls_android_set_http_inject_func"
          ],
          [
            30078,
            "sls_android_set_http_release_inject_func"
          ],
          [
            30119,
            "sls_destroy_http_injector"
          ],
          [
            30145,
            "strcat"
          ],
          [
            30152,
            "aos_log_format"
          ],
          [
            30167,
            "aos_log_level"
          ],
          [
            30181,
            "vsnprintf"
          ],
          [
            30191,
            "LOG_GET_TIME"
          ],
          [
            30204,
            "LOG_OS_HttpPost"
          ],
          [
            30220,
            "log_http_inject_headers"
          ],
          [
            30244,
            "log_http_release_inject_headers"
          ],
          [
            30276,
            "LOG_PRODUCER_DROP_ERROR"
          ],
          [
            30300,
            "LOG_PRODUCER_INVALID"
          ],
          [
            30321,
            "LOG_PRODUCER_OK"
          ],
          [
            30337,
            "add_log_full"
          ],
          [
            30350,
            "add_log_full_int32"
          ],
          [
            30369,
            "add_log_full_v2"
          ],
          [
            30385,
            "clear_log_tag"
          ],
          [
            30399,
            "create_log_persistent_manager"
          ],
          [
            30429,
            "create_log_producer_manager"
          ],
          [
            30457,
            "destroy_log_persistent_manager"
          ],
          [
            30488,
            "destroy_log_producer_config"
          ],
          [
            30516,
            "destroy_log_producer_manager"
          ],
          [
            30545,
            "log_persistent_manager_is_buffer_enough"
          ],
          [
            30585,
            "log_persistent_manager_recover"
          ],
          [
            30616,
            "log_persistent_manager_save_log"
          ],
          [
            30648,
            "log_producer_client_add_log"
          ],
          [
            30676,
            "log_producer_client_add_log_raw"
          ],
          [
            30708,
            "log_producer_client_add_log_with_array"
          ],
          [
            30747,
            "log_producer_client_add_log_with_len"
          ],
          [
            30784,
            "log_producer_client_add_log_with_len_int32"
          ],
          [
            30827,
            "log_producer_client_add_raw_log_buffer"
          ],
          [
            30866,
            "log_producer_client_network_recover"
          ],
          [
            30902,
            "log_producer_env_destroy"
          ],
          [
            30927,
            "log_producer_env_init"
          ],
          [
            30949,
            "log_producer_manager_add_log"
          ],
          [
            30978,
            "log_producer_manager_add_log_int32"
          ],
          [
            31013,
            "log_producer_manager_add_log_raw"
          ],
          [
            31046,
            "log_producer_manager_add_log_with_array"
          ],
          [
            31086,
            "log_producer_manager_send_raw_buffer"
          ],
          [
            31123,
            "on_log_persistent_manager_send_done_uuid"
          ],
          [
            31164,
            "pthread_mutex_lock"
          ],
          [
            31183,
            "pthread_mutex_unlock"
          ],
          [
            31204,
            "sls_log_destroy"
          ],
          [
            31220,
            "sls_log_init"
          ],
          [
            31233,
            "LOG_PRODUCER_PARAMETERS_INVALID"
          ],
          [
            31265,
            "LOG_PRODUCER_PERSISTENT_ERROR"
          ],
          [
            31295,
            "LOG_PRODUCER_SEND_DISCARD_ERROR"
          ],
          [
            31327,
            "LOG_PRODUCER_SEND_EXIT_BUFFERED"
          ],
          [
            31359,
            "LOG_PRODUCER_SEND_NETWORK_ERROR"
          ],
          [
            31391,
            "LOG_PRODUCER_SEND_QUOTA_ERROR"
          ],
          [
            31421,
            "LOG_PRODUCER_SEND_SERVER_ERROR"
          ],
          [
            31452,
            "LOG_PRODUCER_SEND_TIME_ERROR"
          ],
          [
            31481,
            "LOG_PRODUCER_SEND_UNAUTHORIZED"
          ],
          [
            31512,
            "LOG_PRODUCER_WRITE_ERROR"
          ],
          [
            31537,
            "is_log_producer_result_ok"
          ],
          [
            31563,
            "log_producer_config_get_security"
          ],
          [
            31596,
            "log_producer_config_set_flush_interval"
          ],
          [
            31635,
            "log_producer_config_set_log_queue_interval"
          ],
          [
            31678,
            "log_sdscpylen"
          ],
          [
            31692,
            "log_sdsfree"
          ],
          [
            31704,
            "log_sdsnew"
          ],
          [
            31715,
            "log_sdsnewEmpty"
          ],
          [
            31731,
            "memcpy"
          ],
          [
            31738,
            "pthread_mutex_destroy"
          ],
          [
            31760,
            "pthread_mutex_init"
          ],
          [
            31779,
            "strncmp"
          ],
          [
            31787,
            "_generate_pack_id_timestamp"
          ],
          [
            31815,
            "_get_pack_id"
          ],
          [
            31828,
            "_push_last_loggroup"
          ],
          [
            31848,
            "_try_flush_loggroup"
          ],
          [
            31868,
            "add_pack_id"
          ],
          [
            31880,
            "add_source"
          ],
          [
            31891,
            "add_topic"
          ],
          [
            31901,
            "clock_gettime"
          ],
          [
            31915,
            "create_log_producer_send_param"
          ],
          [
            31946,
            "fix_log_time"
          ],
          [
            31959,
            "get_log_time"
          ],
          [
            31972,
            "gettimeofday"
          ],
          [
            31985,
            "log_group_create"
          ],
          [
            32002,
            "log_group_destroy"
          ],
          [
            32020,
            "log_mbedtls_md5"
          ],
          [
            32036,
            "log_producer_flush_thread"
          ],
          [
            32062,
            "log_producer_send_data"
          ],
          [
            32085,
            "log_producer_send_fun"
          ],
          [
            32107,
            "log_producer_send_thread"
          ],
          [
            32132,
            "log_queue_create"
          ],
          [
            32149,
            "log_queue_destroy"
          ],
          [
            32167,
            "log_queue_isfull"
          ],
          [
            32184,
            "log_queue_push"
          ],
          [
            32199,
            "log_queue_size"
          ],
          [
            32214,
            "log_queue_trypop"
          ],
          [
            32231,
            "pthread_cond_destroy"
          ],
          [
            32252,
            "pthread_cond_init"
          ],
          [
            32270,
            "pthread_cond_signal"
          ],
          [
            32290,
            "pthread_cond_timedwait"
          ],
          [
            32313,
            "pthread_create"
          ],
          [
            32328,
            "pthread_join"
          ],
          [
            32341,
            "serialize_to_proto_buf_with_malloc_lz4"
          ],
          [
            32380,
            "serialize_to_proto_buf_with_malloc_no_lz4"
          ],
          [
            32422,
            "serialize_to_proto_buf_with_malloc_zstd"
          ],
          [
            32462,
            "sprintf"
          ],
          [
            32483,
            "usleep"
          ],
          [
            32490,
            "AosStatusToResult"
          ],
          [
            32508,
            "LOGE_INTERNAL_SERVER_ERROR"
          ],
          [
            32535,
            "LOGE_SERVER_BUSY"
          ],
          [
            32552,
            "LOGE_SHARD_WRITE_QUOTA_EXCEED"
          ],
          [
            32582,
            "LOGE_TIME_EXPIRED"
          ],
          [
            32600,
            "LOGE_UNAUTHORIZED"
          ],
          [
            32618,
            "LOGE_WRITE_QUOTA_EXCEED"
          ],
          [
            32642,
            "LOG_LZ4_compressBound"
          ],
          [
            32664,
            "LOG_LZ4_compress_default"
          ],
          [
            32689,
            "LOG_LZ4_decompress_safe"
          ],
          [
            32713,
            "LOG_ZSTD_decompress"
          ],
          [
            32733,
            "LOG_ZSTD_getFrameContentSize"
          ],
          [
            32762,
            "_rebuild_time_with_lz4buf"
          ],
          [
            32788,
            "_rebuild_time_with_zstdbuf"
          ],
          [
            32815,
            "fix_log_group_time"
          ],
          [
            32834,
            "free_lz4_log_buf"
          ],
          [
            32851,
            "log_producer_on_send_done"
          ],
          [
            32877,
            "log_queue_pop"
          ],
          [
            32891,
            "post_log_result_destroy"
          ],
          [
            32915,
            "post_logs_from_lz4buf_with_config"
          ],
          [
            32956,
            "calloc"
          ],
          [
            32963,
            "isprint"
          ],
          [
            32971,
            "log_sdsAllocSize"
          ],
          [
            32988,
            "log_sdsIncrLen"
          ],
          [
            33003,
            "log_sdsMakeRoomFor"
          ],
          [
            33022,
            "log_sdsRemoveFreeSpace"
          ],
          [
            33045,
            "log_sdsavail"
          ],
          [
            33058,
            "log_sdscat"
          ],
          [
            33069,
            "log_sdscatchar"
          ],
          [
            33084,
            "log_sdscatlen"
          ],
          [
            33098,
            "log_sdscatprintf"
          ],
          [
            33115,
            "log_sdscatrepr"
          ],
          [
            33130,
            "log_sdscatsds"
          ],
          [
            33144,
            "log_sdscatvprintf"
          ],
          [
            33162,
            "log_sdsclear"
          ],
          [
            33175,
            "log_sdscpy"
          ],
          [
            33186,
            "log_sdsdup"
          ],
          [
            33197,
            "log_sdsempty"
          ],
          [
            33210,
            "log_sdsgrowzero"
          ],
          [
            33226,
            "log_sdslen"
          ],
          [
            33237,
            "log_sdsnewlen"
          ],
          [
            33251,
            "log_sdsupdatelen"
          ],
          [
            33268,
            "realloc"
          ],
          [
            33276,
            "COVER_best_destroy"
          ],
          [
            33295,
            "COVER_best_finish"
          ],
          [
            33313,
            "COVER_best_init"
          ],
          [
            33329,
            "COVER_best_start"
          ]
        ],
        "sz": 825280,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "token keyword",
            "e": [
              "token"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::token",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.05"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "Large binary with few imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/package/metrics::import-count-under-80",
            "l": 2
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "eate producer client success, config",
              "eate_1log_1producer_1config",
              "eate_log_producer_config",
              "ead, config"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 23.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "References to worker pools",
            "e": [
              "ThreadPool"
            ],
            "i": "micro-behaviors/process/create/workers::worker-pool",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is 500KB+",
            "e": [
              "libsls_producer.so"
            ],
            "i": "metadata/binary/metrics/threshold::large-binary-500k",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.65"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Random seed initialization (srand)",
            "e": [
              "srand"
            ],
            "i": "micro-behaviors/os/random/crypto::srand-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 617.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "libstdc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libsls_producer.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "remove"
            ],
            "i": "micro-behaviors/fs/file/delete::remove",
            "l": 3
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 33524.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 23.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 1073.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "log_producer_config_set_access_key",
              "log_producer_config_set_access_id",
              "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1id",
              "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1key"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_CCtx type",
            "e": [
              "LOG_ZSTD_CCtx_refPrefix",
              "LOG_ZSTD_CCtx_reset",
              "LOG_ZSTD_CCtx_loadDictionary_byReference",
              "LOG_ZSTD_CCtxParams_setParameter",
              "LOG_ZSTD_CCtxParams_reset",
              "LOG_ZSTD_CCtxParams_init_advanced",
              "LOG_ZSTD_CCtx_refCDict",
              "LOG_ZSTD_CCtx_refThreadPool",
              "LOG_ZSTD_CCtx_refPrefix_advanced",
              "LOG_ZSTD_CCtx_setFParams",
              "LOG_ZSTD_CCtxParams_init",
              "LOG_ZSTD_CCtx_getParameter",
              "LOG_ZSTD_CCtxParams_getParameter",
              "LOG_ZSTD_CCtx_setCParams",
              "LOG_ZSTD_CCtx_loadDictionary",
              "LOG_ZSTD_CCtx_loadDictionary_advanced"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-cctx",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 617.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "log_mbedtls_md5_clone"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Code section comprises most binary",
            "e": [
              "binary.largest_section_ratio = 0.84"
            ],
            "i": "metadata/binary/section/content::dominant",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LZ4_compress function",
            "e": [
              "sym.LOG_LZ4_compress_fast",
              "LOG_LZ4_compress_fast_extState",
              "LOG_LZ4_compress_fast",
              "LOG_LZ4_compress_fast_continue",
              "LOG_LZ4_compress_forceExtDict",
              "LOG_LZ4_compress_continue",
              "LOG_LZ4_compress_fast_force",
              "LOG_LZ4_compress_default",
              "LOG_LZ4_compress_limitedOutput_withState",
              "LOG_LZ4_compress_limitedOutput",
              "LOG_LZ4_compress_withState",
              "LOG_LZ4_compress_destSize",
              "LOG_LZ4_compress_limitedOutput_continue",
              "LOG_LZ4_compress",
              "sym.LOG_LZ4_compress_fast_extState",
              "LOG_LZ4_compressBound"
            ],
            "i": "micro-behaviors/data/compress/library::lz4-compress",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "output keyword",
            "e": [
              "Operation made no progress over multiple calls, due to output buffer being full"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::output",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_decompress function",
            "e": [
              "LOG_ZSTD_decompressBegin_usingDDict",
              "sym.LOG_ZSTD_decompressBound",
              "LOG_ZSTD_decompressBlock_deprecated",
              "LOG_ZSTD_decompress_usingDict",
              "LOG_ZSTD_decompressBlock_internal",
              "LOG_ZSTD_decompressBegin_usingDict",
              "LOG_ZSTD_decompressStream",
              "LOG_ZSTD_decompressBlock",
              "LOG_ZSTD_decompress_usingDDict",
              "LOG_ZSTD_decompress",
              "LOG_ZSTD_decompressDCtx",
              "LOG_ZSTD_decompressBound",
              "LOG_ZSTD_decompressionMargin",
              "LOG_ZSTD_decompressContinue",
              "LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_decompressBegin"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-decompress",
            "l": 3
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "invalid send param, magic num not found",
              "[sender] invalid send param, magic num not found, num 0x%x"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write",
              "fwrite"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_compress function",
            "e": [
              "LOG_ZSTD_compressStream",
              "LOG_ZSTD_compress_advanced",
              "LOG_ZSTD_compressBlock_lazy_extDict",
              "LOG_ZSTD_compressStream2_simpleArgs",
              "LOG_ZSTD_compressBlock_greedy_dedicatedDictSearch_row",
              "LOG_ZSTD_compressBlock_lazy_dictMatchState",
              "LOG_ZSTD_compressBegin_advanced",
              "LOG_ZSTD_compressBlock_doubleFast_extDict",
              "LOG_ZSTD_compressBlock_lazy2_dedicatedDictSearch",
              "LOG_ZSTD_compressBlock_greedy_row",
              "LOG_ZSTD_compressBound",
              "LOG_ZSTD_compressBlock_btlazy2_extDict",
              "LOG_ZSTD_compressBlock_btultra_extDict",
              "LOG_ZSTD_compressContinue_public",
              "LOG_ZSTD_compressBegin_usingCDict_deprecated",
              "LOG_ZSTD_compressBlock_doubleFast_dictMatchState"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-compress",
            "l": 3
          },
          {
            "d": "Content-Type header string",
            "e": [
              "Content-Type:application/x-protobuf"
            ],
            "i": "micro-behaviors/communications/http/request/client::content-type-header",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "LZ4_decompress function",
            "e": [
              "LOG_LZ4_decompress_safe_partial",
              "sym.LOG_LZ4_decompress_safe_usingDict",
              "sym.LOG_LZ4_decompress_fast",
              "sym.LOG_LZ4_decompress_safe",
              "sym.LOG_LZ4_decompress_safe_continue",
              "sym.LOG_LZ4_decompress_safe_partial",
              "LOG_LZ4_decompress_fast_withPrefix64k",
              "LOG_LZ4_decompress_fast",
              "LOG_LZ4_decompress_safe",
              "LOG_LZ4_decompress_safe_withPrefix64k",
              "sym.LOG_LZ4_decompress_fast_continue",
              "LOG_LZ4_decompress_fast_continue",
              "LOG_LZ4_decompress_safe_forceExtDict",
              "LOG_LZ4_decompress_safe_usingDict",
              "LOG_LZ4_decompress_fast_usingDict",
              "LOG_LZ4_decompress_safe_continue"
            ],
            "i": "micro-behaviors/data/compress/library::lz4-decompress",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libsls_producer.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "MD5 hashing functions",
            "e": [
              "log_mbedtls_md5_init",
              "sym.log_mbedtls_md5",
              "sym.log_mbedtls_md5_process",
              "log_mbedtls_md5_finish",
              "log_mbedtls_md5_starts",
              "sym.log_mbedtls_md5_finish",
              "log_mbedtls_md5_update",
              "md5_to_string",
              "sym.md5_to_string",
              "log_mbedtls_md5_clone",
              "log_mbedtls_md5_process",
              "log_mbedtls_md5",
              "sym.log_mbedtls_md5_update"
            ],
            "i": "micro-behaviors/crypto/hash/digest::md5",
            "l": 3
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.05"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 617.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1073.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Random number generation (rand)",
            "e": [
              "rand"
            ],
            "i": "micro-behaviors/os/random/crypto::rand-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 70.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "LOG_ZSTD_compressEnd_public",
              "LOG_ZSTD_compressContinue_public"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.20000000298023224,
            "d": "Convert time to UTC time",
            "e": [
              "gmtime_r"
            ],
            "i": "micro-behaviors/time/query::gmtime",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "fclose",
              "log_ring_file_close"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 684.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "ZSTD core decompression support",
            "e": [
              "sym.LOG_ZSTD_decompressStream",
              "sym.LOG_ZSTD_createDStream_advanced",
              "sym.LOG_ZSTD_initDStream_usingDict",
              "LOG_ZSTD_createDStream",
              "LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_initDStream_usingDict",
              "LOG_ZSTD_decompressStream",
              "LOG_ZSTD_initDStream_usingDDict",
              "LOG_ZSTD_createDStream_advanced",
              "sym.LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_initDStream",
              "sym.LOG_ZSTD_createDStream",
              "sym.LOG_ZSTD_initDStream_usingDDict",
              "sym.LOG_ZSTD_initDStream"
            ],
            "i": "micro-behaviors/data/embedded/runtime::zstd-core-support",
            "l": 3
          },
          {
            "c": 0.20000000298023224,
            "d": "pipe keyword",
            "e": [
              "pipe"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::pipe",
            "l": 1
          },
          {
            "a": "T1071.001",
            "d": "Authorization header",
            "e": [
              "Authorization:LOG %s:%s"
            ],
            "i": "micro-behaviors/communications/http/headers::auth-header",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 0.550000011920929,
            "d": "High basic blocks per function",
            "e": [
              "binary.avg_basic_blocks = 54.33"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::many-basic-blocks",
            "l": 3,
            "m": "B0032"
          },
          {
            "a": "T1027.002",
            "c": 0.6000000238418579,
            "d": "Many high complexity functions (\u003e80)",
            "e": [
              "binary.high_complexity_funcs = 127.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::many-complex-functions",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 617.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 617.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1073.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "fwrite",
              "fseek",
              "write"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 3
          },
          {
            "d": "Seeded random number generation",
            "e": [
              "srand",
              "rand"
            ],
            "i": "micro-behaviors/os/random/crypto::seeded-random",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.overall_entropy = 3.05",
              "binary.func_count = 617.00"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "clock_gettime",
              "gettimeofday",
              "usleep"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          }
        ],
        "sha": "e17969d4cd6848125e063986fa30a43eed2de4023ab3c856c8c90e53e7b22b64",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libsls_producer.so",
        "type": "elf"
      },
      {
        "f": "O₄(CDy₂ErS)H(Db)Md(Bi₃)",
        "x": 3,
        "dp": 1,
        "id": 9,
        "is": [
          "",
          "pthread_create",
          "realloc",
          "gettid",
          "pthread_key_create",
          "vsnprintf_chk",
          "pthread_once",
          "cxa_finalize",
          "calloc",
          "syslog",
          "posix_memalign",
          "strlen_chk",
          "abort",
          "vsnprintf",
          "dl_iterate_phdr",
          "android_set_abort_message",
          "islower",
          "memmove_chk",
          "sF",
          "memcmp",
          "fputc",
          "stack_chk_fail",
          "wcslen",
          "pthread_cond_wait",
          "memchr",
          "pthread_setspecific",
          "strncpy",
          "openlog",
          "strcmp",
          "android_log_write",
          "syscall",
          "pthread_mutex_lock",
          "closelog",
          "pthread_getspecific",
          "memmove",
          "isxdigit",
          "strstr",
          "strlen",
          "vasprintf",
          "malloc",
          "memcpy",
          "memset",
          "pthread_cond_broadcast",
          "free",
          "vfprintf",
          "pthread_mutex_unlock",
          "cxa_atexit"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libspMVUpzW.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 76544.0,
            "needed_libs": 4.0,
            "dynsym_count": 569.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 1351.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 136.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 1.0,
            "program_header_count": 8.0,
            "section_header_count": 26.0,
            "load_segment_max_p_memsz": 246628.0,
            "load_segment_max_p_filesz": 246628.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 264336.0
          },
          "binary": {
            "code_size": 134092.0,
            "func_count": 388.0,
            "entry_point": 76544.0,
            "has_overlay": true,
            "code_entropy": 5.62,
            "data_entropy": 3.06,
            "export_count": 475.0,
            "func_density": 2.96,
            "import_count": 47.0,
            "overlay_size": 1665.0,
            "string_count": 689.0,
            "avg_func_size": 451.58,
            "overlay_ratio": 0.01,
            "section_count": 25.0,
            "avg_complexity": 7.67,
            "import_density": 0.36,
            "max_complexity": 149.0,
            "string_density": 5.26,
            "aliased_exports": 81.0,
            "overall_entropy": 3.34,
            "overlay_entropy": 1.63,
            "avg_basic_blocks": 12.14,
            "avg_section_size": 10463.28,
            "dependency_count": 4.0,
            "entropy_variance": 1.75,
            "avg_string_length": 28.0,
            "complexity_per_kb": 0.06,
            "max_string_length": 249.0,
            "avg_string_entropy": 3.59,
            "code_to_data_ratio": 1.05,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.5,
            "total_basic_blocks": 4710.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 30.29,
            "high_complexity_funcs": 9.0,
            "largest_section_ratio": 0.5,
            "provenance_id_present": true,
            "sentence_string_count": 33.0,
            "sentence_string_ratio": 0.05,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            0,
            "abort"
          ],
          [
            22241,
            "__cxa_finalize"
          ],
          [
            22256,
            "__cxa_atexit"
          ],
          [
            22280,
            "JNI_OnUnload"
          ],
          [
            22317,
            "_Z16LoadStaticMethodP7_JNIEnv"
          ],
          [
            22347,
            "_Z21setupOPPOWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            22409,
            "_Z21setupVivoWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            22469,
            "_Z22setupRedMiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            22532,
            "_Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            22594,
            "_Z23setupRealmeWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            22658,
            "_Z23setupXiaomiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            22720,
            "_Z24setupOnePlusWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            22783,
            "_Z24setupSamsungWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            22918,
            "_Z25setupMotoRolaWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            23041,
            "_ZN13ScopedJstringC1EP7_JNIEnvP8_jstring"
          ],
          [
            23082,
            "_ZN13ScopedJstringD1Ev"
          ],
          [
            23105,
            "_ZN7_JNIEnv14CallVoidMethodEP8_jobjectP10_jmethodIDz"
          ],
          [
            23233,
            "_ZN8VarCache9SingletonEv"
          ],
          [
            23326,
            "_ZNK13ScopedJstring7GetCharEv"
          ],
          [
            23356,
            "_ZNKSt6__ndk121__basic_string_commonILb1EE20__throw_length_errorEv"
          ],
          [
            23423,
            "_ZNSt11logic_errorC2EPKc"
          ],
          [
            23448,
            "_ZNSt12length_errorD1Ev"
          ],
          [
            23472,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2IDnEEPKc"
          ],
          [
            23549,
            "_ZTISt12length_error"
          ],
          [
            23570,
            "_ZTISt9exception"
          ],
          [
            23587,
            "_ZTVSt12length_error"
          ],
          [
            23621,
            "__cxa_allocate_exception"
          ],
          [
            23646,
            "__cxa_begin_catch"
          ],
          [
            23664,
            "__cxa_end_catch"
          ],
          [
            23680,
            "__cxa_free_exception"
          ],
          [
            23701,
            "__cxa_throw"
          ],
          [
            23713,
            "__gxx_personality_v0"
          ],
          [
            23734,
            "__stack_chk_fail"
          ],
          [
            23751,
            "g_env_key"
          ],
          [
            23761,
            "hideEnable"
          ],
          [
            23772,
            "memchr"
          ],
          [
            23779,
            "memcmp"
          ],
          [
            23786,
            "memcpy"
          ],
          [
            23793,
            "pthread_key_create"
          ],
          [
            23812,
            "strlen"
          ],
          [
            23826,
            "KNullAtuoBuffer"
          ],
          [
            23842,
            "_ZN10AutoBuffer10AllocWriteEmb"
          ],
          [
            23873,
            "_ZN10AutoBuffer11AddCapacityEm"
          ],
          [
            23949,
            "_ZN10AutoBuffer4ReadEPvm"
          ],
          [
            24057,
            "_ZN10AutoBuffer5WriteENS_5TSeekEPKvm"
          ],
          [
            24094,
            "_ZN10AutoBuffer5WriteEPKvm"
          ],
          [
            24121,
            "_ZN10AutoBuffer5WriteERKS_"
          ],
          [
            24148,
            "_ZN10AutoBuffer5WriteERKlPKvm"
          ],
          [
            24178,
            "_ZN10AutoBuffer5WriteERKlRKS_"
          ],
          [
            24208,
            "_ZN10AutoBuffer5WriteERlPKvm"
          ],
          [
            24237,
            "_ZN10AutoBuffer5WriteERlRKS_"
          ],
          [
            24266,
            "_ZN10AutoBuffer6AttachEPvm"
          ],
          [
            24293,
            "_ZN10AutoBuffer6AttachERS_"
          ],
          [
            24320,
            "_ZN10AutoBuffer6DetachEPm"
          ],
          [
            24346,
            "_ZN10AutoBuffer6LengthElm"
          ],
          [
            24425,
            "_ZN10AutoBufferC1EPKvmm"
          ],
          [
            24449,
            "_ZN10AutoBufferC1EPvmm"
          ],
          [
            24492,
            "_ZN10AutoBufferC2EPKvmm"
          ],
          [
            24516,
            "_ZN10AutoBufferC2EPvmm"
          ],
          [
            24645,
            "_ZNK10AutoBuffer4ReadERKlPvm"
          ],
          [
            24761,
            "_ZNK10AutoBuffer6LengthEv"
          ],
          [
            24813,
            "_ZNK10AutoBuffer8CapacityEv"
          ],
          [
            24841,
            "_ZNK10AutoBuffer9PosLengthEv"
          ],
          [
            24870,
            "free"
          ],
          [
            24875,
            "memmove"
          ],
          [
            24883,
            "memset"
          ],
          [
            24890,
            "realloc"
          ],
          [
            24979,
            "_Z15JNU_FreeJstringP7_JNIEnvP8_jstring"
          ],
          [
            25018,
            "_Z15JNU_JObject2MapP7_JNIEnvP8_jobject"
          ],
          [
            25091,
            "_Z17JNU_Jstring2WcharP7_JNIEnvP8_jstring"
          ],
          [
            25165,
            "_Z18JNU_FreeJbyteArrayP7_JNIEnvP11_jbyteArray"
          ],
          [
            25258,
            "_Z19JNU_Wstring2JstringP7_JNIEnvRKNSt6__ndk112basic_stringIwNS1_11char_traitsIwEENS1_9allocatorIwEEEE"
          ],
          [
            25411,
            "_Z21JNU_Buffer2JbyteArrayP7_JNIEnvPKvm"
          ],
          [
            25450,
            "_Z21JNU_Buffer2JbyteArrayP7_JNIEnvRK10AutoBuffer"
          ],
          [
            25499,
            "_Z21JNU_JbyteArray2BufferP7_JNIEnvP11_jbyteArrayR10AutoBuffer"
          ],
          [
            25625,
            "_Z26JNU_CallMethodByMethodInfoP7_JNIEnvP8_jobject13JniMethodInfoz"
          ],
          [
            25866,
            "_Z32JNU_CallStaticMethodByMethodInfoP7_JNIEnv13JniMethodInfoz"
          ],
          [
            25928,
            "_ZN7_JNIEnv16CallObjectMethodEP8_jobjectP10_jmethodIDz"
          ],
          [
            25983,
            "_ZN7_JNIEnv9NewObjectEP7_jclassP10_jmethodIDz"
          ],
          [
            26278,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE21__grow_by_and_replaceEmmmmmmPKc"
          ],
          [
            26378,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKcm"
          ],
          [
            26457,
            "_ZNSt6__ndk127__tree_balance_after_insertIPNS_16__tree_node_baseIPvEEEEvT_S5_"
          ],
          [
            26535,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_EENS_19__map_value_compareIS7"
          ],
          [
            26779,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_EENS_19__map_value_compareIS7"
          ],
          [
            26977,
            "__android_log_write"
          ],
          [
            26997,
            "__vsnprintf_chk"
          ],
          [
            27013,
            "strncpy"
          ],
          [
            27021,
            "wcslen"
          ],
          [
            27096,
            "_ZSt9terminatev"
          ],
          [
            27112,
            "gettid"
          ],
          [
            27119,
            "pthread_getspecific"
          ],
          [
            27139,
            "pthread_setspecific"
          ],
          [
            27159,
            "vsnprintf"
          ],
          [
            27169,
            "_ZN13ScopedJstringC1EP7_JNIEnvPKc"
          ],
          [
            27203,
            "_ZN13ScopedJstringC2EP7_JNIEnvP8_jstring"
          ],
          [
            27244,
            "_ZN13ScopedJstringC2EP7_JNIEnvPKc"
          ],
          [
            27278,
            "_ZN13ScopedJstringD2Ev"
          ],
          [
            27301,
            "_ZNK13ScopedJstring11SafeGetCharEv"
          ],
          [
            27336,
            "_ZNK13ScopedJstring7GetJstrEv"
          ],
          [
            27366,
            "_Z15AddNativeMethodP15JNINativeMethodi"
          ],
          [
            27471,
            "_ZN13JniMethodInfoC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_S8_"
          ],
          [
            27568,
            "_ZN8VarCache10CacheClassEPKcP7_jclass"
          ],
          [
            27796,
            "_ZN8VarCache9instance_E"
          ],
          [
            27888,
            "_ZNK13JniMethodInfoltERKS_"
          ],
          [
            27915,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_"
          ],
          [
            27990,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE12__find_equalIS1_EERPNS_16__tree_node_baseIPvEENS_21__tree"
          ],
          [
            28202,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE25__emplace_unique_key_argsIS1_JS1_EEENS_4pairINS_15__tree_"
          ],
          [
            28384,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE30__emplace_hint_unique_key_argsIS1_JRKS1_EEENS_15__tree_it"
          ],
          [
            28597,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE7destroyEPNS_11__tree_nodeIS1_PvEE"
          ],
          [
            28701,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEP7_jclassEENS_19__map_value_comp"
          ],
          [
            28951,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEP7_jclassEENS_19__map_value_comp"
          ],
          [
            29188,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEP7_jclassEENS_19__map_value_comp"
          ],
          [
            29392,
            "_ZNSt6__ndk16__treeINS_12__value_typeIP7_jclassNS_4listI12field_structNS_9allocatorIS5_EEEEEENS_19__map_value_compareIS3_S9_NS_4"
          ],
          [
            29582,
            "_ZNSt6__ndk16__treeINS_12__value_typeIP7_jclassNS_4listI13method_structNS_9allocatorIS5_EEEEEENS_19__map_value_compareIS3_S9_NS_"
          ],
          [
            29773,
            "_ZNSt6__ndk16__treeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_4lessIS6_EENS4_IS6_EEE12__find_equalIS6_EERPNS_"
          ],
          [
            29957,
            "_ZNSt6__ndk16__treeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_4lessIS6_EENS4_IS6_EEE7destroyEPNS_11__tree_nod"
          ],
          [
            30095,
            "_ZNSt6__ndk19allocatorINS_11__tree_nodeI13JniMethodInfoPvEEE9constructIS2_JRKS2_EEEvPT_DpOT0_"
          ],
          [
            30189,
            "__cxa_guard_acquire"
          ],
          [
            30209,
            "__cxa_guard_release"
          ],
          [
            30229,
            "liblog.so"
          ],
          [
            30239,
            "libm.so"
          ],
          [
            30287,
            "_ZSt15get_new_handlerv"
          ],
          [
            30310,
            "_ZSt17__throw_bad_allocv"
          ],
          [
            30335,
            "_ZSt7nothrow"
          ],
          [
            30348,
            "_ZTISt9bad_alloc"
          ],
          [
            30598,
            "_ZnamRKSt9nothrow_t"
          ],
          [
            30639,
            "_ZnamSt11align_val_tRKSt9nothrow_t"
          ],
          [
            30674,
            "_ZnwmRKSt9nothrow_t"
          ],
          [
            30715,
            "_ZnwmSt11align_val_tRKSt9nothrow_t"
          ],
          [
            30750,
            "malloc"
          ],
          [
            30757,
            "posix_memalign"
          ],
          [
            30772,
            "_ZNSt11logic_errorC1EPKc"
          ],
          [
            30797,
            "_ZNSt11logic_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            30888,
            "_ZNSt11logic_errorC1ERKS_"
          ],
          [
            30914,
            "_ZNSt11logic_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            31005,
            "_ZNSt11logic_errorC2ERKS_"
          ],
          [
            31031,
            "_ZNSt11logic_erroraSERKS_"
          ],
          [
            31057,
            "_ZNSt13runtime_errorC1EPKc"
          ],
          [
            31084,
            "_ZNSt13runtime_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            31177,
            "_ZNSt13runtime_errorC1ERKS_"
          ],
          [
            31205,
            "_ZNSt13runtime_errorC2EPKc"
          ],
          [
            31232,
            "_ZNSt13runtime_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            31325,
            "_ZNSt13runtime_errorC2ERKS_"
          ],
          [
            31353,
            "_ZNSt13runtime_erroraSERKS_"
          ],
          [
            31381,
            "_ZNSt9exceptionD2Ev"
          ],
          [
            31401,
            "_ZTVSt11logic_error"
          ],
          [
            31421,
            "_ZTVSt13runtime_error"
          ],
          [
            31443,
            "_ZN10__cxxabiv119__getExceptionClassEPK17_Unwind_Exception"
          ],
          [
            31502,
            "_ZN10__cxxabiv119__setExceptionClassEP17_Unwind_Exceptionm"
          ],
          [
            31561,
            "_ZN10__cxxabiv121__isOurExceptionClassEPK17_Unwind_Exception"
          ],
          [
            31622,
            "_ZSt13get_terminatev"
          ],
          [
            31643,
            "_ZSt14get_unexpectedv"
          ],
          [
            31665,
            "__cxa_allocate_dependent_exception"
          ],
          [
            31700,
            "__cxa_call_unexpected"
          ],
          [
            31722,
            "__cxa_current_exception_type"
          ],
          [
            31751,
            "__cxa_current_primary_exception"
          ],
          [
            31783,
            "__cxa_decrement_exception_refcount"
          ],
          [
            31818,
            "__cxa_free_dependent_exception"
          ],
          [
            31849,
            "__cxa_get_exception_ptr"
          ],
          [
            31873,
            "__cxa_get_globals"
          ],
          [
            31891,
            "__cxa_get_globals_fast"
          ],
          [
            31914,
            "__cxa_increment_exception_refcount"
          ],
          [
            31949,
            "__cxa_rethrow"
          ],
          [
            31963,
            "__cxa_rethrow_primary_exception"
          ],
          [
            31995,
            "__cxa_uncaught_exception"
          ],
          [
            32020,
            "__cxa_uncaught_exceptions"
          ],
          [
            32046,
            "pthread_once"
          ],
          [
            32059,
            "__cxa_guard_abort"
          ],
          [
            32077,
            "pthread_cond_broadcast"
          ],
          [
            32100,
            "pthread_cond_wait"
          ],
          [
            32118,
            "pthread_mutex_lock"
          ],
          [
            32137,
            "pthread_mutex_unlock"
          ],
          [
            32158,
            "syscall"
          ],
          [
            32166,
            "_ZSt10unexpectedv"
          ],
          [
            32184,
            "_ZSt15set_new_handlerPFvvE"
          ],
          [
            32211,
            "__cxa_new_handler"
          ],
          [
            32229,
            "__cxa_terminate_handler"
          ],
          [
            32253,
            "__cxa_unexpected_handler"
          ],
          [
            32278,
            "_ZNSt13bad_exceptionD1Ev"
          ],
          [
            32303,
            "_ZTISt13bad_exception"
          ],
          [
            32325,
            "_ZTVSt13bad_exception"
          ],
          [
            32347,
            "calloc"
          ],
          [
            32354,
            "_ZNKSt13bad_exception4whatEv"
          ],
          [
            32383,
            "_ZNKSt20bad_array_new_length4whatEv"
          ],
          [
            32419,
            "_ZNKSt9bad_alloc4whatEv"
          ],
          [
            32443,
            "_ZNKSt9exception4whatEv"
          ],
          [
            32467,
            "_ZNSt13bad_exceptionD0Ev"
          ],
          [
            32492,
            "_ZNSt13bad_exceptionD2Ev"
          ],
          [
            32517,
            "_ZNSt20bad_array_new_lengthC1Ev"
          ],
          [
            32549,
            "_ZNSt20bad_array_new_lengthC2Ev"
          ],
          [
            32581,
            "_ZNSt20bad_array_new_lengthD0Ev"
          ],
          [
            32613,
            "_ZNSt20bad_array_new_lengthD1Ev"
          ],
          [
            32645,
            "_ZNSt20bad_array_new_lengthD2Ev"
          ],
          [
            32737,
            "_ZNSt9exceptionD0Ev"
          ],
          [
            32757,
            "_ZNSt9exceptionD1Ev"
          ],
          [
            32777,
            "_ZTISt20bad_array_new_length"
          ],
          [
            32806,
            "_ZTSSt13bad_exception"
          ],
          [
            32828,
            "_ZTSSt20bad_array_new_length"
          ],
          [
            32857,
            "_ZTSSt9bad_alloc"
          ],
          [
            32874,
            "_ZTSSt9exception"
          ],
          [
            32891,
            "_ZTVN10__cxxabiv117__class_type_infoE"
          ],
          [
            32929,
            "_ZTVN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            32970,
            "_ZTVSt20bad_array_new_length"
          ],
          [
            32999,
            "_ZTVSt9bad_alloc"
          ],
          [
            33016,
            "_ZTVSt9exception"
          ],
          [
            33033,
            "_ZNKSt11logic_error4whatEv"
          ],
          [
            33060,
            "_ZNKSt13runtime_error4whatEv"
          ],
          [
            33089,
            "_ZNSt11logic_errorD0Ev"
          ],
          [
            33112,
            "_ZNSt11logic_errorD1Ev"
          ],
          [
            33135,
            "_ZNSt11logic_errorD2Ev"
          ],
          [
            33158,
            "_ZNSt11range_errorD0Ev"
          ],
          [
            33181,
            "_ZNSt11range_errorD1Ev"
          ],
          [
            33204,
            "_ZNSt11range_errorD2Ev"
          ],
          [
            33227,
            "_ZNSt12domain_errorD0Ev"
          ],
          [
            33251,
            "_ZNSt12domain_errorD1Ev"
          ],
          [
            33275,
            "_ZNSt12domain_errorD2Ev"
          ],
          [
            33299,
            "_ZNSt12length_errorD0Ev"
          ],
          [
            33323,
            "_ZNSt12length_errorD2Ev"
          ],
          [
            33419,
            "_ZNSt13runtime_errorD0Ev"
          ],
          [
            33444,
            "_ZNSt13runtime_errorD1Ev"
          ],
          [
            33469,
            "_ZNSt13runtime_errorD2Ev"
          ],
          [
            33494,
            "_ZNSt14overflow_errorD0Ev"
          ],
          [
            33520,
            "_ZNSt14overflow_errorD1Ev"
          ],
          [
            33546,
            "_ZNSt14overflow_errorD2Ev"
          ],
          [
            33572,
            "_ZNSt15underflow_errorD0Ev"
          ],
          [
            33599,
            "_ZNSt15underflow_errorD1Ev"
          ],
          [
            33626,
            "_ZNSt15underflow_errorD2Ev"
          ],
          [
            33653,
            "_ZNSt16invalid_argumentD0Ev"
          ],
          [
            33681,
            "_ZNSt16invalid_argumentD1Ev"
          ],
          [
            33709,
            "_ZNSt16invalid_argumentD2Ev"
          ],
          [
            33737,
            "_ZTISt11logic_error"
          ],
          [
            33757,
            "_ZTISt11range_error"
          ],
          [
            33777,
            "_ZTISt12domain_error"
          ],
          [
            33798,
            "_ZTISt12out_of_range"
          ],
          [
            33819,
            "_ZTISt13runtime_error"
          ],
          [
            33841,
            "_ZTISt14overflow_error"
          ],
          [
            33864,
            "_ZTISt15underflow_error"
          ],
          [
            33888,
            "_ZTISt16invalid_argument"
          ],
          [
            33913,
            "_ZTSSt11logic_error"
          ],
          [
            33933,
            "_ZTSSt11range_error"
          ],
          [
            33953,
            "_ZTSSt12domain_error"
          ],
          [
            33974,
            "_ZTSSt12length_error"
          ],
          [
            33995,
            "_ZTSSt12out_of_range"
          ],
          [
            34016,
            "_ZTSSt13runtime_error"
          ],
          [
            34038,
            "_ZTSSt14overflow_error"
          ],
          [
            34061,
            "_ZTSSt15underflow_error"
          ],
          [
            34085,
            "_ZTSSt16invalid_argument"
          ],
          [
            34110,
            "_ZTVSt11range_error"
          ],
          [
            34130,
            "_ZTVSt12domain_error"
          ],
          [
            34151,
            "_ZTVSt12out_of_range"
          ],
          [
            34172,
            "_ZTVSt14overflow_error"
          ],
          [
            34195,
            "_ZTVSt15underflow_error"
          ],
          [
            34219,
            "_ZTVSt16invalid_argument"
          ],
          [
            34249,
            "android_set_abort_message"
          ],
          [
            34275,
            "closelog"
          ],
          [
            34290,
            "openlog"
          ]
        ],
        "sz": 264336,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.34"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.59"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 47.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 388.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libx2.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 47.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 7.67"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 4710.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 689.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr"
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 388.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Huawei vendor string",
            "e": [
              "huawei",
              "_Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii",
              "Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
            ],
            "i": "objectives/command-and-control/channel/p2p::huawei-str",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 47.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libx2.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.34"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 388.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 47.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "closelog"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 475.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "d": "overflow keyword",
            "e": [
              "_ZTSSt14overflow_error",
              "ZNSt14overflow_errorD0Ev",
              "_ZNSt14overflow_errorD2Ev",
              "_ZNSt14overflow_errorD0Ev",
              "ZTISt14overflow_error",
              "_ZTVSt14overflow_error",
              "_ZTISt14overflow_error",
              "St14overflow_error",
              "ZTSSt14overflow_error",
              "_ZNSt14overflow_errorD1Ev",
              "ZNSt14overflow_errorD1Ev",
              "ZNSt14overflow_errorD2Ev",
              "ZTVSt14overflow_error"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 388.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "e7842d03c07e3c3e813e27ef20fb8de0df80723b13bd124fc1efafd87a96c611",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libx2.so",
        "type": "elf"
      },
      {
        "f": "O₇(Er₃Al₂AsCDy₂LaS)H₆(Ds₂F₄Os₂Po₂CrDb)Md₂(Bi₃He)",
        "x": 50,
        "dp": 1,
        "id": 10,
        "is": [
          "",
          "eventfd",
          "popen",
          "pthread_detach",
          "sigemptyset",
          "pthread_create",
          "pthread_join",
          "gettid",
          "open",
          "vsnprintf_chk",
          "pthread_once",
          "cxa_finalize",
          "siglongjmp",
          "mkdir",
          "calloc",
          "strncmp",
          "pthread_sigmask",
          "read",
          "strlen_chk",
          "fstat",
          "abort",
          "vsnprintf",
          "sigaltstack",
          "closedir",
          "exit",
          "errno",
          "getpid",
          "clone",
          "strncpy_chk2",
          "memcpy_chk",
          "dl_iterate_phdr",
          "sscanf",
          "scandir",
          "write",
          "access",
          "memcmp",
          "fclose",
          "lseek",
          "alphasort",
          "fflush",
          "rewind",
          "stack_chk_fail",
          "fgets",
          "gettimeofday",
          "dlclose",
          "prctl",
          "opendir",
          "pthread_setname_np",
          "dlsym",
          "android_log_print",
          "localtime_r",
          "unlink",
          "uname",
          "writev",
          "strcmp",
          "open_2",
          "pipe2",
          "syscall",
          "sigaddset",
          "sigaction",
          "pthread_mutex_lock",
          "mmap",
          "readlink",
          "strstr",
          "strdup",
          "usleep",
          "dladdr",
          "readdir",
          "strlen",
          "close",
          "dlopen",
          "rename",
          "munmap",
          "malloc",
          "execl",
          "memcpy",
          "waitpid",
          "dup2",
          "memset",
          "fopen",
          "sigsetjmp",
          "pclose",
          "strtol",
          "fcntl",
          "free",
          "pthread_self",
          "sigfillset",
          "pthread_mutex_unlock",
          "clock_gettime",
          "cxa_atexit",
          "isspace"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libdl.so",
              "libm.so",
              "libc.so"
            ],
            "soname": "libxcrash.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 10768.0,
            "needed_libs": 4.0,
            "dynsym_count": 99.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 87.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 94.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 24.0,
            "load_segment_max_p_memsz": 70352.0,
            "load_segment_max_p_filesz": 70352.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 76152.0
          },
          "binary": {
            "code_size": 44368.0,
            "func_count": 117.0,
            "entry_point": 10768.0,
            "has_overlay": true,
            "code_entropy": 5.53,
            "data_entropy": 2.95,
            "export_count": 6.0,
            "func_density": 2.7,
            "import_count": 91.0,
            "overlay_size": 1543.0,
            "string_count": 408.0,
            "avg_func_size": 1229.5,
            "overlay_ratio": 0.02,
            "section_count": 22.0,
            "avg_complexity": 10.76,
            "import_density": 2.1,
            "max_complexity": 167.0,
            "string_density": 9.42,
            "overall_entropy": 2.99,
            "overlay_entropy": 1.56,
            "avg_basic_blocks": 18.06,
            "avg_section_size": 3301.55,
            "dependency_count": 4.0,
            "entropy_variance": 1.74,
            "avg_string_length": 20.15,
            "complexity_per_kb": 0.25,
            "max_string_length": 393.0,
            "avg_string_entropy": 3.14,
            "code_to_data_ratio": 1.57,
            "data_to_file_ratio": 0.01,
            "text_to_file_ratio": 0.56,
            "total_basic_blocks": 2113.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 31.26,
            "high_complexity_funcs": 5.0,
            "largest_section_ratio": 0.56,
            "provenance_id_present": true,
            "sentence_string_count": 93.0,
            "sentence_string_ratio": 0.23,
            "behavioral_import_ratio": 0.08,
            "nonstandard_section_name_count": 2.0
          }
        },
        "ss": [
          [
            0,
            "close"
          ],
          [
            3665,
            "__cxa_finalize"
          ],
          [
            3680,
            "__cxa_atexit"
          ],
          [
            3693,
            "liblog.so"
          ],
          [
            3703,
            "libdl.so"
          ],
          [
            3712,
            "libm.so"
          ],
          [
            3720,
            "abort"
          ],
          [
            3726,
            "memcpy"
          ],
          [
            3733,
            "memset"
          ],
          [
            3740,
            "strlen"
          ],
          [
            3747,
            "pthread_create"
          ],
          [
            3762,
            "pthread_once"
          ],
          [
            3775,
            "malloc"
          ],
          [
            3782,
            "free"
          ],
          [
            3787,
            "dl_iterate_phdr"
          ],
          [
            3803,
            "pthread_mutex_unlock"
          ],
          [
            3824,
            "pthread_mutex_lock"
          ],
          [
            3843,
            "libc.so"
          ],
          [
            3862,
            "__android_log_print"
          ],
          [
            3882,
            "__errno"
          ],
          [
            3890,
            "__memcpy_chk"
          ],
          [
            3903,
            "__open_2"
          ],
          [
            3912,
            "__stack_chk_fail"
          ],
          [
            3929,
            "__strlen_chk"
          ],
          [
            3942,
            "__strncpy_chk2"
          ],
          [
            3957,
            "__vsnprintf_chk"
          ],
          [
            3979,
            "access"
          ],
          [
            3986,
            "alphasort"
          ],
          [
            3996,
            "calloc"
          ],
          [
            4003,
            "clock_gettime"
          ],
          [
            4017,
            "clone"
          ],
          [
            4023,
            "closedir"
          ],
          [
            4032,
            "dladdr"
          ],
          [
            4039,
            "dlclose"
          ],
          [
            4047,
            "dlopen"
          ],
          [
            4065,
            "eventfd"
          ],
          [
            4073,
            "execl"
          ],
          [
            4079,
            "fclose"
          ],
          [
            4092,
            "fflush"
          ],
          [
            4105,
            "fopen"
          ],
          [
            4117,
            "getpid"
          ],
          [
            4124,
            "gettid"
          ],
          [
            4131,
            "gettimeofday"
          ],
          [
            4144,
            "isspace"
          ],
          [
            4152,
            "localtime_r"
          ],
          [
            4164,
            "lseek"
          ],
          [
            4170,
            "memcmp"
          ],
          [
            4188,
            "munmap"
          ],
          [
            4195,
            "opendir"
          ],
          [
            4203,
            "pclose"
          ],
          [
            4210,
            "pipe2"
          ],
          [
            4216,
            "popen"
          ],
          [
            4228,
            "pthread_detach"
          ],
          [
            4243,
            "pthread_join"
          ],
          [
            4256,
            "pthread_self"
          ],
          [
            4269,
            "pthread_setname_np"
          ],
          [
            4288,
            "pthread_sigmask"
          ],
          [
            4304,
            "read"
          ],
          [
            4309,
            "readdir"
          ],
          [
            4317,
            "readlink"
          ],
          [
            4326,
            "rename"
          ],
          [
            4333,
            "rewind"
          ],
          [
            4340,
            "scandir"
          ],
          [
            4348,
            "sigaction"
          ],
          [
            4358,
            "sigaddset"
          ],
          [
            4368,
            "sigaltstack"
          ],
          [
            4380,
            "sigemptyset"
          ],
          [
            4392,
            "sigfillset"
          ],
          [
            4403,
            "siglongjmp"
          ],
          [
            4414,
            "sigsetjmp"
          ],
          [
            4424,
            "sscanf"
          ],
          [
            4438,
            "strdup"
          ],
          [
            4445,
            "strncmp"
          ],
          [
            4460,
            "strtol"
          ],
          [
            4467,
            "syscall"
          ],
          [
            4481,
            "unlink"
          ],
          [
            4488,
            "usleep"
          ],
          [
            4495,
            "vsnprintf"
          ],
          [
            4505,
            "waitpid"
          ],
          [
            4513,
            "write"
          ],
          [
            4519,
            "writev"
          ],
          [
            4526,
            "xc_test_call_1"
          ],
          [
            4541,
            "xc_test_call_2"
          ],
          [
            4556,
            "xc_test_call_3"
          ],
          [
            4571,
            "xc_test_call_4"
          ],
          [
            4586,
            "xc_test_crash"
          ],
          [
            4600,
            "libxcrash.so"
          ],
          [
            4613,
            "LIBC"
          ],
          [
            21189,
            "ij8ku"
          ],
          [
            26113,
            "ij8k"
          ],
          [
            53601,
            "UC7_33i3333A"
          ],
          [
            53679,
            "?.native.xcrash"
          ],
          [
            53695,
            "%s/tombstone_%020lu_%s__%s%s"
          ],
          [
            53724,
            "placeholder_"
          ],
          [
            53737,
            ".clean.xcrash"
          ],
          [
            53751,
            "/dev/null"
          ],
          [
            53761,
            "/libxcrash_dumper.so"
          ],
          [
            53782,
            "crashCallback"
          ],
          [
            53796,
            "(Ljava/lang/String;Ljava/lang/String;ZZLjava/lang/String;)V"
          ],
          [
            53858,
            "meet error sig(%d) while calling ART dump trace"
          ],
          [
            53907,
            "xcrash error:\nset dumpable failed, errno=%d"
          ],
          [
            53909,
            "xcrash error:"
          ],
          [
            53923,
            "set dumpable failed, errno=%d"
          ],
          [
            53955,
            "xcrash error:\nset traceable failed, errno=%d"
          ],
          [
            53971,
            "set traceable failed, errno=%d"
          ],
          [
            54004,
            "xcrash error:\nfork failed, errno=%d"
          ],
          [
            54020,
            "fork failed, errno=%d"
          ],
          [
            54044,
            "xcrash error:\nwaitpid failed, errno=%d"
          ],
          [
            54060,
            "waitpid failed, errno=%d"
          ],
          [
            54087,
            "xcrash error:\nchild terminated normally with non-zero exit status(%d), dumper=%s"
          ],
          [
            54103,
            "child terminated normally with non-zero exit status(%d), dumper=%s"
          ],
          [
            54172,
            "xcrash error:\nchild terminated by a signal(%d)"
          ],
          [
            54188,
            "child terminated by a signal(%d)"
          ],
          [
            54223,
            "xcrash error:\nchild terminated with other error status(%d), dumper=%s"
          ],
          [
            54239,
            "child terminated with other error status(%d), dumper=%s"
          ],
          [
            54309,
            "_ZN3art6Thread14CurrentFromGdbEv"
          ],
          [
            54342,
            "_ZNK3art6Thread13DumpJavaStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE"
          ],
          [
            54422,
            "_ZNK3art6Thread13DumpJavaStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEbb"
          ],
          [
            54504,
            "java stacktrace:"
          ],
          [
            54524,
            "xcrash error:\nopen /dev/null failed, errno=%d"
          ],
          [
            54540,
            "open /dev/null failed, errno=%d"
          ],
          [
            54574,
            "xcrash error:\n/dev/null fd NOT 0, errno=%d"
          ],
          [
            54590,
            "/dev/null fd NOT 0, errno=%d"
          ],
          [
            54621,
            "xcrash error:\ncreate args pipe failed, errno=%d"
          ],
          [
            54637,
            "create args pipe failed, errno=%d"
          ],
          [
            54673,
            "xcrash error:\nset args pipe size failed, errno=%d"
          ],
          [
            54689,
            "set args pipe size failed, errno=%d"
          ],
          [
            54727,
            "xcrash error:\nwrite args to pipe failed, return=%d, errno=%d"
          ],
          [
            54743,
            "write args to pipe failed, return=%d, errno=%d"
          ],
          [
            54792,
            "xcrash_crash_cb"
          ],
          [
            54808,
            "native"
          ],
          [
            54815,
            "pid: %d, tid: %d, name: %s  \u003e\u003e\u003e %s \u003c\u003c\u003c"
          ],
          [
            54867,
            "from pid %d, uid %d"
          ],
          [
            54888,
            "signal %d (%s), code %d (%s%s), fault addr %s"
          ],
          [
            54935,
            "url",
            "x0  \u00016lx  x1  \u00016lx  x2  \u00016lx  x3  \u00016lx\n    x4  \u00016lx  x5  \u00016lx  x6  \u00016lx  x7  \u00016lx\n    x8  \u00016lx  x9  \u00016lx  x10 \u00016lx  x11 \u00016lx\n   "
          ],
          [
            54986,
            "url",
            "x4  \u00016lx  x5  \u00016lx  x6  \u00016lx  x7  \u00016lx"
          ],
          [
            55037,
            "url",
            "x8  \u00016lx  x9  \u00016lx  x10 \u00016lx  x11 \u00016lx"
          ],
          [
            55088,
            "url",
            "x12 \u00016lx  x13 \u00016lx  x14 \u00016lx  x15 \u00016lx"
          ],
          [
            55139,
            "url",
            "x16 \u00016lx  x17 \u00016lx  x18 \u00016lx  x19 \u00016lx"
          ],
          [
            55190,
            "url",
            "x20 \u00016lx  x21 \u00016lx  x22 \u00016lx  x23 \u00016lx"
          ],
          [
            55241,
            "url",
            "x24 \u00016lx  x25 \u00016lx  x26 \u00016lx  x27 \u00016lx"
          ],
          [
            55292,
            "x28 %016lx  x29 %016lx"
          ],
          [
            55319,
            "url",
            "sp  \u00016lx  lr  \u00016lx  pc  \u00016lx"
          ],
          [
            55372,
            "xcrash/NativeHandler"
          ],
          [
            55393,
            "nativeInit"
          ],
          [
            55404,
            "(ILjava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;"
          ],
          [
            55626,
            "nativeNotifyJavaCrashed"
          ],
          [
            55654,
            "nativeTestCrash"
          ],
          [
            55675,
            "/apex/com.android.runtime/lib64/bionic/libc.so"
          ],
          [
            55722,
            "/system/lib64/libc.so"
          ],
          [
            55744,
            "android_set_abort_message"
          ],
          [
            55770,
            "abort message for xCrash internal testing"
          ],
          [
            55812,
            "xcrash_test_cal"
          ],
          [
            55828,
            "xcrash_test_log"
          ],
          [
            55844,
            "crashed APP's thread is running ...... %d"
          ],
          [
            55886,
            "traceCallback"
          ],
          [
            55900,
            "(Ljava/lang/String;Ljava/lang/String;)V"
          ],
          [
            55950,
            "pid: %d  \u003e\u003e\u003e %s \u003c\u003c\u003c"
          ],
          [
            56036,
            "Cmd line: %s"
          ],
          [
            56050,
            "Mode: ART DumpForSigQuit"
          ],
          [
            56076,
            "/apex/com.android.runtime/lib64/libc++.so"
          ],
          [
            56118,
            "/system/lib64/libc++.so"
          ],
          [
            56158,
            "/apex/com.android.art/lib64/libart.so"
          ],
          [
            56196,
            "/apex/com.android.runtime/lib64/libart.so"
          ],
          [
            56238,
            "/system/lib64/libart.so"
          ],
          [
            56262,
            "_ZN3art7Runtime9instance_E"
          ],
          [
            56289,
            "_ZN3art7Runtime14DumpForSigQuitERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE"
          ],
          [
            56417,
            "Failed to load symbols."
          ],
          [
            56452,
            "Failed to check runtime address."
          ],
          [
            56486,
            "Failed to duplicate FD."
          ],
          [
            56511,
            "xcrash_dumper"
          ],
          [
            56525,
            "longjmp to skip dumping trace"
          ],
          [
            56623,
            "/proc/%d/task"
          ],
          [
            56637,
            "Signal Catcher"
          ],
          [
            56664,
            "tombstone_"
          ],
          [
            56675,
            ".trace.xcrash"
          ],
          [
            56689,
            "xcrash_trace_dp"
          ],
          [
            56705,
            "%s version %s %s (%s)"
          ],
          [
            56727,
            "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
          ],
          [
            56792,
            "(null)"
          ],
          [
            56799,
            "/proc/%d/smaps"
          ],
          [
            56844,
            "(deleted)"
          ],
          [
            56855,
            "[heap]"
          ],
          [
            56862,
            "[anon:libc_malloc]"
          ],
          [
            56888,
            ".jar"
          ],
          [
            56893,
            ".apk"
          ],
          [
            56898,
            ".ttf"
          ],
          [
            56903,
            ".dex"
          ],
          [
            56908,
            ".odex"
          ],
          [
            56914,
            ".vdex"
          ],
          [
            56926,
            "/boot"
          ],
          [
            56932,
            ".oat"
          ],
          [
            56937,
            ".art"
          ],
          [
            56948,
            "/dev/kgsl-3d0"
          ],
          [
            56962,
            "/dev/ashmem"
          ],
          [
            56974,
            "/dev/ashmem/dalvik-"
          ],
          [
            56994,
            "/dev/ashmem/dalvik-LinearAlloc"
          ],
          [
            57025,
            "/dev/ashmem/dalvik-alloc space"
          ],
          [
            57056,
            "/dev/ashmem/dalvik-main space"
          ],
          [
            57086,
            "/dev/ashmem/dalvik-large object space"
          ],
          [
            57124,
            "/dev/ashmem/dalvik-free list large object space"
          ],
          [
            57172,
            "/dev/ashmem/dalvik-non moving space"
          ],
          [
            57208,
            "/dev/ashmem/dalvik-zygote space"
          ],
          [
            57240,
            "/dev/ashmem/dalvik-indirect ref"
          ],
          [
            57272,
            "/dev/ashmem/dalvik-jit-code-cache"
          ],
          [
            57306,
            "/dev/ashmem/dalvik-data-code-cache"
          ],
          [
            57341,
            "/dev/ashmem/dalvik-CompilerMetadata"
          ],
          [
            57377,
            "/dev/ashmem/CursorWindow"
          ],
          [
            57402,
            "/dev/ashmem/libc malloc"
          ],
          [
            57433,
            "Shared_Clean: %zu kB"
          ],
          [
            57454,
            "Shared_Dirty: %zu kB"
          ],
          [
            57475,
            "Private_Clean: %zu kB"
          ],
          [
            57497,
            "Private_Dirty: %zu kB"
          ],
          [
            57519,
            "Swap: %zu kB"
          ],
          [
            57532,
            "SwapPss: %zu kB"
          ],
          [
            57576,
            "memory info:"
          ],
          [
            57590,
            "/proc/meminfo"
          ],
          [
            57604,
            "System Summary (From: /proc/meminfo)"
          ],
          [
            57643,
            "/proc/%d/status"
          ],
          [
            57659,
            "Process Status (From: /proc/PID/status)"
          ],
          [
            57701,
            "/proc/%d/limits"
          ],
          [
            57717,
            "Process Limits (From: /proc/PID/limits)"
          ],
          [
            57759,
            "Process Details (From: /proc/PID/smaps)"
          ],
          [
            57801,
            "Swap"
          ],
          [
            57806,
            "SwapPss"
          ],
          [
            57848,
            "Shared"
          ],
          [
            57855,
            "Private"
          ],
          [
            57863,
            "Total"
          ],
          [
            57869,
            "Clean"
          ],
          [
            57875,
            "Dirty"
          ],
          [
            57922,
            "TOTAL"
          ],
          [
            57930,
            "Process Dalvik Details (From: /proc/PID/smaps)"
          ],
          [
            57981,
            "Process Summary (From: /proc/PID/smaps)"
          ],
          [
            58052,
            "Native Heap:"
          ],
          [
            58078,
            "Private Other:"
          ],
          [
            58129,
            "TOTAL SWAP PSS:"
          ],
          [
            58145,
            "TOTAL SWAP:"
          ],
          [
            58161,
            "Native Heap"
          ],
          [
            58173,
            "Dalvik Heap"
          ],
          [
            58185,
            "Dalvik Other"
          ],
          [
            58198,
            "Stack"
          ],
          [
            58204,
            "Cursor"
          ],
          [
            58211,
            "Ashmem"
          ],
          [
            58218,
            "Gfx dev"
          ],
          [
            58226,
            "Other dev"
          ],
          [
            58236,
            ".so mmap"
          ],
          [
            58245,
            ".jar mmap"
          ],
          [
            58255,
            ".apk mmap"
          ],
          [
            58265,
            ".ttf mmap"
          ],
          [
            58275,
            ".dex mmap"
          ],
          [
            58285,
            ".oat mmap"
          ],
          [
            58295,
            ".art mmap"
          ],
          [
            58305,
            "Other mmap"
          ],
          [
            58316,
            "Unknown"
          ],
          [
            58335,
            ".Zygote"
          ],
          [
            58343,
            ".NonMoving"
          ]
        ],
        "sz": 76152,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Create directories",
            "e": [
              "mkdir"
            ],
            "i": "micro-behaviors/fs/directory/mkdir::mkdir-base",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "Shared",
              "Shared_Clean: %zu kB",
              "Shared_Dirty: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.23"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 22.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "/dev/null (legitimate discard device)",
            "e": [
              "/dev/null",
              "xcrash error:\n/dev/null fd NOT 0, errno=%d",
              "open /dev/null failed, errno=%d",
              "xcrash error:\nopen /dev/null failed, errno=%d",
              "/dev/null fd NOT 0, errno=%d"
            ],
            "i": "micro-behaviors/fs/path/device/special::dev-null",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "jmp to"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.14"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 117.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "libc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libxcrash.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Shared_Dirty: %zu kB",
              "Shared",
              "Shared_Clean: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 10.76"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 2113.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 22.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "sym.imp.pthread_create",
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "a": "T1059.004",
            "c": 0.949999988079071,
            "d": "Executes command and captures output",
            "e": [
              "popen"
            ],
            "i": "micro-behaviors/process/create/popen::c-popen",
            "l": 3,
            "m": "E1059.004"
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/system/",
              "/apex/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "aarch64 architecture string",
            "e": [
              "_Uaarch64_init_local",
              "_Uaarch64_step",
              "_Uaarch64_get_reg"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-aarch64",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "access"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /lib64",
            "e": [
              "/lib64/libc",
              "/lib64/libart.so",
              "/lib64/bionic/libc.so",
              "/lib64/libc.so"
            ],
            "i": "micro-behaviors/fs/path/system::system-lib64",
            "l": 2
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr"
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "C-style exec family functions",
            "e": [
              "execl"
            ],
            "i": "micro-behaviors/process/create/execv::c-exec-variants",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 117.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "clone"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "a": "T1082",
            "c": 0.6000000238418579,
            "d": "Query system name and information",
            "e": [
              "uname"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/kernel::uname",
            "l": 3,
            "m": "E1082"
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "/system/usr/we-need-root/su"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "ICMP service/protocol reference",
            "e": [
              "ICMP",
              "icmp"
            ],
            "i": "micro-behaviors/communications/ip/services::services-icmp",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "libc version string pattern",
            "e": [
              "bionic"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-version-string",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.6000000238418579,
            "d": "/boot directory reference",
            "e": [
              "/boot"
            ],
            "i": "micro-behaviors/fs/path/system::boot-dir",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libxcrash.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.99"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 117.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Get memory info from /proc/meminfo",
            "e": [
              "System Summary (From: /proc/meminfo)",
              "/proc/meminfo"
            ],
            "i": "micro-behaviors/fs/proc/system::system-meminfo",
            "l": 3
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /bin/su",
            "e": [
              "/bin/su"
            ],
            "i": "micro-behaviors/fs/path/binary::binary-bin-su",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 91.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "d": "Duplicate file descriptor (I/O redirection)",
            "e": [
              "dup2"
            ],
            "i": "micro-behaviors/process/fd/dup::dup2",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/task",
              "/proc/%d/net/udp",
              "/proc/%d/net/udp6",
              "/proc/%d/fd",
              "/proc/%d/fd/%d",
              "/proc/%d/net/tcp6",
              "/proc/%d/net/unix",
              "/proc/%d/status",
              "/proc/%d/net/tcp",
              "/proc/%d/cmdline",
              "/proc/%d/net/icmp",
              "/proc/%d/limits",
              "/proc/%d/net/icmp6",
              "/proc/%d/smaps",
              "/proc/%d/comm"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "fclose",
              "pclose",
              "closedir",
              "dlclose",
              "close"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 6.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID:"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic library unload",
            "e": [
              "dlclose"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlclose",
            "l": 3
          },
          {
            "a": "T1564.001",
            "c": 0.949999988079071,
            "d": "Hidden system binary path",
            "e": [
              "/bin/.ext"
            ],
            "i": "objectives/evasion/file-hiding/system-path::hidden-system-bin-reference",
            "l": 4,
            "m": "F0005"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Full daemon behavior (fork + setsid + devnull)",
            "e": [
              "clone",
              "/dev/null fd NOT 0, errno=%d",
              "/dev/null",
              "xcrash error:\nopen /dev/null failed, errno=%d",
              "open /dev/null failed, errno=%d",
              "xcrash error:\n/dev/null fd NOT 0, errno=%d"
            ],
            "i": "micro-behaviors/process/daemonize/detach::full-daemon",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlopen",
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "clock_gettime",
              "gettimeofday",
              "usleep"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlclose",
              "dlsym"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          }
        ],
        "sha": "3ff74756f7b7b7f5856105b1932ef1c9261473a27b71437cd5418206391d8410",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libxcrash.so",
        "type": "elf"
      },
      {
        "f": "O₈(Er₂AlAsCCaDy₂LaS)H₇(Ds₂F₄Os₂Po₂CmCrDb)Md₂(Bi₃He)",
        "x": 50,
        "dp": 1,
        "id": 11,
        "is": [
          "",
          "sigemptyset",
          "pthread_sigmask",
          "memmove_chk",
          "sigaddset",
          "memset_chk",
          "popen",
          "pthread_create",
          "realloc",
          "gettid",
          "vsnprintf_chk",
          "pthread_once",
          "regcomp",
          "ptrace",
          "calloc",
          "strncmp",
          "read",
          "strlen_chk",
          "fstat",
          "abort",
          "vsnprintf",
          "sigaltstack",
          "closedir",
          "strerror",
          "exit",
          "errno",
          "getpid",
          "strncpy_chk2",
          "memcpy_chk",
          "dl_iterate_phdr",
          "sscanf",
          "write",
          "access",
          "read_chk",
          "memcmp",
          "fclose",
          "process_vm_readv",
          "stack_chk_fail",
          "fgets",
          "dlclose",
          "strtok_r",
          "opendir",
          "dlsym",
          "android_log_print",
          "localtime_r",
          "sysconf",
          "strcmp",
          "open_2",
          "syscall",
          "regexec",
          "sigaction",
          "pthread_mutex_lock",
          "mmap",
          "memmove",
          "alarm",
          "readlink",
          "strstr",
          "getpagesize",
          "strdup",
          "dladdr",
          "readdir",
          "strlen",
          "exit",
          "close",
          "dlopen",
          "munmap",
          "malloc",
          "memcpy",
          "waitpid",
          "memset",
          "fopen",
          "pclose",
          "strtol",
          "libc_init",
          "free",
          "sigfillset",
          "pthread_mutex_unlock",
          "cxa_atexit",
          "isspace"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libdl.so",
              "libm.so",
              "libc.so"
            ],
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 183.0,
            "class_bits": 64.0,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 10304.0,
            "needed_libs": 4.0,
            "dynsym_count": 85.0,
            "has_eh_frame": true,
            "stack_canary": true,
            "dynrela_count": 118.0,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 72.0,
            "build_id_length": 20.0,
            "has_interpreter": true,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 2.0,
            "program_header_count": 9.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 105880.0,
            "load_segment_max_p_filesz": 105880.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 113664.0
          },
          "binary": {
            "code_size": 75868.0,
            "func_count": 149.0,
            "entry_point": 10304.0,
            "has_overlay": true,
            "code_entropy": 5.69,
            "data_entropy": 3.3,
            "export_count": 4.0,
            "func_density": 2.01,
            "import_count": 79.0,
            "overlay_size": 1732.0,
            "string_count": 373.0,
            "avg_func_size": 4027.7,
            "overlay_ratio": 0.02,
            "section_count": 25.0,
            "avg_complexity": 11.94,
            "import_density": 1.07,
            "max_complexity": 300.0,
            "string_density": 5.03,
            "overall_entropy": 2.94,
            "overlay_entropy": 1.59,
            "avg_basic_blocks": 20.75,
            "avg_section_size": 4340.6,
            "dependency_count": 4.0,
            "entropy_variance": 1.75,
            "avg_string_length": 17.64,
            "complexity_per_kb": 0.16,
            "max_string_length": 393.0,
            "avg_string_entropy": 3.03,
            "code_to_data_ratio": 2.32,
            "data_to_file_ratio": 0.01,
            "text_to_file_ratio": 0.66,
            "total_basic_blocks": 3092.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 29.71,
            "high_complexity_funcs": 7.0,
            "largest_section_ratio": 0.66,
            "provenance_id_present": true,
            "sentence_string_count": 78.0,
            "sentence_string_ratio": 0.21,
            "behavioral_import_ratio": 0.06,
            "nonstandard_section_name_count": 3.0
          }
        },
        "ss": [
          [
            0,
            "close"
          ],
          [
            568,
            "/system/bin/linker64"
          ],
          [
            604,
            "Android"
          ],
          [
            616,
            "r21d"
          ],
          [
            680,
            "6528147"
          ],
          [
            3497,
            "liblog.so"
          ],
          [
            3507,
            "libdl.so"
          ],
          [
            3516,
            "libm.so"
          ],
          [
            3524,
            "dl_iterate_phdr"
          ],
          [
            3540,
            "libc.so"
          ],
          [
            3548,
            "free"
          ],
          [
            3553,
            "pthread_create"
          ],
          [
            3568,
            "memcpy"
          ],
          [
            3575,
            "memset"
          ],
          [
            3582,
            "malloc"
          ],
          [
            3589,
            "abort"
          ],
          [
            3595,
            "strlen"
          ],
          [
            3602,
            "__libc_init"
          ],
          [
            3614,
            "pthread_once"
          ],
          [
            3627,
            "pthread_mutex_lock"
          ],
          [
            3646,
            "pthread_mutex_unlock"
          ],
          [
            3667,
            "__cxa_atexit"
          ],
          [
            3680,
            "__android_log_print"
          ],
          [
            3700,
            "__errno"
          ],
          [
            3708,
            "__memcpy_chk"
          ],
          [
            3721,
            "__open_2"
          ],
          [
            3730,
            "__read_chk"
          ],
          [
            3741,
            "__stack_chk_fail"
          ],
          [
            3758,
            "__strlen_chk"
          ],
          [
            3771,
            "__strncpy_chk2"
          ],
          [
            3786,
            "__vsnprintf_chk"
          ],
          [
            3808,
            "access"
          ],
          [
            3815,
            "alarm"
          ],
          [
            3821,
            "calloc"
          ],
          [
            3828,
            "closedir"
          ],
          [
            3837,
            "dladdr"
          ],
          [
            3844,
            "dlclose"
          ],
          [
            3852,
            "dlopen"
          ],
          [
            3865,
            "fclose"
          ],
          [
            3878,
            "fopen"
          ],
          [
            3890,
            "getpagesize"
          ],
          [
            3902,
            "getpid"
          ],
          [
            3909,
            "gettid"
          ],
          [
            3916,
            "isspace"
          ],
          [
            3924,
            "localtime_r"
          ],
          [
            3936,
            "memcmp"
          ],
          [
            3943,
            "memmove"
          ],
          [
            3956,
            "munmap"
          ],
          [
            3963,
            "opendir"
          ],
          [
            3971,
            "pclose"
          ],
          [
            3978,
            "popen"
          ],
          [
            3984,
            "ptrace"
          ],
          [
            3991,
            "read"
          ],
          [
            3996,
            "readdir"
          ],
          [
            4004,
            "readlink"
          ],
          [
            4013,
            "realloc"
          ],
          [
            4021,
            "regcomp"
          ],
          [
            4029,
            "regexec"
          ],
          [
            4037,
            "sigaction"
          ],
          [
            4047,
            "sigaltstack"
          ],
          [
            4059,
            "sigfillset"
          ],
          [
            4070,
            "sscanf"
          ],
          [
            4084,
            "strdup"
          ],
          [
            4091,
            "strerror"
          ],
          [
            4100,
            "strncmp"
          ],
          [
            4115,
            "strtok_r"
          ],
          [
            4124,
            "strtol"
          ],
          [
            4131,
            "syscall"
          ],
          [
            4139,
            "sysconf"
          ],
          [
            4147,
            "vsnprintf"
          ],
          [
            4157,
            "waitpid"
          ],
          [
            4165,
            "write"
          ],
          [
            4171,
            "__memset_chk"
          ],
          [
            4184,
            "__memmove_chk"
          ],
          [
            4198,
            "sigemptyset"
          ],
          [
            4210,
            "pthread_sigmask"
          ],
          [
            4226,
            "sigaddset"
          ],
          [
            4236,
            "main"
          ],
          [
            4241,
            "__PREINIT_ARRAY__"
          ],
          [
            4259,
            "process_vm_readv"
          ],
          [
            4276,
            "__FINI_ARRAY__"
          ],
          [
            4291,
            "__INIT_ARRAY__"
          ],
          [
            4306,
            "LIBC"
          ],
          [
            38361,
            "j38s"
          ],
          [
            38965,
            "ki8l"
          ],
          [
            48505,
            "ij8k"
          ],
          [
            53503,
            "Jphp"
          ],
          [
            58101,
            "x.xn"
          ],
          [
            63082,
            "JJIG"
          ],
          [
            84997,
            "QQQQ0"
          ],
          [
            85412,
            "FiiiRiii"
          ],
          [
            85626,
            "xcrash error debug:\ndumper has crashed (signal: %d, code: %d)"
          ],
          [
            85628,
            "xcrash error debug:"
          ],
          [
            85648,
            "dumper has crashed (signal: %d, code: %d)"
          ],
          [
            85691,
            "DWARF: PC is moving backwards"
          ],
          [
            85721,
            "DWARF: attempt to restore without remember"
          ],
          [
            85769,
            ".note.gnu.build-id"
          ],
          [
            85788,
            ".debug_frame"
          ],
          [
            85801,
            ".eh_frame"
          ],
          [
            85811,
            ".eh_frame_hdr"
          ],
          [
            85825,
            ".gnu_debugdata"
          ],
          [
            85840,
            "ELF: create GNU interface FAILED"
          ],
          [
            85885,
            "\u003canonymous:%16lx\u003e"
          ],
          [
            85925,
            "\u003cunknown\u003e"
          ],
          [
            85951,
            "#%02zu pc %016lx  %s%s%s"
          ],
          [
            85992,
            "%s (BuildId:"
          ],
          [
            86033,
            "url",
            ". LastModified: \u0004d-\u0002d-\u0002dT\u0002d:\u0002d:\u0002d.\u0003ld%c\u0002ld\u0002ld"
          ],
          [
            86097,
            ". LastModified: %s"
          ],
          [
            86116,
            "/system/bin/"
          ],
          [
            86137,
            "OPEN"
          ],
          [
            86142,
            "FSTAT"
          ],
          [
            86148,
            "MMAP"
          ],
          [
            86153,
            ". %s error: errno = %d, errmsg = %s)"
          ],
          [
            86250,
            "%016lx  %016lx"
          ],
          [
            86270,
            "ashmem/"
          ],
          [
            86278,
            "/proc/%d/maps"
          ],
          [
            86322,
            "[anon:abort message]"
          ],
          [
            86343,
            "memory map:"
          ],
          [
            86375,
            "%016lx-%016lx %c%c%c %*lx %*lx %s%s"
          ],
          [
            86416,
            "TOTAL SIZE: 0x%lxK (%luK)"
          ],
          [
            86448,
            "/proc/%d/task"
          ],
          [
            86462,
            "PROCESS: load threads failed, errno=%d"
          ],
          [
            86501,
            "PROCESS: crashed thread NOT found"
          ],
          [
            86535,
            "PROCESS: create maps failed, errno=%d"
          ],
          [
            86573,
            "%p (*pc=%#08x)"
          ],
          [
            86600,
            "from pid %d, uid %d"
          ],
          [
            86621,
            "signal %d (%s), code %d (%s%s), fault addr %s"
          ],
          [
            86668,
            "/system/lib64/libc.so"
          ],
          [
            86690,
            "__abort_message_ptr"
          ],
          [
            86710,
            "Abort message: '%s'"
          ],
          [
            86798,
            "total threads (exclude the crashed thread): %zu"
          ],
          [
            86847,
            "threads matched whitelist: %d"
          ],
          [
            86878,
            "threads ignored by max count limit: %d"
          ],
          [
            86918,
            "dumped threads: %u"
          ],
          [
            87122,
            "url",
            "x0  \u00016lx  x1  \u00016lx  x2  \u00016lx  x3  \u00016lx\n    x4  \u00016lx  x5  \u00016lx  x6  \u00016lx  x7  \u00016lx\n    x8  \u00016lx  x9  \u00016lx  x10 \u00016lx  x11 \u00016lx\n   "
          ],
          [
            87173,
            "url",
            "x4  \u00016lx  x5  \u00016lx  x6  \u00016lx  x7  \u00016lx"
          ],
          [
            87224,
            "url",
            "x8  \u00016lx  x9  \u00016lx  x10 \u00016lx  x11 \u00016lx"
          ],
          [
            87275,
            "url",
            "x12 \u00016lx  x13 \u00016lx  x14 \u00016lx  x15 \u00016lx"
          ],
          [
            87326,
            "url",
            "x16 \u00016lx  x17 \u00016lx  x18 \u00016lx  x19 \u00016lx"
          ],
          [
            87377,
            "url",
            "x20 \u00016lx  x21 \u00016lx  x22 \u00016lx  x23 \u00016lx"
          ],
          [
            87428,
            "url",
            "x24 \u00016lx  x25 \u00016lx  x26 \u00016lx  x27 \u00016lx"
          ],
          [
            87479,
            "x28 %016lx  x29 %016lx"
          ],
          [
            87506,
            "url",
            "sp  \u00016lx  lr  \u00016lx  pc  \u00016lx"
          ],
          [
            87547,
            "native"
          ],
          [
            87554,
            "xcrash_dumper"
          ],
          [
            87568,
            "THREAD: ptrace GETREGSET failed, errno=%d"
          ],
          [
            87610,
            "pid: %d, tid: %d, name: %s  \u003e\u003e\u003e %s \u003c\u003c\u003c"
          ],
          [
            87650,
            "memory near %s:"
          ],
          [
            87686,
            "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
          ],
          [
            87751,
            "(null)"
          ],
          [
            87758,
            "/proc/%d/smaps"
          ],
          [
            87803,
            "(deleted)"
          ],
          [
            87814,
            "[heap]"
          ],
          [
            87821,
            "[anon:libc_malloc]"
          ],
          [
            87847,
            ".jar"
          ],
          [
            87852,
            ".apk"
          ],
          [
            87857,
            ".ttf"
          ],
          [
            87862,
            ".dex"
          ],
          [
            87867,
            ".odex"
          ],
          [
            87873,
            ".vdex"
          ],
          [
            87885,
            "/boot"
          ],
          [
            87891,
            ".oat"
          ],
          [
            87896,
            ".art"
          ],
          [
            87907,
            "/dev/kgsl-3d0"
          ],
          [
            87921,
            "/dev/ashmem"
          ],
          [
            87933,
            "/dev/ashmem/dalvik-"
          ],
          [
            87953,
            "/dev/ashmem/dalvik-LinearAlloc"
          ],
          [
            87984,
            "/dev/ashmem/dalvik-alloc space"
          ],
          [
            88015,
            "/dev/ashmem/dalvik-main space"
          ],
          [
            88045,
            "/dev/ashmem/dalvik-large object space"
          ],
          [
            88083,
            "/dev/ashmem/dalvik-free list large object space"
          ],
          [
            88131,
            "/dev/ashmem/dalvik-non moving space"
          ],
          [
            88167,
            "/dev/ashmem/dalvik-zygote space"
          ],
          [
            88199,
            "/dev/ashmem/dalvik-indirect ref"
          ],
          [
            88231,
            "/dev/ashmem/dalvik-jit-code-cache"
          ],
          [
            88265,
            "/dev/ashmem/dalvik-data-code-cache"
          ],
          [
            88300,
            "/dev/ashmem/dalvik-CompilerMetadata"
          ],
          [
            88336,
            "/dev/ashmem/CursorWindow"
          ],
          [
            88361,
            "/dev/ashmem/libc malloc"
          ],
          [
            88392,
            "Shared_Clean: %zu kB"
          ],
          [
            88413,
            "Shared_Dirty: %zu kB"
          ],
          [
            88434,
            "Private_Clean: %zu kB"
          ],
          [
            88456,
            "Private_Dirty: %zu kB"
          ],
          [
            88478,
            "Swap: %zu kB"
          ],
          [
            88491,
            "SwapPss: %zu kB"
          ],
          [
            88535,
            "memory info:"
          ],
          [
            88549,
            "/proc/meminfo"
          ],
          [
            88563,
            "System Summary (From: /proc/meminfo)"
          ],
          [
            88602,
            "/proc/%d/status"
          ],
          [
            88618,
            "Process Status (From: /proc/PID/status)"
          ],
          [
            88660,
            "/proc/%d/limits"
          ],
          [
            88676,
            "Process Limits (From: /proc/PID/limits)"
          ],
          [
            88718,
            "Process Details (From: /proc/PID/smaps)"
          ],
          [
            88760,
            "Swap"
          ],
          [
            88765,
            "SwapPss"
          ],
          [
            88807,
            "Shared"
          ],
          [
            88814,
            "Private"
          ],
          [
            88822,
            "Total"
          ],
          [
            88828,
            "Clean"
          ],
          [
            88834,
            "Dirty"
          ],
          [
            88881,
            "TOTAL"
          ],
          [
            88889,
            "Process Dalvik Details (From: /proc/PID/smaps)"
          ],
          [
            88940,
            "Process Summary (From: /proc/PID/smaps)"
          ],
          [
            89011,
            "Native Heap:"
          ],
          [
            89037,
            "Private Other:"
          ],
          [
            89088,
            "TOTAL SWAP PSS:"
          ],
          [
            89104,
            "TOTAL SWAP:"
          ],
          [
            89120,
            "Native Heap"
          ],
          [
            89132,
            "Dalvik Heap"
          ],
          [
            89144,
            "Dalvik Other"
          ],
          [
            89157,
            "Stack"
          ],
          [
            89163,
            "Cursor"
          ],
          [
            89170,
            "Ashmem"
          ],
          [
            89177,
            "Gfx dev"
          ],
          [
            89185,
            "Other dev"
          ],
          [
            89195,
            ".so mmap"
          ],
          [
            89204,
            ".jar mmap"
          ],
          [
            89214,
            ".apk mmap"
          ],
          [
            89224,
            ".ttf mmap"
          ],
          [
            89234,
            ".dex mmap"
          ],
          [
            89244,
            ".oat mmap"
          ],
          [
            89254,
            ".art mmap"
          ],
          [
            89264,
            "Other mmap"
          ],
          [
            89275,
            "Unknown"
          ],
          [
            89294,
            ".Zygote"
          ],
          [
            89302,
            ".NonMoving"
          ],
          [
            89313,
            ".LinearAlloc"
          ],
          [
            89330,
            ".JITCache"
          ],
          [
            89340,
            ".CompilerMetadata"
          ],
          [
            89358,
            ".IndirectRef"
          ],
          [
            89371,
            ".Boot vdex"
          ],
          [
            89420,
            "libunwind.so"
          ],
          [
            89433,
            "_Uaarch64_init_local"
          ],
          [
            89454,
            "_Uaarch64_get_reg"
          ],
          [
            89472,
            "_Uaarch64_step"
          ],
          [
            89487,
            "#%02zu pc %016lx  \u003cunknown\u003e"
          ],
          [
            89520,
            "url",
            "#\u0002zu pc \u00016lx  \u003canonymous:\u0016lx\u003e"
          ],
          [
            89561,
            "#%02zu pc %016lx  %s"
          ],
          [
            89587,
            "#%02zu pc %016lx  %s (%s)"
          ],
          [
            89618,
            "#%02zu pc %016lx  %s (%s+%lu)"
          ],
          [
            89653,
            "SIGSTKFLT"
          ],
          [
            89663,
            "SIGSYS"
          ],
          [
            89670,
            "SIGTRAP"
          ],
          [
            89678,
            "SIGSEGV"
          ],
          [
            89686,
            "SIGILL"
          ],
          [
            89693,
            "SIGFPE"
          ],
          [
            89700,
            "SIGBUS"
          ],
          [
            89707,
            "SIGABRT"
          ],
          [
            89715,
            "SI_DETHREAD"
          ],
          [
            89727,
            "SI_TKILL"
          ],
          [
            89736,
            "SI_SIGIO"
          ],
          [
            89745,
            "SI_ASYNCIO"
          ],
          [
            89756,
            "SI_MESGQ"
          ],
          [
            89765,
            "SI_TIMER"
          ],
          [
            89774,
            "SI_QUEUE"
          ],
          [
            89783,
            "SI_KERNEL"
          ]
        ],
        "sz": 113664,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "Shared_Clean: %zu kB",
              "Shared",
              "Shared_Dirty: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.21"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "ELF64 class marker",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/metrics/structural::elf64-class",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.03"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 64.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 79.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 149.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libxcrash_dumper.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF .gnu_debugdata section (mini debug info)",
            "e": [
              ".gnu_debugdata"
            ],
            "i": "micro-behaviors/data/embedded/payload/compression::gnu-debugdata-section",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Shared",
              "Shared_Clean: %zu kB",
              "Shared_Dirty: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 79.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 11.94"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 3092.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1059.004",
            "c": 0.949999988079071,
            "d": "Executes command and captures output",
            "e": [
              "popen"
            ],
            "i": "micro-behaviors/process/create/popen::c-popen",
            "l": 3,
            "m": "E1059.004"
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/system/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "aarch64 architecture string",
            "e": [
              "_Uaarch64_step",
              "_Uaarch64_init_local",
              "_Uaarch64_get_reg"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-aarch64",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.8600000143051147,
            "d": "Procfs maps path template",
            "e": [
              "/proc/%d/maps"
            ],
            "i": "micro-behaviors/fs/proc/info/memory::c-procfs-maps-template",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "access"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /lib64",
            "e": [
              "/lib64/libc.so"
            ],
            "i": "micro-behaviors/fs/path/system::system-lib64",
            "l": 2
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "dl_iterate_phdr"
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 149.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 79.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "ARM64/AArch64 ELF binary",
            "e": [
              "elf.e_machine = 183.00"
            ],
            "i": "metadata/arch/arm64::arm64-elf",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 79.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "ADB OPEN packet marker",
            "e": [
              "OPEN"
            ],
            "i": "micro-behaviors/communications/socket/tcp::open-token",
            "l": 1,
            "m": "C0001"
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "/system/usr/we-need-root/su"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/binary/linking/static::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "ICMP service/protocol reference",
            "e": [
              "icmp",
              "ICMP"
            ],
            "i": "micro-behaviors/communications/ip/services::services-icmp",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "/boot directory reference",
            "e": [
              "/boot"
            ],
            "i": "micro-behaviors/fs/path/system::boot-dir",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libxcrash_dumper.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 2.94"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 149.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Get memory info from /proc/meminfo",
            "e": [
              "System Summary (From: /proc/meminfo)",
              "/proc/meminfo"
            ],
            "i": "micro-behaviors/fs/proc/system::system-meminfo",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /bin/su",
            "e": [
              "/bin/su"
            ],
            "i": "micro-behaviors/fs/path/binary::binary-bin-su",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Schedule alarm timer",
            "e": [
              "alarm"
            ],
            "i": "micro-behaviors/time/schedule/timeout::alarm",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 79.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "a": "T1552.003",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "whitelist"
            ],
            "i": "objectives/credential-access/shell/history::shell-history-unless-cond-1--rx-4",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/net/icmp6",
              "/proc/%d/maps",
              "/proc/%d/net/tcp",
              "/proc/%d/net/udp",
              "/proc/%d/cmdline",
              "/proc/%d/net/udp6",
              "/proc/%d/net/unix",
              "/proc/%d/fd/%d",
              "/proc/%d/comm",
              "/proc/%d/smaps",
              "/proc/%d/task",
              "/proc/%d/fd",
              "/proc/%d/limits",
              "/proc/%d/net/tcp6",
              "/proc/%d/status",
              "/proc/%d/net/icmp"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "closedir",
              "dlclose",
              "close",
              "pclose",
              "fclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 4.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID:"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "a": "T1552.003",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "whitelist"
            ],
            "i": "objectives/credential-access/shell/history::zsh-history-unless-cond-2--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/hardening/missing::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic library unload",
            "e": [
              "dlclose"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlclose",
            "l": 3
          },
          {
            "a": "T1564.001",
            "c": 0.949999988079071,
            "d": "Hidden system binary path",
            "e": [
              "/bin/.ext"
            ],
            "i": "objectives/evasion/file-hiding/system-path::hidden-system-bin-reference",
            "l": 4,
            "m": "F0005"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Imports ptrace debugger API",
            "e": [
              "ptrace"
            ],
            "i": "micro-behaviors/os/syscall/invoke::ptrace-import",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Executes shell command and captures",
            "e": [
              "popen",
              "fgets"
            ],
            "i": "micro-behaviors/process/create/shell/capture::capture-command-output",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlclose",
              "dlsym"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          }
        ],
        "sha": "8a6b82d6a1f0c7a56110a8cc4cd681016b92360351c082c9f442d20a3486eb31",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/arm64-v8a/libxcrash_dumper.so",
        "type": "elf"
      },
      {
        "f": "O₇(Al₂C₂Er₄As₃Dy₂LaS)H₇(Cm₂Ds₂F₂Os₃PoCrDb₂)Md₂(Bi₃Bk)",
        "x": 13,
        "dp": 1,
        "id": 12,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "aeabi_memcpy",
          "raise",
          "memcpy",
          "memset",
          "errno",
          "stack_chk_fail",
          "pthread_key_delete",
          "stack_chk_guard",
          "pthread_key_create",
          "exit",
          "pthread_setspecific",
          "access",
          "pthread_getspecific",
          "calloc",
          "close",
          "free",
          "getpid",
          "gettid",
          "gettimeofday",
          "sF",
          "fflush",
          "fprintf",
          "kill",
          "open",
          "pthread_create",
          "pthread_join",
          "pthread_kill",
          "pthread_self",
          "sigaction",
          "sigaltstack",
          "siglongjmp",
          "sleep",
          "snprintf",
          "strcat",
          "strerror",
          "read",
          "strlen",
          "strncat",
          "strstr",
          "pthread_once",
          "pthread_rwlock_init",
          "pthread_rwlock_rdlock",
          "usleep",
          "pthread_rwlock_unlock",
          "pthread_rwlock_wrlock",
          "aeabi_memclr8",
          "dladdr",
          "isascii",
          "strcmp",
          "strdup",
          "fclose",
          "fopen",
          "pthread_mutex_init",
          "sysconf",
          "fgets",
          "sprintf",
          "atoi",
          "strchr",
          "getenv",
          "strncpy",
          "bsearch",
          "fstat",
          "msync",
          "malloc",
          "mmap",
          "munmap",
          "abort",
          "fread",
          "qsort",
          "fseek",
          "strncmp",
          "memchr",
          "aeabi_memclr",
          "realloc",
          "strcpy",
          "strrchr",
          "isspace",
          "sscanf",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "android_log_vprint",
          "fwrite",
          "putc",
          "unlink",
          "vsnprintf",
          "waitpid",
          "write",
          "dup",
          "pthread_detach",
          "pthread_sigmask",
          "sigsetjmp",
          "syscall",
          "execl",
          "fork",
          "localtime_r",
          "opendir",
          "prctl",
          "localtime",
          "strftime",
          "ptrace",
          "time",
          "readdir",
          "system_property_get",
          "closedir",
          "stat",
          "dlerror",
          "strtoul",
          "dlopen",
          "dlsym",
          "dup2",
          "aeabi_memclr4",
          "aeabi_memcpy4",
          "aeabi_memset",
          "aeabi_memmove",
          "U_dyn_info_list_addr",
          "gnu_Unwind_Find_exidx"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libdl.so",
              "liblog.so",
              "libc.so",
              "libm.so"
            ],
            "soname": "libBugly_Native.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 3.0,
            "nx_enabled": true,
            "needed_libs": 4.0,
            "dynrel_count": 344.0,
            "dynsym_count": 402.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 289.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 29.0,
            "load_segment_max_p_memsz": 176916.0,
            "load_segment_max_p_filesz": 176916.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 182320.0
          },
          "binary": {
            "code_size": 120708.0,
            "func_count": 227.0,
            "has_overlay": true,
            "code_entropy": 5.31,
            "data_entropy": 3.69,
            "export_count": 281.0,
            "func_density": 1.93,
            "import_count": 119.0,
            "overlay_size": 1163.0,
            "string_count": 1317.0,
            "avg_func_size": 6619.41,
            "overlay_ratio": 0.01,
            "section_count": 27.0,
            "avg_complexity": 5.94,
            "import_density": 1.01,
            "max_complexity": 184.0,
            "string_density": 11.17,
            "aliased_exports": 10.0,
            "overall_entropy": 3.44,
            "overlay_entropy": 2.39,
            "avg_basic_blocks": 9.59,
            "avg_section_size": 6693.0,
            "dependency_count": 4.0,
            "entropy_variance": 1.45,
            "avg_string_length": 22.45,
            "complexity_per_kb": 0.05,
            "max_string_length": 445.0,
            "wide_string_count": 1.0,
            "avg_string_entropy": 3.39,
            "code_to_data_ratio": 2.01,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.64,
            "total_basic_blocks": 2178.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 20.62,
            "high_complexity_funcs": 1.0,
            "largest_section_ratio": 0.64,
            "provenance_id_present": true,
            "sentence_string_count": 504.0,
            "sentence_string_ratio": 0.38,
            "behavioral_import_ratio": 0.07,
            "nonstandard_section_name_count": 10.0
          }
        },
        "ss": [
          [
            320,
            "Android"
          ],
          [
            396,
            "5594570"
          ],
          [
            6929,
            "__cxa_atexit"
          ],
          [
            6942,
            "LIBC"
          ],
          [
            6947,
            "libc.so"
          ],
          [
            6955,
            "libBugly_Native.so"
          ],
          [
            6974,
            "__cxa_finalize"
          ],
          [
            6989,
            "AnrDumpThreadArgs"
          ],
          [
            7007,
            "HandleAnr"
          ],
          [
            7017,
            "JAR_JNI_VERSION"
          ],
          [
            7044,
            "SendSigquitToSignalCatcher"
          ],
          [
            7071,
            "UnblockSigquit"
          ],
          [
            7086,
            "__aeabi_idiv"
          ],
          [
            7099,
            "__aeabi_memcpy"
          ],
          [
            7114,
            "__aeabi_uidiv"
          ],
          [
            7128,
            "raise"
          ],
          [
            7134,
            "__aeabi_unwind_cpp_pr0"
          ],
          [
            7157,
            "__aeabi_unwind_cpp_pr1"
          ],
          [
            7180,
            "__emutls_get_address"
          ],
          [
            7201,
            "__emutls_v.isDumpingTrace"
          ],
          [
            7227,
            "memcpy"
          ],
          [
            7234,
            "__emutls_v.jmpBuf"
          ],
          [
            7252,
            "memset"
          ],
          [
            7259,
            "__errno"
          ],
          [
            7267,
            "__stack_chk_fail"
          ],
          [
            7284,
            "pthread_key_delete"
          ],
          [
            7303,
            "__stack_chk_guard"
          ],
          [
            7321,
            "pthread_key_create"
          ],
          [
            7346,
            "pthread_setspecific"
          ],
          [
            7366,
            "access"
          ],
          [
            7373,
            "pthread_getspecific"
          ],
          [
            7393,
            "appendNativeLog"
          ],
          [
            7409,
            "appendWholeNativeLog"
          ],
          [
            7430,
            "backtraceStack"
          ],
          [
            7445,
            "backtraceStackMini"
          ],
          [
            7464,
            "backupJavaClasses"
          ],
          [
            7482,
            "calloc"
          ],
          [
            7489,
            "checkJavaException"
          ],
          [
            7508,
            "close"
          ],
          [
            7514,
            "closeCrashRecordFile"
          ],
          [
            7535,
            "closeElfInfoParser"
          ],
          [
            7554,
            "closeMapRecordFile"
          ],
          [
            7573,
            "closeNativeLog"
          ],
          [
            7588,
            "closeRegisterRecordFile"
          ],
          [
            7612,
            "concatString"
          ],
          [
            7625,
            "delayRestoreSIGILLHandler"
          ],
          [
            7651,
            "doACrash"
          ],
          [
            7660,
            "doANativeCrash"
          ],
          [
            7675,
            "dumpAbortMessage"
          ],
          [
            7692,
            "eupInfo"
          ],
          [
            7700,
            "free"
          ],
          [
            7705,
            "freeNativeKeyValueList"
          ],
          [
            7728,
            "getAndroidApiLevel"
          ],
          [
            7747,
            "getBuglyClassPathPrefix"
          ],
          [
            7771,
            "getErrorMsg"
          ],
          [
            7783,
            "getJavaThreadStack"
          ],
          [
            7802,
            "getNativeLog"
          ],
          [
            7815,
            "getPendingExceptionStack"
          ],
          [
            7840,
            "getProcessName"
          ],
          [
            7855,
            "getSigCode"
          ],
          [
            7866,
            "getSignalName"
          ],
          [
            7880,
            "getThreadName"
          ],
          [
            7894,
            "getpid"
          ],
          [
            7901,
            "gettid"
          ],
          [
            7908,
            "gettimeofday"
          ],
          [
            7921,
            "initCrashRecordFile"
          ],
          [
            7941,
            "initMapRecordFile"
          ],
          [
            7959,
            "initRegisterRecordFile"
          ],
          [
            7982,
            "initStackBuffer"
          ],
          [
            7998,
            "javaCall_NativeCrashHandler_GetMHandle"
          ],
          [
            8037,
            "javaObjectCall_NativeExceptionHandler_handleNativeException"
          ],
          [
            8097,
            "javaStaticCall_NativeCrashHandler_GetInstance"
          ],
          [
            8143,
            "jc_Class"
          ],
          [
            8152,
            "jc_NativeCrashHandler"
          ],
          [
            8174,
            "jc_NativeExceptionHandler"
          ],
          [
            8200,
            "jc_Object"
          ],
          [
            8210,
            "jc_StackTraceElement"
          ],
          [
            8231,
            "jc_Thread"
          ],
          [
            8241,
            "jc_Throwable"
          ],
          [
            8254,
            "jm_Class_getName"
          ],
          [
            8271,
            "jm_Object_getClass"
          ],
          [
            8290,
            "jm_currentThread"
          ],
          [
            8307,
            "jm_getAndUpdateAnrState"
          ],
          [
            8331,
            "jm_getInstance"
          ],
          [
            8346,
            "jm_getMHandle"
          ],
          [
            8365,
            "jm_getStackTrace"
          ],
          [
            8382,
            "jm_handleNativeException"
          ],
          [
            8407,
            "fflush"
          ],
          [
            8414,
            "jm_handleNativeException2"
          ],
          [
            8440,
            "fprintf"
          ],
          [
            8448,
            "jm_throwable_getMessage"
          ],
          [
            8472,
            "jm_throwable_getStackTrace"
          ],
          [
            8499,
            "jm_throwable_toString"
          ],
          [
            8521,
            "jm_toString"
          ],
          [
            8533,
            "jniLogPath"
          ],
          [
            8544,
            "jni_appendNativeLog"
          ],
          [
            8564,
            "jni_appendWholeNativeLog"
          ],
          [
            8589,
            "jni_getNativeKeyValueList"
          ],
          [
            8615,
            "jni_getNativeLog"
          ],
          [
            8632,
            "jni_getProperties"
          ],
          [
            8650,
            "jni_getSoCpuAbi"
          ],
          [
            8666,
            "jni_putNativeKeyValue"
          ],
          [
            8688,
            "jni_regist"
          ],
          [
            8699,
            "jni_removeNativeKeyValue"
          ],
          [
            8724,
            "jni_setNativeInfo"
          ],
          [
            8742,
            "jni_testCrash"
          ],
          [
            8756,
            "jni_unregist"
          ],
          [
            8778,
            "lockFile"
          ],
          [
            8787,
            "lockFilePath"
          ],
          [
            8800,
            "log2Console"
          ],
          [
            8812,
            "open"
          ],
          [
            8817,
            "parseBoolString"
          ],
          [
            8833,
            "printBuglySoArch"
          ],
          [
            8850,
            "property_get"
          ],
          [
            8863,
            "pthread_create"
          ],
          [
            8878,
            "pthread_join"
          ],
          [
            8891,
            "pthread_kill"
          ],
          [
            8904,
            "pthread_self"
          ],
          [
            8917,
            "putNativeKeyValue"
          ],
          [
            8935,
            "recordFileDir"
          ],
          [
            8949,
            "recordRegisterInfo"
          ],
          [
            8968,
            "recordSystemLogWithFd"
          ],
          [
            8990,
            "recordTombStoneFileHeader"
          ],
          [
            9016,
            "resetError"
          ],
          [
            9027,
            "saveAppInfo2File"
          ],
          [
            9044,
            "saveEupInfo2File"
          ],
          [
            9061,
            "saveJavaDump2File"
          ],
          [
            9079,
            "saveKeyValue2File"
          ],
          [
            9097,
            "saveNativeLog2File"
          ],
          [
            9116,
            "setLogMode"
          ],
          [
            9127,
            "sigaction"
          ],
          [
            9137,
            "sigaltstack"
          ],
          [
            9149,
            "siglongjmp"
          ],
          [
            9160,
            "sleep"
          ],
          [
            9166,
            "snprintf"
          ],
          [
            9175,
            "strcat"
          ],
          [
            9182,
            "strerror"
          ],
          [
            9191,
            "read"
          ],
          [
            9196,
            "strlen"
          ],
          [
            9203,
            "strncat"
          ],
          [
            9218,
            "sysLogPath"
          ],
          [
            9229,
            "toJavaString"
          ],
          [
            9249,
            "pthread_once"
          ],
          [
            9262,
            "unlockFile"
          ],
          [
            9273,
            "pthread_rwlock_init"
          ],
          [
            9293,
            "unregistSignalHanlder"
          ],
          [
            9315,
            "pthread_rwlock_rdlock"
          ],
          [
            9337,
            "usleep"
          ],
          [
            9344,
            "pthread_rwlock_unlock"
          ],
          [
            9380,
            "pthread_rwlock_wrlock"
          ],
          [
            9402,
            "_Uarm_init_local"
          ],
          [
            9419,
            "_Uarm_step"
          ],
          [
            9430,
            "__aeabi_memclr8"
          ],
          [
            9446,
            "backtraceStackWithLibUnwind"
          ],
          [
            9474,
            "dladdr"
          ],
          [
            9481,
            "libdl.so"
          ],
          [
            9490,
            "findModuleInMapInfoList"
          ],
          [
            9514,
            "freeMapInfoList"
          ],
          [
            9530,
            "getAbortMessage"
          ],
          [
            9546,
            "getBackTraceMapInfoList"
          ],
          [
            9570,
            "getElfInfoWithSymbolTable"
          ],
          [
            9596,
            "initCurrentMapInfoList"
          ],
          [
            9619,
            "initLocalMapInfoList"
          ],
          [
            9640,
            "init_dl_iterate_phdr_wrapper"
          ],
          [
            9669,
            "isascii"
          ],
          [
            9677,
            "localMapInfoList"
          ],
          [
            9705,
            "miniBacktraceStackWithLibUnwind"
          ],
          [
            9737,
            "recordAllMapInfo"
          ],
          [
            9754,
            "searchSymbolInElfFile"
          ],
          [
            9783,
            "strdup"
          ],
          [
            9790,
            "closeBackupRecordFile"
          ],
          [
            9812,
            "fclose"
          ],
          [
            9819,
            "fopen"
          ],
          [
            9825,
            "initBackupRecordFile"
          ],
          [
            9846,
            "pthread_mutex_init"
          ],
          [
            9865,
            "initCurrentXMapInfoList"
          ],
          [
            9889,
            "sysconf"
          ],
          [
            9906,
            "recordBackupInfo"
          ],
          [
            9923,
            "recordMapInfo2File"
          ],
          [
            9942,
            "recordRegisterInfo2File"
          ],
          [
            9966,
            "getNativeKeyValueList"
          ],
          [
            9988,
            "recordHead"
          ],
          [
            9999,
            "recordProperty"
          ],
          [
            10014,
            "recordLine"
          ],
          [
            10031,
            "getElfInfo"
          ],
          [
            10042,
            "recordMapInfo"
          ],
          [
            10056,
            "recordMapLine"
          ],
          [
            10070,
            "sprintf"
          ],
          [
            10078,
            "atoi"
          ],
          [
            10090,
            "getenv"
          ],
          [
            10097,
            "GetAbortMessageAfterQ"
          ],
          [
            10119,
            "GetAbortMessageBeforeQ"
          ],
          [
            10142,
            "searchSymbol"
          ],
          [
            10155,
            "strncpy"
          ],
          [
            10163,
            "__aeabi_uldivmod"
          ],
          [
            10180,
            "bsearch"
          ],
          [
            10188,
            "createSymbolTable"
          ],
          [
            10206,
            "freeSymbolTable"
          ],
          [
            10234,
            "getElfInfoWithinStackLine"
          ],
          [
            10260,
            "get_elf_exec_load_bias"
          ],
          [
            10283,
            "malloc"
          ],
          [
            10295,
            "munmap"
          ],
          [
            10302,
            "abort"
          ],
          [
            10308,
            "parseElf"
          ],
          [
            10317,
            "parseElfVersion"
          ],
          [
            10333,
            "fread"
          ],
          [
            10345,
            "fseek"
          ],
          [
            10351,
            "searchSymbolTable"
          ],
          [
            10369,
            "strncmp"
          ],
          [
            10377,
            "memchr"
          ],
          [
            10384,
            "__aeabi_memclr"
          ],
          [
            10399,
            "realloc"
          ],
          [
            10407,
            "checkMemoryReadable"
          ],
          [
            10434,
            "initMapInfoList"
          ],
          [
            10450,
            "strrchr"
          ],
          [
            10458,
            "initXMapInfoList"
          ],
          [
            10475,
            "isspace"
          ],
          [
            10483,
            "sscanf"
          ],
          [
            10490,
            "pthread_mutex_lock"
          ],
          [
            10509,
            "pthread_mutex_unlock"
          ],
          [
            10530,
            "removeNativeKeyValue"
          ],
          [
            10551,
            "__aeabi_uidivmod"
          ],
          [
            10568,
            "createCircularQueue"
          ],
          [
            10588,
            "freeCircularQueue"
          ],
          [
            10606,
            "insertCircularQueue"
          ],
          [
            10626,
            "locateCircularQueue"
          ],
          [
            10646,
            "readCircularQueue"
          ],
          [
            10664,
            "BUGLY_CHANNEL_SESSION"
          ],
          [
            10686,
            "BUGLY_VERSION_SESSION"
          ],
          [
            10708,
            "__android_log_vprint"
          ],
          [
            10729,
            "currentMode"
          ],
          [
            10741,
            "fwrite"
          ],
          [
            10753,
            "recordEnd"
          ],
          [
            10763,
            "recordStr"
          ],
          [
            10773,
            "unlink"
          ],
          [
            10780,
            "vsnprintf"
          ],
          [
            10790,
            "waitpid"
          ],
          [
            10798,
            "write"
          ],
          [
            10808,
            "GetAndUpdateAnrState"
          ],
          [
            10829,
            "constructJavaObjectArray"
          ],
          [
            10854,
            "constructUploadExtraMessage"
          ],
          [
            10882,
            "getIndexOfIntArray"
          ],
          [
            10901,
            "pthread_detach"
          ],
          [
            10916,
            "getJavaMainThread"
          ],
          [
            10934,
            "pthread_sigmask"
          ],
          [
            10950,
            "getJavaMethodID"
          ],
          [
            10966,
            "sigsetjmp"
          ],
          [
            10976,
            "getJavaStaticMethodID"
          ],
          [
            10998,
            "syscall"
          ],
          [
            11006,
            "getJavaThread"
          ],
          [
            11020,
            "getJavaThreadByName"
          ],
          [
            11040,
            "getJavaThreadId"
          ],
          [
            11056,
            "getJavaThreadName"
          ],
          [
            11074,
            "getJavaThreadStackByThreadObject"
          ],
          [
            11107,
            "getKeySetArrayOfMap"
          ],
          [
            11127,
            "getSameNameThreadIdArray"
          ]
        ],
        "sz": 182320,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code IN token",
            "e": [
              "_IN"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-in",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "register native abi method error, please upgrade bugly jar version"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-15",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.38"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 27.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.39"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 227.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "libc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libBugly_Native.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "d": "Duplicate file descriptor",
            "e": [
              "dup"
            ],
            "i": "micro-behaviors/process/fd/dup::dup",
            "l": 2
          },
          {
            "a": "T1082",
            "c": 0.30000001192092896,
            "d": "x86_64 architecture string",
            "e": [
              "x86_64"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::arch-x86-64",
            "l": 2,
            "m": "E1082"
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 5.94"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "Format time as string",
            "e": [
              "strftime",
              "sym.imp.strftime"
            ],
            "i": "micro-behaviors/time/query::strftime",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 2178.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 27.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime",
              "sym.imp.localtime_r",
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/apex/",
              "/system/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "c": 0.8600000143051147,
            "d": "Procfs maps path template",
            "e": [
              "/proc/%d/maps"
            ],
            "i": "micro-behaviors/fs/proc/info/memory::c-procfs-maps-template",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r",
              "localtime"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "access",
              "_UPT_access_fpreg",
              "_UPT_access_mem",
              "_UPT_access_reg",
              "_Uarm_local_access_addr_space_init",
              "_Uarm_get_accessors",
              "_UPT_accessors"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "d": "Iterate shared object list",
            "e": [
              "init_dl_iterate_phdr_wrapper",
              "dl_iterate_phdr_wrapper",
              "dl_iterate_phdr",
              "init_dl_iterate_phdr_wrapper."
            ],
            "i": "micro-behaviors/dylib/enumerate::dl-iterate-phdr",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "64-bit division helper symbol",
            "e": [
              "divdi3"
            ],
            "i": "objectives/anti-static/obfuscation/control-flow/logic::complex-arithmetic-div",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "C-style exec family functions",
            "e": [
              "execl"
            ],
            "i": "micro-behaviors/process/create/execv::c-exec-variants",
            "l": 3
          },
          {
            "c": 0.75,
            "d": "String to integer conversion (atoi)",
            "e": [
              "atoi"
            ],
            "i": "micro-behaviors/data/string/conversion::atoi",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 227.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "fork"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Makefile all target",
            "e": [
              "Failed to call: %s"
            ],
            "i": "metadata/build/make::all-target-assignment",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "magic 2 compare wrong",
              "magic 1 compare wrong"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for specified duration",
            "e": [
              "sleep"
            ],
            "i": "micro-behaviors/time/query::sleep-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libBugly_Native.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.44"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 227.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1317.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Generic weak-login username marker",
            "e": [
              "Set native info: user ID(%s)"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-5",
            "l": 1
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.7799999713897705,
            "d": "Regex component marker",
            "e": [
              "list by maps file"
            ],
            "i": "objectives/evasion/kernel-hide/ebpf::bpf-rootkit-controller-actions--rx-8",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 119.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "stat",
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "d": "Duplicate file descriptor (I/O redirection)",
            "e": [
              "dup2"
            ],
            "i": "micro-behaviors/process/fd/dup::dup2",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/cmdline",
              "/proc/%d/comm",
              "/proc/%d/maps",
              "/proc/%d/task"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "fclose",
              "Native log had closed.",
              "closeMapRecordFile",
              "closeElfInfoParser",
              "closeRegisterRecordFile",
              "close",
              "closedir",
              "closeCrashRecordFile",
              "closeBackupRecordFile",
              "closeNativeLog"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 281.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              "_ID(",
              " ID:",
              " ID(",
              "ID ",
              " ID "
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "d": "overflow keyword",
            "e": [
              "Stack overflow"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "getenv function (read environment variable)",
            "e": [
              "getenv"
            ],
            "i": "micro-behaviors/os/env/vars/access::getenv",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Hardcoded external IPv4 address",
            "e": [
              "4.1.9.3"
            ],
            "i": "micro-behaviors/communications/ip/literal::external-ipv4-binary",
            "l": 3
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 227.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1317.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "a": "T1562",
            "c": 0.6000000238418579,
            "d": "Send signal to process",
            "e": [
              "kill"
            ],
            "i": "micro-behaviors/process/terminate/signal::kill",
            "l": 2,
            "m": "E1562"
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "stat",
              "fstat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic linker error handling",
            "e": [
              "dlerror"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlerror",
            "l": 3
          },
          {
            "a": "T1082",
            "c": 0.8500000238418579,
            "d": "Multi-architecture runtime wordlist",
            "e": [
              "mips64"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist",
            "l": 3,
            "m": "E1082"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Imports ptrace debugger API",
            "e": [
              "ptrace"
            ],
            "i": "micro-behaviors/os/syscall/invoke::ptrace-import",
            "l": 3
          },
          {
            "a": "T1071.001",
            "c": 0.8500000238418579,
            "d": "Hardcoded external IPv4 address",
            "e": [
              "4.1.9.3"
            ],
            "i": "objectives/command-and-control/infrastructure/ip::hardcoded-ipv4-binary",
            "l": 3,
            "m": "C0002"
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "fseek",
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "sleep",
              "gettimeofday",
              "usleep"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlsym",
              "dlerror"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          }
        ],
        "sha": "4371a120224530de6b0522f82e4fab656f43fa0377c168d6ca81b9aacdcb4bd3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libBugly_Native.so",
        "type": "elf"
      },
      {
        "f": "O₅(AlAs₂Dy₂ErS)H(F)Md(Bi₄)",
        "x": 4,
        "dp": 1,
        "id": 13,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "AndroidBitmap_lockPixels",
          "AndroidBitmap_unlockPixels",
          "ANativeWindow_fromSurface",
          "android_log_print",
          "ANativeWindow_setBuffersGeometry",
          "ANativeWindow_lock",
          "ANativeWindow_release",
          "ANativeWindow_unlockAndPost",
          "malloc",
          "free",
          "stack_chk_fail",
          "stack_chk_guard",
          "fclose",
          "fgets",
          "fopen",
          "memcmp",
          "strstr",
          "memcpy",
          "aeabi_memmove",
          "memset"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libandroid.so",
              "libjnigraphics.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libimage_processing_util_jni.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 1.0,
            "nx_enabled": true,
            "entry_point": 7920.0,
            "needed_libs": 6.0,
            "dynrel_count": 37.0,
            "dynsym_count": 29.0,
            "stack_canary": true,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 21.0,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 10.0,
            "section_header_count": 25.0,
            "load_segment_max_p_memsz": 15808.0,
            "load_segment_max_p_filesz": 15808.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 21692.0
          },
          "binary": {
            "code_size": 15808.0,
            "entry_point": 7920.0,
            "has_overlay": true,
            "code_entropy": 5.29,
            "data_entropy": 3.32,
            "export_count": 6.0,
            "import_count": 23.0,
            "overlay_size": 1001.0,
            "string_count": 81.0,
            "overlay_ratio": 0.05,
            "section_count": 24.0,
            "import_density": 1.49,
            "string_density": 5.25,
            "overall_entropy": 3.11,
            "overlay_entropy": 2.19,
            "avg_section_size": 846.58,
            "dependency_count": 6.0,
            "entropy_variance": 1.48,
            "avg_string_length": 18.74,
            "max_string_length": 157.0,
            "avg_string_entropy": 2.89,
            "code_to_data_ratio": 3.51,
            "text_to_file_ratio": 0.71,
            "func_analysis_depth": 1.0,
            "string_length_stddev": 25.88,
            "largest_section_ratio": 0.71,
            "sentence_string_count": 5.0,
            "sentence_string_ratio": 0.06,
            "behavioral_import_ratio": 0.04,
            "nonstandard_section_name_count": 7.0
          }
        },
        "ss": [
          [
            384,
            "Android"
          ],
          [
            396,
            "r23b"
          ],
          [
            460,
            "7779620"
          ],
          [
            1437,
            "__cxa_atexit"
          ],
          [
            1450,
            "__cxa_finalize"
          ],
          [
            1465,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeCopyBetweenByteBufferAndBitmap"
          ],
          [
            1548,
            "AndroidBitmap_lockPixels"
          ],
          [
            1573,
            "AndroidBitmap_unlockPixels"
          ],
          [
            1600,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeShiftPixel"
          ],
          [
            1663,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeWriteJpegToSurface"
          ],
          [
            1734,
            "ANativeWindow_fromSurface"
          ],
          [
            1760,
            "__android_log_print"
          ],
          [
            1780,
            "ANativeWindow_setBuffersGeometry"
          ],
          [
            1813,
            "ANativeWindow_lock"
          ],
          [
            1832,
            "ANativeWindow_release"
          ],
          [
            1854,
            "ANativeWindow_unlockAndPost"
          ],
          [
            1882,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeConvertAndroid420ToABGR"
          ],
          [
            1958,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeConvertAndroid420ToBitmap"
          ],
          [
            2036,
            "Java_androidx_camera_core_ImageProcessingUtil_nativeRotateYUV"
          ],
          [
            2098,
            "malloc"
          ],
          [
            2105,
            "free"
          ],
          [
            2110,
            "__stack_chk_fail"
          ],
          [
            2127,
            "__stack_chk_guard"
          ],
          [
            2145,
            "fclose"
          ],
          [
            2158,
            "fopen"
          ],
          [
            2164,
            "memcmp"
          ],
          [
            2178,
            "memcpy"
          ],
          [
            2185,
            "__aeabi_memmove"
          ],
          [
            2201,
            "memset"
          ],
          [
            2208,
            "libimage_processing_util_jni.so"
          ],
          [
            2240,
            "VERS_1.0"
          ],
          [
            2249,
            "libc.so"
          ],
          [
            2257,
            "LIBC"
          ],
          [
            2262,
            "liblog.so"
          ],
          [
            2272,
            "libandroid.so"
          ],
          [
            2286,
            "libjnigraphics.so"
          ],
          [
            2304,
            "libm.so"
          ],
          [
            2312,
            "libdl.so"
          ],
          [
            3619,
            "neon"
          ],
          [
            3625,
            "Failed to get ANativeWindow"
          ],
          [
            3653,
            "Failed to lock window."
          ],
          [
            3676,
            "asimd"
          ],
          [
            3695,
            "Failed to get JPEG bytes array pointer."
          ],
          [
            3735,
            "Features"
          ],
          [
            3744,
            "/proc/cpuinfo"
          ],
          [
            4216,
            "XFCF"
          ],
          [
            4471,
            "%XFBF3F"
          ],
          [
            5225,
            "GTDED"
          ],
          [
            5821,
            "FQFO"
          ],
          [
            7812,
            "FZFCF"
          ],
          [
            8826,
            "PJyDPLzD\th|D"
          ],
          [
            10948,
            "PFZF"
          ],
          [
            11194,
            "PF2F"
          ],
          [
            11616,
            "IF2F"
          ],
          [
            11933,
            "FPFIF"
          ],
          [
            12158,
            "YF2F"
          ],
          [
            20124,
            "Android (7714059, based on r416183c1) clang version 12.0.8 (https://android.googlesource.com/toolchain/llvm-project c935d99d7cf2"
          ],
          [
            20283,
            "Linker: LLD 12.0.8 (/buildbot/src/android/llvm-r416183/out/llvm-project/lld c935d99d7cf2016289302412d708641d52d2f7ee)"
          ],
          [
            20406,
            "aeabi"
          ],
          [
            20460,
            ".fini_array"
          ],
          [
            20472,
            ".ARM.exidx"
          ],
          [
            20483,
            ".text"
          ],
          [
            20489,
            ".got"
          ],
          [
            20494,
            ".comment"
          ],
          [
            20503,
            ".note.android.ident"
          ],
          [
            20523,
            ".got.plt"
          ],
          [
            20532,
            ".rel.plt"
          ],
          [
            20541,
            ".bss"
          ],
          [
            20546,
            ".ARM.attributes"
          ],
          [
            20562,
            ".dynstr"
          ],
          [
            20570,
            ".gnu.version_r"
          ],
          [
            20585,
            ".data.rel.ro"
          ],
          [
            20598,
            ".rel.dyn"
          ],
          [
            20607,
            ".gnu.version"
          ],
          [
            20620,
            ".dynsym"
          ],
          [
            20628,
            ".gnu.hash"
          ],
          [
            20638,
            ".gnu.version_d"
          ],
          [
            20653,
            ".dynamic"
          ],
          [
            20662,
            ".ARM.extab"
          ],
          [
            20673,
            ".shstrtab"
          ],
          [
            20683,
            ".rodata"
          ]
        ],
        "sz": 21692,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libimage_processing_util_jni.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Get CPU info from /proc/cpuinfo",
            "e": [
              "/proc/cpuinfo"
            ],
            "i": "micro-behaviors/fs/proc/system::system-cpuinfo",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 2.89"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 23.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libimage_processing_util_jni.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 0.00"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Zero recovered functions",
            "e": [
              "binary.func_count = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/payload/encrypted::zero-function-count",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libimage_processing_util_jni.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.11"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "fclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 6.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Tiny C string section ratio",
            "e": [
              " = 0.0% of total (0 / 21692 bytes)"
            ],
            "i": "metadata/binary/section/metrics::tiny-cstring-section",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1497.001",
            "c": 0.800000011920929,
            "d": "Extremely low logic density (function sparsity)",
            "e": [
              "binary.complexity_per_kb = 0.00"
            ],
            "i": "objectives/anti-analysis/vm-detect/instruction::sparse-logic-density",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "107fd71eac6ac5f71e21fffb27dcacfb9c3b72d0262e360ab600f78a25b6b2d7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libimage_processing_util_jni.so",
        "type": "elf"
      },
      {
        "f": "K₂O₁₀(Al₆CoDy₄Er₇I₄As₃C₄CaLa₂S)H₆(Cm₁₄Cr₅Ds₂F₂Os₂Db₂)Md₂(Bi₃Bk)",
        "x": 19,
        "dp": 1,
        "id": 14,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "aeabi_memclr4",
          "aeabi_memclr8",
          "stack_chk_fail",
          "stack_chk_guard",
          "nan",
          "strlen",
          "aeabi_memcpy4",
          "aeabi_memmove4",
          "aeabi_memcpy",
          "malloc",
          "memchr",
          "memcmp",
          "abort",
          "aeabi_memclr",
          "aeabi_memset8",
          "aeabi_memmove",
          "vsnprintf",
          "write",
          "close",
          "open",
          "read",
          "strtol",
          "syscall",
          "pthread_getspecific",
          "pthread_key_create",
          "pthread_setspecific",
          "pthread_sigmask",
          "errno",
          "dlopen",
          "dlsym",
          "free",
          "pthread_once",
          "strcmp",
          "log10f",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "clock_gettime",
          "pthread_cond_broadcast",
          "pthread_cond_signal",
          "pthread_cond_wait",
          "pthread_cond_destroy",
          "sF",
          "calloc",
          "fprintf",
          "realloc",
          "fflush",
          "fwrite",
          "getc",
          "ungetc",
          "islower",
          "isupper",
          "iswlower",
          "isxdigit",
          "mbrlen",
          "snprintf",
          "sscanf",
          "strftime",
          "strtod",
          "tolower",
          "toupper",
          "vasprintf",
          "vsscanf",
          "pthread_mutex_trylock",
          "sched_yield",
          "pthread_equal",
          "pthread_mutex_destroy",
          "pthread_mutex_init",
          "pthread_mutexattr_destroy",
          "pthread_mutexattr_init",
          "pthread_mutexattr_settype",
          "pthread_self",
          "aeabi_memset",
          "strtoll",
          "strtoul",
          "strtoull",
          "strerror_r",
          "nanosleep",
          "pthread_join",
          "sysconf",
          "assert2",
          "fputc",
          "vfprintf",
          "closedir",
          "opendir",
          "readdir",
          "rename",
          "stat",
          "unlink",
          "isspace",
          "sprintf",
          "time",
          "freeaddrinfo",
          "getaddrinfo",
          "inet_ntop",
          "inet_pton",
          "strncmp",
          "accept",
          "bind",
          "connect",
          "epoll_create",
          "epoll_ctl",
          "epoll_wait",
          "fcntl",
          "getpeername",
          "getsockname",
          "getsockopt",
          "ioctl",
          "listen",
          "pipe",
          "poll",
          "recvfrom",
          "select",
          "sendto",
          "setsockopt",
          "socket",
          "strspn",
          "aeabi_memcpy8",
          "aeabi_memmove8",
          "pthread_attr_init",
          "pthread_create",
          "if_indextoname",
          "strncpy",
          "prctl",
          "android_log_print",
          "fputs",
          "fclose",
          "fopen",
          "ceilf",
          "gettid",
          "strerror",
          "strrchr",
          "gettimeofday",
          "pthread_attr_destroy",
          "pthread_attr_setstacksize",
          "pthread_setschedparam",
          "sched_get_priority_max",
          "sched_get_priority_min",
          "pthread_cond_init",
          "pthread_cond_timedwait_monotonic_np",
          "pthread_condattr_destroy",
          "pthread_condattr_init",
          "dladdr",
          "getpid",
          "sigaction",
          "tgkill",
          "fread",
          "fseek",
          "powf",
          "bsearch",
          "qsort",
          "gmtime_r",
          "recv",
          "send",
          "strchr",
          "fgets",
          "isdigit",
          "getauxval",
          "madvise",
          "mmap",
          "munmap",
          "perror",
          "OPENSSL_memory_alloc",
          "OPENSSL_memory_free",
          "OPENSSL_memory_get_size",
          "sdallocx",
          "pthread_rwlock_destroy",
          "pthread_rwlock_init",
          "pthread_rwlock_rdlock",
          "pthread_rwlock_unlock",
          "pthread_rwlock_wrlock",
          "getenv",
          "strstr",
          "longjmp",
          "setjmp",
          "exit",
          "isalnum",
          "roundf",
          "strnlen",
          "slCreateEngine",
          "SL_IID_ANDROIDCONFIGURATION",
          "SL_IID_BUFFERQUEUE",
          "SL_IID_ENGINE",
          "SL_IID_PLAY",
          "SL_IID_VOLUME",
          "SL_IID_ANDROIDSIMPLEBUFFERQUEUE",
          "SL_IID_RECORD",
          "cosf",
          "sincosf",
          "ceil",
          "expf",
          "aeabi_memset4",
          "exp2f",
          "floor",
          "floorf",
          "pow",
          "lrint",
          "sincos",
          "tanhf",
          "android_log_write",
          "lrintf",
          "atoi",
          "round",
          "fmax",
          "sem_destroy",
          "sem_init",
          "sem_post",
          "sem_wait",
          "printf",
          "lrand48",
          "getegid",
          "geteuid",
          "getgid",
          "getuid",
          "socketpair",
          "fdopen",
          "srand48",
          "localtime_r",
          "isalpha",
          "scalbn",
          "memalign",
          "gnu_Unwind_Find_exidx",
          "raise",
          "memcpy",
          "memset",
          "pthread_key_delete"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libdl.so",
              "libm.so",
              "liblog.so",
              "libOpenSLES.so",
              "libc.so"
            ],
            "soname": "libjingle_peerconnection_so.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "entry_point": 998016.0,
            "needed_libs": 5.0,
            "dynrel_count": 19220.0,
            "dynsym_count": 399.0,
            "stack_canary": true,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 215.0,
            "build_id_length": 8.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 2.0,
            "program_header_count": 9.0,
            "section_header_count": 26.0,
            "load_segment_max_p_memsz": 4299152.0,
            "load_segment_max_p_filesz": 4299152.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 4414340.0
          },
          "binary": {
            "code_size": 3301124.0,
            "func_count": 15276.0,
            "entry_point": 998016.0,
            "has_overlay": true,
            "code_entropy": 5.58,
            "data_entropy": 5.36,
            "export_count": 171.0,
            "func_density": 4.74,
            "import_count": 228.0,
            "overlay_size": 1043.0,
            "string_count": 11689.0,
            "avg_func_size": 7823.29,
            "overlay_ratio": 0.0,
            "section_count": 24.0,
            "avg_complexity": 2.73,
            "import_density": 0.07,
            "max_complexity": 173.0,
            "string_density": 3.63,
            "aliased_exports": 9.0,
            "overall_entropy": 3.93,
            "overlay_entropy": 2.52,
            "avg_basic_blocks": 4.37,
            "avg_section_size": 183859.95,
            "dependency_count": 5.0,
            "entropy_variance": 1.68,
            "avg_string_length": 29.49,
            "complexity_per_kb": 0.0,
            "max_string_length": 443.0,
            "wide_string_count": 34.0,
            "avg_string_entropy": 3.42,
            "code_to_data_ratio": 2.97,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.75,
            "total_basic_blocks": 66785.0,
            "func_analysis_depth": 1.0,
            "high_entropy_strings": 6.0,
            "provenance_id_length": 8.0,
            "string_length_stddev": 27.91,
            "high_complexity_funcs": 36.0,
            "largest_section_ratio": 0.75,
            "provenance_id_present": true,
            "sentence_string_count": 3130.0,
            "sentence_string_ratio": 0.27,
            "behavioral_import_ratio": 0.05,
            "nonstandard_section_name_count": 5.0
          }
        },
        "ss": [
          [
            352,
            "Android"
          ],
          [
            428,
            "5594570"
          ],
          [
            12377,
            "__cxa_atexit"
          ],
          [
            12390,
            "__cxa_finalize"
          ],
          [
            12416,
            "__aeabi_memclr4"
          ],
          [
            12432,
            "__aeabi_memclr8"
          ],
          [
            12448,
            "__stack_chk_fail"
          ],
          [
            12465,
            "__stack_chk_guard"
          ],
          [
            12487,
            "strlen"
          ],
          [
            12494,
            "__aeabi_memcpy4"
          ],
          [
            12510,
            "__aeabi_memmove4"
          ],
          [
            12527,
            "__aeabi_memcpy"
          ],
          [
            12542,
            "malloc"
          ],
          [
            12549,
            "memchr"
          ],
          [
            12556,
            "memcmp"
          ],
          [
            12563,
            "abort"
          ],
          [
            12569,
            "__aeabi_memclr"
          ],
          [
            12584,
            "__aeabi_memset8"
          ],
          [
            12600,
            "__aeabi_memmove"
          ],
          [
            12616,
            "vsnprintf"
          ],
          [
            12626,
            "write"
          ],
          [
            12632,
            "close"
          ],
          [
            12638,
            "open"
          ],
          [
            12643,
            "read"
          ],
          [
            12648,
            "strtol"
          ],
          [
            12655,
            "syscall"
          ],
          [
            12663,
            "pthread_getspecific"
          ],
          [
            12683,
            "pthread_key_create"
          ],
          [
            12702,
            "pthread_setspecific"
          ],
          [
            12722,
            "pthread_sigmask"
          ],
          [
            12738,
            "__errno"
          ],
          [
            12746,
            "dlopen"
          ],
          [
            12759,
            "free"
          ],
          [
            12764,
            "pthread_once"
          ],
          [
            12784,
            "log10f"
          ],
          [
            12791,
            "pthread_mutex_lock"
          ],
          [
            12810,
            "pthread_mutex_unlock"
          ],
          [
            12831,
            "clock_gettime"
          ],
          [
            12845,
            "pthread_cond_broadcast"
          ],
          [
            12868,
            "pthread_cond_signal"
          ],
          [
            12888,
            "pthread_cond_wait"
          ],
          [
            12906,
            "pthread_cond_destroy"
          ],
          [
            12932,
            "calloc"
          ],
          [
            12939,
            "fprintf"
          ],
          [
            12947,
            "realloc"
          ],
          [
            12955,
            "fflush"
          ],
          [
            12962,
            "fwrite"
          ],
          [
            12974,
            "ungetc"
          ],
          [
            12981,
            "islower"
          ],
          [
            12989,
            "isupper"
          ],
          [
            12997,
            "iswlower"
          ],
          [
            13006,
            "isxdigit"
          ],
          [
            13015,
            "mbrlen"
          ],
          [
            13022,
            "snprintf"
          ],
          [
            13031,
            "sscanf"
          ],
          [
            13038,
            "strftime"
          ],
          [
            13047,
            "strtod"
          ],
          [
            13054,
            "tolower"
          ],
          [
            13062,
            "toupper"
          ],
          [
            13070,
            "vasprintf"
          ],
          [
            13080,
            "vsscanf"
          ],
          [
            13088,
            "pthread_mutex_trylock"
          ],
          [
            13110,
            "sched_yield"
          ],
          [
            13122,
            "pthread_equal"
          ],
          [
            13136,
            "pthread_mutex_destroy"
          ],
          [
            13158,
            "pthread_mutex_init"
          ],
          [
            13177,
            "pthread_mutexattr_destroy"
          ],
          [
            13203,
            "pthread_mutexattr_init"
          ],
          [
            13226,
            "pthread_mutexattr_settype"
          ],
          [
            13252,
            "pthread_self"
          ],
          [
            13265,
            "__aeabi_memset"
          ],
          [
            13280,
            "strtoll"
          ],
          [
            13288,
            "strtoul"
          ],
          [
            13296,
            "strtoull"
          ],
          [
            13305,
            "strerror_r"
          ],
          [
            13316,
            "nanosleep"
          ],
          [
            13326,
            "pthread_join"
          ],
          [
            13339,
            "sysconf"
          ],
          [
            13347,
            "__assert2"
          ],
          [
            13363,
            "vfprintf"
          ],
          [
            13372,
            "Java_org_webrtc_Metrics_nativeEnable"
          ],
          [
            13409,
            "Java_org_webrtc_Metrics_nativeGetAndReset"
          ],
          [
            13451,
            "closedir"
          ],
          [
            13460,
            "opendir"
          ],
          [
            13468,
            "readdir"
          ],
          [
            13476,
            "rename"
          ],
          [
            13488,
            "unlink"
          ],
          [
            13495,
            "isspace"
          ],
          [
            13503,
            "sprintf"
          ],
          [
            13511,
            "time"
          ],
          [
            13516,
            "freeaddrinfo"
          ],
          [
            13529,
            "getaddrinfo"
          ],
          [
            13541,
            "inet_ntop"
          ],
          [
            13551,
            "inet_pton"
          ],
          [
            13561,
            "strncmp"
          ],
          [
            13569,
            "accept"
          ],
          [
            13581,
            "connect"
          ],
          [
            13589,
            "epoll_create"
          ],
          [
            13602,
            "epoll_ctl"
          ],
          [
            13612,
            "epoll_wait"
          ],
          [
            13629,
            "getpeername"
          ],
          [
            13641,
            "getsockname"
          ],
          [
            13653,
            "getsockopt"
          ],
          [
            13664,
            "ioctl"
          ],
          [
            13670,
            "listen"
          ],
          [
            13677,
            "pipe"
          ],
          [
            13687,
            "recvfrom"
          ],
          [
            13696,
            "select"
          ],
          [
            13703,
            "sendto"
          ],
          [
            13710,
            "setsockopt"
          ],
          [
            13721,
            "socket"
          ],
          [
            13735,
            "__aeabi_memcpy8"
          ],
          [
            13751,
            "__aeabi_memmove8"
          ],
          [
            13768,
            "pthread_attr_init"
          ],
          [
            13786,
            "pthread_create"
          ],
          [
            13801,
            "if_indextoname"
          ],
          [
            13816,
            "strncpy"
          ],
          [
            13824,
            "Java_org_webrtc_Histogram_nativeAddSample"
          ],
          [
            13866,
            "Java_org_webrtc_Histogram_nativeCreateCounts"
          ],
          [
            13911,
            "Java_org_webrtc_Histogram_nativeCreateEnumeration"
          ],
          [
            13961,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyConnectionTypeChanged"
          ],
          [
            14026,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfActiveNetworkList"
          ],
          [
            14089,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfNetworkConnect"
          ],
          [
            14149,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfNetworkDisconnect"
          ],
          [
            14212,
            "Java_org_webrtc_NetworkMonitor_nativeNotifyOfNetworkPreference"
          ],
          [
            14275,
            "Java_org_webrtc_JniCommon_nativeAddRef"
          ],
          [
            14314,
            "Java_org_webrtc_JniCommon_nativeAllocateByteBuffer"
          ],
          [
            14365,
            "Java_org_webrtc_JniCommon_nativeFreeByteBuffer"
          ],
          [
            14412,
            "Java_org_webrtc_JniCommon_nativeReleaseRef"
          ],
          [
            14455,
            "Java_org_webrtc_Logging_nativeEnableLogThreads"
          ],
          [
            14502,
            "Java_org_webrtc_Logging_nativeEnableLogTimeStamps"
          ],
          [
            14552,
            "Java_org_webrtc_Logging_nativeEnableLogToDebugOutput"
          ],
          [
            14605,
            "Java_org_webrtc_Logging_nativeLog"
          ],
          [
            14645,
            "__android_log_print"
          ],
          [
            14671,
            "fclose"
          ],
          [
            14678,
            "fopen"
          ],
          [
            14684,
            "ceilf"
          ],
          [
            14690,
            "gettid"
          ],
          [
            14697,
            "strerror"
          ],
          [
            14706,
            "strrchr"
          ],
          [
            14714,
            "gettimeofday"
          ],
          [
            14727,
            "pthread_attr_destroy"
          ],
          [
            14748,
            "pthread_attr_setstacksize"
          ],
          [
            14774,
            "pthread_setschedparam"
          ],
          [
            14796,
            "sched_get_priority_max"
          ],
          [
            14819,
            "sched_get_priority_min"
          ],
          [
            14842,
            "pthread_cond_init"
          ],
          [
            14860,
            "pthread_cond_timedwait_monotonic_np"
          ],
          [
            14896,
            "pthread_condattr_destroy"
          ],
          [
            14921,
            "pthread_condattr_init"
          ],
          [
            14943,
            "dladdr"
          ],
          [
            14950,
            "getpid"
          ],
          [
            14957,
            "sigaction"
          ],
          [
            14967,
            "tgkill"
          ],
          [
            14974,
            "fread"
          ],
          [
            14980,
            "fseek"
          ],
          [
            14991,
            "bsearch"
          ],
          [
            15005,
            "gmtime_r"
          ],
          [
            15037,
            "isdigit"
          ],
          [
            15045,
            "getauxval"
          ],
          [
            15055,
            "madvise"
          ],
          [
            15068,
            "munmap"
          ],
          [
            15075,
            "perror"
          ],
          [
            15082,
            "OPENSSL_memory_alloc"
          ],
          [
            15103,
            "OPENSSL_memory_free"
          ],
          [
            15123,
            "OPENSSL_memory_get_size"
          ],
          [
            15147,
            "sdallocx"
          ],
          [
            15156,
            "pthread_rwlock_destroy"
          ],
          [
            15179,
            "pthread_rwlock_init"
          ],
          [
            15199,
            "pthread_rwlock_rdlock"
          ],
          [
            15221,
            "pthread_rwlock_unlock"
          ],
          [
            15243,
            "pthread_rwlock_wrlock"
          ],
          [
            15265,
            "getenv"
          ],
          [
            15279,
            "longjmp"
          ],
          [
            15287,
            "setjmp"
          ],
          [
            15294,
            "exit"
          ],
          [
            15299,
            "isalnum"
          ],
          [
            15307,
            "roundf"
          ],
          [
            15314,
            "strnlen"
          ],
          [
            15322,
            "slCreateEngine"
          ],
          [
            15337,
            "SL_IID_ANDROIDCONFIGURATION"
          ],
          [
            15365,
            "SL_IID_BUFFERQUEUE"
          ],
          [
            15384,
            "SL_IID_ENGINE"
          ],
          [
            15398,
            "SL_IID_PLAY"
          ],
          [
            15410,
            "SL_IID_VOLUME"
          ],
          [
            15424,
            "SL_IID_ANDROIDSIMPLEBUFFERQUEUE"
          ],
          [
            15456,
            "SL_IID_RECORD"
          ],
          [
            15475,
            "sincosf"
          ],
          [
            15483,
            "ceil"
          ],
          [
            15493,
            "__aeabi_memset4"
          ],
          [
            15509,
            "exp2f"
          ],
          [
            15515,
            "floor"
          ],
          [
            15521,
            "floorf"
          ],
          [
            15538,
            "sincos"
          ],
          [
            15551,
            "__android_log_write"
          ],
          [
            15571,
            "Java_org_webrtc_BuiltinAudioDecoderFactoryFactory_nativeCreateBuiltinAudioDecoderFactory"
          ],
          [
            15660,
            "Java_org_webrtc_BuiltinAudioEncoderFactoryFactory_nativeCreateBuiltinAudioEncoderFactory"
          ],
          [
            15749,
            "lrintf"
          ],
          [
            15756,
            "atoi"
          ],
          [
            15761,
            "Java_org_webrtc_LibvpxVp8Decoder_nativeCreateDecoder"
          ],
          [
            15814,
            "Java_org_webrtc_LibvpxVp8Encoder_nativeCreateEncoder"
          ],
          [
            15867,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeAdaptFrame"
          ],
          [
            15930,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeAdaptOutputFormat"
          ],
          [
            16000,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeOnFrameCaptured"
          ],
          [
            16068,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeSetIsScreencast"
          ],
          [
            16136,
            "Java_org_webrtc_NativeAndroidVideoTrackSource_nativeSetState"
          ],
          [
            16197,
            "Java_org_webrtc_H264Utils_nativeIsSameH264Profile"
          ],
          [
            16247,
            "Java_org_webrtc_JavaI420Buffer_nativeCropAndScaleI420"
          ],
          [
            16301,
            "Java_org_webrtc_NV12Buffer_nativeCropAndScale"
          ],
          [
            16347,
            "Java_org_webrtc_NV21Buffer_nativeCropAndScale"
          ],
          [
            16393,
            "Java_org_webrtc_TimestampAligner_nativeCreateTimestampAligner"
          ],
          [
            16455,
            "Java_org_webrtc_TimestampAligner_nativeReleaseTimestampAligner"
          ],
          [
            16518,
            "Java_org_webrtc_TimestampAligner_nativeRtcTimeNanos"
          ],
          [
            16570,
            "Java_org_webrtc_TimestampAligner_nativeTranslateTimestamp"
          ],
          [
            16628,
            "Java_org_webrtc_VideoDecoderFallback_nativeCreateDecoder"
          ],
          [
            16685,
            "Java_org_webrtc_VideoDecoderWrapper_nativeOnDecodedFrame"
          ],
          [
            16742,
            "Java_org_webrtc_VideoEncoderFallback_nativeCreateEncoder"
          ],
          [
            16799,
            "Java_org_webrtc_VideoEncoderWrapper_nativeOnEncodedFrame"
          ],
          [
            16856,
            "Java_org_webrtc_VideoTrack_nativeAddSink"
          ],
          [
            16897,
            "Java_org_webrtc_VideoTrack_nativeFreeSink"
          ],
          [
            16939,
            "Java_org_webrtc_VideoTrack_nativeRemoveSink"
          ],
          [
            16983,
            "Java_org_webrtc_VideoTrack_nativeWrapSink"
          ],
          [
            17025,
            "Java_org_webrtc_YuvHelper_nativeABGRToI420"
          ],
          [
            17068,
            "Java_org_webrtc_YuvHelper_nativeCopyPlane"
          ],
          [
            17110,
            "Java_org_webrtc_YuvHelper_nativeI420Copy"
          ],
          [
            17151,
            "Java_org_webrtc_YuvHelper_nativeI420Rotate"
          ],
          [
            17194,
            "Java_org_webrtc_YuvHelper_nativeI420ToNV12"
          ],
          [
            17237,
            "round"
          ],
          [
            17248,
            "sem_destroy"
          ],
          [
            17260,
            "sem_init"
          ],
          [
            17269,
            "sem_post"
          ],
          [
            17278,
            "sem_wait"
          ],
          [
            17287,
            "printf"
          ],
          [
            17294,
            "lrand48"
          ],
          [
            17302,
            "Java_org_webrtc_LibvpxVp9Decoder_nativeCreateDecoder"
          ],
          [
            17355,
            "Java_org_webrtc_LibvpxVp9Decoder_nativeIsSupported"
          ],
          [
            17406,
            "Java_org_webrtc_LibvpxVp9Encoder_nativeCreateEncoder"
          ],
          [
            17459,
            "Java_org_webrtc_LibvpxVp9Encoder_nativeIsSupported"
          ],
          [
            17510,
            "Java_org_webrtc_audio_JavaAudioDeviceModule_nativeCreateAudioDeviceModule"
          ],
          [
            17584,
            "Java_org_webrtc_audio_WebRtcAudioRecord_nativeCacheDirectBufferAddress"
          ],
          [
            17655,
            "Java_org_webrtc_audio_WebRtcAudioRecord_nativeDataIsRecorded"
          ],
          [
            17716,
            "Java_org_webrtc_audio_WebRtcAudioTrack_nativeCacheDirectBufferAddress"
          ],
          [
            17786,
            "Java_org_webrtc_audio_WebRtcAudioTrack_nativeGetPlayoutData"
          ],
          [
            17846,
            "getegid"
          ],
          [
            17854,
            "geteuid"
          ],
          [
            17862,
            "getgid"
          ],
          [
            17869,
            "getuid"
          ],
          [
            17876,
            "socketpair"
          ],
          [
            17887,
            "Java_org_webrtc_AudioTrack_nativeSetVolume"
          ],
          [
            17930,
            "Java_org_webrtc_CallSessionFileRotatingLogSink_nativeAddSink"
          ],
          [
            17991,
            "Java_org_webrtc_CallSessionFileRotatingLogSink_nativeDeleteSink"
          ],
          [
            18055,
            "Java_org_webrtc_CallSessionFileRotatingLogSink_nativeGetLogData"
          ],
          [
            18119,
            "Java_org_webrtc_DataChannel_nativeBufferedAmount"
          ],
          [
            18168,
            "Java_org_webrtc_DataChannel_nativeClose"
          ],
          [
            18208,
            "Java_org_webrtc_DataChannel_nativeId"
          ],
          [
            18245,
            "Java_org_webrtc_DataChannel_nativeLabel"
          ]
        ],
        "sz": 4414340,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _recv socket call",
            "e": [
              "recv"
            ],
            "i": "micro-behaviors/communications/socket/receive::_recv-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code IN token",
            "e": [
              "IN_",
              "_IN_"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-in",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Microsoft Smartcardlogin"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-4",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.30000001192092896,
            "d": "token keyword",
            "e": [
              "Token",
              "token"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::token",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 2000+ strings",
            "e": [
              "binary.string_count = 11689.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-strings-2000",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "XGETBV instruction bytes",
            "e": [
              "0F 01 D0"
            ],
            "i": "metadata/binary/instruction::xgetbv-instr",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _send socket call",
            "e": [
              "send"
            ],
            "i": "micro-behaviors/communications/socket/send::_send-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "trailerField"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-2",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.30000001192092896,
            "d": "libcrypto library reference",
            "e": [
              "common libcrypto routines"
            ],
            "i": "micro-behaviors/dylib/library/ssl::libcrypto-ref",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "Bind socket to address",
            "e": [
              "bind"
            ],
            "i": "micro-behaviors/communications/socket/bind/function::bind",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "x509 string reference",
            "e": [
              "x509",
              "X509"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::x509-string",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.93"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1486",
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "No stream found to attach frame encryptor",
              "?urn:ietf:params:rtp-hdrext:encrypt",
              "No FrameEncryptor is attached to this video sending stream but one is required since require_frame_encryptor is set",
              "Creating UnencryptedRtpTransport, becayse encryption is disabled.",
              "Retrying stashed encrypted frames. Count:",
              "%s: testing encryption",
              "S/MIME encryption",
              "id-cmc-encryptedPOP",
              "pkcs7-encryptedData",
              "smimeencrypt",
              "encrypted track 2",
              "Recursive encrypted header."
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::rust-ransomware-module-set--rx-4",
            "l": 1,
            "m": "B0040"
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.75,
            "d": "PLC device keyword reference",
            "e": [
              "PLC"
            ],
            "i": "objectives/discovery/network/scan/ics::plc-keyword",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "NO_SHARED_CIPHER",
              ": Ignoring STUN binding response message on shared socket.",
              "shared key",
              "assume_shared_link",
              "NSt3__114__shared_countE",
              "PRE_SHARED_KEY_MUST_BE_LAST",
              "SharedModThread",
              "NO_SHARED_GROUP"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "ease/src/modules/video_coding/codecs/vp9/svc_config",
              "eAimdRateControlConfig",
              "eam, but not yet config",
              "ear AEC output without properly config",
              "eamConfig",
              "eam_StreamConfig",
              "eaderExtensionConfig",
              "eate encoder config",
              "eam::OnEncoderConfig"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.27"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "d": "Get group ID",
            "e": [
              "getgid"
            ],
            "i": "micro-behaviors/os/privilege/query::getgid",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "c": 0.6600000262260437,
            "d": "Parse IP with inet_ntop",
            "e": [
              "inet_ntop"
            ],
            "i": "micro-behaviors/communications/ip/parse::inet-ntop-symbol",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "SSL function as hook target",
            "e": [
              "SSL_write",
              "SSL_read"
            ],
            "i": "objectives/collection/network/ssl-intercept::ssl-hook-target",
            "l": 3
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Resolve endpoint with getaddrinfo",
            "e": [
              "getaddrinfo"
            ],
            "i": "micro-behaviors/communications/ip/resolve::resolve-getaddrinfo",
            "l": 3
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is 500KB+",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/metrics/threshold::large-binary-500k",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "OpenSSL function names",
            "e": [
              "SSL_write",
              "SSL_read"
            ],
            "i": "objectives/collection/network/ssl-intercept::ssl-openssl-fn-a",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "d": "Characteristic system library export exp2f",
            "e": [
              "exp2f"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-exp2f",
            "l": 2
          },
          {
            "c": 0.9399999976158142,
            "d": "AES-256-CTR cipher marker",
            "e": [
              "aes-256-ctr",
              "AES-256-CTR"
            ],
            "i": "micro-behaviors/crypto/symmetric/aes/ctr::aes-256-ctr-term",
            "l": 3,
            "m": "C0021.001"
          },
          {
            "c": 0.699999988079071,
            "d": "PEM end marker",
            "e": [
              "-----END"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::pem-end",
            "l": 2
          },
          {
            "a": "T1498",
            "c": 0.699999988079071,
            "d": "Telemetry counters for attack progress",
            "e": [
              "bytes_sent"
            ],
            "i": "objectives/impact/dos/attack::attack-telemetry-a2",
            "l": 1,
            "m": "B0009"
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "%s: ciphertext:   %s",
              "%s: ciphertext:    %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-1",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Get CPU info from /proc/cpuinfo",
            "e": [
              "/proc/cpuinfo"
            ],
            "i": "micro-behaviors/fs/proc/system::system-cpuinfo",
            "l": 3
          },
          {
            "a": "T1573",
            "c": 0.8799999952316284,
            "d": "X25519 key exchange marker",
            "e": [
              "x25519",
              "X25519"
            ],
            "i": "micro-behaviors/crypto/asymmetric/curve25519::x25519-key-exchange-term",
            "l": 3,
            "m": "C0027"
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_wait function",
            "e": [
              "epoll_wait"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-wait",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "jb\tI"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.42"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Parse IP with inet_pton",
            "e": [
              "inet_pton"
            ],
            "i": "micro-behaviors/communications/ip/parse::inet-pton-symbol",
            "l": 3
          },
          {
            "a": "T1486",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "RSA_PSS_PARAMS"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::encrypted-trailer-layout-cond-0--inline-9319",
            "l": 1,
            "m": "B0040"
          },
          {
            "d": "Get user ID",
            "e": [
              "getuid"
            ],
            "i": "micro-behaviors/os/privilege/query::getuid",
            "l": 2
          },
          {
            "a": "T1071.001",
            "c": 0.75,
            "d": "Proxy-Connection keep-alive header",
            "e": [
              "Proxy-Connection: Keep-Alive"
            ],
            "i": "micro-behaviors/communications/http/request/client::proxy-connection-keepalive",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "GHC runtime string",
            "e": [
              "rts_native_handle",
              "rts_simulcast"
            ],
            "i": "metadata/lang/compiler/systems::ghc-runtime-string",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_",
              "libc++abi"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "NO_SHARED_GROUP",
              "PRE_SHARED_KEY_MUST_BE_LAST",
              ": Ignoring STUN binding response message on shared socket.",
              "assume_shared_link",
              "shared key",
              "NSt3__114__shared_countE",
              "SharedModThread",
              "NO_SHARED_CIPHER"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sym.imp.sysconf",
              "sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "d": "Options: label in binary strings",
            "e": [
              "WebRtcVoiceEngine::ApplyOptions:",
              "CreateMediaChannel. Options:"
            ],
            "i": "metadata/package/help::options-title-string",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code MD token",
            "e": [
              "_MD"
            ],
            "i": "objectives/anti-analysis/geofencing/region/country-code-b::country-code-md",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses recvfrom socket call",
            "e": [
              "recvfrom"
            ],
            "i": "micro-behaviors/communications/socket/receive::recvfrom-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1055",
            "c": 0.25,
            "d": "Repeated 0x07 code constant (possible PROT_RWX)",
            "e": [
              "07 00 00 00"
            ],
            "i": "micro-behaviors/mem/protect/modify::rwx-prot-bytes",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "homeTelephoneNumber",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/safe_conversions.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/video_track_source_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_track_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/sdk/android/native_api/jni/java_types.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/rtp_transceiver.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/jitter_buffer_delay_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_factory_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/used_ids.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/buildtools/third_party/libc++abi/trunk/src/abort_message.cpp",
              "homePostalAddress",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/unique_id_generator.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/checks.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_proxy.h"
            ],
            "i": "objectives/evasion/masquerade/process/path::systemd-masquerade-reference--rx-9",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "WebRTC-VP8-CpuSpeed-Arm",
              "Unsupported cpu speed setting, value ignored.",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/experiments/cpu_speed_experiment.cc"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-77",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 2.73"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (substr, catches imports)",
            "e": [
              "…ird_party/boringssl/src/crypto/x509/a_verify.c",
              "…d since require_frame_encryptor is set",
              "…/video/buffered_frame_decryptor.cc",
              "GetFrameEncryptor",
              "MaybeAttachFrameDecryptorToMediaChannel",
              "cryptocom",
              "Unknown crypto suite(s) received: send cipher_suite",
              "Could not get lengths for crypto suite(s): send cipher_suite",
              "Could not get lengths for crypto suite(s): recv cipher_suite",
              "…ird_party/boringssl/src/crypto/x509v3/v3_akey.c",
              "Called with SDP without SDES crypto.",
              "…ird_party/boringssl/src/crypto/pem/pem_pkey.c",
              "Java_org_webrtc_RtpReceiver_nativeSetFrameDecryptor",
              "Invalid SRTP crypto suite",
              "generic cryptogram",
              "…ird_party/boringssl/src/crypto/x509/x509_lu.c"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-substr",
            "l": 1
          },
          {
            "a": "T1071.001",
            "d": "User-Agent header",
            "e": [
              "User-Agent:"
            ],
            "i": "micro-behaviors/communications/http/request/client::user-agent-header",
            "l": 2,
            "m": "C0002"
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "d": "select() I/O multiplexing",
            "e": [
              "select"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::select-multiplex",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Access /dev/urandom",
            "e": [
              "failed to open /dev/urandom"
            ],
            "i": "micro-behaviors/os/random/crypto::urandom",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "X509_ function prefix",
            "e": [
              "X509_NAME_INTERNAL",
              "X509_CRL",
              "X509_CRL_INFO",
              "X509_CERT_AUX",
              "X509_PUBKEY",
              "X509_VAL",
              "X509_NAME_ENTRY",
              "X509_NAME_ENTRIES",
              "X509_ALGOR",
              "X509_ATTRIBUTE",
              "X509_REVOKED",
              "X509_VERIFICATION_SETUP_PROBLEMS",
              "NO X509_NAME",
              "X509_EXTENSION",
              "BAD_X509_FILETYPE",
              "X509_LIB"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::x509-prefix",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "getrandom syscall",
            "e": [
              "%s: getrandom indicates that the entr…",
              "getrandom"
            ],
            "i": "micro-behaviors/os/random/crypto::getrandom",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "Format time as string",
            "e": [
              "strftime"
            ],
            "i": "micro-behaviors/time/query::strftime",
            "l": 2
          },
          {
            "d": "certificate string reference",
            "e": [
              "Certificate",
              "certificate"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::certificate-ref",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 66785.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "PEM begin marker",
            "e": [
              "-----BEGIN"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::pem-begin",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 24.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.7400000095367432,
            "d": "cBPF load ICMP identifier field",
            "e": [
              "28 00 00 00 26 00 00 00"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::cbpf-load-icmp-id-ethernet",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 11689.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 5000+ functions",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-5000",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for nanosecond duration",
            "e": [
              "nanosleep"
            ],
            "i": "micro-behaviors/time/query::nanosleep-func",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "master secret",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "CLIENT_TRAFFIC_SECRET_0",
              "extended master secret",
              "EXPORTER_SECRET",
              "secretary",
              "secretBag",
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "SERVER_TRAFFIC_SECRET_0"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (word match)",
            "e": [
              "crypto"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-word",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "Go base64 encoding",
            "e": [
              ".Encode"
            ],
            "i": "micro-behaviors/data/encode/base64::go-base64-encode",
            "l": 2
          },
          {
            "d": "Get effective user ID",
            "e": [
              "geteuid"
            ],
            "i": "micro-behaviors/os/privilege/query::geteuid",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "a": "T1565.001",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "Failed to deliver RTP packet on re-delivery.",
              "stunKeepaliveResponsesReceived",
              "getStunCandidateKeepaliveInterval",
              "Proxy-Connection: Keep-Alive",
              "Call::DeliverRtcp",
              "preferredDeliveryMethod",
              "id-smime-cti-ets-proofOfDelivery",
              "Delivered MID=%8.8x, got TSN=%8.8x, SID=%4.4x, MID=%8.8x",
              "Delivered SSN=%4.4x, got TSN=%8.8x, SID=%4.4x, SSN=%4.4x",
              "stunKeepaliveRttTotal",
              "stunKeepaliveRttSquaredTotal",
              "physicalDeliveryOfficeName",
              "onStatsDelivered",
              "AudioDeviceBuffer::DeliverRecordedData failed",
              "Call::DeliverRtp",
              "stunKeepaliveRequestsSent"
            ],
            "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-5",
            "l": 1,
            "m": "F0004"
          },
          {
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "homePostalAddress",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_factory_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/checks.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/sdk/android/native_api/jni/java_types.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/numerics/safe_conversions.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/peer_connection_proxy.h",
              "homeTelephoneNumber",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/media_stream_track_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/buildtools/third_party/libc++abi/trunk/src/abort_message.cpp",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/unique_id_generator.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/used_ids.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/jitter_buffer_delay_proxy.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/pc/rtp_transceiver.h",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/api/video_track_source_proxy.h"
            ],
            "i": "objectives/evasion/masquerade/process/path::systemd-masquerade-path--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "File larger than 1MB",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/metrics/size::large-file-1mb",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "a": "T1016",
            "c": 0.4000000059604645,
            "d": "ipAddress field (camelCase)",
            "e": [
              "ipAddress"
            ],
            "i": "objectives/discovery/host/geo::ip-address-camel",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses sendto socket call",
            "e": [
              "sendto"
            ],
            "i": "micro-behaviors/communications/socket/send::sendto-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "secretBag",
              "master secret",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET",
              "extended master secret",
              "EXPORTER_SECRET",
              "secretary",
              "CLIENT_TRAFFIC_SECRET_0",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "SERVER_TRAFFIC_SECRET_0"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "a": "T1110.001",
            "c": 0.8999999761581421,
            "d": "Weak password master",
            "e": [
              "master"
            ],
            "i": "objectives/lateral-movement/brute-force/password::weak-pass-master",
            "l": 1,
            "m": "E1110"
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "WebRTC.BWE.RampUpTimeTo2000kbpsInMs",
              "id-mod-cmp2000",
              "Window duration must be between 100 and 2000 ms",
              "assertion failed: st-\u003eDecControl.internalSampleRate == 0 || st-\u003eDecControl.internalSampleRate == 16000 || st-\u003eDecControl.interna"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-10",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Go crypto/cipher import",
            "e": [
              "…ird_party/boringssl/src/crypto/cipher_extra/e_tls.c",
              "…ird_party/boringssl/src/crypto/cipher_extra/e_chacha20poly130…"
            ],
            "i": "objectives/impact/ransom/encrypt/threat-text::go-crypto-cipher",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Go crypto/rsa import",
            "e": [
              "…ird_party/boringssl/src/crypto/rsa_extra/rsa_asn1.c"
            ],
            "i": "objectives/impact/ransom/encrypt/threat-text::go-crypto-rsa",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Trying to access encoder in uninitialized fallback wrapper.",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/third_party/abseil-cpp/absl/types/bad_variant_access.cc",
              "Bad variant access",
              "id-aca-accessIdentity",
              "Bad optional access",
              "Failed to access the global OpenSL engine",
              "Unable to access speaker.",
              "Unable to access microphone.",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/third_party/abseil-cpp/absl/types/bad_optional_access.cc"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "getauxval function reference",
            "e": [
              "getauxval"
            ],
            "i": "metadata/binary/linking/runtime::getauxval-ref",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Looks up name with if_indextoname",
            "e": [
              "if_indextoname"
            ],
            "i": "micro-behaviors/communications/socket/interface::if-indextoname-symbol",
            "l": 3
          },
          {
            "a": "T1095",
            "c": 0.6200000047683716,
            "d": "HIP routing field reference",
            "e": [
              "hiP"
            ],
            "i": "objectives/command-and-control/channel/covert::hip-routing-field",
            "l": 1,
            "m": "C0014"
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "listen function symbol",
            "e": [
              "listen"
            ],
            "i": "micro-behaviors/communications/socket/listen::listen-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.30000001192092896,
            "d": "secret keyword",
            "e": [
              "CLIENT_EARLY_TRAFFIC_SECRET",
              "EXPORTER_SECRET",
              "SERVER_HANDSHAKE_TRAFFIC_SECRET",
              "master secret",
              "secretBag",
              "SERVER_TRAFFIC_SECRET_0",
              "secretary",
              "CLIENT_TRAFFIC_SECRET_0",
              "extended master secret",
              "CLIENT_HANDSHAKE_TRAFFIC_SECRET"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::secret",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "cBPF load ICMP sequence field",
            "e": [
              "28 00 00 00 28 00 00 00"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::cbpf-load-icmp-seq-ethernet",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "References packetsSent counter (Go DDoS",
            "e": [
              "packetsSent"
            ],
            "i": "objectives/impact/dos/attack::packets-sent",
            "l": 1
          },
          {
            "a": "T1059.004",
            "c": 0.800000011920929,
            "d": "Terminal type screen identifier",
            "e": [
              "screen"
            ],
            "i": "objectives/command-and-control/reverse-shell/pty::terminal-type-screen",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.75,
            "d": "String to integer conversion (atoi)",
            "e": [
              "atoi"
            ],
            "i": "micro-behaviors/data/string/conversion::atoi",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "d": "poll() I/O multiplexing",
            "e": [
              "poll"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::poll-multiplex",
            "l": 3
          },
          {
            "c": 0.6000000238418579,
            "d": "payload keyword",
            "e": [
              "payload"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::payload",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "a": "T1565.001",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "ms to dispatch. Posted from:",
              "Thread::Dispatch",
              "PhysicalSocketServer asked to remove a unknown dispatcher, potentially from a duplicate call to Add."
            ],
            "i": "objectives/evasion/hosts-file/block-security::escan-security-domain--rx-4",
            "l": 1,
            "m": "F0004"
          },
          {
            "a": "T1046",
            "c": 0.75,
            "d": "Probing keyword (explicit scanning intent)",
            "e": [
              "Probing",
              "probing"
            ],
            "i": "objectives/discovery/network/scan/port::probing-keyword",
            "l": 1,
            "m": "E1046"
          },
          {
            "d": "Get effective group ID",
            "e": [
              "getegid"
            ],
            "i": "micro-behaviors/os/privilege/query::getegid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "DtlsTransport in connected state has incomplete TLS information",
              "TurnPort connected to",
              "[ connected:",
              "Network disconnected for handle",
              "OnNetworkDisconnected",
              ": Change connected_ to",
              "Ping interval of stable and writable candidate pairs is shorter than that of general candidate pairs when ICE is strongly connec",
              "hanging to ICE connected state because all transports are writable.",
              "Ping interval of backup candidate pairs is shorter than that of general candidate pairs when ICE is strongly connected",
              "VideoReceiveStream not connected to a VideoSink.",
              "Network connected:",
              ": Received TURN message while the TURN port is disconnected",
              "Ping interval of candidate pairs is shorter when ICE is strongly connected than that when ICE is weakly connected"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-13",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "output keyword",
            "e": [
              "output_parameters-\u003eis_valid()",
              ", extra_output_delay_ms=",
              "Unable to rewind ivf output file.",
              "output_layout != CHANNEL_LAYOUT_STEREO_DOWNMIX",
              "Failed to write RTC event to output.",
              ", low_latency_output:",
              "output: guid =",
              ") != output_size_samples_ (",
              "frame-\u003esamples_per_channel() * output_channels_ \u003c= frame-\u003emax_16bit_samples()",
              "(*engine_)-\u003eCreateOutputMix(engine_, output_mix_.Receive(), 0, nullptr, nullptr)",
              "…e/src/api/rtc_event_log_output_file.cc",
              "No linear AEC output available",
              ", output_buffer_size:",
              "Trying to retrieve the linear AEC output without properly configuring AEC3.",
              "%s: output: %s",
              ", output_channels:"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::output",
            "l": 1
          },
          {
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "assume_shared_link",
              "NSt3__114__shared_countE",
              ": Ignoring STUN binding response message on shared socket.",
              "shared key"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::runtime-shared-object-compile--rx-1",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "ADB OPEN packet marker",
            "e": [
              "OPEN"
            ],
            "i": "micro-behaviors/communications/socket/tcp::open-token",
            "l": 1,
            "m": "C0001"
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "XOR loop pattern variant 2",
            "e": [
              "58 3f 23 70"
            ],
            "i": "well-known/malware/botnet/mozi::xor-pattern-2",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Makefile all target",
            "e": [
              "Call::CreateVideoSendStream",
              "Call::DestroyAudioSendStream",
              "Call::CreateVideoReceiveStream",
              "Call::DestroyVideoSendStream",
              "Call::DestroyAudioReceiveStream",
              "Call::DeliverRtcp",
              "Call::CreateAudioSendStream",
              "Call::DestroyFlexfecReceiveStream",
              "Call::CreateFlexfecReceiveStream",
              "Call::DeliverRtp",
              "Call::CreateAudioReceiveStream",
              "Call::DestroyVideoReceiveStream"
            ],
            "i": "metadata/build/make::all-target-assignment",
            "l": 1
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "HTTP REQUEST method",
            "e": [
              "REQUEST"
            ],
            "i": "micro-behaviors/communications/http/request/client::request",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Get socket options",
            "e": [
              "getsockopt",
              "sym.imp.getsockopt"
            ],
            "i": "micro-behaviors/communications/socket/options::options-get",
            "l": 3
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "set-rootKeyThumb",
              "%http://crl.globalsign.net/root-r2.crl0",
              ".http://www2.public-trust.com/crl/ct/ctroot.crl0",
              "set-policy-root",
              "SSL_CTX creation failed: Failed to load any trusted ssl root certificates."
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "a": "T1070.004",
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              " ping=",
              "_ping",
              " ping,",
              "_ping_",
              " ping ",
              " PING ",
              "Ping "
            ],
            "i": "objectives/evasion/self-delete/file/delay::ping-self-delete--rx-2",
            "l": 1
          },
          {
            "d": "Options: label",
            "e": [
              "WebRtcVoiceEngine::ApplyOptions:",
              "CreateMediaChannel. Options:"
            ],
            "i": "metadata/package/help::options-title",
            "l": 2
          },
          {
            "c": 0.7799999713897705,
            "d": "Regex component marker",
            "e": [
              "list of support",
              "FlushRtcp"
            ],
            "i": "objectives/evasion/kernel-hide/ebpf::bpf-rootkit-controller-actions--rx-9",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.800000011920929,
            "d": "API route for crypt operation",
            "e": [
              "…e/webrtc-aar-release/src/api/crypto/crypto_options.cc"
            ],
            "i": "objectives/impact/ransom/tactics::api-route-crypt",
            "l": 3
          },
          {
            "c": 0.4000000059604645,
            "d": "cipher keyword",
            "e": [
              "cipher",
              "Cipher"
            ],
            "i": "micro-behaviors/crypto/library/keyword::cipher-keyword",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "%s: ciphertext:    %s",
              "%s: ciphertext:   %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-1",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Set socket options",
            "e": [
              "setsockopt"
            ],
            "i": "micro-behaviors/communications/socket/options::options-set",
            "l": 3
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 1.0,
            "d": "Memory advisory hints (madvise)",
            "e": [
              "madvise"
            ],
            "i": "micro-behaviors/mem/advise/hints::madvise",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.93"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_ctl function",
            "e": [
              "epoll_ctl"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-ctl",
            "l": 2
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "AsyncHttpsProxySocket::OnConnectEvent",
              "Failed to allocate lf_sync-\u003ecur_sb_col",
              "Unexpected AsyncResolver signal",
              "Invalid frame sync code",
              "Failed to allocate row_mt_worker_data-\u003erecon_sync_mutex",
              "Failed to allocate lf_sync-\u003elf_mutex",
              "Failed to allocate row_mt_sync-\u003ecur_col",
              "Failed to allocate lf_sync-\u003enum_tiles_done",
              "Failed to allocate row_mt_sync-\u003econd",
              "Failed to allocate lf_sync-\u003erecon_done_mutex",
              "Failed to allocate row_mt_sync-\u003emutex",
              "Failed to allocate lf_sync-\u003emutex",
              "../../../../usr/local/google/home/sakal/code/webrtc-aar-release/src/rtc_base/synchronization/mutex.h",
              "Failed to allocate row_mt_worker_data-\u003erecon_sync_cond",
              "to be a valid Rapid Resynchronisation Request",
              "Failed to allocate lf_sync-\u003erecon_done_cond"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-5",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 11689.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code BY token",
            "e": [
              "_BY_"
            ],
            "i": "objectives/anti-analysis/geofencing/region/country-code-a::country-code-by",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "objectives/anti-analysis/self-modify/runtime::elf-manual-loader-cond-0--inline-10757",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Generic weak-login username marker",
            "e": [
              "userPassword",
              "Allocation can't be started without setting the TURN server credentials for the user.",
              "onlyuser",
              "userNotice",
              "with bad local username",
              "TURN server with empty username or password",
              ": Received STUN request with bad remote username",
              "d.usernotice",
              "All fragments of a user message must be ordered or unordered (TSN=%8.8x)",
              "without username/M-I from:",
              "userClass",
              "userCertificate",
              "Note that user-info@ in turn:-urls is long-deprecated."
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-5",
            "l": 1
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "a": "T1497.001",
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "binary.string_count = 11689.00"
            ],
            "i": "objectives/anti-analysis/vm-detect/vendor::comprehensive-evasion-cond-1--inline-17219",
            "l": 1
          },
          {
            "a": "T1486",
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "No FrameEncryptor is attached to this video sending stream but one is required since require_frame_encryptor is set",
              "GetFrameDecryptor",
              "common libcrypto routines",
              "GetFrameEncryptor",
              "Java_org_webrtc_RtpSender_nativeSetFrameEncryptor",
              "No stream found to attach frame encryptor",
              "cryptocom",
              "Failed to parse the crypto key params",
              "Java_org_webrtc_RtpReceiver_nativeSetFrameDecryptor",
              "cryptopro",
              "Failed to set the crypto key params",
              "SetFrameDecryptor",
              "generic cryptogram",
              "SetFrameEncryptor",
              "generate cryptogram",
              "crypto kernel"
            ],
            "i": "objectives/impact/ransom/encrypt/hybrid::rust-ransomware-module-set--rx-5",
            "l": 1,
            "m": "B0040"
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses send socket call",
            "e": [
              "send"
            ],
            "i": "micro-behaviors/communications/socket/send::send-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.699999988079071,
            "d": "Go base64 decoding",
            "e": [
              ".Decode"
            ],
            "i": "micro-behaviors/data/encode/base64::go-base64-decode",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 228.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses recv socket call",
            "e": [
              "recv"
            ],
            "i": "micro-behaviors/communications/socket/receive::recv-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "stat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "QUIC protocol reference",
            "e": [
              "QUIC_INTERNAL_ERROR",
              "QUIC_TRANSPORT_PARAMETERS_MISCONFIGURED"
            ],
            "i": "objectives/command-and-control/channel/quic::quic-protocol-reference",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "Failed to write public key",
              "PublicKeyToPEMString",
              ".http://www2.public-trust.com/crl/ct/ctroot.crl0",
              "id-regCtrl-pkiPublicationInfo",
              "PKCS12_PUBLIC_KEY_INTEGRITY_NOT_SUPPORTED",
              "id-ecPublicKey",
              "public_key",
              "dhpublicnumber",
              "PUBLIC_KEY_VALIDATION_FAILED",
              "public key routines",
              "bytes).  To increase the limit (or to disable these warnings), see CodedInputStream::SetTotalBytesLimit() in net/proto2/io/publi",
              "PUBLIC KEY",
              "The resulting key pair is missing public key parameters.",
              "UNSUPPORTED_PUBLIC_KEY_TYPE",
              "UNKNOWN_PUBLIC_KEY_TYPE",
              "WRONG_PUBLIC_KEY_TYPE"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.30000001192092896,
            "d": "zlib compression reference",
            "e": [
              "ZLIB",
              "zlib"
            ],
            "i": "micro-behaviors/dylib/library/family::zlib-ref",
            "l": 2
          },
          {
            "c": 0.8399999737739563,
            "d": "ICMP sequential heartbeat payload",
            "e": [
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijk",
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefhjlnprtvxz|~",
              "!\"#$%\u0026'()*+,-./0123456789:;\u003c=\u003e?@abcdefghijklmno…"
            ],
            "i": "micro-behaviors/os/bpf/program/icmp::icmp-heartbeat-payload-ascii",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "epoll_create function",
            "e": [
              "epoll_create"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-create",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "Convert time to UTC time",
            "e": [
              "gmtime_r",
              "sym.imp.gmtime_r"
            ],
            "i": "micro-behaviors/time/query::gmtime",
            "l": 2
          },
          {
            "d": "password keyword",
            "e": [
              "INCORRECT_PASSWORD",
              "BAD_PASSWORD_READ",
              ", password_=",
              "id-PasswordBasedMAC",
              "password based MAC",
              "challengePassword",
              "getPassword",
              "TURN server with empty username or password",
              "userPassword"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::password",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Disk partitioning utility context",
            "e": [
              "partition"
            ],
            "i": "well-known/tool/sysadmin/disk-utility::disk-partition-context",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Discarding recovered packet with RED encapsulation",
              "Remote encapsulation port changed"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-3",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.800000011920929,
            "d": "CRYPTOGAMS OpenSSL support marker",
            "e": [
              "GHASH for ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA512 block transform for ARMv4/NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "Montgomery multiplication for ARMv4/NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "GHASH for ARMv4/NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA1 block transform for ARMv4/NEON/ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "Bit-sliced AES for NEON, CRYPTOGAMS by \u003cappro@openssl.org\u003e",
              "SHA256 block transform for ARMv4/NEON/ARMv8, CRYPTOGAMS by \u003cappro@openssl.org\u003e"
            ],
            "i": "micro-behaviors/crypto/library/provider::cryptogams-marker",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "Generic probe keyword (probe scan/packet)",
            "e": [
              "Probe packet"
            ],
            "i": "objectives/discovery/network/scan/port::probe-word-core-suffix-2",
            "l": 3,
            "m": "E1046"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              ": DTLS transport closed by remote",
              "Java_org_webrtc_PeerConnection_nativeClose",
              ": TCP Connection with remote is closed, trying to reconnect",
              "Transport channel closed",
              "fclose",
              "PeerConnection::Close",
              ": DTLS transport closed",
              "-- remote side closed",
              "OnClose",
              "closedir",
              "Java_org_webrtc_DataChannel_nativeClose",
              "OnTransportClosed",
              "dataChannelsClosed",
              "EOF from socket; deferring close event",
              "close",
              "OnChannelClosed"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "accept function symbol",
            "e": [
              "accept"
            ],
            "i": "micro-behaviors/communications/socket/listen::accept-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.699999988079071,
            "d": "BSD license reference",
            "e": [
              "BSD"
            ],
            "i": "metadata/package/license::bsd-word",
            "l": 2
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 171.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID:",
              " ID",
              " ID "
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "d": "overflow keyword",
            "e": [
              "Bitrate must be smaller enough to avoid overflows.",
              "St14overflow_error",
              "Buffer overflow while parsing packet.",
              "input buffer overflow",
              "buffered_amount overflowed jlong!",
              "__next_prime overflow",
              "Input buffer overflow"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "pipe keyword",
            "e": [
              "pipe"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::pipe",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "PBKDF2 key derivation",
            "e": [
              "PBKDF2"
            ],
            "i": "micro-behaviors/crypto/kdf/algorithm::pbkdf2",
            "l": 3
          },
          {
            "a": "T1071.001",
            "d": "Authorization header",
            "e": [
              "Proxy-Authorization:"
            ],
            "i": "micro-behaviors/communications/http/headers::auth-header",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 0.30000001192092896,
            "d": "getenv function (read environment variable)",
            "e": [
              "getenv"
            ],
            "i": "micro-behaviors/os/env/vars/access::getenv",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.550000011920929,
            "d": "Uppercase key environment variable",
            "e": [
              "READ_KEY"
            ],
            "i": "objectives/command-and-control/infrastructure/config::uppercase-key-env",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "encrypt function",
            "e": [
              "encrypt"
            ],
            "i": "micro-behaviors/crypto/library/keyword::encrypt-fn",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses connect socket call",
            "e": [
              "connect"
            ],
            "i": "micro-behaviors/communications/socket/connect::connect-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.4000000059604645,
            "d": "socket function symbol",
            "e": [
              "socket"
            ],
            "i": "micro-behaviors/communications/socket/listen::socket-sym",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary is 1MB or larger",
            "e": [
              "libjingle_peerconnection_so.so"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::file-size-1m-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "HTTP port number (80)",
            "e": [
              "port below 1024, but not 80"
            ],
            "i": "objectives/discovery/network/scan/port::port-number-http",
            "l": 1,
            "m": "E1046"
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary has 1000 or more functions",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::function-count-1000-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.6000000238418579,
            "d": "HTTPS port (443) variants (https/port/ssl)",
            "e": [
              "port of 80 or 443"
            ],
            "i": "objectives/discovery/network/scan/port::port-number-https-1",
            "l": 1,
            "m": "E1046"
          },
          {
            "c": 0.8999999761581421,
            "d": "OpenSSL ChaCha20-Poly1305",
            "e": [
              "ChaCha20-Poly1305"
            ],
            "i": "micro-behaviors/crypto/symmetric/stream::openssl-chacha-poly",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 15276.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 11689.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses _connect socket call",
            "e": [
              "connect"
            ],
            "i": "micro-behaviors/communications/socket/connect::_connect-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "c": 0.75,
            "d": "Low average code complexity",
            "e": [
              "binary.avg_complexity = 2.73"
            ],
            "i": "metadata/binary/metrics/structural::low-average-complexity",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "ChaCha20/Salsa20 cipher constant",
            "e": [
              "expand 32-byte k"
            ],
            "i": "micro-behaviors/crypto/symmetric/stream::chacha-salsa-constant",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "stat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.6499999761581421,
            "d": "Direct epoll event notification",
            "e": [
              "epoll_wait",
              "epoll_create",
              "epoll_ctl"
            ],
            "i": "micro-behaviors/os/event/kernel/epoll::epoll-usage",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Listen on a socket",
            "e": [
              "socket",
              "listen"
            ],
            "i": "micro-behaviors/communications/socket/listen::listen",
            "l": 3,
            "m": "C0001"
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "write",
              "fseek",
              "fwrite"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "X.509 certificate handling (legitimate)",
            "e": [
              "BAD_X509_FILETYPE",
              "X509_NAME_ENTRIES",
              "X509_CERT_AUX",
              "X509_EXTENSION",
              "X509_ALGOR",
              "X509_VERIFICATION_SETUP_PROBLEMS",
              "X509_CRL",
              "X509_PUBKEY",
              "X509_VAL",
              "X509_CRL_INFO",
              "X509_LIB",
              "X509_NAME_INTERNAL",
              "X509_ATTRIBUTE",
              "X509_NAME_ENTRY",
              "NO X509_NAME",
              "X509_REVOKED"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::certificate-handling",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "File contains a PEM-encoded certificate.",
            "e": [
              "-----END",
              "-----BEGIN"
            ],
            "i": "micro-behaviors/crypto/certificate/usage::has-pem-certificate",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Documented command line program",
            "e": [
              "binary.sentence_string_ratio = 0.27",
              "binary.import_count = 228.00",
              "binary.string_count = 11689.00",
              "WebRtcVoiceEngine::ApplyOptions:",
              "binary.func_count = 15276.00",
              "CreateMediaChannel. Options:"
            ],
            "i": "metadata/package/help::documented-cli-binary",
            "l": 1
          },
          {
            "a": "T1069",
            "c": 0.699999988079071,
            "d": "User/group ID gathering",
            "e": [
              "getgid",
              "geteuid",
              "getegid"
            ],
            "i": "objectives/discovery/host/permissions::uid-gid-gathering",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.overall_entropy = 3.93",
              "binary.func_count = 15276.00"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "clock_gettime",
              "gettimeofday",
              "nanosleep"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          }
        ],
        "sha": "53a1440d9203d116e0d33c53fc671eb9380c3293242fed84d3fb63b54317356a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libjingle_peerconnection_so.so",
        "type": "elf"
      },
      {
        "f": "KO₆(As₃CaDy₂Er₂LaS)H₆(Cm₂Cr₂DsF₂Db₃Os)Md₂(Bi₃He)",
        "x": 8,
        "dp": 1,
        "id": 15,
        "is": [
          "",
          "cxa_finalize",
          "cxa_atexit",
          "stack_chk_fail",
          "stack_chk_guard",
          "vsnprintf_chk",
          "strlen",
          "malloc",
          "errno",
          "strerror",
          "free",
          "memcpy_chk",
          "android_log_print",
          "strnlen",
          "crc32",
          "strlen_chk",
          "strchr_chk",
          "strchr",
          "strcat_chk",
          "memcmp",
          "ceilf",
          "close",
          "memmove_chk",
          "memset_chk",
          "realloc",
          "flock",
          "fcntl",
          "open",
          "fstat",
          "ftruncate",
          "munmap",
          "lseek",
          "write",
          "mmap",
          "msync",
          "lstat",
          "strdup",
          "strspn",
          "strcspn",
          "stat",
          "mkdir",
          "open_2",
          "read",
          "sysconf",
          "unlink",
          "mkstemp",
          "opendir",
          "strncpy",
          "readdir",
          "strcpy_chk",
          "strcmp",
          "closedir",
          "strstr",
          "dlsym",
          "ioctl",
          "dlopen",
          "syscall",
          "rename",
          "sendfile",
          "pthread_mutexattr_init",
          "pthread_mutexattr_settype",
          "pthread_mutex_init",
          "pthread_mutexattr_destroy",
          "pthread_mutex_destroy",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "pthread_once",
          "time",
          "srand48",
          "lrand48",
          "posix_memalign",
          "wmemmove",
          "wmemcpy",
          "wcslen",
          "wmemset",
          "wmemcmp",
          "strtoul",
          "strtoll",
          "strtoull",
          "strtod",
          "snprintf",
          "memchr",
          "wmemchr",
          "strtol",
          "pthread_cond_wait",
          "pthread_cond_broadcast",
          "vfprintf",
          "fputc",
          "vasprintf",
          "assert2",
          "sF",
          "abort",
          "vsnprintf",
          "pthread_getspecific",
          "memset",
          "pthread_setspecific",
          "memcpy",
          "pthread_key_delete",
          "pthread_key_create",
          "memmove",
          "fprintf",
          "fflush",
          "dl_unwind_find_exidx"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libz.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libmmkv.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "needed_libs": 5.0,
            "dynrel_count": 1715.0,
            "dynsym_count": 699.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 214.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 2.0,
            "program_header_count": 9.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 371584.0,
            "load_segment_max_p_filesz": 371584.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 381796.0
          },
          "binary": {
            "code_size": 254364.0,
            "func_count": 2514.0,
            "has_overlay": true,
            "code_entropy": 5.35,
            "data_entropy": 4.49,
            "export_count": 432.0,
            "func_density": 10.12,
            "import_count": 103.0,
            "overlay_size": 1081.0,
            "string_count": 1145.0,
            "avg_func_size": 619.06,
            "overlay_ratio": 0.0,
            "section_count": 26.0,
            "avg_complexity": 2.72,
            "import_density": 0.41,
            "max_complexity": 332.0,
            "string_density": 4.61,
            "aliased_exports": 52.0,
            "overall_entropy": 3.79,
            "overlay_entropy": 2.45,
            "avg_basic_blocks": 5.27,
            "avg_section_size": 14658.58,
            "dependency_count": 5.0,
            "entropy_variance": 1.57,
            "avg_string_length": 30.73,
            "complexity_per_kb": 0.01,
            "max_string_length": 247.0,
            "avg_string_entropy": 3.59,
            "code_to_data_ratio": 2.01,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.66,
            "total_basic_blocks": 13251.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 28.29,
            "high_complexity_funcs": 8.0,
            "largest_section_ratio": 0.66,
            "provenance_id_present": true,
            "sentence_string_count": 146.0,
            "sentence_string_ratio": 0.13,
            "behavioral_import_ratio": 0.04,
            "nonstandard_section_name_count": 6.0
          }
        },
        "ss": [
          [
            352,
            "Android"
          ],
          [
            428,
            "8775105"
          ],
          [
            16374,
            "8E4Y"
          ],
          [
            22829,
            "__cxa_finalize"
          ],
          [
            22844,
            "__cxa_atexit"
          ],
          [
            22868,
            "__stack_chk_fail"
          ],
          [
            22885,
            "__stack_chk_guard"
          ],
          [
            22903,
            "__vsnprintf_chk"
          ],
          [
            22919,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED1Ev"
          ],
          [
            22990,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6resizeEjc"
          ],
          [
            23067,
            "__cxa_end_cleanup"
          ],
          [
            23085,
            "__gxx_personality_v0"
          ],
          [
            23106,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKcj"
          ],
          [
            23185,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcj"
          ],
          [
            23264,
            "strlen"
          ],
          [
            23271,
            "malloc"
          ],
          [
            23278,
            "__errno"
          ],
          [
            23286,
            "strerror"
          ],
          [
            23295,
            "free"
          ],
          [
            23300,
            "__cxa_begin_catch"
          ],
          [
            23318,
            "_ZSt9terminatev"
          ],
          [
            23363,
            "__cxa_allocate_exception"
          ],
          [
            23388,
            "__cxa_throw"
          ],
          [
            23400,
            "__cxa_free_exception"
          ],
          [
            23421,
            "_ZTISt12length_error"
          ],
          [
            23442,
            "_ZNSt12length_errorD1Ev"
          ],
          [
            23493,
            "_ZNSt11logic_errorC2EPKc"
          ],
          [
            23518,
            "_ZTVSt12length_error"
          ],
          [
            23539,
            "_ZNKSt6__ndk120__vector_base_commonILb1EE20__throw_length_errorEv"
          ],
          [
            23605,
            "mmkvInitialize_v1"
          ],
          [
            23623,
            "mmkvInitialize"
          ],
          [
            23638,
            "getMMKVWithID"
          ],
          [
            23652,
            "getDefaultMMKV"
          ],
          [
            23674,
            "encodeBool"
          ],
          [
            23685,
            "decodeBool"
          ],
          [
            23696,
            "encodeInt32"
          ],
          [
            23708,
            "decodeInt32"
          ],
          [
            23720,
            "encodeInt64"
          ],
          [
            23732,
            "decodeInt64"
          ],
          [
            23744,
            "encodeDouble"
          ],
          [
            23757,
            "decodeDouble"
          ],
          [
            23770,
            "encodeBytes"
          ],
          [
            23782,
            "decodeBytes"
          ],
          [
            23794,
            "__memcpy_chk"
          ],
          [
            23813,
            "cryptKey"
          ],
          [
            23822,
            "checkReSetCryptKey"
          ],
          [
            23841,
            "valueSize"
          ],
          [
            23851,
            "writeValueToNB"
          ],
          [
            23866,
            "allKeys"
          ],
          [
            23874,
            "containsKey"
          ],
          [
            23886,
            "count"
          ],
          [
            23892,
            "totalSize"
          ],
          [
            23902,
            "actualSize"
          ],
          [
            23913,
            "removeValueForKey"
          ],
          [
            23931,
            "removeValuesForKeys"
          ],
          [
            23951,
            "clearAll"
          ],
          [
            23960,
            "mmkvSync"
          ],
          [
            23969,
            "clearMemoryCache"
          ],
          [
            23986,
            "pageSize"
          ],
          [
            23995,
            "version"
          ],
          [
            24008,
            "mmkvClose"
          ],
          [
            24018,
            "mmkvMemcpy"
          ],
          [
            24029,
            "backupOne"
          ],
          [
            24039,
            "restoreOne"
          ],
          [
            24050,
            "backupAll"
          ],
          [
            24060,
            "restoreAll"
          ],
          [
            24071,
            "__android_log_print"
          ],
          [
            24091,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSERKS5_"
          ],
          [
            24166,
            "strnlen"
          ],
          [
            24180,
            "__strlen_chk"
          ],
          [
            24193,
            "__cxa_end_catch"
          ],
          [
            24209,
            "_ZTISt9exception"
          ],
          [
            24226,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEPKcjj"
          ],
          [
            24306,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKcj"
          ],
          [
            24385,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_"
          ],
          [
            24460,
            "__strchr_chk"
          ],
          [
            24480,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEjjPKcj"
          ],
          [
            24563,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC1ERKS5_jjRKS4_"
          ],
          [
            24645,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKc"
          ],
          [
            24723,
            "__strcat_chk"
          ],
          [
            24736,
            "memcmp"
          ],
          [
            24743,
            "_ZNSt6__ndk112__next_primeEj"
          ],
          [
            24772,
            "ceilf"
          ],
          [
            24778,
            "_ZTVN10__cxxabiv117__class_type_infoE"
          ],
          [
            24816,
            "_ZTVN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            24857,
            "__cxa_pure_virtual"
          ],
          [
            24876,
            "close"
          ],
          [
            24882,
            "__emutls_get_address"
          ],
          [
            24903,
            "__cxa_guard_acquire"
          ],
          [
            24923,
            "__cxa_guard_release"
          ],
          [
            24943,
            "__cxa_guard_abort"
          ],
          [
            24961,
            "__memmove_chk"
          ],
          [
            24975,
            "_ZTISt12out_of_range"
          ],
          [
            25020,
            "_ZTVSt12out_of_range"
          ],
          [
            25041,
            "_ZTISt16invalid_argument"
          ],
          [
            25066,
            "_ZNSt16invalid_argumentD1Ev"
          ],
          [
            25094,
            "_ZNSt6__ndk19to_stringEj"
          ],
          [
            25119,
            "_ZTVSt16invalid_argument"
          ],
          [
            25144,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEjPKc"
          ],
          [
            25223,
            "_ZNSt11logic_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            25314,
            "_ZNSt13runtime_errorC1EPKc"
          ],
          [
            25341,
            "_ZTISt13runtime_error"
          ],
          [
            25363,
            "_ZNSt13runtime_errorD1Ev"
          ],
          [
            25388,
            "__memset_chk"
          ],
          [
            25401,
            "realloc"
          ],
          [
            25421,
            "open"
          ],
          [
            25432,
            "ftruncate"
          ],
          [
            25442,
            "munmap"
          ],
          [
            25449,
            "lseek"
          ],
          [
            25455,
            "write"
          ],
          [
            25478,
            "strdup"
          ],
          [
            25492,
            "strcspn"
          ],
          [
            25511,
            "__open_2"
          ],
          [
            25520,
            "read"
          ],
          [
            25525,
            "sysconf"
          ],
          [
            25533,
            "unlink"
          ],
          [
            25540,
            "mkstemp"
          ],
          [
            25548,
            "opendir"
          ],
          [
            25556,
            "strncpy"
          ],
          [
            25564,
            "readdir"
          ],
          [
            25572,
            "__strcpy_chk"
          ],
          [
            25592,
            "closedir"
          ],
          [
            25601,
            "_ZNSt6__ndk117bad_function_callC2Ev"
          ],
          [
            25637,
            "_ZTINSt6__ndk117bad_function_callE"
          ],
          [
            25672,
            "_ZNSt6__ndk117bad_function_callD2Ev"
          ],
          [
            25708,
            "_ZTVNSt6__ndk117bad_function_callE"
          ],
          [
            25743,
            "_ZNSt9exceptionD2Ev"
          ],
          [
            25763,
            "_ZTVSt9exception"
          ],
          [
            25780,
            "_ZNSt6__ndk117bad_function_callD0Ev"
          ],
          [
            25816,
            "_ZTSNSt6__ndk117bad_function_callE"
          ],
          [
            25851,
            "_ZNKSt9exception4whatEv"
          ],
          [
            25888,
            "ioctl"
          ],
          [
            25894,
            "dlopen"
          ],
          [
            25901,
            "syscall"
          ],
          [
            25909,
            "rename"
          ],
          [
            25916,
            "sendfile"
          ],
          [
            25925,
            "pthread_mutexattr_init"
          ],
          [
            25948,
            "pthread_mutexattr_settype"
          ],
          [
            25974,
            "pthread_mutex_init"
          ],
          [
            25993,
            "pthread_mutexattr_destroy"
          ],
          [
            26019,
            "pthread_mutex_destroy"
          ],
          [
            26041,
            "pthread_mutex_lock"
          ],
          [
            26060,
            "pthread_mutex_unlock"
          ],
          [
            26081,
            "pthread_once"
          ],
          [
            26094,
            "openssl_aes_arm_set_encrypt_key"
          ],
          [
            26126,
            "time"
          ],
          [
            26131,
            "srand48"
          ],
          [
            26139,
            "lrand48"
          ],
          [
            26147,
            "openssl_aes_arm_set_decrypt_key"
          ],
          [
            26179,
            "openssl_aes_arm_decrypt"
          ],
          [
            26203,
            "openssl_aes_arm_encrypt"
          ],
          [
            26293,
            "_ZNKSt6__ndk117basic_string_viewIcNS_11char_traitsIcEEE7compareES3_"
          ],
          [
            26428,
            "_ZTISt14overflow_error"
          ],
          [
            26451,
            "_ZNSt14overflow_errorD1Ev"
          ],
          [
            26477,
            "_ZNSt13runtime_errorC2EPKc"
          ],
          [
            26504,
            "_ZTVSt14overflow_error"
          ],
          [
            26527,
            "_ZNSt6__ndk111char_traitsIcE4copyEPcPKcj"
          ],
          [
            26568,
            "_ZNSt6__ndk111char_traitsIwE4copyEPwPKwj"
          ],
          [
            26609,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initIPcEENS_9_MetaBaseIXsr27__is_cpp17_forward_iteratorIT_E"
          ],
          [
            26772,
            "_ZSt17__throw_bad_allocv"
          ],
          [
            26817,
            "_ZTISt9bad_alloc"
          ],
          [
            26854,
            "_ZSt15get_new_handlerv"
          ],
          [
            26877,
            "_ZnwjRKSt9nothrow_t"
          ],
          [
            26903,
            "_ZnajRKSt9nothrow_t"
          ],
          [
            26988,
            "posix_memalign"
          ],
          [
            27003,
            "_ZnwjSt11align_val_tRKSt9nothrow_t"
          ],
          [
            27059,
            "_ZnajSt11align_val_tRKSt9nothrow_t"
          ],
          [
            27234,
            "_ZSt7nothrow"
          ],
          [
            27247,
            "_ZTVSt11logic_error"
          ],
          [
            27267,
            "_ZNSt11logic_errorC2ERKS_"
          ],
          [
            27293,
            "_ZNSt11logic_erroraSERKS_"
          ],
          [
            27319,
            "_ZNSt13runtime_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            27412,
            "_ZTVSt13runtime_error"
          ],
          [
            27434,
            "_ZNSt13runtime_errorC2ERKS_"
          ],
          [
            27462,
            "_ZNSt13runtime_erroraSERKS_"
          ],
          [
            27490,
            "_ZNSt11logic_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            27581,
            "_ZNSt11logic_errorC1EPKc"
          ],
          [
            27606,
            "_ZNSt11logic_errorC1ERKS_"
          ],
          [
            27632,
            "_ZNSt13runtime_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            27725,
            "_ZNSt13runtime_errorC1ERKS_"
          ],
          [
            27753,
            "_ZNKSt6__ndk121__basic_string_commonILb1EE20__throw_length_errorEv"
          ],
          [
            27820,
            "_ZNKSt6__ndk121__basic_string_commonILb1EE20__throw_out_of_rangeEv"
          ],
          [
            27887,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEjjPKcj"
          ],
          [
            27969,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE21__grow_by_and_replaceEjjjjjjPKc"
          ],
          [
            28069,
            "_ZNSt6__ndk111char_traitsIcE4moveEPcPKcj"
          ],
          [
            28110,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5rfindEPKcjj"
          ],
          [
            28190,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_"
          ],
          [
            28265,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE25__init_copy_ctor_externalEPKcj"
          ],
          [
            28364,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEjjPKc"
          ],
          [
            28445,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_RKS4_"
          ],
          [
            28525,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE16find_last_not_ofEPKcjj"
          ],
          [
            28617,
            "_ZNSt6__ndk111char_traitsIcE4findEPKcjRS2_"
          ],
          [
            28660,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED2Ev"
          ],
          [
            28731,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE17find_first_not_ofEPKcjj"
          ],
          [
            28824,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEjjc"
          ],
          [
            28902,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9__grow_byEjjjjjj"
          ],
          [
            28986,
            "_ZNSt6__ndk111char_traitsIcE6assignEPcjc"
          ],
          [
            29027,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSEc"
          ],
          [
            29098,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE2atEj"
          ],
          [
            29171,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEjPKcj"
          ],
          [
            29251,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE13find_first_ofEPKcjj"
          ],
          [
            29340,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEjjjc"
          ],
          [
            29420,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7reserveEj"
          ],
          [
            29497,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignERKS5_jj"
          ],
          [
            29579,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4copyEPcjj"
          ],
          [
            29657,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_jjRKS4_"
          ],
          [
            29739,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4findEcj"
          ],
          [
            29815,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6__initEjc"
          ],
          [
            29892,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE12find_last_ofEPKcjj"
          ],
          [
            29980,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9push_backEc"
          ],
          [
            30059,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEjc"
          ],
          [
            30136,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5rfindEcj"
          ],
          [
            30213,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEjc"
          ],
          [
            30290,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5eraseEjj"
          ],
          [
            30366,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE26__erase_external_with_moveEjj"
          ],
          [
            30464,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendERKS5_jj"
          ],
          [
            30546,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEPKc"
          ],
          [
            30626,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEjjPKc"
          ],
          [
            30708,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE2atEj"
          ],
          [
            30780,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKc"
          ],
          [
            30858,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE4findEPKcjj"
          ],
          [
            30937,
            "_ZNSt6__ndk118__search_substringIcNS_11char_traitsIcEEEEPKT_S5_S5_S5_S5_"
          ],
          [
            31010,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareEjjRKS5_jj"
          ],
          [
            31096,
            "_ZNKSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7compareINS_17basic_string_viewIcS2_EEEENS_9_MetaBaseIXaasr33"
          ],
          [
            31341,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE17__assign_no_aliasILb0EEERS5_PKcj"
          ],
          [
            31442,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE17__assign_no_aliasILb1EEERS5_PKcj"
          ],
          [
            31543,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7replaceEjjRKS5_jj"
          ],
          [
            31628,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertENS_11__wrap_iterIPKcEEc"
          ],
          [
            31726,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEjRKS5_jj"
          ],
          [
            31809,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7replaceEjjPKwj"
          ],
          [
            31891,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE21__grow_by_and_replaceEjjjjjjPKw"
          ],
          [
            31991,
            "_ZNSt6__ndk111char_traitsIwE4moveEPwPKwj"
          ],
          [
            32032,
            "wmemmove"
          ],
          [
            32041,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE5rfindEPKwjj"
          ],
          [
            32215,
            "_ZNSt6__ndk111char_traitsIwE2eqEww"
          ],
          [
            32250,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEPKwjj"
          ],
          [
            32330,
            "wmemcpy"
          ],
          [
            32338,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC2ERKS5_"
          ],
          [
            32413,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE25__init_copy_ctor_externalEPKwj"
          ],
          [
            32512,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7replaceEjjPKw"
          ],
          [
            32593,
            "wcslen"
          ],
          [
            32600,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC2ERKS5_RKS4_"
          ],
          [
            32680,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE16find_last_not_ofEPKwjj"
          ],
          [
            32772,
            "_ZNSt6__ndk111char_traitsIwE4findEPKwjRS2_"
          ],
          [
            32815,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEED2Ev"
          ],
          [
            32886,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE17find_first_not_ofEPKwjj"
          ],
          [
            32979,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6insertEjjw"
          ],
          [
            33057,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE9__grow_byEjjjjjj"
          ],
          [
            33141,
            "_ZNSt6__ndk111char_traitsIwE6assignEPwjw"
          ],
          [
            33182,
            "wmemset"
          ],
          [
            33190,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEaSEw"
          ],
          [
            33261,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6__initEPKwj"
          ],
          [
            33340,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE2atEj"
          ],
          [
            33413,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6insertEjPKwj"
          ],
          [
            33493,
            "_ZNKSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE13find_first_ofEPKwjj"
          ],
          [
            33582,
            "_ZNSt6__ndk112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE7replaceEjjjw"
          ]
        ],
        "sz": 381796,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1105",
            "c": 0.8799999952316284,
            "d": "Android local tmp path",
            "e": [
              "/data/local/tmp/"
            ],
            "i": "micro-behaviors/data/text/dropper::android-local-tmp-path",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "XGETBV instruction bytes",
            "e": [
              "0F 01 D0"
            ],
            "i": "metadata/binary/instruction::xgetbv-instr",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.79"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Create directories",
            "e": [
              "mkdir"
            ],
            "i": "micro-behaviors/fs/directory/mkdir::mkdir-base",
            "l": 2
          },
          {
            "a": "T1071.001",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "looks like [%s] been downgrade \u0026 upgrade again"
            ],
            "i": "micro-behaviors/communications/http/llm::gpt-proxy-websocket-upstream--rx-15",
            "l": 1
          },
          {
            "d": "Truncate file",
            "e": [
              "ftruncate"
            ],
            "i": "micro-behaviors/fs/file/truncate::truncate",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "fail to locate ASharedMemory_create() from loading libandroid.so",
              "Got a shared lock, but fail to exclusive lock [%s]",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "ASharedMemory_getSize",
              "ASharedMemory_create",
              "fail to ASharedMemory_create %s with size %zu, errno:%s",
              "Fail to shared lock [%s], assume it's ok",
              "current API level = %d, libc++_shared=%d",
              "ASharedMemory_getName",
              "fail to ASharedMemory_getSize:%d, %s"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "each size limit:%zu, consider config"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Apply or remove advisory lock",
            "e": [
              "flock"
            ],
            "i": "micro-behaviors/fs/lock/flock::flock-fn",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Version information string",
            "e": [
              "v1.2"
            ],
            "i": "metadata/package/help::version-text",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.59"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE strcpy bounds check",
            "e": [
              "strcpy_chk"
            ],
            "i": "metadata/hardening/build::strcpy-chk",
            "l": 3
          },
          {
            "d": "usage: label (lowercase)",
            "e": [
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::usage-lower",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 2514.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libmmkv.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Fail to shared lock [%s], assume it's ok",
              "fail to ASharedMemory_getSize:%d, %s",
              "ASharedMemory_getSize",
              "Got a shared lock, but fail to exclusive lock [%s]",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "fail to ASharedMemory_create %s with size %zu, errno:%s",
              "ASharedMemory_getName",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "fail to locate ASharedMemory_create() from loading libandroid.so",
              "ASharedMemory_create",
              "current API level = %d, libc++_shared=%d"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "d": "usage: label in binary strings",
            "e": [
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::usage-lower-string",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 2.72"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 13251.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 1145.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ imports",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-100",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 2514.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "AES S-box start bytes",
            "e": [
              "63 7C 77 7B F2 6B 6F C5"
            ],
            "i": "micro-behaviors/crypto/symmetric/aes/constant::aes-sbox-bytes",
            "l": 3,
            "m": "C0021.001"
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6600000262260437,
            "d": "Uses sendfile socket call",
            "e": [
              "sendfile"
            ],
            "i": "micro-behaviors/communications/socket/send::sendfile-symbol",
            "l": 3,
            "m": "C0001"
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "bridge interface",
            "e": [
              "bridge"
            ],
            "i": "micro-behaviors/os/container/namespace::bridge-str",
            "l": 1
          },
          {
            "c": 0.9399999976158142,
            "d": "Regex component marker",
            "e": [
              "Got a shared lock, but fail to exclusive lock [%s]",
              "Got a shared lock, but fail to exclusive lock [%s], assume it's ok",
              "fail to recover shared-lock fd=%d, ret=%d, error:%s",
              "Fail to shared lock [%s], assume it's ok",
              "current API level = %d, libc++_shared=%d"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::runtime-shared-object-compile--rx-1",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "prepare to load %s (id %s) from rootPath %s",
              "root dir: %s"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Unix /tmp/ path reference",
            "e": [
              "/data/local/tmp/"
            ],
            "i": "micro-behaviors/fs/path/temp::unix-temp",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libmmkv.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.79"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "a": "T1567.002",
            "c": 0.8500000238418579,
            "d": "Regex component marker",
            "e": [
              "fail to msync [%s], %s"
            ],
            "i": "well-known/tool/dual-use/megacmd::megacmd-binary-name--rx-5",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 2514.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1145.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Create temporary file securely",
            "e": [
              "mkstemp"
            ],
            "i": "micro-behaviors/fs/temp/mktemp::mkstemp-fn",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 103.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "lstat",
              "fstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "CRYPTOGAMS OpenSSL support marker",
            "e": [
              "AES for ARMv4, CRYPTOGAMS by \u003cappro@openssl.org\u003e"
            ],
            "i": "micro-behaviors/crypto/library/provider::cryptogams-marker",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "mmkvClose",
              "closedir",
              "close",
              "fail to close [%s], %d(%s)",
              "close [%s]"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 432.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "d": "overflow keyword",
            "e": [
              "_ZNSt14overflow_errorD1Ev",
              "ZTSSt14overflow_error",
              "_ZTVSt14overflow_error",
              "St14overflow_error",
              "ZTVSt14overflow_error",
              "ZNSt14overflow_errorD1Ev",
              "ZNSt14overflow_errorD0Ev",
              "_ZTSSt14overflow_error",
              "_ZNSt14overflow_errorD0Ev",
              "ZNSt14overflow_errorD2Ev",
              "_ZTISt14overflow_error",
              "ZTISt14overflow_error",
              "_ZNSt14overflow_errorD2Ev",
              "__next_prime overflow"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Binary has 1000 or more functions",
            "e": [
              "binary.func_count = 2514.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::function-count-1000-plus",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 2514.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 2514.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1145.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "c": 0.75,
            "d": "Low average code complexity",
            "e": [
              "binary.avg_complexity = 2.72"
            ],
            "i": "metadata/binary/metrics/structural::low-average-complexity",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "lstat",
              "fstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlopen",
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "c": 0.8500000238418579,
            "d": "Documented command line program",
            "e": [
              "binary.import_count = 103.00",
              "binary.string_count = 1145.00",
              "binary.func_count = 2514.00",
              "extending [%s] file size from %zu to %zu, incoming size:%zu, future usage:%zu"
            ],
            "i": "metadata/package/help::documented-cli-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.func_count = 2514.00",
              "binary.overall_entropy = 3.79"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          }
        ],
        "sha": "4e53f1d2a78999c21b44646780ffd7c1493472fd74417e2bf324b0408396914c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libmmkv.so",
        "type": "elf"
      },
      {
        "f": "O₃(AsDyS)H(Ds)Md(Bi₃)",
        "x": 4,
        "dp": 1,
        "id": 16,
        "is": [
          "",
          "cxa_atexit",
          "abort",
          "cxa_finalize",
          "pthread_mutex_lock",
          "stack_chk_fail",
          "pthread_mutex_unlock",
          "stack_chk_guard",
          "strlen",
          "strncpy_chk",
          "calloc",
          "free",
          "gVm",
          "getCacheClass",
          "vmInterpret",
          "cacheInitial",
          "aeabi_memcpy",
          "aeabi_memclr",
          "sF",
          "snprintf",
          "fprintf",
          "fflush",
          "dladdr",
          "gnu_Unwind_Find_exidx"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libnmmvm.so",
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libnmmp.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 3.0,
            "nx_enabled": true,
            "needed_libs": 5.0,
            "dynrel_count": 44.0,
            "dynsym_count": 28.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 20.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 21182.0,
            "load_segment_max_p_filesz": 21182.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 26200.0
          },
          "binary": {
            "code_size": 8712.0,
            "func_count": 53.0,
            "has_overlay": true,
            "code_entropy": 5.31,
            "data_entropy": 3.34,
            "export_count": 4.0,
            "func_density": 6.23,
            "import_count": 24.0,
            "overlay_size": 1083.0,
            "string_count": 236.0,
            "avg_func_size": 149.02,
            "overlay_ratio": 0.04,
            "section_count": 26.0,
            "avg_complexity": 3.36,
            "import_density": 2.82,
            "max_complexity": 36.0,
            "string_density": 27.74,
            "aliased_exports": 2.0,
            "overall_entropy": 3.18,
            "overlay_entropy": 2.15,
            "avg_basic_blocks": 4.79,
            "avg_section_size": 878.62,
            "dependency_count": 5.0,
            "entropy_variance": 1.48,
            "avg_string_length": 22.92,
            "complexity_per_kb": 0.39,
            "max_string_length": 443.0,
            "avg_string_entropy": 3.25,
            "code_to_data_ratio": 0.62,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.32,
            "total_basic_blocks": 254.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 34.61,
            "largest_section_ratio": 0.35,
            "provenance_id_present": true,
            "sentence_string_count": 9.0,
            "sentence_string_ratio": 0.04,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            320,
            "Android"
          ],
          [
            332,
            "r21e"
          ],
          [
            396,
            "7075529"
          ],
          [
            945,
            "__cxa_atexit"
          ],
          [
            958,
            "LIBC"
          ],
          [
            963,
            "libc.so"
          ],
          [
            971,
            "libnmmp.so"
          ],
          [
            982,
            "abort"
          ],
          [
            988,
            "__cxa_finalize"
          ],
          [
            1003,
            "pthread_mutex_lock"
          ],
          [
            1022,
            "__stack_chk_fail"
          ],
          [
            1039,
            "pthread_mutex_unlock"
          ],
          [
            1060,
            "__stack_chk_guard"
          ],
          [
            1078,
            "strlen"
          ],
          [
            1085,
            "__strncpy_chk"
          ],
          [
            1099,
            "calloc"
          ],
          [
            1106,
            "free"
          ],
          [
            1115,
            "getCacheClass"
          ],
          [
            1129,
            "vmInterpret"
          ],
          [
            1152,
            "cacheInitial"
          ],
          [
            1165,
            "__aeabi_memcpy"
          ],
          [
            1180,
            "__aeabi_memclr"
          ],
          [
            1200,
            "snprintf"
          ],
          [
            1209,
            "fprintf"
          ],
          [
            1217,
            "fflush"
          ],
          [
            1224,
            "dladdr"
          ],
          [
            1231,
            "libdl.so"
          ],
          [
            1240,
            "__gnu_Unwind_Find_exidx"
          ],
          [
            1269,
            "_edata"
          ],
          [
            1276,
            "__bss_start"
          ],
          [
            1288,
            "libnmmvm.so"
          ],
          [
            1300,
            "liblog.so"
          ],
          [
            1310,
            "libm.so"
          ],
          [
            9063,
            "J0FAF"
          ],
          [
            9224,
            "Vhbh"
          ],
          [
            10045,
            "HxDpGvHxDpGuHxDpGuHxDpGtHxDpGtHxDpGsHxDpGsHxDpGrHxDpGrHxDpGqHxDpGqHxDpGpHxDpGpHxDpG`HxDpGnHxDpGmHxDpGmHxDpGlHxDpGlHxDpGkHxDpGkHx"
          ],
          [
            10492,
            "PHxDpGPHxDpGOHxDpGOHxDpGM"
          ],
          [
            12116,
            "com/nmmedit/protect/NativeUtil"
          ],
          [
            12147,
            "classesInit0"
          ],
          [
            12165,
            "libunwind: %s %s:%d - %s"
          ],
          [
            12191,
            "_Unwind_Resume"
          ],
          [
            12206,
            "/Volumes/Android/buildbot/src/android/ndk-release-r21/external/libcxx/../../external/libunwind_llvm/src/Unwind-EHABI.cpp"
          ],
          [
            12327,
            "_Unwind_Resume() can't return"
          ],
          [
            12373,
            "unsupported register class"
          ],
          [
            12416,
            "unwind_phase2"
          ],
          [
            12430,
            "during phase1 personality function said it would stop here, but now in phase2 it did not stop here"
          ],
          [
            12529,
            "_Unwind_VRS_Get_Internal"
          ],
          [
            12554,
            "/Volumes/Android/buildbot/src/android/ndk-release-r21/external/libcxx/../../external/libunwind_llvm/src/UnwindCursor.hpp"
          ],
          [
            12675,
            "getRegister"
          ],
          [
            12687,
            "/Volumes/Android/buildbot/src/android/ndk-release-r21/external/libcxx/../../external/libunwind_llvm/src/Registers.hpp"
          ],
          [
            12805,
            "unsupported arm register"
          ],
          [
            12830,
            "setRegister"
          ],
          [
            12842,
            "getFloatRegister"
          ],
          [
            12859,
            "Unknown ARM float register"
          ],
          [
            12886,
            "setFloatRegister"
          ],
          [
            12906,
            "getInfoFromEHABISection"
          ],
          [
            12930,
            "unknown personality routine"
          ],
          [
            12958,
            "index inlined table detected but pr function requires extra words"
          ],
          [
            13311,
            "unknown register"
          ],
          [
            13364,
            "\u003cinit\u003e"
          ],
          [
            13371,
            "BRAND"
          ],
          [
            13382,
            "Class"
          ],
          [
            13390,
            "INSTANCE"
          ],
          [
            13426,
            "Landroid/content/Context;"
          ],
          [
            13452,
            "Landroid/graphics/Rect;"
          ],
          [
            13476,
            "Landroid/os/Build$VERSION;"
          ],
          [
            13503,
            "Landroid/os/Build;"
          ],
          [
            13522,
            "Landroid/text/TextUtils;"
          ],
          [
            13547,
            "Landroid/util/Pair;"
          ],
          [
            13567,
            "Landroid/view/View;"
          ],
          [
            13587,
            "Landroid/view/WindowManager$LayoutParams;"
          ],
          [
            13629,
            "Landroidx/arch/core/util/Arch;"
          ],
          [
            13660,
            "Landroidx/arch/core/util/ArchCore;"
          ],
          [
            13695,
            "Lcom/cx/utils/FloatWindowUtils;"
          ],
          [
            13735,
            "Lf/z/x/PAuto;"
          ],
          [
            13749,
            "Lf/z/x/do$new;"
          ],
          [
            13773,
            "Ljava/lang/Boolean;"
          ],
          [
            13793,
            "Ljava/lang/CharSequence;"
          ],
          [
            13818,
            "Ljava/lang/Class;"
          ],
          [
            13836,
            "Ljava/lang/IllegalArgumentException;"
          ],
          [
            13873,
            "Ljava/lang/Integer;"
          ],
          [
            13893,
            "Ljava/lang/Object;"
          ],
          [
            13912,
            "Ljava/lang/RuntimeException;"
          ],
          [
            13941,
            "Ljava/lang/String;"
          ],
          [
            13960,
            "Ljava/lang/StringBuilder;"
          ],
          [
            13986,
            "Ljava/lang/Throwable;"
          ],
          [
            14008,
            "Ljava/lang/reflect/AccessibleObject;"
          ],
          [
            14045,
            "Ljava/lang/reflect/Constructor;"
          ],
          [
            14077,
            "Ljava/lang/reflect/Field;"
          ],
          [
            14103,
            "Ljava/lang/reflect/Method;"
          ],
          [
            14130,
            "Ljava/util/ArrayList;"
          ],
          [
            14152,
            "Ljava/util/Arrays;"
          ],
          [
            14171,
            "Ljava/util/Collection;"
          ],
          [
            14194,
            "Ljava/util/List;"
          ],
          [
            14211,
            "Ljava/util/concurrent/atomic/AtomicBoolean;"
          ],
          [
            14255,
            "Ljava/util/function/Function;"
          ],
          [
            14285,
            "MODEL"
          ],
          [
            14291,
            "RELEASE"
          ],
          [
            14299,
            "SDK_INT"
          ],
          [
            14307,
            "TRUE"
          ],
          [
            14312,
            "TYPE"
          ],
          [
            14317,
            "TYPE_PATTERN"
          ],
          [
            14330,
            "TYPE_PIN"
          ],
          [
            14339,
            "TYPE_TEXT"
          ],
          [
            14361,
            "VLLIZZLLI"
          ],
          [
            14388,
            "ZLLLIZ"
          ],
          [
            14395,
            "[Ljava/lang/Class;"
          ],
          [
            14414,
            "[Ljava/lang/Object;"
          ],
          [
            14434,
            "[Ljava/lang/reflect/Method;"
          ],
          [
            14466,
            "also"
          ],
          [
            14471,
            "append"
          ],
          [
            14478,
            "bottom"
          ],
          [
            14485,
            "centerX"
          ],
          [
            14493,
            "centerY"
          ],
          [
            14508,
            "concat"
          ],
          [
            14518,
            "equals"
          ],
          [
            14525,
            "f1480b"
          ],
          [
            14532,
            "forName"
          ],
          [
            14540,
            "format"
          ],
          [
            14551,
            "getApplicationContext"
          ],
          [
            14573,
            "getClass"
          ],
          [
            14582,
            "getDeclaredConstructor"
          ],
          [
            14605,
            "getDeclaredField"
          ],
          [
            14622,
            "getDeclaredMethod"
          ],
          [
            14640,
            "getDeclaredMethods"
          ],
          [
            14659,
            "getName"
          ],
          [
            14667,
            "getSimpleName"
          ],
          [
            14681,
            "getSystemPropertyValue"
          ],
          [
            14707,
            "init"
          ],
          [
            14712,
            "initSDK"
          ],
          [
            14720,
            "inited"
          ],
          [
            14731,
            "invoke"
          ],
          [
            14738,
            "isEmpty"
          ],
          [
            14746,
            "isOplus"
          ],
          [
            14759,
            "length"
          ],
          [
            14775,
            "newInstance"
          ],
          [
            14797,
            "setAccessible"
          ],
          [
            14811,
            "setLayoutParams"
          ],
          [
            14827,
            "toLowerCase"
          ],
          [
            14839,
            "toString"
          ],
          [
            14852,
            "unlock"
          ],
          [
            14859,
            "valueOf"
          ],
          [
            14867,
            "android/util/Pair"
          ],
          [
            14885,
            "java/lang/Integer"
          ],
          [
            14903,
            "java/lang/StringBuilder"
          ],
          [
            14927,
            "()Ljava/lang/String;"
          ],
          [
            14953,
            "(II)Landroid/util/Pair;"
          ],
          [
            14977,
            "java/util/ArrayList"
          ],
          [
            14997,
            "java/lang/reflect/Constructor"
          ],
          [
            15027,
            "java/util/Collection"
          ],
          [
            15048,
            "android/content/Context"
          ],
          [
            15072,
            "(Ljava/lang/String;[Ljava/lang/Class;)Ljava/lang/reflect/Method;"
          ],
          [
            15137,
            "java/util/Arrays"
          ],
          [
            15154,
            "(Ljava/lang/String;Ljava/lang/Throwable;)V"
          ],
          [
            15197,
            "java/lang/reflect/Method"
          ],
          [
            15222,
            "java/lang/Throwable"
          ],
          [
            15242,
            "(Ljava/lang/String;)Ljava/lang/StringBuilder;"
          ],
          [
            15288,
            "(J)Ljava/lang/String;"
          ],
          [
            15310,
            "java/lang/reflect/Field"
          ],
          [
            15334,
            "(Landroid/content/Context;)V"
          ],
          [
            15363,
            "androidx/arch/core/util/Arch"
          ],
          [
            15392,
            "(Ljava/lang/CharSequence;)Z"
          ],
          [
            15420,
            "(Ljava/lang/String;)V"
          ],
          [
            15442,
            "com/cx/utils/FloatWindowUtils"
          ],
          [
            15472,
            "java/lang/Object"
          ],
          [
            15489,
            "java/util/concurrent/atomic/AtomicBoolean"
          ],
          [
            15531,
            "(Landroid/graphics/Rect;Ljava/lang/String;)Ljava/util/List;"
          ],
          [
            15591,
            "([Ljava/lang/Object;)Ljava/lang/Object;"
          ],
          [
            15631,
            "(Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object;"
          ],
          [
            15695,
            "java/lang/reflect/AccessibleObject"
          ],
          [
            15730,
            "java/lang/RuntimeException"
          ],
          [
            15757,
            "android/os/Build"
          ],
          [
            15774,
            "(Ljava/lang/String;Landroid/view/WindowManager$LayoutParams;IZZLjava/lang/String;Ljava/lang/String;I)V"
          ],
          [
            15877,
            "java/util/List"
          ],
          [
            15897,
            "(Landroid/view/WindowManager$LayoutParams;I)Z"
          ],
          [
            15943,
            "android/view/WindowManager$LayoutParams"
          ],
          [
            15983,
            "android/view/View"
          ],
          [
            16001,
            "(Ljava/lang/Object;)V"
          ],
          [
            16023,
            "java/lang/Boolean"
          ],
          [
            16041,
            "f/z/x/do$new"
          ],
          [
            16054,
            "(Ljava/lang/Object;)Z"
          ],
          [
            16076,
            "()[Ljava/lang/reflect/Method;"
          ],
          [
            16106,
            "for/do"
          ],
          [
            16113,
            "(Z)Ljava/lang/Boolean;"
          ],
          [
            16136,
            "(Ljava/lang/Object;)Ljava/lang/Object;"
          ],
          [
            16175,
            "()Landroid/content/Context;"
          ],
          [
            16203,
            "java/lang/String"
          ],
          [
            16220,
            "()Ljava/lang/Class;"
          ],
          [
            16240,
            "android/graphics/Rect"
          ],
          [
            16262,
            "(Ljava/lang/String;)Ljava/lang/Class;"
          ],
          [
            16300,
            "(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;"
          ],
          [
            16358,
            "java/util/function/Function"
          ],
          [
            16390,
            "java/lang/IllegalArgumentException"
          ],
          [
            16425,
            "([Ljava/lang/Class;)Ljava/lang/reflect/Constructor;"
          ],
          [
            16482,
            "java/lang/CharSequence"
          ],
          [
            16505,
            "(Ljava/lang/String;)Ljava/lang/String;"
          ],
          [
            16544,
            "android/text/TextUtils"
          ],
          [
            16567,
            "androidx/arch/core/util/ArchCore"
          ],
          [
            16600,
            "(Ljava/lang/String;)Ljava/lang/reflect/Field;"
          ],
          [
            16646,
            "(Ljava/lang/String;Ljava/lang/String;Ljava/util/function/Function;)V"
          ],
          [
            16719,
            "([Ljava/lang/Object;)Ljava/lang/String;"
          ],
          [
            16763,
            "(I)Ljava/lang/Integer;"
          ],
          [
            16786,
            "(C)Ljava/lang/StringBuilder;"
          ],
          [
            16815,
            "java/lang/Class"
          ],
          [
            16831,
            "(Landroid/content/Context;Ljava/lang/Object;Ljava/lang/Object;IZ)Z"
          ],
          [
            16898,
            "android/os/Build$VERSION"
          ],
          [
            16923,
            "f/z/x/PAuto"
          ],
          [
            17926,
            "160.2.112.147:2304"
          ],
          [
            17972,
            "160.5.112.153:2304"
          ],
          [
            24581,
            "Android (7019983 based on r365631c3) clang version 9.0.9 (https://android.googlesource.com/toolchain/llvm-project a2a1e703c0edb0"
          ],
          [
            24780,
            "gold 1.12"
          ],
          [
            24797,
            "aeabi"
          ],
          [
            24847,
            ".fini_array"
          ],
          [
            24859,
            ".ARM.exidx"
          ],
          [
            24870,
            ".text"
          ],
          [
            24876,
            ".got"
          ],
          [
            24881,
            ".comment"
          ],
          [
            24890,
            ".note.android.ident"
          ],
          [
            24910,
            ".rel.plt"
          ],
          [
            24919,
            ".bss"
          ],
          [
            24924,
            ".ARM.attributes"
          ],
          [
            24940,
            ".dynstr"
          ],
          [
            24948,
            ".gnu.version_r"
          ],
          [
            24963,
            ".data.rel.ro"
          ],
          [
            24976,
            ".rel.dyn"
          ],
          [
            24985,
            ".gnu.version"
          ],
          [
            24998,
            ".note.gnu.gold-version"
          ],
          [
            25021,
            ".dynsym"
          ],
          [
            25029,
            ".gnu.hash"
          ],
          [
            25039,
            ".note.gnu.build-id"
          ],
          [
            25058,
            ".gnu.version_d"
          ],
          [
            25073,
            ".dynamic"
          ],
          [
            25082,
            ".ARM.extab"
          ],
          [
            25093,
            ".shstrtab"
          ],
          [
            25103,
            ".rodata"
          ],
          [
            25111,
            ".data"
          ]
        ],
        "sz": 26200,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libnmmp.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.25"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 24.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 53.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libnmmp.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 3.36"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 53.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libnmmp.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.18"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 53.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 4.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "5b4965a69d2b197458173f8a504766c3ddac0a526a053cc5607909693fdc65e1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libnmmp.so",
        "type": "elf"
      },
      {
        "f": "O₄(AsDyErS)H₂(DsCr)Md(Bi₃)",
        "x": 4,
        "dp": 1,
        "id": 17,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "stack_chk_fail",
          "stack_chk_guard",
          "vsnprintf",
          "aeabi_memcpy",
          "abort",
          "fmod",
          "fmodf",
          "free",
          "malloc",
          "pthread_once",
          "pthread_setspecific",
          "pthread_getspecific",
          "pthread_key_create",
          "pthread_mutex_lock",
          "aeabi_memclr",
          "pthread_mutex_unlock",
          "calloc",
          "posix_memalign",
          "aeabi_memclr8",
          "assert2",
          "sF",
          "fputc",
          "vasprintf",
          "vfprintf",
          "aeabi_memcpy4",
          "aeabi_memmove",
          "aeabi_memmove4",
          "islower",
          "isxdigit",
          "realloc",
          "snprintf",
          "strlen",
          "fprintf",
          "fflush",
          "dladdr",
          "strcmp",
          "gnu_Unwind_Find_exidx",
          "raise"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libnmmvm.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 3.0,
            "nx_enabled": true,
            "needed_libs": 4.0,
            "dynrel_count": 1665.0,
            "dynsym_count": 348.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 89.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 128574.0,
            "load_segment_max_p_filesz": 128574.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 140940.0
          },
          "binary": {
            "code_size": 77736.0,
            "func_count": 396.0,
            "has_overlay": true,
            "code_entropy": 5.44,
            "data_entropy": 4.11,
            "export_count": 287.0,
            "func_density": 5.22,
            "import_count": 41.0,
            "overlay_size": 1083.0,
            "string_count": 550.0,
            "avg_func_size": 978.71,
            "overlay_ratio": 0.01,
            "section_count": 26.0,
            "avg_complexity": 4.93,
            "import_density": 0.54,
            "max_complexity": 255.0,
            "string_density": 7.25,
            "aliased_exports": 25.0,
            "overall_entropy": 3.65,
            "overlay_entropy": 2.36,
            "avg_basic_blocks": 6.94,
            "avg_section_size": 5281.0,
            "dependency_count": 4.0,
            "entropy_variance": 1.5,
            "avg_string_length": 23.59,
            "complexity_per_kb": 0.06,
            "max_string_length": 443.0,
            "wide_string_count": 1.0,
            "avg_string_entropy": 3.39,
            "code_to_data_ratio": 1.3,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.54,
            "total_basic_blocks": 2748.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 26.41,
            "high_complexity_funcs": 6.0,
            "largest_section_ratio": 0.54,
            "provenance_id_present": true,
            "sentence_string_count": 42.0,
            "sentence_string_ratio": 0.08,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            320,
            "Android"
          ],
          [
            332,
            "r21e"
          ],
          [
            396,
            "7075529"
          ],
          [
            6065,
            "__cxa_atexit"
          ],
          [
            6078,
            "LIBC"
          ],
          [
            6083,
            "libc.so"
          ],
          [
            6091,
            "libnmmvm.so"
          ],
          [
            6103,
            "__cxa_finalize"
          ],
          [
            6118,
            "_ZSt9terminatev"
          ],
          [
            6134,
            "__cxa_begin_catch"
          ],
          [
            6152,
            "__gxx_personality_v0"
          ],
          [
            6173,
            "__stack_chk_fail"
          ],
          [
            6190,
            "__stack_chk_guard"
          ],
          [
            6212,
            "vsnprintf"
          ],
          [
            6222,
            "__aeabi_memcpy"
          ],
          [
            6237,
            "abort"
          ],
          [
            6248,
            "libm.so"
          ],
          [
            6262,
            "free"
          ],
          [
            6267,
            "getJNIWrapper"
          ],
          [
            6281,
            "malloc"
          ],
          [
            6288,
            "vmInterpret"
          ],
          [
            6300,
            "cacheInitial"
          ],
          [
            6313,
            "getCacheClass"
          ],
          [
            6327,
            "pthread_once"
          ],
          [
            6340,
            "pthread_setspecific"
          ],
          [
            6360,
            "pthread_getspecific"
          ],
          [
            6380,
            "pthread_key_create"
          ],
          [
            6399,
            "_ZN10__cxxabiv119__getExceptionClassEPK21_Unwind_Control_Block"
          ],
          [
            6462,
            "_ZN10__cxxabiv119__setExceptionClassEP21_Unwind_Control_Blocky"
          ],
          [
            6525,
            "_ZN10__cxxabiv121__isOurExceptionClassEPK21_Unwind_Control_Block"
          ],
          [
            6590,
            "_ZSt13get_terminatev"
          ],
          [
            6611,
            "_ZSt14get_unexpectedv"
          ],
          [
            6633,
            "pthread_mutex_lock"
          ],
          [
            6652,
            "__aeabi_memclr"
          ],
          [
            6667,
            "pthread_mutex_unlock"
          ],
          [
            6688,
            "__cxa_allocate_dependent_exception"
          ],
          [
            6723,
            "calloc"
          ],
          [
            6730,
            "__cxa_allocate_exception"
          ],
          [
            6755,
            "posix_memalign"
          ],
          [
            6770,
            "__cxa_begin_cleanup"
          ],
          [
            6790,
            "__cxa_call_unexpected"
          ],
          [
            6812,
            "__cxa_current_exception_type"
          ],
          [
            6841,
            "__cxa_current_primary_exception"
          ],
          [
            6873,
            "__cxa_decrement_exception_refcount"
          ],
          [
            6908,
            "__cxa_end_catch"
          ],
          [
            6924,
            "__cxa_end_cleanup"
          ],
          [
            6942,
            "__cxa_free_dependent_exception"
          ],
          [
            6973,
            "__cxa_free_exception"
          ],
          [
            6994,
            "__cxa_get_exception_ptr"
          ],
          [
            7018,
            "__cxa_get_globals"
          ],
          [
            7036,
            "__cxa_get_globals_fast"
          ],
          [
            7059,
            "__cxa_increment_exception_refcount"
          ],
          [
            7094,
            "__cxa_rethrow"
          ],
          [
            7108,
            "__cxa_rethrow_primary_exception"
          ],
          [
            7140,
            "__cxa_throw"
          ],
          [
            7152,
            "__cxa_uncaught_exception"
          ],
          [
            7177,
            "__cxa_uncaught_exceptions"
          ],
          [
            7203,
            "_ZSt10unexpectedv"
          ],
          [
            7221,
            "_ZSt15get_new_handlerv"
          ],
          [
            7244,
            "_ZSt15set_new_handlerPFvvE"
          ],
          [
            7271,
            "__cxa_new_handler"
          ],
          [
            7289,
            "__cxa_terminate_handler"
          ],
          [
            7313,
            "__cxa_unexpected_handler"
          ],
          [
            7338,
            "_ZNSt13bad_exceptionD1Ev"
          ],
          [
            7363,
            "_ZTISt13bad_exception"
          ],
          [
            7385,
            "_ZTVSt13bad_exception"
          ],
          [
            7407,
            "__aeabi_memclr8"
          ],
          [
            7423,
            "_ZNKSt13bad_exception4whatEv"
          ],
          [
            7452,
            "_ZNKSt20bad_array_new_length4whatEv"
          ],
          [
            7488,
            "_ZNKSt9bad_alloc4whatEv"
          ],
          [
            7512,
            "_ZNKSt9exception4whatEv"
          ],
          [
            7536,
            "_ZNSt13bad_exceptionD0Ev"
          ],
          [
            7561,
            "_ZNSt13bad_exceptionD2Ev"
          ],
          [
            7586,
            "_ZNSt20bad_array_new_lengthC1Ev"
          ],
          [
            7618,
            "_ZNSt20bad_array_new_lengthC2Ev"
          ],
          [
            7650,
            "_ZNSt20bad_array_new_lengthD0Ev"
          ],
          [
            7682,
            "_ZNSt20bad_array_new_lengthD1Ev"
          ],
          [
            7714,
            "_ZNSt20bad_array_new_lengthD2Ev"
          ],
          [
            7846,
            "_ZNSt9exceptionD0Ev"
          ],
          [
            7866,
            "_ZNSt9exceptionD1Ev"
          ],
          [
            7886,
            "_ZNSt9exceptionD2Ev"
          ],
          [
            7906,
            "_ZTISt20bad_array_new_length"
          ],
          [
            7935,
            "_ZTISt9bad_alloc"
          ],
          [
            7952,
            "_ZTISt9exception"
          ],
          [
            7969,
            "_ZTSSt13bad_exception"
          ],
          [
            7991,
            "_ZTSSt20bad_array_new_length"
          ],
          [
            8020,
            "_ZTSSt9bad_alloc"
          ],
          [
            8037,
            "_ZTSSt9exception"
          ],
          [
            8054,
            "_ZTVN10__cxxabiv117__class_type_infoE"
          ],
          [
            8092,
            "_ZTVN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            8133,
            "_ZTVSt20bad_array_new_length"
          ],
          [
            8162,
            "_ZTVSt9bad_alloc"
          ],
          [
            8179,
            "_ZTVSt9exception"
          ],
          [
            8436,
            "_ZnajRKSt9nothrow_t"
          ],
          [
            8477,
            "_ZnajSt11align_val_tRKSt9nothrow_t"
          ],
          [
            8518,
            "_ZnwjRKSt9nothrow_t"
          ],
          [
            8559,
            "_ZnwjSt11align_val_tRKSt9nothrow_t"
          ],
          [
            8594,
            "__assert2"
          ],
          [
            8615,
            "vasprintf"
          ],
          [
            8625,
            "vfprintf"
          ],
          [
            8634,
            "_ZSt13set_terminatePFvvE"
          ],
          [
            8659,
            "_ZSt14set_unexpectedPFvvE"
          ],
          [
            8685,
            "__cxa_demangle"
          ],
          [
            8700,
            "__aeabi_memcpy4"
          ],
          [
            8716,
            "__aeabi_memmove"
          ],
          [
            8732,
            "__aeabi_memmove4"
          ],
          [
            8749,
            "islower"
          ],
          [
            8757,
            "isxdigit"
          ],
          [
            8766,
            "realloc"
          ],
          [
            8774,
            "snprintf"
          ],
          [
            8783,
            "strlen"
          ],
          [
            8845,
            "_ZTIN10__cxxabiv116__enum_type_infoE"
          ],
          [
            8882,
            "_ZTIN10__cxxabiv116__shim_type_infoE"
          ],
          [
            8919,
            "_ZTIN10__cxxabiv117__array_type_infoE"
          ],
          [
            8957,
            "_ZTIN10__cxxabiv117__class_type_infoE"
          ],
          [
            8995,
            "_ZTIN10__cxxabiv117__pbase_type_infoE"
          ],
          [
            9033,
            "_ZTIN10__cxxabiv119__pointer_type_infoE"
          ],
          [
            9073,
            "_ZTIN10__cxxabiv120__function_type_infoE"
          ],
          [
            9114,
            "_ZTIN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            9155,
            "_ZTIN10__cxxabiv121__vmi_class_type_infoE"
          ],
          [
            9197,
            "_ZTIN10__cxxabiv123__fundamental_type_infoE"
          ],
          [
            9241,
            "_ZTIN10__cxxabiv129__pointer_to_member_type_infoE"
          ],
          [
            9291,
            "_ZTIPDh"
          ],
          [
            9299,
            "_ZTIPDi"
          ],
          [
            9307,
            "_ZTIPDn"
          ],
          [
            9315,
            "_ZTIPDs"
          ],
          [
            9323,
            "_ZTIPDu"
          ],
          [
            9331,
            "_ZTIPKDh"
          ],
          [
            9340,
            "_ZTIPKDi"
          ],
          [
            9349,
            "_ZTIPKDn"
          ],
          [
            9358,
            "_ZTIPKDs"
          ],
          [
            9367,
            "_ZTIPKDu"
          ],
          [
            9376,
            "_ZTIPKa"
          ],
          [
            9384,
            "_ZTIPKb"
          ],
          [
            9392,
            "_ZTIPKc"
          ],
          [
            9400,
            "_ZTIPKd"
          ],
          [
            9408,
            "_ZTIPKe"
          ],
          [
            9416,
            "_ZTIPKf"
          ],
          [
            9424,
            "_ZTIPKg"
          ],
          [
            9432,
            "_ZTIPKh"
          ],
          [
            9440,
            "_ZTIPKi"
          ],
          [
            9448,
            "_ZTIPKj"
          ],
          [
            9456,
            "_ZTIPKl"
          ],
          [
            9464,
            "_ZTIPKm"
          ],
          [
            9472,
            "_ZTIPKn"
          ],
          [
            9480,
            "_ZTIPKo"
          ],
          [
            9488,
            "_ZTIPKs"
          ],
          [
            9496,
            "_ZTIPKt"
          ],
          [
            9504,
            "_ZTIPKv"
          ],
          [
            9512,
            "_ZTIPKw"
          ],
          [
            9520,
            "_ZTIPKx"
          ],
          [
            9528,
            "_ZTIPKy"
          ],
          [
            9676,
            "_ZTISt9type_info"
          ],
          [
            9848,
            "_ZTSN10__cxxabiv116__enum_type_infoE"
          ],
          [
            9885,
            "_ZTSN10__cxxabiv116__shim_type_infoE"
          ],
          [
            9922,
            "_ZTSN10__cxxabiv117__array_type_infoE"
          ],
          [
            9960,
            "_ZTSN10__cxxabiv117__class_type_infoE"
          ],
          [
            9998,
            "_ZTSN10__cxxabiv117__pbase_type_infoE"
          ],
          [
            10036,
            "_ZTSN10__cxxabiv119__pointer_type_infoE"
          ],
          [
            10076,
            "_ZTSN10__cxxabiv120__function_type_infoE"
          ],
          [
            10117,
            "_ZTSN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            10158,
            "_ZTSN10__cxxabiv121__vmi_class_type_infoE"
          ],
          [
            10200,
            "_ZTSN10__cxxabiv123__fundamental_type_infoE"
          ],
          [
            10244,
            "_ZTSN10__cxxabiv129__pointer_to_member_type_infoE"
          ],
          [
            10294,
            "_ZTSPDh"
          ],
          [
            10302,
            "_ZTSPDi"
          ],
          [
            10310,
            "_ZTSPDn"
          ],
          [
            10318,
            "_ZTSPDs"
          ],
          [
            10326,
            "_ZTSPDu"
          ],
          [
            10334,
            "_ZTSPKDh"
          ],
          [
            10343,
            "_ZTSPKDi"
          ],
          [
            10352,
            "_ZTSPKDn"
          ],
          [
            10361,
            "_ZTSPKDs"
          ],
          [
            10370,
            "_ZTSPKDu"
          ],
          [
            10379,
            "_ZTSPKa"
          ],
          [
            10387,
            "_ZTSPKb"
          ],
          [
            10395,
            "_ZTSPKc"
          ],
          [
            10403,
            "_ZTSPKd"
          ],
          [
            10411,
            "_ZTSPKe"
          ],
          [
            10419,
            "_ZTSPKf"
          ],
          [
            10427,
            "_ZTSPKg"
          ],
          [
            10435,
            "_ZTSPKh"
          ],
          [
            10443,
            "_ZTSPKi"
          ],
          [
            10451,
            "_ZTSPKj"
          ],
          [
            10459,
            "_ZTSPKl"
          ],
          [
            10467,
            "_ZTSPKm"
          ],
          [
            10475,
            "_ZTSPKn"
          ],
          [
            10483,
            "_ZTSPKo"
          ],
          [
            10491,
            "_ZTSPKs"
          ],
          [
            10499,
            "_ZTSPKt"
          ],
          [
            10507,
            "_ZTSPKv"
          ],
          [
            10515,
            "_ZTSPKw"
          ],
          [
            10523,
            "_ZTSPKx"
          ],
          [
            10531,
            "_ZTSPKy"
          ],
          [
            10745,
            "fprintf"
          ],
          [
            10771,
            "fflush"
          ],
          [
            10814,
            "_ZTVN10__cxxabiv116__enum_type_infoE"
          ],
          [
            10851,
            "_ZTVN10__cxxabiv116__shim_type_infoE"
          ],
          [
            10888,
            "_ZTVN10__cxxabiv117__array_type_infoE"
          ],
          [
            10926,
            "_ZTVN10__cxxabiv117__pbase_type_infoE"
          ],
          [
            10964,
            "_ZTVN10__cxxabiv119__pointer_type_infoE"
          ],
          [
            11004,
            "dladdr"
          ],
          [
            11011,
            "libdl.so"
          ],
          [
            11020,
            "_ZTVN10__cxxabiv120__function_type_infoE"
          ],
          [
            11061,
            "_ZTVN10__cxxabiv121__vmi_class_type_infoE"
          ],
          [
            11103,
            "_ZTVN10__cxxabiv123__fundamental_type_infoE"
          ],
          [
            11147,
            "_ZTVN10__cxxabiv129__pointer_to_member_type_infoE"
          ],
          [
            11197,
            "__cxa_pure_virtual"
          ],
          [
            11216,
            "__dynamic_cast"
          ],
          [
            11238,
            "_ZNKSt10bad_typeid4whatEv"
          ],
          [
            11264,
            "_ZNKSt8bad_cast4whatEv"
          ],
          [
            11532,
            "_ZTISt10bad_typeid"
          ],
          [
            11551,
            "_ZTISt8bad_cast"
          ],
          [
            11567,
            "_ZTSSt10bad_typeid"
          ],
          [
            11586,
            "_ZTSSt8bad_cast"
          ],
          [
            11602,
            "_ZTSSt9type_info"
          ],
          [
            11619,
            "_ZTVSt10bad_typeid"
          ],
          [
            11638,
            "_ZTVSt8bad_cast"
          ],
          [
            11654,
            "_ZTVSt9type_info"
          ],
          [
            11671,
            "__cxa_deleted_virtual"
          ],
          [
            11693,
            "__gnu_Unwind_Find_exidx"
          ],
          [
            11717,
            "raise"
          ],
          [
            11723,
            "_edata"
          ],
          [
            11730,
            "__bss_start"
          ],
          [
            11747,
            "liblog.so"
          ],
          [
            47910,
            "4 HA"
          ],
          [
            54657,
            "00008"
          ],
          [
            55042,
            "40YF"
          ],
          [
            59496,
            "mP\tPP\tqP\tPPPPPP"
          ],
          [
            60877,
            "i F.IyD"
          ],
          [
            61134,
            "D2 F"
          ],
          [
            61279,
            "ipG\rHxD@ipG\nHxD"
          ],
          [
            62976,
            "GNLC"
          ],
          [
            67630,
            "/HxD"
          ],
          [
            72173,
            "FAFJF"
          ],
          [
            73042,
            "FQFJF"
          ],
          [
            74926,
            "AF2F"
          ],
          [
            75292,
            "XF1FRF"
          ],
          [
            82760,
            "wide",
            "BBBBBBBBBB\u0026Bx"
          ],
          [
            87077,
            "F1FO"
          ],
          [
            93352,
            "HFAF"
          ],
          [
            95129,
            "F F1FBF"
          ],
          [
            95424,
            "FQFBF"
          ],
          [
            96236,
            "Hhrh"
          ],
          [
            96557,
            "1FRFCFHF"
          ],
          [
            97228,
            "AFJF"
          ],
          [
            97796,
            "NF4F"
          ],
          [
            103071,
            "J0FAF"
          ],
          [
            103232,
            "Vhbh"
          ],
          [
            104053,
            "HxDpGvHxDpGuHxDpGuHxDpGtHxDpGtHxDpGsHxDpGsHxDpGrHxDpGrHxDpGqHxDpGqHxDpGpHxDpGpHxDpG`HxDpGnHxDpGmHxDpGmHxDpGlHxDpGlHxDpGkHxDpGkHx"
          ],
          [
            104500,
            "PHxDpGPHxDpGOHxDpGOHxDpG"
          ],
          [
            106803,
            "F0F9F"
          ],
          [
            119160,
            "length=%d; index=%d"
          ],
          [
            119183,
            "bad packed switch magic"
          ],
          [
            119207,
            "bad sparse switch magic"
          ],
          [
            119231,
            "bad array data magic"
          ]
        ],
        "sz": 140940,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "XGETBV instruction bytes",
            "e": [
              "0F 01 D0"
            ],
            "i": "metadata/binary/instruction::xgetbv-instr",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.39"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 41.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 396.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libnmmvm.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 41.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 4.93"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 2748.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 396.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 41.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "bad array data magic",
              "bad packed switch magic",
              "bad sparse switch magic"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libnmmvm.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.65"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 396.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 41.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 287.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 396.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "5dd81b231db7265ea9ab894fab14aa0ad4cb73746936f7392f10993b5797094d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libnmmvm.so",
        "type": "elf"
      },
      {
        "f": "O₄(AsDy₂ErS)H₃(CmFDb)Md₂(Bi₄He)",
        "x": 5,
        "dp": 1,
        "id": 18,
        "is": [
          "",
          "cxa_finalize",
          "cxa_atexit",
          "AndroidBitmap_getInfo",
          "AndroidBitmap_lockPixels",
          "stack_chk_fail",
          "stack_chk_guard",
          "AndroidBitmap_unlockPixels",
          "free",
          "strncmp",
          "strlen",
          "fclose",
          "calloc",
          "errno",
          "strncat_chk",
          "strerror_r",
          "fseeko",
          "fopen",
          "stat",
          "ftell",
          "malloc",
          "dup",
          "close",
          "eventfd",
          "lseek64",
          "fdopen",
          "fstat",
          "fread",
          "memcmp",
          "memcpy_chk",
          "realloc",
          "clock_gettime",
          "pthread_mutex_lock",
          "glTexImage2D",
          "pthread_mutex_unlock",
          "glTexSubImage2D",
          "pthread_mutex_init",
          "pthread_create",
          "pthread_mutex_destroy",
          "poll",
          "pthread_join",
          "eventfd_read",
          "pthread_cond_init",
          "ANativeWindow_fromSurface",
          "ANativeWindow_setBuffersGeometry",
          "ANativeWindow_release",
          "ANativeWindow_lock",
          "ANativeWindow_unlockAndPost",
          "pthread_cond_wait",
          "pthread_cond_signal",
          "pthread_cond_destroy",
          "eventfd_write",
          "memcpy",
          "memset"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libjnigraphics.so",
              "libandroid.so",
              "libGLESv2.so",
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libpl_droidsonroids_gif.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 2.0,
            "nx_enabled": true,
            "needed_libs": 7.0,
            "dynrel_count": 10.0,
            "dynsym_count": 99.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 52.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 9.0,
            "section_header_count": 26.0,
            "load_segment_max_p_memsz": 28112.0,
            "load_segment_max_p_filesz": 28112.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 30172.0
          },
          "binary": {
            "code_size": 18108.0,
            "func_count": 77.0,
            "has_overlay": true,
            "code_entropy": 5.4,
            "data_entropy": 2.61,
            "export_count": 45.0,
            "func_density": 4.35,
            "import_count": 54.0,
            "overlay_size": 1040.0,
            "string_count": 187.0,
            "avg_func_size": 630.57,
            "overlay_ratio": 0.03,
            "section_count": 25.0,
            "avg_complexity": 7.1,
            "import_density": 3.05,
            "max_complexity": 72.0,
            "string_density": 10.57,
            "overall_entropy": 3.18,
            "overlay_entropy": 2.18,
            "avg_basic_blocks": 12.56,
            "avg_section_size": 1151.44,
            "dependency_count": 7.0,
            "entropy_variance": 1.55,
            "avg_string_length": 26.37,
            "complexity_per_kb": 0.4,
            "max_string_length": 282.0,
            "avg_string_entropy": 3.33,
            "code_to_data_ratio": 1.7,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.57,
            "total_basic_blocks": 967.0,
            "func_analysis_depth": 1.0,
            "high_entropy_strings": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 28.32,
            "high_complexity_funcs": 1.0,
            "largest_section_ratio": 0.57,
            "provenance_id_present": true,
            "sentence_string_count": 31.0,
            "sentence_string_ratio": 0.17,
            "behavioral_import_ratio": 0.04,
            "nonstandard_section_name_count": 6.0
          }
        },
        "ss": [
          [
            352,
            "Android"
          ],
          [
            364,
            "r25c"
          ],
          [
            428,
            "9519653"
          ],
          [
            3513,
            "__cxa_finalize"
          ],
          [
            3528,
            "__cxa_atexit"
          ],
          [
            3541,
            "AndroidBitmap_getInfo"
          ],
          [
            3563,
            "AndroidBitmap_lockPixels"
          ],
          [
            3588,
            "__stack_chk_fail"
          ],
          [
            3605,
            "__stack_chk_guard"
          ],
          [
            3623,
            "AndroidBitmap_unlockPixels"
          ],
          [
            3650,
            "Java_pl_droidsonroids_gif_GifInfoHandle_renderFrame"
          ],
          [
            3702,
            "Java_pl_droidsonroids_gif_GifInfoHandle_reset"
          ],
          [
            3748,
            "Java_pl_droidsonroids_gif_GifInfoHandle_setSpeedFactor"
          ],
          [
            3803,
            "Java_pl_droidsonroids_gif_GifInfoHandle_seekToTime"
          ],
          [
            3854,
            "Java_pl_droidsonroids_gif_GifInfoHandle_seekToFrame"
          ],
          [
            3906,
            "Java_pl_droidsonroids_gif_GifInfoHandle_saveRemainder"
          ],
          [
            3960,
            "Java_pl_droidsonroids_gif_GifInfoHandle_restoreRemainder"
          ],
          [
            4017,
            "free"
          ],
          [
            4022,
            "strncmp"
          ],
          [
            4030,
            "strlen"
          ],
          [
            4037,
            "Java_pl_droidsonroids_gif_GifInfoHandle_free"
          ],
          [
            4082,
            "fclose"
          ],
          [
            4089,
            "calloc"
          ],
          [
            4096,
            "__errno"
          ],
          [
            4104,
            "__strncat_chk"
          ],
          [
            4118,
            "strerror_r"
          ],
          [
            4129,
            "fseeko"
          ],
          [
            4136,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openFile"
          ],
          [
            4185,
            "fopen"
          ],
          [
            4202,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openByteArray"
          ],
          [
            4256,
            "malloc"
          ],
          [
            4263,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openDirectByteBuffer"
          ],
          [
            4324,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openStream"
          ],
          [
            4375,
            "Java_pl_droidsonroids_gif_GifInfoHandle_extractNativeFileDescriptor"
          ],
          [
            4447,
            "close"
          ],
          [
            4453,
            "Java_pl_droidsonroids_gif_GifInfoHandle_createTempNativeFileDescriptor"
          ],
          [
            4524,
            "eventfd"
          ],
          [
            4532,
            "Java_pl_droidsonroids_gif_GifInfoHandle_openNativeFileDescriptor"
          ],
          [
            4597,
            "lseek64"
          ],
          [
            4605,
            "fdopen"
          ],
          [
            4618,
            "fread"
          ],
          [
            4624,
            "memcmp"
          ],
          [
            4631,
            "__memcpy_chk"
          ],
          [
            4644,
            "realloc"
          ],
          [
            4652,
            "Java_pl_droidsonroids_gif_GifInfoHandle_setOptions"
          ],
          [
            4714,
            "clock_gettime"
          ],
          [
            4728,
            "JNI_OnUnload"
          ],
          [
            4741,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getComment"
          ],
          [
            4792,
            "Java_pl_droidsonroids_gif_GifInfoHandle_isAnimationCompleted"
          ],
          [
            4853,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getLoopCount"
          ],
          [
            4906,
            "Java_pl_droidsonroids_gif_GifInfoHandle_setLoopCount"
          ],
          [
            4959,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getDuration"
          ],
          [
            5011,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getSourceLength"
          ],
          [
            5067,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getCurrentPosition"
          ],
          [
            5126,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getMetadataByteCount"
          ],
          [
            5187,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getAllocationByteCount"
          ],
          [
            5250,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getNativeErrorCode"
          ],
          [
            5309,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getCurrentLoop"
          ],
          [
            5364,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getCurrentFrameIndex"
          ],
          [
            5425,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getSavedState"
          ],
          [
            5479,
            "Java_pl_droidsonroids_gif_GifInfoHandle_restoreSavedState"
          ],
          [
            5537,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getFrameDuration"
          ],
          [
            5594,
            "Java_pl_droidsonroids_gif_GifInfoHandle_isOpaque"
          ],
          [
            5643,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getWidth"
          ],
          [
            5692,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getHeight"
          ],
          [
            5742,
            "Java_pl_droidsonroids_gif_GifInfoHandle_getNumberOfFrames"
          ],
          [
            5800,
            "Java_pl_droidsonroids_gif_GifInfoHandle_glTexImage2D"
          ],
          [
            5853,
            "pthread_mutex_lock"
          ],
          [
            5872,
            "glTexImage2D"
          ],
          [
            5885,
            "pthread_mutex_unlock"
          ],
          [
            5906,
            "Java_pl_droidsonroids_gif_GifInfoHandle_glTexSubImage2D"
          ],
          [
            5962,
            "glTexSubImage2D"
          ],
          [
            5978,
            "Java_pl_droidsonroids_gif_GifInfoHandle_initTexImageDescriptor"
          ],
          [
            6041,
            "pthread_mutex_init"
          ],
          [
            6060,
            "Java_pl_droidsonroids_gif_GifInfoHandle_startDecoderThread"
          ],
          [
            6119,
            "pthread_create"
          ],
          [
            6134,
            "pthread_mutex_destroy"
          ],
          [
            6161,
            "Java_pl_droidsonroids_gif_GifInfoHandle_stopDecoderThread"
          ],
          [
            6219,
            "pthread_join"
          ],
          [
            6232,
            "Java_pl_droidsonroids_gif_GifInfoHandle_seekToFrameGL"
          ],
          [
            6286,
            "Java_pl_droidsonroids_gif_GifInfoHandle_bindSurface"
          ],
          [
            6338,
            "eventfd_read"
          ],
          [
            6351,
            "pthread_cond_init"
          ],
          [
            6369,
            "ANativeWindow_fromSurface"
          ],
          [
            6395,
            "ANativeWindow_setBuffersGeometry"
          ],
          [
            6428,
            "ANativeWindow_release"
          ],
          [
            6450,
            "ANativeWindow_lock"
          ],
          [
            6469,
            "ANativeWindow_unlockAndPost"
          ],
          [
            6497,
            "pthread_cond_wait"
          ],
          [
            6515,
            "pthread_cond_signal"
          ],
          [
            6535,
            "pthread_cond_destroy"
          ],
          [
            6556,
            "Java_pl_droidsonroids_gif_GifInfoHandle_postUnbindSurface"
          ],
          [
            6614,
            "eventfd_write"
          ],
          [
            6628,
            "memcpy"
          ],
          [
            6635,
            "memset"
          ],
          [
            6642,
            "libc.so"
          ],
          [
            6650,
            "LIBC"
          ],
          [
            6655,
            "libjnigraphics.so"
          ],
          [
            6673,
            "libandroid.so"
          ],
          [
            6687,
            "libGLESv2.so"
          ],
          [
            6700,
            "liblog.so"
          ],
          [
            6710,
            "libm.so"
          ],
          [
            6718,
            "libdl.so"
          ],
          [
            6727,
            "libpl_droidsonroids_gif.so"
          ],
          [
            8768,
            "GIFVER"
          ],
          [
            8775,
            "java/lang/NullPointerException"
          ],
          [
            8806,
            "read"
          ],
          [
            8819,
            "Render mutex destroy failed"
          ],
          [
            8848,
            "Could not write to eventfd"
          ],
          [
            8876,
            "(ILjava/lang/String;)V"
          ],
          [
            8899,
            "NewGlobalRef failed"
          ],
          [
            8919,
            "Failed to allocate native memory"
          ],
          [
            8958,
            "Could not poll on eventfd"
          ],
          [
            8985,
            "Slurp mutex initialization failed"
          ],
          [
            9020,
            "\u003cinit\u003e"
          ],
          [
            9027,
            "Eventfd creation failed"
          ],
          [
            9069,
            "Could not create state array"
          ],
          [
            9098,
            "Lock pixels error"
          ],
          [
            9116,
            "Could not read from eventfd"
          ],
          [
            9149,
            "Display loop poll failed"
          ],
          [
            9175,
            "GetStringUTFChars failed"
          ],
          [
            9200,
            "Slurp condition variable initialization failed"
          ],
          [
            9250,
            "Eventfd close failed"
          ],
          [
            9272,
            "CLOCK_MONOTONIC_RAW is not present"
          ],
          [
            9307,
            "Input source is null"
          ],
          [
            9328,
            "Lock pixels error, bad parameter"
          ],
          [
            9361,
            "Unlock pixels error"
          ],
          [
            9381,
            "pl/droidsonroids/gif/GifIOException"
          ],
          [
            9417,
            "Slurp thread creation failed"
          ],
          [
            9447,
            "Lock pixels error, JNI exception"
          ],
          [
            9480,
            "ANIMEXTS1.0"
          ],
          [
            9492,
            "Buffers geometry setting failed"
          ],
          [
            9525,
            "Unlock pixels error, bad parameter"
          ],
          [
            9560,
            "java/lang/OutOfMemoryError"
          ],
          [
            9587,
            "GifIOThread"
          ],
          [
            9599,
            "Animation end poll failed"
          ],
          [
            9626,
            "Slurp mutex destroy failed"
          ],
          [
            9654,
            "Unlock pixels error, JNI exception"
          ],
          [
            9689,
            "java/lang/RuntimeException"
          ],
          [
            9716,
            "Slurp thread join failed"
          ],
          [
            9741,
            "reset"
          ],
          [
            9747,
            "Render cond  destroy failed"
          ],
          [
            9776,
            "Could not get bitmap info"
          ],
          [
            9802,
            "Render mutex initialization failed"
          ],
          [
            9838,
            "Render condition variable initialization failed"
          ],
          [
            9887,
            "Slurp cond destroy failed"
          ],
          [
            9940,
            "NETSCAPE2.0"
          ],
          [
            9952,
            "descriptor"
          ],
          [
            10335,
            "F F1F"
          ],
          [
            12052,
            "/IyD\th\th"
          ],
          [
            12210,
            "ZFKF"
          ],
          [
            14901,
            "F%JCF%I"
          ],
          [
            15726,
            "7J F"
          ],
          [
            15797,
            "/IxD"
          ],
          [
            18213,
            "B1F8"
          ],
          [
            21773,
            "!!!\"\"\"###$$$%%%\u0026\u0026\u0026'''((()))***+++,,,---...///000111222333444555666777888999:::;;;\u003c\u003c\u003c===\u003e\u003e\u003e???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKK"
          ],
          [
            23554,
            "HFAFA"
          ],
          [
            23650,
            "HFAF"
          ],
          [
            24708,
            "PFAF"
          ],
          [
            24836,
            "HFQFZF"
          ],
          [
            25206,
            "HFZF"
          ],
          [
            28652,
            "Linker: LLD 14.0.7"
          ],
          [
            28671,
            "Android (9352603, based on r450784d1) clang version 14.0.7 (https://android.googlesource.com/toolchain/llvm-project 4c603efb0cca"
          ],
          [
            28835,
            "aeabi"
          ],
          [
            28891,
            ".fini_array"
          ],
          [
            28903,
            ".ARM.exidx"
          ],
          [
            28914,
            ".text"
          ],
          [
            28920,
            ".got"
          ],
          [
            28925,
            ".comment"
          ],
          [
            28934,
            ".note.android.ident"
          ],
          [
            28954,
            ".got.plt"
          ],
          [
            28963,
            ".rel.plt"
          ],
          [
            28972,
            ".bss"
          ],
          [
            28977,
            ".ARM.attributes"
          ],
          [
            28993,
            ".dynstr"
          ],
          [
            29001,
            ".gnu.version_r"
          ],
          [
            29016,
            ".data.rel.ro"
          ],
          [
            29029,
            ".rel.dyn"
          ],
          [
            29038,
            ".gnu.version"
          ],
          [
            29051,
            ".dynsym"
          ],
          [
            29059,
            ".gnu.hash"
          ],
          [
            29069,
            ".note.gnu.build-id"
          ],
          [
            29088,
            ".dynamic"
          ],
          [
            29097,
            ".ARM.extab"
          ],
          [
            29108,
            ".shstrtab"
          ],
          [
            29118,
            ".rodata"
          ],
          [
            29126,
            ".data"
          ]
        ],
        "sz": 30172,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libpl_droidsonroids_gif.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1027",
            "d": "Unusual character combinations",
            "e": [
              "!!!\"\"\"###$$$%%%\u0026\u0026\u0026'''((()))***+++"
            ],
            "i": "micro-behaviors/data/encode/xor::unusual-character-combinations",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseeko"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "loop poll"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.33"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 54.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 77.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libpl_droidsonroids_gif.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "d": "Duplicate file descriptor",
            "e": [
              "dup"
            ],
            "i": "micro-behaviors/process/fd/dup::dup",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 54.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "Java_pl_droidsonroids_gif_GifInfoHandle_setSpeedFactor"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-77",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 7.10"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 77.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk"
            ],
            "i": "metadata/hardening/build::memcpy-chk",
            "l": 3
          },
          {
            "d": "poll() I/O multiplexing",
            "e": [
              "poll"
            ],
            "i": "micro-behaviors/communications/socket/multiplex::poll-multiplex",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 54.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 54.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libpl_droidsonroids_gif.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.18"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 77.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 54.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "stat",
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "Eventfd close failed",
              "close",
              "fclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 45.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Tiny C string section ratio",
            "e": [
              " = 0.0% of total (0 / 30172 bytes)"
            ],
            "i": "metadata/binary/section/metrics::tiny-cstring-section",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "fstat",
              "stat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "de6fd2e2880618ef2a566a2390173b5816065487a4ecf080cf52e15a1eb90182",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libpl_droidsonroids_gif.so",
        "type": "elf"
      },
      {
        "f": "O₆(AlAs₄CaDy₂Er₂S)H₃(Cm₂Cr₂Db₂)Md(Bi₃)",
        "x": 8,
        "dp": 1,
        "id": 19,
        "is": [
          "",
          "cxa_finalize",
          "cxa_atexit",
          "strchr",
          "stack_chk_fail",
          "stack_chk_guard",
          "ALooper_forThread",
          "strncpy",
          "write",
          "malloc",
          "ALooper_acquire",
          "pipe",
          "ALooper_addFd",
          "strlen",
          "free",
          "read",
          "time",
          "android_log_print",
          "aeabi_memclr",
          "strcat",
          "snprintf",
          "vsnprintf",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "aeabi_memclr4",
          "pthread_mutex_destroy",
          "aeabi_memcpy4",
          "strncmp",
          "pthread_mutex_init",
          "clock_gettime",
          "strcpy",
          "sprintf",
          "pthread_cond_signal",
          "gettimeofday",
          "pthread_cond_timedwait",
          "aeabi_memclr8",
          "pthread_create",
          "pthread_cond_init",
          "srand48",
          "lrand48",
          "usleep",
          "pthread_join",
          "pthread_cond_destroy",
          "aeabi_memcpy",
          "strstr",
          "calloc",
          "realloc",
          "abort",
          "isprint",
          "pthread_cond_broadcast",
          "pthread_cond_wait",
          "aeabi_memmove4",
          "aeabi_memset8",
          "aeabi_memmove",
          "memcpy",
          "aeabi_memset",
          "aeabi_memcpy8",
          "fprintf",
          "fflush",
          "sF",
          "fwrite",
          "aeabi_memset4",
          "qsort",
          "clock",
          "fputc",
          "memcmp",
          "gmtime_r",
          "strdup",
          "raise",
          "fclose",
          "fopen",
          "rename",
          "fseek",
          "ftell",
          "fread",
          "errno",
          "strerror",
          "close",
          "open",
          "lseek",
          "fsync",
          "remove",
          "gnu_Unwind_Find_exidx",
          "cxa_begin_cleanup",
          "cxa_type_match",
          "cxa_call_unexpected"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "libz.so",
              "liblog.so",
              "libandroid.so",
              "libstdc++.so",
              "libc.so",
              "libm.so",
              "libdl.so"
            ],
            "soname": "libsls_producer.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 3.0,
            "nx_enabled": true,
            "needed_libs": 7.0,
            "dynrel_count": 109.0,
            "dynsym_count": 827.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 432.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "init_array_count": 1.0,
            "program_header_count": 8.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 586044.0,
            "load_segment_max_p_filesz": 586044.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 591456.0
          },
          "binary": {
            "code_size": 503161.0,
            "func_count": 726.0,
            "has_overlay": true,
            "code_entropy": 5.64,
            "data_entropy": 3.1,
            "export_count": 736.0,
            "func_density": 1.48,
            "import_count": 86.0,
            "overlay_size": 1082.0,
            "string_count": 1364.0,
            "avg_func_size": 14791.22,
            "overlay_ratio": 0.0,
            "section_count": 26.0,
            "avg_complexity": 20.15,
            "import_density": 0.18,
            "max_complexity": 657.0,
            "string_density": 2.78,
            "aliased_exports": 23.0,
            "overall_entropy": 3.34,
            "overlay_entropy": 2.36,
            "avg_basic_blocks": 40.26,
            "avg_section_size": 22653.96,
            "dependency_count": 7.0,
            "entropy_variance": 1.72,
            "avg_string_length": 26.24,
            "complexity_per_kb": 0.04,
            "max_string_length": 277.0,
            "avg_string_entropy": 3.35,
            "code_to_data_ratio": 5.86,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.84,
            "total_basic_blocks": 29231.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 24.71,
            "high_complexity_funcs": 93.0,
            "largest_section_ratio": 0.84,
            "provenance_id_present": true,
            "sentence_string_count": 182.0,
            "sentence_string_ratio": 0.13,
            "behavioral_import_ratio": 0.06,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            320,
            "Android"
          ],
          [
            332,
            "r16b"
          ],
          [
            396,
            "4479499"
          ],
          [
            13729,
            "__cxa_finalize"
          ],
          [
            13744,
            "LIBC"
          ],
          [
            13749,
            "libc.so"
          ],
          [
            13757,
            "libsls_producer.so"
          ],
          [
            13776,
            "__cxa_atexit"
          ],
          [
            13789,
            "os_http_post"
          ],
          [
            13809,
            "_ZN7_JNIEnv19CallStaticIntMethodEP7_jclassP10_jmethodIDz"
          ],
          [
            13866,
            "__stack_chk_fail"
          ],
          [
            13883,
            "__stack_chk_guard"
          ],
          [
            13906,
            "__aeabi_unwind_cpp_pr1"
          ],
          [
            13940,
            "ALooper_forThread"
          ],
          [
            13958,
            "log_set_http_post_func"
          ],
          [
            13981,
            "main_thread_looper"
          ],
          [
            14000,
            "on_log_send_done"
          ],
          [
            14017,
            "strncpy"
          ],
          [
            14025,
            "write"
          ],
          [
            14031,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_create_1log_1producer"
          ],
          [
            14108,
            "malloc"
          ],
          [
            14115,
            "ALooper_acquire"
          ],
          [
            14131,
            "pipe"
          ],
          [
            14136,
            "ALooper_addFd"
          ],
          [
            14150,
            "create_log_producer"
          ],
          [
            14170,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_get_1log_1producer_1client"
          ],
          [
            14252,
            "get_log_producer_client"
          ],
          [
            14276,
            "__aeabi_unwind_cpp_pr0"
          ],
          [
            14299,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_log_1producer_1client_1add_1log_1with_1len"
          ],
          [
            14397,
            "strlen"
          ],
          [
            14404,
            "log_producer_client_add_log_with_len_time_int32"
          ],
          [
            14452,
            "free"
          ],
          [
            14457,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_destroy_1log_1producer"
          ],
          [
            14535,
            "destroy_log_producer"
          ],
          [
            14556,
            "Java_com_aliyun_sls_android_producer_LogProducerClient_log_1producer_1client_1add_1log_1with_1len_1time_1int32"
          ],
          [
            14667,
            "read"
          ],
          [
            14672,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_create_1log_1producer_1config"
          ],
          [
            14757,
            "create_log_producer_config"
          ],
          [
            14784,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1debug"
          ],
          [
            14860,
            "aos_log_set_level"
          ],
          [
            14878,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1endpoint"
          ],
          [
            14970,
            "log_producer_config_set_endpoint"
          ],
          [
            15003,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1project"
          ],
          [
            15094,
            "log_producer_config_set_project"
          ],
          [
            15126,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1logstore"
          ],
          [
            15218,
            "log_producer_config_set_logstore"
          ],
          [
            15251,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1id"
          ],
          [
            15345,
            "log_producer_config_set_access_id"
          ],
          [
            15379,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1key"
          ],
          [
            15474,
            "log_producer_config_set_access_key"
          ],
          [
            15509,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1reset_1security_1token"
          ],
          [
            15610,
            "log_producer_config_reset_security_token"
          ],
          [
            15651,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1topic"
          ],
          [
            15740,
            "log_producer_config_set_topic"
          ],
          [
            15770,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1add_1tag"
          ],
          [
            15857,
            "log_producer_config_add_tag"
          ],
          [
            15885,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1packet_1log_1bytes"
          ],
          [
            15987,
            "log_producer_config_set_packet_log_bytes"
          ],
          [
            16028,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1packet_1log_1count"
          ],
          [
            16130,
            "log_producer_config_set_packet_log_count"
          ],
          [
            16171,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1packet_1timeout"
          ],
          [
            16270,
            "log_producer_config_set_packet_timeout"
          ],
          [
            16309,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1max_1buffer_1limit"
          ],
          [
            16411,
            "log_producer_config_set_max_buffer_limit"
          ],
          [
            16452,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1send_1thread_1count"
          ],
          [
            16555,
            "log_producer_config_set_send_thread_count"
          ],
          [
            16597,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent"
          ],
          [
            16691,
            "log_producer_config_set_persistent"
          ],
          [
            16726,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1file_1path"
          ],
          [
            16832,
            "log_producer_config_set_persistent_file_path"
          ],
          [
            16877,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1force_1flush"
          ],
          [
            16985,
            "log_producer_config_set_persistent_force_flush"
          ],
          [
            17032,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1max_1file_1count"
          ],
          [
            17144,
            "log_producer_config_set_persistent_max_file_count"
          ],
          [
            17194,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1max_1file_1size"
          ],
          [
            17305,
            "log_producer_config_set_persistent_max_file_size"
          ],
          [
            17354,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1persistent_1max_1log_1count"
          ],
          [
            17465,
            "log_producer_config_set_persistent_max_log_count"
          ],
          [
            17514,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1using_1http"
          ],
          [
            17609,
            "log_producer_config_set_using_http"
          ],
          [
            17644,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1net_1interface"
          ],
          [
            17742,
            "log_producer_config_set_net_interface"
          ],
          [
            17780,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1connect_1timeout_1sec"
          ],
          [
            17885,
            "log_producer_config_set_connect_timeout_sec"
          ],
          [
            17929,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1send_1timeout_1sec"
          ],
          [
            18031,
            "log_producer_config_set_send_timeout_sec"
          ],
          [
            18072,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1destroy_1flusher_1wait_1sec"
          ],
          [
            18183,
            "log_producer_config_set_destroy_flusher_wait_sec"
          ],
          [
            18232,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1destroy_1sender_1wait_1sec"
          ],
          [
            18342,
            "log_producer_config_set_destroy_sender_wait_sec"
          ],
          [
            18390,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1compress_1type"
          ],
          [
            18488,
            "log_producer_config_set_compress_type"
          ],
          [
            18526,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1ntp_1time_1offset"
          ],
          [
            18627,
            "log_producer_config_set_ntp_time_offset"
          ],
          [
            18667,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1max_1log_1delay_1time"
          ],
          [
            18772,
            "log_producer_config_set_max_log_delay_time"
          ],
          [
            18815,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1drop_1delay_1log"
          ],
          [
            18915,
            "log_producer_config_set_drop_delay_log"
          ],
          [
            18954,
            "set_get_time_unix_func"
          ],
          [
            18977,
            "time"
          ],
          [
            18982,
            "g_time_func"
          ],
          [
            18994,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1get_1time_1unix_1func"
          ],
          [
            19099,
            "log_set_get_time_unix_func"
          ],
          [
            19126,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1is_1valid"
          ],
          [
            19214,
            "log_producer_config_is_valid"
          ],
          [
            19243,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1persistent_1config_1is_1enabled"
          ],
          [
            19345,
            "log_producer_persistent_config_is_enabled"
          ],
          [
            19387,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1drop_1unauthorized_1log"
          ],
          [
            19494,
            "log_producer_config_set_drop_unauthorized_log"
          ],
          [
            19540,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1source"
          ],
          [
            19630,
            "log_producer_config_set_source"
          ],
          [
            19661,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1callback_1from_1sender_1thread"
          ],
          [
            19775,
            "log_producer_config_set_callback_from_sender_thread"
          ],
          [
            19827,
            "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1http_1header_1inject"
          ],
          [
            19931,
            "sls_set_android_http_inject"
          ],
          [
            19959,
            "aos_print_log_android"
          ],
          [
            19981,
            "__android_log_print"
          ],
          [
            20001,
            "log_set_http_header_inject_func"
          ],
          [
            20033,
            "log_set_http_header_release_inject_func"
          ],
          [
            20073,
            "sls_android_set_http_inject_func"
          ],
          [
            20106,
            "sls_android_set_http_release_inject_func"
          ],
          [
            20147,
            "__aeabi_memclr"
          ],
          [
            20162,
            "strcat"
          ],
          [
            20169,
            "sls_destroy_http_injector"
          ],
          [
            20195,
            "aos_log_level"
          ],
          [
            20209,
            "aos_log_format"
          ],
          [
            20224,
            "snprintf"
          ],
          [
            20233,
            "vsnprintf"
          ],
          [
            20243,
            "LOG_GET_TIME"
          ],
          [
            20256,
            "LOG_OS_HttpPost"
          ],
          [
            20272,
            "log_http_inject_headers"
          ],
          [
            20296,
            "log_http_release_inject_headers"
          ],
          [
            20328,
            "log_producer_env_init"
          ],
          [
            20350,
            "sls_log_init"
          ],
          [
            20363,
            "LOG_PRODUCER_OK"
          ],
          [
            20379,
            "LOG_PRODUCER_INVALID"
          ],
          [
            20400,
            "log_producer_env_destroy"
          ],
          [
            20425,
            "sls_log_destroy"
          ],
          [
            20441,
            "create_log_producer_manager"
          ],
          [
            20469,
            "create_log_persistent_manager"
          ],
          [
            20499,
            "log_persistent_manager_recover"
          ],
          [
            20530,
            "on_log_persistent_manager_send_done_uuid"
          ],
          [
            20571,
            "destroy_log_producer_manager"
          ],
          [
            20600,
            "destroy_log_producer_config"
          ],
          [
            20628,
            "destroy_log_persistent_manager"
          ],
          [
            20659,
            "log_producer_client_network_recover"
          ],
          [
            20695,
            "log_producer_client_add_log"
          ],
          [
            20723,
            "log_producer_client_add_log_with_len"
          ],
          [
            20760,
            "log_producer_manager_add_log"
          ],
          [
            20789,
            "pthread_mutex_lock"
          ],
          [
            20808,
            "add_log_full"
          ],
          [
            20821,
            "clear_log_tag"
          ],
          [
            20835,
            "log_persistent_manager_is_buffer_enough"
          ],
          [
            20875,
            "pthread_mutex_unlock"
          ],
          [
            20896,
            "log_persistent_manager_save_log"
          ],
          [
            20928,
            "log_producer_manager_add_log_raw"
          ],
          [
            20961,
            "LOG_PRODUCER_DROP_ERROR"
          ],
          [
            20985,
            "log_producer_client_add_raw_log_buffer"
          ],
          [
            21024,
            "log_producer_manager_send_raw_buffer"
          ],
          [
            21061,
            "log_producer_client_add_log_raw"
          ],
          [
            21093,
            "log_producer_client_add_log_with_array"
          ],
          [
            21132,
            "log_producer_manager_add_log_with_array"
          ],
          [
            21172,
            "add_log_full_v2"
          ],
          [
            21188,
            "log_producer_client_add_log_with_len_int32"
          ],
          [
            21231,
            "log_producer_manager_add_log_int32"
          ],
          [
            21266,
            "add_log_full_int32"
          ],
          [
            21285,
            "is_log_producer_result_ok"
          ],
          [
            21311,
            "LOG_PRODUCER_WRITE_ERROR"
          ],
          [
            21336,
            "LOG_PRODUCER_SEND_NETWORK_ERROR"
          ],
          [
            21368,
            "LOG_PRODUCER_SEND_QUOTA_ERROR"
          ],
          [
            21398,
            "LOG_PRODUCER_SEND_UNAUTHORIZED"
          ],
          [
            21429,
            "LOG_PRODUCER_SEND_SERVER_ERROR"
          ],
          [
            21460,
            "LOG_PRODUCER_SEND_DISCARD_ERROR"
          ],
          [
            21492,
            "LOG_PRODUCER_SEND_TIME_ERROR"
          ],
          [
            21521,
            "LOG_PRODUCER_SEND_EXIT_BUFFERED"
          ],
          [
            21553,
            "LOG_PRODUCER_PARAMETERS_INVALID"
          ],
          [
            21585,
            "LOG_PRODUCER_PERSISTENT_ERROR"
          ],
          [
            21615,
            "__aeabi_memclr4"
          ],
          [
            21631,
            "log_sdsfree"
          ],
          [
            21643,
            "pthread_mutex_destroy"
          ],
          [
            21665,
            "log_producer_config_set_flush_interval"
          ],
          [
            21704,
            "log_producer_config_set_log_queue_interval"
          ],
          [
            21747,
            "log_sdsnewEmpty"
          ],
          [
            21763,
            "log_sdscpylen"
          ],
          [
            21777,
            "__aeabi_memcpy4"
          ],
          [
            21793,
            "log_sdsnew"
          ],
          [
            21804,
            "strncmp"
          ],
          [
            21812,
            "pthread_mutex_init"
          ],
          [
            21831,
            "log_producer_config_get_security"
          ],
          [
            21864,
            "_generate_pack_id_timestamp"
          ],
          [
            21892,
            "clock_gettime"
          ],
          [
            21906,
            "_get_pack_id"
          ],
          [
            21926,
            "sprintf"
          ],
          [
            21934,
            "log_mbedtls_md5"
          ],
          [
            21950,
            "_try_flush_loggroup"
          ],
          [
            21970,
            "log_queue_push"
          ],
          [
            21985,
            "log_group_destroy"
          ],
          [
            22003,
            "pthread_cond_signal"
          ],
          [
            22023,
            "log_producer_flush_thread"
          ],
          [
            22049,
            "gettimeofday"
          ],
          [
            22062,
            "pthread_cond_timedwait"
          ],
          [
            22085,
            "add_tag"
          ],
          [
            22093,
            "add_topic"
          ],
          [
            22103,
            "add_source"
          ],
          [
            22114,
            "add_pack_id"
          ],
          [
            22126,
            "serialize_to_proto_buf_with_malloc_lz4"
          ],
          [
            22165,
            "serialize_to_proto_buf_with_malloc_zstd"
          ],
          [
            22205,
            "serialize_to_proto_buf_with_malloc_no_lz4"
          ],
          [
            22247,
            "create_log_producer_send_param"
          ],
          [
            22278,
            "__aeabi_uldivmod"
          ],
          [
            22295,
            "log_queue_trypop"
          ],
          [
            22312,
            "log_queue_isfull"
          ],
          [
            22329,
            "log_producer_send_data"
          ],
          [
            22352,
            "__aeabi_memclr8"
          ],
          [
            22368,
            "__aeabi_idiv"
          ],
          [
            22381,
            "log_queue_create"
          ],
          [
            22398,
            "pthread_create"
          ],
          [
            22413,
            "pthread_cond_init"
          ],
          [
            22431,
            "srand48"
          ],
          [
            22439,
            "lrand48"
          ],
          [
            22447,
            "log_producer_send_thread"
          ],
          [
            22472,
            "_push_last_loggroup"
          ],
          [
            22492,
            "usleep"
          ],
          [
            22499,
            "log_queue_size"
          ],
          [
            22514,
            "pthread_join"
          ],
          [
            22527,
            "pthread_cond_destroy"
          ],
          [
            22548,
            "log_queue_destroy"
          ],
          [
            22566,
            "log_producer_send_fun"
          ],
          [
            22588,
            "log_group_create"
          ],
          [
            22605,
            "__aeabi_memcpy"
          ],
          [
            22620,
            "get_log_time"
          ],
          [
            22633,
            "fix_log_time"
          ],
          [
            22646,
            "add_log_raw"
          ],
          [
            22658,
            "_rebuild_time_with_lz4buf"
          ],
          [
            22684,
            "LOG_LZ4_decompress_safe"
          ],
          [
            22708,
            "fix_log_group_time"
          ],
          [
            22727,
            "LOG_LZ4_compressBound"
          ],
          [
            22749,
            "LOG_LZ4_compress_default"
          ],
          [
            22774,
            "_rebuild_time_with_zstdbuf"
          ],
          [
            22801,
            "LOG_ZSTD_getFrameContentSize"
          ],
          [
            22830,
            "LOG_ZSTD_decompress"
          ],
          [
            22850,
            "log_queue_pop"
          ],
          [
            22864,
            "post_logs_from_lz4buf_with_config"
          ],
          [
            22898,
            "log_producer_on_send_done"
          ],
          [
            22924,
            "post_log_result_destroy"
          ],
          [
            22948,
            "free_lz4_log_buf"
          ],
          [
            22965,
            "AosStatusToResult"
          ],
          [
            22990,
            "LOGE_TIME_EXPIRED"
          ],
          [
            23008,
            "LOGE_SERVER_BUSY"
          ],
          [
            23025,
            "LOGE_INTERNAL_SERVER_ERROR"
          ],
          [
            23052,
            "LOGE_UNAUTHORIZED"
          ],
          [
            23070,
            "LOGE_WRITE_QUOTA_EXCEED"
          ],
          [
            23094,
            "LOGE_SHARD_WRITE_QUOTA_EXCEED"
          ],
          [
            23124,
            "__aeabi_ldivmod"
          ],
          [
            23140,
            "log_sdslen"
          ],
          [
            23151,
            "log_sdsavail"
          ]
        ],
        "sz": 591456,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "token keyword",
            "e": [
              "token"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::token",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF overall entropy is low",
            "e": [
              "binary.overall_entropy = 3.34"
            ],
            "i": "metadata/binary/metrics/structural::firmware-overall-entropy-low",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "a": "T1555",
            "c": 0.800000011920929,
            "d": "EA Origin config target",
            "e": [
              "eate_1log_1producer_1config",
              "eate producer client success, config",
              "ead, config",
              "eate_log_producer_config"
            ],
            "i": "objectives/credential-access/gaming/launcher::ea-origin-config-target",
            "l": 1
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "References to worker pools",
            "e": [
              "ThreadPool"
            ],
            "i": "micro-behaviors/process/create/workers::worker-pool",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.4000000059604645,
            "d": "Seeks to position in file",
            "e": [
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::fseek-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary is 500KB+",
            "e": [
              "libsls_producer.so"
            ],
            "i": "metadata/binary/metrics/threshold::large-binary-500k",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "jb\nFliO"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.35"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 726.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "libstdc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libsls_producer.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read stream (fread)",
            "e": [
              "fread"
            ],
            "i": "micro-behaviors/fs/file/read::fread",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "a": "T1055",
            "c": 0.25,
            "d": "Repeated 0x07 code constant (possible PROT_RWX)",
            "e": [
              "07 00 00 00"
            ],
            "i": "micro-behaviors/mem/protect/modify::rwx-prot-bytes",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "remove"
            ],
            "i": "micro-behaviors/fs/file/delete::remove",
            "l": 3
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 29231.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 26.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF has 500 or more strings",
            "e": [
              "binary.string_count = 1364.00"
            ],
            "i": "metadata/binary/metrics/structural::firmware-string-count-500-plus",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "log_producer_config_set_access_id",
              "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1id",
              "Java_com_aliyun_sls_android_producer_LogProducerConfig_log_1producer_1config_1set_1access_1key",
              "log_producer_config_set_access_key"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_CCtx type",
            "e": [
              "LOG_ZSTD_CCtx_setFParams",
              "LOG_ZSTD_CCtxParams_reset",
              "LOG_ZSTD_CCtx_setParams",
              "LOG_ZSTD_CCtx_getParameter",
              "LOG_ZSTD_CCtx_setParametersUsingCCtxParams",
              "LOG_ZSTD_CCtx_loadDictionary_byReference",
              "LOG_ZSTD_CCtx_loadDictionary_advanced",
              "LOG_ZSTD_CCtx_setPledgedSrcSize",
              "LOG_ZSTD_CCtxParams_getParameter",
              "LOG_ZSTD_CCtx_loadDictionary",
              "LOG_ZSTD_CCtxParams_setParameter",
              "LOG_ZSTD_CCtx_refCDict",
              "LOG_ZSTD_CCtx_setCParams",
              "LOG_ZSTD_CCtx_setParameter",
              "LOG_ZSTD_CCtxParams_init_advanced",
              "LOG_ZSTD_CCtxParams_init"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-cctx",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "64-bit division helper symbol",
            "e": [
              "divdi3"
            ],
            "i": "objectives/anti-static/obfuscation/control-flow/logic::complex-arithmetic-div",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 726.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "log_mbedtls_md5_clone",
              "sym.log_mbedtls_md5_clone"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Code section comprises most binary",
            "e": [
              "binary.largest_section_ratio = 0.84"
            ],
            "i": "metadata/binary/section/content::dominant",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LZ4_compress function",
            "e": [
              "LOG_LZ4_compress_default",
              "LOG_LZ4_compress",
              "LOG_LZ4_compressBound",
              "LOG_LZ4_compress_continue",
              "sym.LOG_LZ4_compress_fast_extState",
              "LOG_LZ4_compress_destSize",
              "LOG_LZ4_compress_fast_extState",
              "LOG_LZ4_compress_limitedOutput_withState",
              "LOG_LZ4_compress_fast_continue",
              "LOG_LZ4_compress_fast_force",
              "LOG_LZ4_compress_limitedOutput_continue",
              "sym.LOG_LZ4_compress_fast",
              "LOG_LZ4_compress_limitedOutput",
              "LOG_LZ4_compress_fast",
              "LOG_LZ4_compress_withState",
              "LOG_LZ4_compress_forceExtDict"
            ],
            "i": "micro-behaviors/data/compress/library::lz4-compress",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "output keyword",
            "e": [
              "Operation made no progress over multiple calls, due to output buffer being full"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::output",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_decompress function",
            "e": [
              "LOG_ZSTD_decompressBlock_internal",
              "LOG_ZSTD_decompress_usingDDict",
              "LOG_ZSTD_decompressContinue",
              "LOG_ZSTD_decompress",
              "sym.LOG_ZSTD_decompressBound",
              "LOG_ZSTD_decompressionMargin",
              "LOG_ZSTD_decompressBegin",
              "LOG_ZSTD_decompressBlock",
              "LOG_ZSTD_decompressBegin_usingDict",
              "LOG_ZSTD_decompressDCtx",
              "LOG_ZSTD_decompressStream",
              "LOG_ZSTD_decompressBlock_deprecated",
              "LOG_ZSTD_decompressBound",
              "LOG_ZSTD_decompressBegin_usingDDict",
              "LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_decompress_usingDict"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-decompress",
            "l": 3
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "[sender] invalid send param, magic num not found, num 0x%x",
              "invalid send param, magic num not found"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "fwrite",
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ZSTD_compress function",
            "e": [
              "LOG_ZSTD_compressBound",
              "LOG_ZSTD_compressBlock_doubleFast_extDict",
              "LOG_ZSTD_compressBlock_lazy2",
              "LOG_ZSTD_compressBlock_lazy",
              "LOG_ZSTD_compressBlock_greedy_extDict",
              "LOG_ZSTD_compressBlock_fast",
              "LOG_ZSTD_compressRleLiteralsBlock",
              "LOG_ZSTD_compressLiterals",
              "LOG_ZSTD_compressBlock_btultra",
              "LOG_ZSTD_compressBlock_doubleFast",
              "LOG_ZSTD_compressBlock_fast_extDict",
              "LOG_ZSTD_compressSuperBlock",
              "LOG_ZSTD_compressBlock_greedy",
              "LOG_ZSTD_compressBlock_btopt",
              "LOG_ZSTD_compressBlock_btultra2",
              "LOG_ZSTD_compressBlock_btlazy2"
            ],
            "i": "micro-behaviors/data/compress/library::zstd-compress",
            "l": 3
          },
          {
            "d": "Content-Type header string",
            "e": [
              "Content-Type:application/x-protobuf"
            ],
            "i": "micro-behaviors/communications/http/request/client::content-type-header",
            "l": 1
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "LZ4_decompress function",
            "e": [
              "sym.LOG_LZ4_decompress_safe_partial",
              "LOG_LZ4_decompress_fast_continue",
              "LOG_LZ4_decompress_safe",
              "LOG_LZ4_decompress_safe_usingDict",
              "LOG_LZ4_decompress_fast_usingDict",
              "LOG_LZ4_decompress_safe_partial",
              "LOG_LZ4_decompress_safe_withPrefix64k",
              "sym.LOG_LZ4_decompress_fast",
              "LOG_LZ4_decompress_fast_withPrefix64k",
              "sym.LOG_LZ4_decompress_safe_usingDict",
              "sym.LOG_LZ4_decompress_fast_continue",
              "sym.LOG_LZ4_decompress_safe",
              "sym.LOG_LZ4_decompress_safe_continue",
              "LOG_LZ4_decompress_fast",
              "LOG_LZ4_decompress_safe_forceExtDict",
              "LOG_LZ4_decompress_safe_continue"
            ],
            "i": "micro-behaviors/data/compress/library::lz4-decompress",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libsls_producer.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.949999988079071,
            "d": "MD5 hashing functions",
            "e": [
              "sym.log_mbedtls_md5_update",
              "sym.log_mbedtls_md5_starts",
              "md5_to_string",
              "sym.log_mbedtls_md5_process",
              "log_mbedtls_md5_starts",
              "sym.log_mbedtls_md5_init",
              "log_mbedtls_md5_process",
              "log_mbedtls_md5_init",
              "log_mbedtls_md5_clone",
              "log_mbedtls_md5_finish",
              "log_mbedtls_md5",
              "log_mbedtls_md5_update",
              "sym.log_mbedtls_md5_clone",
              "sym.log_mbedtls_md5_finish",
              "sym.log_mbedtls_md5",
              "sym.md5_to_string"
            ],
            "i": "micro-behaviors/crypto/hash/digest::md5",
            "l": 3
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current calendar time (seconds)",
            "e": [
              "time"
            ],
            "i": "micro-behaviors/time/query::time",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.34"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 726.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 1000 or more strings",
            "e": [
              "binary.string_count = 1364.00"
            ],
            "i": "metadata/binary/metrics/threshold::string-count-1000-plus",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 86.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "LOG_ZSTD_compressEnd_public",
              "LOG_ZSTD_compressContinue_public"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-4",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.20000000298023224,
            "d": "Convert time to UTC time",
            "e": [
              "sym.imp.gmtime_r",
              "gmtime_r"
            ],
            "i": "micro-behaviors/time/query::gmtime",
            "l": 2
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "log_ring_file_close",
              "close",
              "fclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 736.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "ZSTD core decompression support",
            "e": [
              "sym.LOG_ZSTD_initDStream_usingDDict",
              "sym.LOG_ZSTD_decompressStream",
              "sym.LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_decompressStream",
              "LOG_ZSTD_initDStream",
              "sym.LOG_ZSTD_initDStream_usingDict",
              "LOG_ZSTD_createDStream",
              "LOG_ZSTD_initDStream_usingDDict",
              "LOG_ZSTD_createDStream_advanced",
              "LOG_ZSTD_decompressStream_simpleArgs",
              "LOG_ZSTD_initDStream_usingDict",
              "sym.LOG_ZSTD_initDStream"
            ],
            "i": "micro-behaviors/data/embedded/runtime::zstd-core-support",
            "l": 3
          },
          {
            "c": 0.20000000298023224,
            "d": "pipe keyword",
            "e": [
              "pipe"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::pipe",
            "l": 1
          },
          {
            "a": "T1071.001",
            "d": "Authorization header",
            "e": [
              "Authorization:LOG %s:%s"
            ],
            "i": "micro-behaviors/communications/http/headers::auth-header",
            "l": 3,
            "m": "C0002"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.8500000238418579,
            "d": "Extremely large average function size",
            "e": [
              "binary.avg_func_size = 14791.22"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::massive-code-blob",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1027.002",
            "c": 0.6000000238418579,
            "d": "Many high complexity functions (\u003e80)",
            "e": [
              "binary.high_complexity_funcs = 93.00"
            ],
            "i": "objectives/anti-static/obfuscation/binary-metrics/shape::many-complex-functions",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 726.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has many functions",
            "e": [
              "binary.func_count = 726.00"
            ],
            "i": "objectives/anti-static/pack/entropy::large-function-surface",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "High string count over 1000",
            "e": [
              "binary.string_count = 1364.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-string-count-1000",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "File content manipulation (read/write/seek)",
            "e": [
              "write",
              "fwrite",
              "fseek"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Large export PE with low overall entropy",
            "e": [
              "binary.func_count = 726.00",
              "binary.overall_entropy = 3.34"
            ],
            "i": "objectives/anti-static/pack/entropy::high-entropy-data-pe-lib-context",
            "l": 1
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "clock_gettime",
              "usleep",
              "gettimeofday"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          }
        ],
        "sha": "abf12472acab048df85a7c2bf67caede4ccb496fc4e1ac78eb238e6c883ce9f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libsls_producer.so",
        "type": "elf"
      },
      {
        "f": "O₅(AsCDyErS)H₂(DsDb)Md(Bi₃)",
        "x": 4,
        "dp": 1,
        "id": 20,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "aeabi_memcpy",
          "stack_chk_fail",
          "stack_chk_guard",
          "memchr",
          "memcmp",
          "pthread_key_create",
          "strlen",
          "strstr",
          "pthread_setspecific",
          "pthread_getspecific",
          "vsnprintf",
          "wcslen",
          "strncpy",
          "gettid",
          "vsnprintf_chk",
          "aeabi_memclr",
          "aeabi_memmove",
          "free",
          "realloc",
          "aeabi_memclr8",
          "android_log_write",
          "posix_memalign",
          "malloc",
          "abort",
          "pthread_once",
          "pthread_cond_broadcast",
          "pthread_cond_wait",
          "pthread_mutex_lock",
          "pthread_mutex_unlock",
          "syscall",
          "calloc",
          "assert2",
          "sF",
          "fputc",
          "vasprintf",
          "vfprintf",
          "aeabi_memcpy4",
          "aeabi_memmove4",
          "islower",
          "isxdigit",
          "snprintf",
          "raise",
          "fprintf",
          "fflush",
          "dladdr",
          "strcmp",
          "gnu_Unwind_Find_exidx"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libm.so",
              "libdl.so",
              "libc.so"
            ],
            "soname": "libspMVUpzW.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 3.0,
            "nx_enabled": true,
            "needed_libs": 4.0,
            "dynrel_count": 1381.0,
            "dynsym_count": 568.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 175.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 1.0,
            "program_header_count": 8.0,
            "section_header_count": 28.0,
            "load_segment_max_p_memsz": 133362.0,
            "load_segment_max_p_filesz": 133362.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 145052.0
          },
          "binary": {
            "code_size": 65636.0,
            "func_count": 458.0,
            "has_overlay": true,
            "code_entropy": 5.43,
            "data_entropy": 3.89,
            "export_count": 473.0,
            "func_density": 7.15,
            "import_count": 50.0,
            "overlay_size": 1123.0,
            "string_count": 767.0,
            "avg_func_size": 1127.44,
            "overlay_ratio": 0.01,
            "section_count": 27.0,
            "avg_complexity": 5.39,
            "import_density": 0.78,
            "max_complexity": 255.0,
            "string_density": 11.97,
            "aliased_exports": 76.0,
            "overall_entropy": 3.61,
            "overlay_entropy": 2.37,
            "avg_basic_blocks": 7.6,
            "avg_section_size": 5234.59,
            "dependency_count": 4.0,
            "entropy_variance": 1.59,
            "avg_string_length": 27.45,
            "complexity_per_kb": 0.08,
            "max_string_length": 443.0,
            "wide_string_count": 1.0,
            "avg_string_entropy": 3.5,
            "code_to_data_ratio": 0.87,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.44,
            "total_basic_blocks": 3482.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 33.44,
            "high_complexity_funcs": 6.0,
            "largest_section_ratio": 0.44,
            "provenance_id_present": true,
            "sentence_string_count": 41.0,
            "sentence_string_ratio": 0.05,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            320,
            "Android"
          ],
          [
            332,
            "r21e"
          ],
          [
            396,
            "7075529"
          ],
          [
            9585,
            "__cxa_atexit"
          ],
          [
            9598,
            "LIBC"
          ],
          [
            9603,
            "libc.so"
          ],
          [
            9611,
            "libspMVUpzW.so"
          ],
          [
            9626,
            "__cxa_finalize"
          ],
          [
            9652,
            "JNI_OnUnload"
          ],
          [
            9689,
            "_Z16LoadStaticMethodP7_JNIEnv"
          ],
          [
            9719,
            "_Z21setupOPPOWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            9781,
            "_Z21setupVivoWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            9841,
            "_Z22setupRedMiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            9904,
            "_Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            9966,
            "_Z23setupRealmeWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            10030,
            "_Z23setupXiaomiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            10092,
            "_Z24setupOnePlusWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            10155,
            "_Z24setupSamsungWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
          ],
          [
            10290,
            "_Z25setupMotoRolaWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ihhi"
          ],
          [
            10413,
            "_ZN13ScopedJstringC1EP7_JNIEnvP8_jstring"
          ],
          [
            10454,
            "_ZN13ScopedJstringD1Ev"
          ],
          [
            10477,
            "_ZN7_JNIEnv14CallVoidMethodEP8_jobjectP10_jmethodIDz"
          ],
          [
            10605,
            "_ZN8VarCache9SingletonEv"
          ],
          [
            10698,
            "_ZNK13ScopedJstring7GetCharEv"
          ],
          [
            10728,
            "_ZNKSt6__ndk121__basic_string_commonILb1EE20__throw_length_errorEv"
          ],
          [
            10795,
            "_ZNSt11logic_errorC2EPKc"
          ],
          [
            10820,
            "_ZNSt12length_errorD1Ev"
          ],
          [
            10844,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2IDnEEPKc"
          ],
          [
            10921,
            "_ZTISt12length_error"
          ],
          [
            10942,
            "_ZTISt9exception"
          ],
          [
            10959,
            "_ZTVSt12length_error"
          ],
          [
            10993,
            "__aeabi_memcpy"
          ],
          [
            11008,
            "__cxa_allocate_exception"
          ],
          [
            11033,
            "__cxa_begin_catch"
          ],
          [
            11051,
            "__cxa_end_catch"
          ],
          [
            11067,
            "__cxa_free_exception"
          ],
          [
            11088,
            "__cxa_throw"
          ],
          [
            11100,
            "__gxx_personality_v0"
          ],
          [
            11121,
            "__stack_chk_fail"
          ],
          [
            11138,
            "__stack_chk_guard"
          ],
          [
            11156,
            "g_env_key"
          ],
          [
            11166,
            "hideEnable"
          ],
          [
            11177,
            "memchr"
          ],
          [
            11184,
            "memcmp"
          ],
          [
            11191,
            "pthread_key_create"
          ],
          [
            11210,
            "strlen"
          ],
          [
            11224,
            "pthread_setspecific"
          ],
          [
            11244,
            "KNullAtuoBuffer"
          ],
          [
            11260,
            "pthread_getspecific"
          ],
          [
            11280,
            "_ZN10AutoBuffer10AllocWriteEjb"
          ],
          [
            11311,
            "_ZN10AutoBuffer11AddCapacityEj"
          ],
          [
            11342,
            "vsnprintf"
          ],
          [
            11397,
            "_ZN10AutoBuffer4ReadEPvj"
          ],
          [
            11481,
            "wcslen"
          ],
          [
            11512,
            "strncpy"
          ],
          [
            11520,
            "_ZN10AutoBuffer5WriteENS_5TSeekEPKvj"
          ],
          [
            11557,
            "_ZN10AutoBuffer5WriteEPKvj"
          ],
          [
            11584,
            "_ZN10AutoBuffer5WriteERKS_"
          ],
          [
            11611,
            "_ZN10AutoBuffer5WriteERKlPKvj"
          ],
          [
            11641,
            "_ZN10AutoBuffer5WriteERKlRKS_"
          ],
          [
            11671,
            "gettid"
          ],
          [
            11678,
            "_ZN10AutoBuffer5WriteERlPKvj"
          ],
          [
            11707,
            "_ZN10AutoBuffer5WriteERlRKS_"
          ],
          [
            11736,
            "_ZN10AutoBuffer6AttachEPvj"
          ],
          [
            11763,
            "_ZN10AutoBuffer6AttachERS_"
          ],
          [
            11790,
            "_ZN10AutoBuffer6DetachEPj"
          ],
          [
            11816,
            "_ZN10AutoBuffer6LengthElj"
          ],
          [
            11895,
            "__vsnprintf_chk"
          ],
          [
            11911,
            "_ZN10AutoBufferC1EPKvjj"
          ],
          [
            11935,
            "_ZN10AutoBufferC1EPvjj"
          ],
          [
            11978,
            "_ZN10AutoBufferC2EPKvjj"
          ],
          [
            12002,
            "_ZN10AutoBufferC2EPvjj"
          ],
          [
            12131,
            "_ZNK10AutoBuffer4ReadERKlPvj"
          ],
          [
            12247,
            "_ZNK10AutoBuffer6LengthEv"
          ],
          [
            12299,
            "_ZNK10AutoBuffer8CapacityEv"
          ],
          [
            12327,
            "_ZNK10AutoBuffer9PosLengthEv"
          ],
          [
            12356,
            "__aeabi_memclr"
          ],
          [
            12371,
            "__aeabi_memmove"
          ],
          [
            12387,
            "free"
          ],
          [
            12392,
            "realloc"
          ],
          [
            12481,
            "_Z15JNU_FreeJstringP7_JNIEnvP8_jstring"
          ],
          [
            12520,
            "_Z15JNU_JObject2MapP7_JNIEnvP8_jobject"
          ],
          [
            12593,
            "_Z17JNU_Jstring2WcharP7_JNIEnvP8_jstring"
          ],
          [
            12667,
            "_Z18JNU_FreeJbyteArrayP7_JNIEnvP11_jbyteArray"
          ],
          [
            12760,
            "_Z19JNU_Wstring2JstringP7_JNIEnvRKNSt6__ndk112basic_stringIwNS1_11char_traitsIwEENS1_9allocatorIwEEEE"
          ],
          [
            12913,
            "_Z21JNU_Buffer2JbyteArrayP7_JNIEnvPKvj"
          ],
          [
            12952,
            "_Z21JNU_Buffer2JbyteArrayP7_JNIEnvRK10AutoBuffer"
          ],
          [
            13001,
            "_Z21JNU_JbyteArray2BufferP7_JNIEnvP11_jbyteArrayR10AutoBuffer"
          ],
          [
            13127,
            "_Z26JNU_CallMethodByMethodInfoP7_JNIEnvP8_jobject13JniMethodInfoz"
          ],
          [
            13368,
            "_Z32JNU_CallStaticMethodByMethodInfoP7_JNIEnv13JniMethodInfoz"
          ],
          [
            13430,
            "_ZN7_JNIEnv16CallObjectMethodEP8_jobjectP10_jmethodIDz"
          ],
          [
            13485,
            "_ZN7_JNIEnv9NewObjectEP7_jclassP10_jmethodIDz"
          ],
          [
            13780,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE21__grow_by_and_replaceEjjjjjjPKc"
          ],
          [
            13880,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6assignEPKcj"
          ],
          [
            13959,
            "_ZNSt6__ndk127__tree_balance_after_insertIPNS_16__tree_node_baseIPvEEEEvT_S5_"
          ],
          [
            14037,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_EENS_19__map_value_compareIS7"
          ],
          [
            14281,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEES7_EENS_19__map_value_compareIS7"
          ],
          [
            14479,
            "__aeabi_memclr8"
          ],
          [
            14495,
            "__android_log_write"
          ],
          [
            14583,
            "_ZSt9terminatev"
          ],
          [
            14599,
            "_ZN13ScopedJstringC1EP7_JNIEnvPKc"
          ],
          [
            14633,
            "_ZN13ScopedJstringC2EP7_JNIEnvP8_jstring"
          ],
          [
            14674,
            "_ZN13ScopedJstringC2EP7_JNIEnvPKc"
          ],
          [
            14708,
            "_ZN13ScopedJstringD2Ev"
          ],
          [
            14731,
            "_ZNK13ScopedJstring11SafeGetCharEv"
          ],
          [
            14766,
            "_ZNK13ScopedJstring7GetJstrEv"
          ],
          [
            14796,
            "_Z15AddNativeMethodP15JNINativeMethodi"
          ],
          [
            14901,
            "_ZN13JniMethodInfoC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_S8_"
          ],
          [
            14998,
            "_ZN8VarCache10CacheClassEPKcP7_jclass"
          ],
          [
            15226,
            "_ZN8VarCache9instance_E"
          ],
          [
            15318,
            "_ZNK13JniMethodInfoltERKS_"
          ],
          [
            15345,
            "_ZNSt6__ndk112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_"
          ],
          [
            15420,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE12__find_equalIS1_EERPNS_16__tree_node_baseIPvEENS_21__tree"
          ],
          [
            15632,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE25__emplace_unique_key_argsIS1_JS1_EEENS_4pairINS_15__tree_"
          ],
          [
            15814,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE30__emplace_hint_unique_key_argsIS1_JRKS1_EEENS_15__tree_it"
          ],
          [
            16027,
            "_ZNSt6__ndk16__treeI13JniMethodInfoNS_4lessIS1_EENS_9allocatorIS1_EEE7destroyEPNS_11__tree_nodeIS1_PvEE"
          ],
          [
            16131,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEP7_jclassEENS_19__map_value_comp"
          ],
          [
            16381,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEP7_jclassEENS_19__map_value_comp"
          ],
          [
            16618,
            "_ZNSt6__ndk16__treeINS_12__value_typeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEP7_jclassEENS_19__map_value_comp"
          ],
          [
            16822,
            "_ZNSt6__ndk16__treeINS_12__value_typeIP7_jclassNS_4listI12field_structNS_9allocatorIS5_EEEEEENS_19__map_value_compareIS3_S9_NS_4"
          ],
          [
            17012,
            "_ZNSt6__ndk16__treeINS_12__value_typeIP7_jclassNS_4listI13method_structNS_9allocatorIS5_EEEEEENS_19__map_value_compareIS3_S9_NS_"
          ],
          [
            17203,
            "_ZNSt6__ndk16__treeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_4lessIS6_EENS4_IS6_EEE12__find_equalIS6_EERPNS_"
          ],
          [
            17387,
            "_ZNSt6__ndk16__treeINS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_4lessIS6_EENS4_IS6_EEE7destroyEPNS_11__tree_nod"
          ],
          [
            17525,
            "_ZNSt6__ndk19allocatorINS_11__tree_nodeI13JniMethodInfoPvEEE9constructIS2_JRKS2_EEEvPT_DpOT0_"
          ],
          [
            17619,
            "__cxa_guard_acquire"
          ],
          [
            17639,
            "__cxa_guard_release"
          ],
          [
            17659,
            "posix_memalign"
          ],
          [
            17674,
            "malloc"
          ],
          [
            17681,
            "abort"
          ],
          [
            17727,
            "_ZSt15get_new_handlerv"
          ],
          [
            17750,
            "_ZSt17__throw_bad_allocv"
          ],
          [
            17775,
            "_ZSt7nothrow"
          ],
          [
            17788,
            "_ZTISt9bad_alloc"
          ],
          [
            18038,
            "_ZnajRKSt9nothrow_t"
          ],
          [
            18079,
            "_ZnajSt11align_val_tRKSt9nothrow_t"
          ],
          [
            18114,
            "_ZnwjRKSt9nothrow_t"
          ],
          [
            18155,
            "_ZnwjSt11align_val_tRKSt9nothrow_t"
          ],
          [
            18190,
            "_ZNSt11logic_errorC1EPKc"
          ],
          [
            18215,
            "_ZNSt11logic_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            18306,
            "_ZNSt11logic_errorC1ERKS_"
          ],
          [
            18332,
            "_ZNSt11logic_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            18423,
            "_ZNSt11logic_errorC2ERKS_"
          ],
          [
            18449,
            "_ZNSt11logic_erroraSERKS_"
          ],
          [
            18475,
            "_ZNSt13runtime_errorC1EPKc"
          ],
          [
            18502,
            "_ZNSt13runtime_errorC1ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            18595,
            "_ZNSt13runtime_errorC1ERKS_"
          ],
          [
            18623,
            "_ZNSt13runtime_errorC2EPKc"
          ],
          [
            18650,
            "_ZNSt13runtime_errorC2ERKNSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE"
          ],
          [
            18743,
            "_ZNSt13runtime_errorC2ERKS_"
          ],
          [
            18771,
            "_ZNSt13runtime_erroraSERKS_"
          ],
          [
            18799,
            "_ZNSt9exceptionD2Ev"
          ],
          [
            18819,
            "_ZTVSt11logic_error"
          ],
          [
            18839,
            "_ZTVSt13runtime_error"
          ],
          [
            18861,
            "_ZN10__cxxabiv119__getExceptionClassEPK21_Unwind_Control_Block"
          ],
          [
            18924,
            "_ZN10__cxxabiv119__setExceptionClassEP21_Unwind_Control_Blocky"
          ],
          [
            18987,
            "_ZN10__cxxabiv121__isOurExceptionClassEPK21_Unwind_Control_Block"
          ],
          [
            19052,
            "_ZSt13get_terminatev"
          ],
          [
            19073,
            "_ZSt14get_unexpectedv"
          ],
          [
            19095,
            "__cxa_allocate_dependent_exception"
          ],
          [
            19130,
            "__cxa_begin_cleanup"
          ],
          [
            19150,
            "__cxa_call_unexpected"
          ],
          [
            19172,
            "__cxa_current_exception_type"
          ],
          [
            19201,
            "__cxa_current_primary_exception"
          ],
          [
            19233,
            "__cxa_decrement_exception_refcount"
          ],
          [
            19268,
            "__cxa_end_cleanup"
          ],
          [
            19286,
            "__cxa_free_dependent_exception"
          ],
          [
            19317,
            "__cxa_get_exception_ptr"
          ],
          [
            19341,
            "__cxa_get_globals"
          ],
          [
            19359,
            "__cxa_get_globals_fast"
          ],
          [
            19382,
            "__cxa_increment_exception_refcount"
          ],
          [
            19417,
            "__cxa_rethrow"
          ],
          [
            19431,
            "__cxa_rethrow_primary_exception"
          ],
          [
            19463,
            "__cxa_uncaught_exception"
          ],
          [
            19488,
            "__cxa_uncaught_exceptions"
          ],
          [
            19514,
            "pthread_once"
          ],
          [
            19527,
            "__cxa_guard_abort"
          ],
          [
            19545,
            "pthread_cond_broadcast"
          ],
          [
            19568,
            "pthread_cond_wait"
          ],
          [
            19586,
            "pthread_mutex_lock"
          ],
          [
            19605,
            "pthread_mutex_unlock"
          ],
          [
            19626,
            "syscall"
          ],
          [
            19634,
            "_ZSt10unexpectedv"
          ],
          [
            19652,
            "_ZSt15set_new_handlerPFvvE"
          ],
          [
            19679,
            "__cxa_new_handler"
          ],
          [
            19697,
            "__cxa_terminate_handler"
          ],
          [
            19721,
            "__cxa_unexpected_handler"
          ],
          [
            19746,
            "_ZNSt13bad_exceptionD1Ev"
          ],
          [
            19771,
            "_ZTISt13bad_exception"
          ],
          [
            19793,
            "_ZTVSt13bad_exception"
          ],
          [
            19815,
            "calloc"
          ],
          [
            19822,
            "_ZNKSt13bad_exception4whatEv"
          ],
          [
            19851,
            "_ZNKSt20bad_array_new_length4whatEv"
          ],
          [
            19887,
            "_ZNKSt9bad_alloc4whatEv"
          ],
          [
            19911,
            "_ZNKSt9exception4whatEv"
          ],
          [
            19935,
            "_ZNSt13bad_exceptionD0Ev"
          ],
          [
            19960,
            "_ZNSt13bad_exceptionD2Ev"
          ],
          [
            19985,
            "_ZNSt20bad_array_new_lengthC1Ev"
          ],
          [
            20017,
            "_ZNSt20bad_array_new_lengthC2Ev"
          ],
          [
            20049,
            "_ZNSt20bad_array_new_lengthD0Ev"
          ],
          [
            20081,
            "_ZNSt20bad_array_new_lengthD1Ev"
          ],
          [
            20113,
            "_ZNSt20bad_array_new_lengthD2Ev"
          ],
          [
            20205,
            "_ZNSt9exceptionD0Ev"
          ],
          [
            20225,
            "_ZNSt9exceptionD1Ev"
          ],
          [
            20245,
            "_ZTISt20bad_array_new_length"
          ],
          [
            20274,
            "_ZTSSt13bad_exception"
          ],
          [
            20296,
            "_ZTSSt20bad_array_new_length"
          ],
          [
            20325,
            "_ZTSSt9bad_alloc"
          ],
          [
            20342,
            "_ZTSSt9exception"
          ],
          [
            20359,
            "_ZTVN10__cxxabiv117__class_type_infoE"
          ],
          [
            20397,
            "_ZTVN10__cxxabiv120__si_class_type_infoE"
          ],
          [
            20438,
            "_ZTVSt20bad_array_new_length"
          ],
          [
            20467,
            "_ZTVSt9bad_alloc"
          ],
          [
            20484,
            "_ZTVSt9exception"
          ],
          [
            20501,
            "_ZNKSt11logic_error4whatEv"
          ],
          [
            20528,
            "_ZNKSt13runtime_error4whatEv"
          ],
          [
            20557,
            "_ZNSt11logic_errorD0Ev"
          ],
          [
            20580,
            "_ZNSt11logic_errorD1Ev"
          ],
          [
            20603,
            "_ZNSt11logic_errorD2Ev"
          ],
          [
            20626,
            "_ZNSt11range_errorD0Ev"
          ],
          [
            20649,
            "_ZNSt11range_errorD1Ev"
          ],
          [
            20672,
            "_ZNSt11range_errorD2Ev"
          ],
          [
            20695,
            "_ZNSt12domain_errorD0Ev"
          ],
          [
            20719,
            "_ZNSt12domain_errorD1Ev"
          ],
          [
            20743,
            "_ZNSt12domain_errorD2Ev"
          ],
          [
            20767,
            "_ZNSt12length_errorD0Ev"
          ],
          [
            20791,
            "_ZNSt12length_errorD2Ev"
          ],
          [
            20887,
            "_ZNSt13runtime_errorD0Ev"
          ],
          [
            20912,
            "_ZNSt13runtime_errorD1Ev"
          ],
          [
            20937,
            "_ZNSt13runtime_errorD2Ev"
          ],
          [
            20962,
            "_ZNSt14overflow_errorD0Ev"
          ],
          [
            20988,
            "_ZNSt14overflow_errorD1Ev"
          ],
          [
            21014,
            "_ZNSt14overflow_errorD2Ev"
          ],
          [
            21040,
            "_ZNSt15underflow_errorD0Ev"
          ],
          [
            21067,
            "_ZNSt15underflow_errorD1Ev"
          ],
          [
            21094,
            "_ZNSt15underflow_errorD2Ev"
          ],
          [
            21121,
            "_ZNSt16invalid_argumentD0Ev"
          ],
          [
            21149,
            "_ZNSt16invalid_argumentD1Ev"
          ],
          [
            21177,
            "_ZNSt16invalid_argumentD2Ev"
          ],
          [
            21205,
            "_ZTISt11logic_error"
          ],
          [
            21225,
            "_ZTISt11range_error"
          ],
          [
            21245,
            "_ZTISt12domain_error"
          ],
          [
            21266,
            "_ZTISt12out_of_range"
          ],
          [
            21287,
            "_ZTISt13runtime_error"
          ],
          [
            21309,
            "_ZTISt14overflow_error"
          ],
          [
            21332,
            "_ZTISt15underflow_error"
          ],
          [
            21356,
            "_ZTISt16invalid_argument"
          ],
          [
            21381,
            "_ZTSSt11logic_error"
          ],
          [
            21401,
            "_ZTSSt11range_error"
          ],
          [
            21421,
            "_ZTSSt12domain_error"
          ],
          [
            21442,
            "_ZTSSt12length_error"
          ],
          [
            21463,
            "_ZTSSt12out_of_range"
          ],
          [
            21484,
            "_ZTSSt13runtime_error"
          ],
          [
            21506,
            "_ZTSSt14overflow_error"
          ],
          [
            21529,
            "_ZTSSt15underflow_error"
          ],
          [
            21553,
            "_ZTSSt16invalid_argument"
          ],
          [
            21578,
            "_ZTVSt11range_error"
          ]
        ],
        "sz": 145052,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "objectives/evasion/process/injection/memory::asm-manual-import-parsing-cond-2--inline-18287",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "XGETBV instruction bytes",
            "e": [
              "0F 01 D0"
            ],
            "i": "metadata/binary/instruction::xgetbv-instr",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 27.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 200+ exports (large library)",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-200",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.50"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 50.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 458.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "GNU libstdc++ stdlib",
            "e": [
              "__cxxabiv1"
            ],
            "i": "micro-behaviors/dylib/library/libc::libstdcxx-ref",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "__libcpp_"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write single bytes to file",
            "e": [
              "fputc"
            ],
            "i": "micro-behaviors/fs/file/write/direct::fputc",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libx2.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 50.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many exports (\u003e10)",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/metrics/structural::many-exports",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 5.39"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "High basic block count in sparse binary",
            "e": [
              "binary.total_basic_blocks = 3482.00"
            ],
            "i": "metadata/binary/metrics/structural::dense-basic-blocks",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 27.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 9+ exports",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-9",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 100+ exports",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-100",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 458.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Huawei vendor string",
            "e": [
              "_Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii",
              "huawei",
              "Z23setupHuaWeiWindowLayoutP7_JNIEnvP8_jobjectP8_jstringS4_ii"
            ],
            "i": "objectives/command-and-control/channel/p2p::huawei-str",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 50.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 50.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ exports",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-exports-20",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libx2.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.61"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 458.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 50.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 473.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "d": "overflow keyword",
            "e": [
              "ZTISt14overflow_error",
              "_ZTVSt14overflow_error",
              "_ZNSt14overflow_errorD1Ev",
              "_ZTISt14overflow_error",
              "St14overflow_error",
              "_ZNSt14overflow_errorD2Ev",
              "ZTVSt14overflow_error",
              "ZTSSt14overflow_error",
              "ZNSt14overflow_errorD0Ev",
              "ZNSt14overflow_errorD1Ev",
              "ZNSt14overflow_errorD2Ev",
              "_ZTSSt14overflow_error",
              "_ZNSt14overflow_errorD0Ev"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::overflow",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "High function count over 200",
            "e": [
              "binary.func_count = 458.00"
            ],
            "i": "metadata/binary/metrics/threshold::high-function-count-200",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          }
        ],
        "sha": "a7634521d054a20cf29fbe8c79ebe155346e086327c700720a1720fbc1edf6ee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libx2.so",
        "type": "elf"
      },
      {
        "f": "O₇(Er₃Al₂As₂CDy₂LaS)H₆(Ds₂F₄Os₂Po₂CrDb)Md(Bi₃)",
        "x": 49,
        "dp": 1,
        "id": 21,
        "is": [
          "",
          "cxa_atexit",
          "cxa_finalize",
          "gettimeofday",
          "errno",
          "localtime_r",
          "strdup",
          "getpid",
          "free",
          "lseek",
          "close",
          "strlen",
          "open",
          "syscall",
          "memcmp",
          "rename",
          "read",
          "calloc",
          "eventfd",
          "pthread_create",
          "pthread_mutex_lock",
          "closedir",
          "opendir",
          "android_log_print",
          "readdir",
          "siglongjmp",
          "uname",
          "clock_gettime",
          "strncpy",
          "gettid",
          "malloc",
          "prctl",
          "mkdir",
          "waitpid",
          "strcmp",
          "pthread_mutex_unlock",
          "strncmp",
          "exit",
          "clone",
          "isspace",
          "dup2",
          "sigaltstack",
          "pipe2",
          "sigaction",
          "fcntl",
          "strstr",
          "writev",
          "execl",
          "pthread_sigmask",
          "pthread_join",
          "write",
          "dlopen",
          "dlsym",
          "dladdr",
          "dlclose",
          "strtol",
          "access",
          "vsnprintf",
          "readlink",
          "munmap",
          "popen",
          "pclose",
          "fstat",
          "usleep",
          "mmap",
          "pthread_detach",
          "pthread_self",
          "pthread_setname_np",
          "sigsetjmp",
          "fflush",
          "scandir",
          "alphasort",
          "snprintf",
          "unlink",
          "fopen",
          "sscanf",
          "rewind",
          "fclose",
          "fgets",
          "sF",
          "stack_chk_fail",
          "stack_chk_guard",
          "abort",
          "fprintf",
          "aeabi_memclr8",
          "aeabi_memclr",
          "aeabi_memcpy",
          "gnu_Unwind_Find_exidx",
          "raise",
          "aeabi_memcpy4"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libdl.so",
              "libm.so",
              "libc.so"
            ],
            "soname": "libxcrash.so",
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "has_soname": true,
            "note_count": 3.0,
            "nx_enabled": true,
            "needed_libs": 4.0,
            "dynrel_count": 108.0,
            "dynsym_count": 96.0,
            "stack_canary": true,
            "little_endian": true,
            "pltreloc_count": 91.0,
            "build_id_length": 20.0,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "program_header_count": 8.0,
            "section_header_count": 27.0,
            "load_segment_max_p_memsz": 44834.0,
            "load_segment_max_p_filesz": 44834.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 51044.0
          },
          "binary": {
            "code_size": 29336.0,
            "func_count": 85.0,
            "has_overlay": true,
            "code_entropy": 5.49,
            "data_entropy": 3.59,
            "export_count": 6.0,
            "func_density": 2.97,
            "import_count": 90.0,
            "overlay_size": 1083.0,
            "string_count": 458.0,
            "avg_func_size": 319.67,
            "overlay_ratio": 0.02,
            "section_count": 25.0,
            "avg_complexity": 10.92,
            "import_density": 3.14,
            "max_complexity": 163.0,
            "string_density": 15.99,
            "overall_entropy": 3.22,
            "overlay_entropy": 2.19,
            "avg_basic_blocks": 17.93,
            "avg_section_size": 1856.28,
            "dependency_count": 4.0,
            "entropy_variance": 1.52,
            "avg_string_length": 20.49,
            "complexity_per_kb": 0.38,
            "max_string_length": 443.0,
            "avg_string_entropy": 3.11,
            "code_to_data_ratio": 1.72,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.55,
            "total_basic_blocks": 1524.0,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 33.72,
            "high_complexity_funcs": 5.0,
            "largest_section_ratio": 0.55,
            "provenance_id_present": true,
            "sentence_string_count": 95.0,
            "sentence_string_ratio": 0.21,
            "behavioral_import_ratio": 0.08,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            320,
            "Android"
          ],
          [
            332,
            "r21d"
          ],
          [
            396,
            "6528147"
          ],
          [
            2033,
            "__cxa_atexit"
          ],
          [
            2046,
            "LIBC"
          ],
          [
            2051,
            "libc.so"
          ],
          [
            2059,
            "libxcrash.so"
          ],
          [
            2072,
            "__cxa_finalize"
          ],
          [
            2087,
            "gettimeofday"
          ],
          [
            2100,
            "__errno"
          ],
          [
            2108,
            "localtime_r"
          ],
          [
            2120,
            "strdup"
          ],
          [
            2127,
            "getpid"
          ],
          [
            2134,
            "free"
          ],
          [
            2139,
            "lseek"
          ],
          [
            2145,
            "close"
          ],
          [
            2151,
            "strlen"
          ],
          [
            2158,
            "open"
          ],
          [
            2163,
            "syscall"
          ],
          [
            2171,
            "memcmp"
          ],
          [
            2178,
            "rename"
          ],
          [
            2185,
            "read"
          ],
          [
            2190,
            "calloc"
          ],
          [
            2197,
            "eventfd"
          ],
          [
            2205,
            "pthread_create"
          ],
          [
            2220,
            "pthread_mutex_lock"
          ],
          [
            2239,
            "closedir"
          ],
          [
            2248,
            "opendir"
          ],
          [
            2256,
            "__android_log_print"
          ],
          [
            2276,
            "readdir"
          ],
          [
            2284,
            "siglongjmp"
          ],
          [
            2301,
            "clock_gettime"
          ],
          [
            2315,
            "strncpy"
          ],
          [
            2323,
            "gettid"
          ],
          [
            2330,
            "malloc"
          ],
          [
            2349,
            "waitpid"
          ],
          [
            2364,
            "pthread_mutex_unlock"
          ],
          [
            2385,
            "strncmp"
          ],
          [
            2399,
            "clone"
          ],
          [
            2405,
            "isspace"
          ],
          [
            2418,
            "sigaltstack"
          ],
          [
            2430,
            "pipe2"
          ],
          [
            2436,
            "sigaction"
          ],
          [
            2459,
            "writev"
          ],
          [
            2466,
            "execl"
          ],
          [
            2472,
            "pthread_sigmask"
          ],
          [
            2488,
            "pthread_join"
          ],
          [
            2501,
            "write"
          ],
          [
            2507,
            "dlopen"
          ],
          [
            2514,
            "libdl.so"
          ],
          [
            2529,
            "dladdr"
          ],
          [
            2536,
            "dlclose"
          ],
          [
            2544,
            "strtol"
          ],
          [
            2551,
            "access"
          ],
          [
            2558,
            "vsnprintf"
          ],
          [
            2579,
            "readlink"
          ],
          [
            2588,
            "munmap"
          ],
          [
            2595,
            "xc_test_crash"
          ],
          [
            2609,
            "popen"
          ],
          [
            2615,
            "xc_test_call_4"
          ],
          [
            2630,
            "pclose"
          ],
          [
            2637,
            "xc_test_call_3"
          ],
          [
            2652,
            "xc_test_call_2"
          ],
          [
            2667,
            "xc_test_call_1"
          ],
          [
            2688,
            "usleep"
          ],
          [
            2700,
            "pthread_detach"
          ],
          [
            2715,
            "pthread_self"
          ],
          [
            2728,
            "pthread_setname_np"
          ],
          [
            2747,
            "sigsetjmp"
          ],
          [
            2757,
            "fflush"
          ],
          [
            2764,
            "scandir"
          ],
          [
            2772,
            "alphasort"
          ],
          [
            2782,
            "snprintf"
          ],
          [
            2791,
            "unlink"
          ],
          [
            2798,
            "fopen"
          ],
          [
            2804,
            "sscanf"
          ],
          [
            2811,
            "rewind"
          ],
          [
            2818,
            "fclose"
          ],
          [
            2836,
            "__stack_chk_fail"
          ],
          [
            2853,
            "__stack_chk_guard"
          ],
          [
            2871,
            "abort"
          ],
          [
            2877,
            "fprintf"
          ],
          [
            2885,
            "__aeabi_memclr8"
          ],
          [
            2901,
            "__aeabi_memclr"
          ],
          [
            2916,
            "__aeabi_memcpy"
          ],
          [
            2931,
            "__gnu_Unwind_Find_exidx"
          ],
          [
            2955,
            "raise"
          ],
          [
            2961,
            "__aeabi_memcpy4"
          ],
          [
            2977,
            "liblog.so"
          ],
          [
            2987,
            "libm.so"
          ],
          [
            8460,
            "RRRRV"
          ],
          [
            8590,
            "/JzD"
          ],
          [
            8980,
            "F1FO"
          ],
          [
            10671,
            "F F1F"
          ],
          [
            17587,
            "JFCF"
          ],
          [
            17984,
            "QHRIxDyD"
          ],
          [
            18085,
            "BAF8"
          ],
          [
            18157,
            "BIF8"
          ],
          [
            18339,
            "BCF8"
          ],
          [
            18786,
            "YIXF"
          ],
          [
            18835,
            "FXFO"
          ],
          [
            21700,
            "WIHF"
          ],
          [
            21714,
            "UIHF"
          ],
          [
            23838,
            "lI FlJlKyDzD{D"
          ],
          [
            23862,
            "iI FiJiKyDzD{D"
          ],
          [
            24000,
            "FOIOJyDzD"
          ],
          [
            24136,
            "5ISF5J"
          ],
          [
            25482,
            "PFIF"
          ],
          [
            26019,
            "IHFBFyD"
          ],
          [
            27676,
            "7J F1FO"
          ],
          [
            31411,
            "AF2F"
          ],
          [
            31464,
            "GNLC"
          ],
          [
            33047,
            "J0FAF"
          ],
          [
            33208,
            "Vhbh"
          ],
          [
            34029,
            "HxDpGvHxDpGuHxDpGuHxDpGtHxDpGtHxDpGsHxDpGsHxDpGrHxDpGrHxDpGqHxDpGqHxDpGpHxDpGpHxDpG`HxDpGnHxDpGmHxDpGmHxDpGlHxDpGlHxDpGkHxDpGkHx"
          ],
          [
            34476,
            "PHxDpGPHxDpGOHxDpGOHxDpGa("
          ],
          [
            36552,
            ".native.xcrash"
          ],
          [
            36567,
            "%s/tombstone_%020llu_%s__%s%s"
          ],
          [
            36597,
            "placeholder_"
          ],
          [
            36610,
            ".clean.xcrash"
          ],
          [
            36624,
            "/dev/null"
          ],
          [
            36634,
            "crashCallback"
          ],
          [
            36648,
            "(Ljava/lang/String;Ljava/lang/String;ZZLjava/lang/String;)V"
          ],
          [
            36708,
            "meet error sig(%d) while calling ART dump trace"
          ],
          [
            36757,
            "xcrash error:\nset dumpable failed, errno=%d"
          ],
          [
            36759,
            "xcrash error:"
          ],
          [
            36773,
            "set dumpable failed, errno=%d"
          ],
          [
            36805,
            "xcrash error:\nset traceable failed, errno=%d"
          ],
          [
            36821,
            "set traceable failed, errno=%d"
          ],
          [
            36854,
            "xcrash error:\nfork failed, errno=%d"
          ],
          [
            36870,
            "fork failed, errno=%d"
          ],
          [
            36894,
            "xcrash error:\nwaitpid failed, errno=%d"
          ],
          [
            36910,
            "waitpid failed, errno=%d"
          ],
          [
            36937,
            "xcrash error:\nchild terminated normally with non-zero exit status(%d), dumper=%s"
          ],
          [
            36953,
            "child terminated normally with non-zero exit status(%d), dumper=%s"
          ],
          [
            37022,
            "xcrash error:\nchild terminated by a signal(%d)"
          ],
          [
            37038,
            "child terminated by a signal(%d)"
          ],
          [
            37073,
            "xcrash error:\nchild terminated with other error status(%d), dumper=%s"
          ],
          [
            37089,
            "child terminated with other error status(%d), dumper=%s"
          ],
          [
            37159,
            "_ZN3art6Thread14CurrentFromGdbEv"
          ],
          [
            37192,
            "_ZNK3art6Thread13DumpJavaStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE"
          ],
          [
            37272,
            "_ZNK3art6Thread13DumpJavaStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEbb"
          ],
          [
            37354,
            "java stacktrace:"
          ],
          [
            37374,
            "xcrash error:\nopen /dev/null failed, errno=%d"
          ],
          [
            37390,
            "open /dev/null failed, errno=%d"
          ],
          [
            37424,
            "xcrash error:\n/dev/null fd NOT 0, errno=%d"
          ],
          [
            37440,
            "/dev/null fd NOT 0, errno=%d"
          ],
          [
            37471,
            "xcrash error:\ncreate args pipe failed, errno=%d"
          ],
          [
            37487,
            "create args pipe failed, errno=%d"
          ],
          [
            37523,
            "xcrash error:\nset args pipe size failed, errno=%d"
          ],
          [
            37539,
            "set args pipe size failed, errno=%d"
          ],
          [
            37577,
            "xcrash error:\nwrite args to pipe failed, return=%d, errno=%d"
          ],
          [
            37593,
            "write args to pipe failed, return=%d, errno=%d"
          ],
          [
            37642,
            "libxcrash_dumper.so"
          ],
          [
            37662,
            "xcrash_crash_cb"
          ],
          [
            37678,
            "native"
          ],
          [
            37685,
            "pid: %d, tid: %d, name: %s  \u003e\u003e\u003e %s \u003c\u003c\u003c"
          ],
          [
            37737,
            "from pid %d, uid %d"
          ],
          [
            37758,
            "signal %d (%s), code %d (%s%s), fault addr %s"
          ],
          [
            37805,
            "url",
            "r0  \bx  r1  \bx  r2  \bx  r3  \bx\n    r4  \bx  r5  \bx  r6  \bx  r7  \bx\n    r8  \bx  r9  \bx  r10 \bx  r11 \bx\n    ip  \bx  sp  \bx  lr  \bx "
          ],
          [
            37848,
            "url",
            "r4  \bx  r5  \bx  r6  \bx  r7  \bx"
          ],
          [
            37891,
            "url",
            "r8  \bx  r9  \bx  r10 \bx  r11 \bx"
          ],
          [
            37934,
            "url",
            "ip  \bx  sp  \bx  lr  \bx  pc  \bx"
          ],
          [
            37991,
            "xcrash/NativeHandler"
          ],
          [
            38012,
            "nativeInit"
          ],
          [
            38023,
            "(ILjava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;"
          ],
          [
            38245,
            "nativeNotifyJavaCrashed"
          ],
          [
            38273,
            "nativeTestCrash"
          ],
          [
            38294,
            "/apex/com.android.runtime/lib/bionic/libc.so"
          ],
          [
            38339,
            "/system/lib/libc.so"
          ],
          [
            38359,
            "android_set_abort_message"
          ],
          [
            38385,
            "abort message for xCrash internal testing"
          ],
          [
            38427,
            "xcrash_test_cal"
          ],
          [
            38443,
            "xcrash_test_log"
          ],
          [
            38459,
            "xcrash"
          ],
          [
            38466,
            "crashed APP's thread is running ...... %d"
          ],
          [
            38508,
            "traceCallback"
          ],
          [
            38522,
            "(Ljava/lang/String;Ljava/lang/String;)V"
          ],
          [
            38572,
            "pid: %d  \u003e\u003e\u003e %s \u003c\u003c\u003c"
          ],
          [
            38658,
            "Cmd line: %s"
          ],
          [
            38672,
            "Mode: ART DumpForSigQuit"
          ],
          [
            38698,
            "/apex/com.android.runtime/lib/libc++.so"
          ],
          [
            38738,
            "/system/lib/libc++.so"
          ],
          [
            38776,
            "/apex/com.android.art/lib/libart.so"
          ],
          [
            38812,
            "/apex/com.android.runtime/lib/libart.so"
          ],
          [
            38852,
            "/system/lib/libart.so"
          ],
          [
            38874,
            "_ZN3art7Runtime9instance_E"
          ],
          [
            38901,
            "_ZN3art7Runtime14DumpForSigQuitERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE"
          ],
          [
            39029,
            "Failed to load symbols."
          ],
          [
            39054,
            "%x-%x r"
          ],
          [
            39062,
            "Failed to check runtime address."
          ],
          [
            39096,
            "Failed to duplicate FD."
          ],
          [
            39121,
            "xcrash_dumper"
          ],
          [
            39135,
            "longjmp to skip dumping trace"
          ],
          [
            39233,
            "/proc/%d/task"
          ],
          [
            39247,
            "Signal Catcher"
          ],
          [
            39262,
            "SigBlk: %llx"
          ],
          [
            39275,
            "tombstone_"
          ],
          [
            39286,
            ".trace.xcrash"
          ],
          [
            39300,
            "xcrash_trace_dp"
          ],
          [
            39316,
            "%s version %s %s (%s)"
          ],
          [
            39338,
            "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
          ],
          [
            39403,
            "(null)"
          ],
          [
            39410,
            "/proc/%d/smaps"
          ],
          [
            39453,
            "(deleted)"
          ],
          [
            39464,
            "[heap]"
          ],
          [
            39471,
            "[anon:libc_malloc]"
          ],
          [
            39501,
            ".jar"
          ],
          [
            39506,
            ".apk"
          ],
          [
            39511,
            ".ttf"
          ],
          [
            39516,
            ".dex"
          ],
          [
            39521,
            ".odex"
          ],
          [
            39527,
            ".vdex"
          ],
          [
            39539,
            "/boot"
          ],
          [
            39545,
            ".oat"
          ],
          [
            39550,
            ".art"
          ],
          [
            39561,
            "/dev/kgsl-3d0"
          ],
          [
            39575,
            "/dev/ashmem"
          ],
          [
            39587,
            "/dev/ashmem/dalvik-"
          ],
          [
            39607,
            "/dev/ashmem/dalvik-LinearAlloc"
          ],
          [
            39638,
            "/dev/ashmem/dalvik-alloc space"
          ],
          [
            39669,
            "/dev/ashmem/dalvik-main space"
          ],
          [
            39699,
            "/dev/ashmem/dalvik-large object space"
          ],
          [
            39737,
            "/dev/ashmem/dalvik-free list large object space"
          ],
          [
            39785,
            "/dev/ashmem/dalvik-non moving space"
          ],
          [
            39821,
            "/dev/ashmem/dalvik-zygote space"
          ],
          [
            39853,
            "/dev/ashmem/dalvik-indirect ref"
          ],
          [
            39885,
            "/dev/ashmem/dalvik-jit-code-cache"
          ],
          [
            39919,
            "/dev/ashmem/dalvik-data-code-cache"
          ],
          [
            39954,
            "/dev/ashmem/dalvik-CompilerMetadata"
          ],
          [
            39990,
            "/dev/ashmem/CursorWindow"
          ],
          [
            40015,
            "/dev/ashmem/libc malloc"
          ],
          [
            40058,
            "Shared_Clean: %zu kB"
          ],
          [
            40079,
            "Shared_Dirty: %zu kB"
          ],
          [
            40100,
            "Private_Clean: %zu kB"
          ],
          [
            40122,
            "Private_Dirty: %zu kB"
          ],
          [
            40144,
            "Swap: %zu kB"
          ],
          [
            40157,
            "SwapPss: %zu kB"
          ],
          [
            40199,
            "memory info:"
          ],
          [
            40213,
            "/proc/meminfo"
          ],
          [
            40227,
            "System Summary (From: /proc/meminfo)"
          ],
          [
            40266,
            "/proc/%d/status"
          ],
          [
            40282,
            "Process Status (From: /proc/PID/status)"
          ],
          [
            40324,
            "/proc/%d/limits"
          ],
          [
            40340,
            "Process Limits (From: /proc/PID/limits)"
          ],
          [
            40382,
            "Process Details (From: /proc/PID/smaps)"
          ],
          [
            40424,
            "Swap"
          ],
          [
            40429,
            "SwapPss"
          ],
          [
            40476,
            "Shared"
          ],
          [
            40483,
            "Private"
          ],
          [
            40491,
            "Total"
          ],
          [
            40497,
            "Clean"
          ],
          [
            40503,
            "Dirty"
          ],
          [
            40557,
            "TOTAL"
          ],
          [
            40565,
            "Process Dalvik Details (From: /proc/PID/smaps)"
          ],
          [
            40616,
            "Process Summary (From: /proc/PID/smaps)"
          ]
        ],
        "sz": 51044,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get current time with microsecond precision",
            "e": [
              "gettimeofday"
            ],
            "i": "micro-behaviors/time/query::gettimeofday",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Create directories",
            "e": [
              "mkdir"
            ],
            "i": "micro-behaviors/fs/directory/mkdir::mkdir-base",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "Small ELF binary (\u003c 50KB)",
            "e": [
              "libxcrash.so"
            ],
            "i": "metadata/binary/metrics/structural::small-elf-binary",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "Shared",
              "Shared_Clean: %zu kB",
              "Shared_Dirty: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.21"
            ],
            "i": "metadata/binary/metrics/threshold::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "d": "Characteristic system library export __cxa_finalize",
            "e": [
              "cxa_finalize"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-finalize",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "/dev/null (legitimate discard device)",
            "e": [
              "/dev/null fd NOT 0, errno=%d",
              "xcrash error:\n/dev/null fd NOT 0, errno=%d",
              "/dev/null",
              "open /dev/null failed, errno=%d",
              "xcrash error:\nopen /dev/null failed, errno=%d"
            ],
            "i": "micro-behaviors/fs/path/device/special::dev-null",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Detects loop/jump control transfer in assembly",
            "e": [
              "jmp to"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/loop::asm-loop-control-transfer",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.11"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.func_count = 85.00"
            ],
            "i": "metadata/binary/metrics/structural::many-functions",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "LLVM libc++ stdlib",
            "e": [
              "libc++.so"
            ],
            "i": "micro-behaviors/dylib/library/libc::libcxx-ref",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libxcrash.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Shared_Dirty: %zu kB",
              "Shared",
              "Shared_Clean: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 10.92"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Sleep for microsecond duration",
            "e": [
              "usleep"
            ],
            "i": "micro-behaviors/time/query::usleep-func",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 25.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "d": "pthread threading library",
            "e": [
              "pthread_create",
              "sym.imp.pthread_create"
            ],
            "i": "micro-behaviors/process/threading/concurrency::pthread",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "sym.imp.__stack_chk_fail",
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1036.005",
            "c": 0.8999999761581421,
            "d": "prctl system call symbol",
            "e": [
              "prctl"
            ],
            "i": "objectives/evasion/masquerade/identity/daemon::prctl-symbol",
            "l": 3,
            "m": "F0004"
          },
          {
            "a": "T1059.004",
            "c": 0.949999988079071,
            "d": "Executes command and captures output",
            "e": [
              "popen"
            ],
            "i": "micro-behaviors/process/create/popen::c-popen",
            "l": 3,
            "m": "E1059.004"
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/system/",
              "/apex/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "access"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "C-style exec family functions",
            "e": [
              "execl"
            ],
            "i": "micro-behaviors/process/create/execv::c-exec-variants",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ functions",
            "e": [
              "binary.func_count = 85.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-functions-50",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Process forking",
            "e": [
              "clone"
            ],
            "i": "micro-behaviors/process/fork/clone::fork",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Rename files",
            "e": [
              "rename"
            ],
            "i": "micro-behaviors/fs/file/rename::rename-base",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "a": "T1082",
            "c": 0.6000000238418579,
            "d": "Query system name and information",
            "e": [
              "uname"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/kernel::uname",
            "l": 3,
            "m": "E1082"
          },
          {
            "c": 0.800000011920929,
            "d": "High number of imported symbols (\u003e80)",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "metadata/binary/metrics/structural::many-imports",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "a": "T1083",
            "c": 0.4000000059604645,
            "d": "File descriptor manipulation and control",
            "e": [
              "fcntl"
            ],
            "i": "micro-behaviors/fs/file/handle::fcntl",
            "l": 2,
            "m": "E1083"
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "/system/usr/we-need-root/su"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "ICMP service/protocol reference",
            "e": [
              "ICMP",
              "icmp"
            ],
            "i": "micro-behaviors/communications/ip/services::services-icmp",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "libc version string pattern",
            "e": [
              "bionic"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-version-string",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "a": "T1124",
            "c": 0.30000001192092896,
            "d": "Get time from specified clock",
            "e": [
              "clock_gettime"
            ],
            "i": "micro-behaviors/time/query::clock_gettime",
            "l": 2,
            "m": "T1124"
          },
          {
            "c": 0.6000000238418579,
            "d": "/boot directory reference",
            "e": [
              "/boot"
            ],
            "i": "micro-behaviors/fs/path/system::boot-dir",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libxcrash.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.22"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.func_count = 85.00"
            ],
            "i": "metadata/binary/metrics/threshold::few-functions-3",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Get memory info from /proc/meminfo",
            "e": [
              "System Summary (From: /proc/meminfo)",
              "/proc/meminfo"
            ],
            "i": "micro-behaviors/fs/proc/system::system-meminfo",
            "l": 3
          },
          {
            "a": "T1005",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "micro-behaviors/fs/file/binary::file-manipulation-cond-0--inline-18739",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /bin/su",
            "e": [
              "/bin/su"
            ],
            "i": "micro-behaviors/fs/path/binary::binary-bin-su",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 90.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "d": "Duplicate file descriptor (I/O redirection)",
            "e": [
              "dup2"
            ],
            "i": "micro-behaviors/process/fd/dup::dup2",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/net/icmp",
              "/proc/%d/status",
              "/proc/%d/net/udp",
              "/proc/%d/net/tcp6",
              "/proc/%d/cmdline",
              "/proc/%d/limits",
              "/proc/%d/task",
              "/proc/%d/net/udp6",
              "/proc/%d/comm",
              "/proc/%d/net/icmp6",
              "/proc/%d/net/tcp",
              "/proc/%d/net/unix",
              "/proc/%d/fd/%d",
              "/proc/%d/fd",
              "/proc/%d/smaps"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "dlclose",
              "fclose",
              "close",
              "closedir",
              "pclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "d": "Binary exports symbols",
            "e": [
              "binary.export_count = 6.00"
            ],
            "i": "metadata/binary/symbols/exports::has-exports",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID:"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Delete files",
            "e": [
              "unlink"
            ],
            "i": "micro-behaviors/fs/file/delete::unlink",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic library unload",
            "e": [
              "dlclose"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlclose",
            "l": 3
          },
          {
            "a": "T1564.001",
            "c": 0.949999988079071,
            "d": "Hidden system binary path",
            "e": [
              "/bin/.ext"
            ],
            "i": "objectives/evasion/file-hiding/system-path::hidden-system-bin-reference",
            "l": 4,
            "m": "F0005"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Full daemon behavior (fork + setsid + devnull)",
            "e": [
              "open /dev/null failed, errno=%d",
              "xcrash error:\n/dev/null fd NOT 0, errno=%d",
              "/dev/null fd NOT 0, errno=%d",
              "clone",
              "/dev/null",
              "xcrash error:\nopen /dev/null failed, errno=%d"
            ],
            "i": "micro-behaviors/process/daemonize/detach::full-daemon",
            "l": 1
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "a": "T1497.003",
            "d": "Timing measurement with delay APIs",
            "e": [
              "usleep",
              "gettimeofday",
              "clock_gettime"
            ],
            "i": "objectives/anti-analysis/timing/evasion::timing-evasion",
            "l": 3,
            "m": "B0003.005"
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlsym",
              "dlclose"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          }
        ],
        "sha": "b788f747e55bc782ba5e4af74d6b0fb5d5ce65820bd592579b3019759d12b438",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libxcrash.so",
        "type": "elf"
      },
      {
        "f": "O₈(Er₂Al₂As₃CCaDy₂LaS)H₇(Ds₂F₄Os₂Po₂CmCrDb)Md(Bi₂)",
        "x": 49,
        "dp": 1,
        "id": 22,
        "is": [
          "",
          "cxa_atexit",
          "libc_init",
          "alarm",
          "exit",
          "errno",
          "read",
          "calloc",
          "open",
          "exit",
          "free",
          "malloc",
          "android_log_print",
          "memcmp",
          "strdup",
          "strcmp",
          "snprintf",
          "strlen",
          "fstat",
          "localtime_r",
          "mmap",
          "munmap",
          "strerror",
          "close",
          "strncmp",
          "fopen",
          "fclose",
          "fgets",
          "sscanf",
          "sysconf",
          "opendir",
          "readdir",
          "closedir",
          "isspace",
          "strtok_r",
          "regcomp",
          "regexec",
          "ptrace",
          "waitpid",
          "realloc",
          "process_vm_readv",
          "syscall",
          "strstr",
          "sigaltstack",
          "sigaction",
          "getpid",
          "gettid",
          "dladdr",
          "dlopen",
          "dlsym",
          "dlclose",
          "strtol",
          "fflush",
          "vsnprintf",
          "fprintf",
          "strncpy",
          "access",
          "write",
          "popen",
          "pclose",
          "readlink",
          "stack_chk_fail",
          "stack_chk_guard",
          "abort",
          "sF",
          "aeabi_memclr8",
          "aeabi_memclr",
          "aeabi_memcpy",
          "gnu_Unwind_Find_exidx",
          "raise",
          "aeabi_memset8",
          "aeabi_memcpy4",
          "aeabi_memcpy8",
          "aeabi_memmove",
          "aeabi_memclr4"
        ],
        "ms": {
          "elf": {
            "relro": "partial",
            "e_type": 3.0,
            "needed": [
              "liblog.so",
              "libdl.so",
              "libm.so",
              "libc.so"
            ],
            "has_got": true,
            "has_plt": true,
            "has_note": true,
            "e_machine": 40.0,
            "class_bits": 32.0,
            "note_count": 3.0,
            "nx_enabled": true,
            "entry_point": 5712.0,
            "needed_libs": 4.0,
            "dynrel_count": 121.0,
            "dynsym_count": 75.0,
            "stack_canary": true,
            "entry_section": ".text",
            "little_endian": true,
            "pltreloc_count": 72.0,
            "build_id_length": 20.0,
            "has_interpreter": true,
            "build_id_present": true,
            "fini_array_count": 2.0,
            "gnu_hash_present": true,
            "init_array_count": 2.0,
            "program_header_count": 9.0,
            "section_header_count": 29.0,
            "load_segment_max_p_memsz": 72360.0,
            "load_segment_max_p_filesz": 72360.0,
            "section_relocation_group_count": 2.0
          },
          "file": {
            "size": 75784.0
          },
          "binary": {
            "code_size": 56360.0,
            "entry_point": 5712.0,
            "has_overlay": true,
            "code_entropy": 5.55,
            "data_entropy": 3.85,
            "import_count": 75.0,
            "overlay_size": 1163.0,
            "string_count": 415.0,
            "overlay_ratio": 0.02,
            "section_count": 27.0,
            "import_density": 1.36,
            "string_density": 7.54,
            "overall_entropy": 3.03,
            "overlay_entropy": 2.25,
            "avg_section_size": 2738.56,
            "dependency_count": 4.0,
            "entropy_variance": 1.69,
            "avg_string_length": 18.33,
            "max_string_length": 443.0,
            "avg_string_entropy": 3.01,
            "code_to_data_ratio": 3.21,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.73,
            "func_analysis_depth": 1.0,
            "provenance_id_length": 20.0,
            "string_length_stddev": 33.01,
            "largest_section_ratio": 0.73,
            "provenance_id_present": true,
            "sentence_string_count": 81.0,
            "sentence_string_ratio": 0.2,
            "behavioral_import_ratio": 0.07,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            340,
            "/system/bin/linker"
          ],
          [
            372,
            "Android"
          ],
          [
            384,
            "r21d"
          ],
          [
            448,
            "6528147"
          ],
          [
            1749,
            "__cxa_atexit"
          ],
          [
            1762,
            "LIBC"
          ],
          [
            1767,
            "libc.so"
          ],
          [
            1775,
            "__libc_init"
          ],
          [
            1787,
            "alarm"
          ],
          [
            1793,
            "exit"
          ],
          [
            1798,
            "__errno"
          ],
          [
            1806,
            "read"
          ],
          [
            1811,
            "calloc"
          ],
          [
            1818,
            "open"
          ],
          [
            1829,
            "free"
          ],
          [
            1834,
            "malloc"
          ],
          [
            1841,
            "__android_log_print"
          ],
          [
            1861,
            "memcmp"
          ],
          [
            1868,
            "strdup"
          ],
          [
            1882,
            "snprintf"
          ],
          [
            1891,
            "strlen"
          ],
          [
            1904,
            "localtime_r"
          ],
          [
            1921,
            "munmap"
          ],
          [
            1928,
            "strerror"
          ],
          [
            1937,
            "close"
          ],
          [
            1943,
            "strncmp"
          ],
          [
            1951,
            "fopen"
          ],
          [
            1957,
            "fclose"
          ],
          [
            1970,
            "sscanf"
          ],
          [
            1977,
            "sysconf"
          ],
          [
            1985,
            "opendir"
          ],
          [
            1993,
            "readdir"
          ],
          [
            2001,
            "closedir"
          ],
          [
            2010,
            "isspace"
          ],
          [
            2018,
            "strtok_r"
          ],
          [
            2027,
            "regcomp"
          ],
          [
            2035,
            "regexec"
          ],
          [
            2043,
            "ptrace"
          ],
          [
            2050,
            "waitpid"
          ],
          [
            2058,
            "realloc"
          ],
          [
            2066,
            "process_vm_readv"
          ],
          [
            2083,
            "syscall"
          ],
          [
            2098,
            "sigaltstack"
          ],
          [
            2110,
            "sigaction"
          ],
          [
            2120,
            "getpid"
          ],
          [
            2127,
            "gettid"
          ],
          [
            2134,
            "dladdr"
          ],
          [
            2141,
            "libdl.so"
          ],
          [
            2150,
            "dlopen"
          ],
          [
            2163,
            "dlclose"
          ],
          [
            2171,
            "strtol"
          ],
          [
            2178,
            "fflush"
          ],
          [
            2185,
            "vsnprintf"
          ],
          [
            2195,
            "fprintf"
          ],
          [
            2203,
            "strncpy"
          ],
          [
            2211,
            "access"
          ],
          [
            2218,
            "write"
          ],
          [
            2224,
            "popen"
          ],
          [
            2230,
            "pclose"
          ],
          [
            2237,
            "readlink"
          ],
          [
            2246,
            "__stack_chk_fail"
          ],
          [
            2263,
            "__stack_chk_guard"
          ],
          [
            2281,
            "abort"
          ],
          [
            2292,
            "__aeabi_memclr8"
          ],
          [
            2308,
            "__aeabi_memclr"
          ],
          [
            2323,
            "__aeabi_memcpy"
          ],
          [
            2338,
            "__gnu_Unwind_Find_exidx"
          ],
          [
            2362,
            "raise"
          ],
          [
            2368,
            "__aeabi_memset8"
          ],
          [
            2384,
            "__aeabi_memcpy4"
          ],
          [
            2400,
            "__aeabi_memcpy8"
          ],
          [
            2416,
            "__aeabi_memmove"
          ],
          [
            2432,
            "__aeabi_memclr4"
          ],
          [
            2448,
            "liblog.so"
          ],
          [
            2458,
            "libm.so"
          ],
          [
            8140,
            "FEJEKzD{D"
          ],
          [
            12284,
            "4 0F"
          ],
          [
            16183,
            "F5HO"
          ],
          [
            17631,
            "GXEA"
          ],
          [
            23213,
            "2FHF"
          ],
          [
            23855,
            "EFHF"
          ],
          [
            25816,
            "RD1D"
          ],
          [
            26013,
            "NHF3D"
          ],
          [
            26042,
            "JD1D"
          ],
          [
            26715,
            "6VEO"
          ],
          [
            27533,
            "E?B\u003cKNHeIyDK"
          ],
          [
            30382,
            "TI0FO"
          ],
          [
            30404,
            "3FOI"
          ],
          [
            31546,
            "BXRDBP"
          ],
          [
            32970,
            "BX 1"
          ],
          [
            36164,
            "QDPD"
          ],
          [
            37474,
            "Pahi"
          ],
          [
            37721,
            "mXFAIyD"
          ],
          [
            38196,
            "XFRF"
          ],
          [
            38604,
            "PFJF"
          ],
          [
            38645,
            "FXFJF"
          ],
          [
            42219,
            "IHFBFyD"
          ],
          [
            49864,
            "XFPF"
          ],
          [
            51757,
            "D1DAD"
          ],
          [
            52942,
            "FIFVD"
          ],
          [
            57639,
            "AF2F"
          ],
          [
            57692,
            "GNLC"
          ],
          [
            59275,
            "J0FAF"
          ],
          [
            59436,
            "Vhbh"
          ],
          [
            60257,
            "HxDpGvHxDpGuHxDpGuHxDpGtHxDpGtHxDpGsHxDpGsHxDpGrHxDpGrHxDpGqHxDpGqHxDpGpHxDpGpHxDpG`HxDpGnHxDpGmHxDpGmHxDpGlHxDpGlHxDpGkHxDpGkHx"
          ],
          [
            60704,
            "PHxDpGPHxDpGOHxDpGOHxDpGb"
          ],
          [
            63656,
            "xcrash error debug:\ndumper has crashed (signal: %d, code: %d)"
          ],
          [
            63658,
            "xcrash error debug:"
          ],
          [
            63678,
            "dumper has crashed (signal: %d, code: %d)"
          ],
          [
            63724,
            "DWARF: PC is moving backwards"
          ],
          [
            63754,
            "DWARF: attempt to restore without remember"
          ],
          [
            63802,
            ".note.gnu.build-id"
          ],
          [
            63821,
            ".debug_frame"
          ],
          [
            63834,
            ".eh_frame"
          ],
          [
            63844,
            ".eh_frame_hdr"
          ],
          [
            63858,
            ".gnu_debugdata"
          ],
          [
            63873,
            "ELF: create GNU interface FAILED"
          ],
          [
            63918,
            "\u003canonymous:%8x\u003e"
          ],
          [
            63940,
            "(offset 0x%x)"
          ],
          [
            63955,
            "\u003cunknown\u003e"
          ],
          [
            63981,
            "#%02zu pc %08x  %s%s%s"
          ],
          [
            64020,
            "%s (BuildId:"
          ],
          [
            64064,
            "url",
            ". LastModified: \u0004d-\u0002d-\u0002dT\u0002d:\u0002d:\u0002d.\u0003ld%c\u0002ld\u0002ld"
          ],
          [
            64128,
            ". LastModified: %s"
          ],
          [
            64147,
            "/system/bin/"
          ],
          [
            64171,
            "OPEN"
          ],
          [
            64176,
            "FSTAT"
          ],
          [
            64182,
            "MMAP"
          ],
          [
            64187,
            ". %s error: errno = %d, errmsg = %s)"
          ],
          [
            64294,
            "ashmem/"
          ],
          [
            64302,
            "/proc/%d/maps"
          ],
          [
            64316,
            "%x-%x %4s %x %*x:%*x %*d%n"
          ],
          [
            64343,
            "[anon:abort message]"
          ],
          [
            64364,
            "memory map:"
          ],
          [
            64377,
            "(load bias 0x%x)"
          ],
          [
            64397,
            "%08x-%08x %c%c%c %*x %*x %s%s"
          ],
          [
            64432,
            "TOTAL SIZE: 0x%xK (%uK)"
          ],
          [
            64462,
            "/proc/%d/task"
          ],
          [
            64478,
            "PROCESS: load threads failed, errno=%d"
          ],
          [
            64517,
            "PROCESS: crashed thread NOT found"
          ],
          [
            64551,
            "PROCESS: create maps failed, errno=%d"
          ],
          [
            64589,
            "%p (*pc=%#08x)"
          ],
          [
            64607,
            "from pid %d, uid %d"
          ],
          [
            64628,
            "signal %d (%s), code %d (%s%s), fault addr %s"
          ],
          [
            64675,
            "/system/lib/libc.so"
          ],
          [
            64695,
            "__abort_message_ptr"
          ],
          [
            64715,
            "Abort message: '%s'"
          ],
          [
            64803,
            "total threads (exclude the crashed thread): %zu"
          ],
          [
            64852,
            "threads matched whitelist: %d"
          ],
          [
            64883,
            "threads ignored by max count limit: %d"
          ],
          [
            64923,
            "dumped threads: %u"
          ],
          [
            65058,
            "url",
            "r0  \bx  r1  \bx  r2  \bx  r3  \bx\n    r4  \bx  r5  \bx  r6  \bx  r7  \bx\n    r8  \bx  r9  \bx  r10 \bx  r11 \bx\n    ip  \bx  sp  \bx  lr  \bx "
          ],
          [
            65101,
            "url",
            "r4  \bx  r5  \bx  r6  \bx  r7  \bx"
          ],
          [
            65144,
            "url",
            "r8  \bx  r9  \bx  r10 \bx  r11 \bx"
          ],
          [
            65187,
            "url",
            "ip  \bx  sp  \bx  lr  \bx  pc  \bx"
          ],
          [
            65232,
            "native"
          ],
          [
            65239,
            "xcrash_dumper"
          ],
          [
            65253,
            "THREAD: ptrace GETREGS failed, errno=%d"
          ],
          [
            65293,
            "pid: %d, tid: %d, name: %s  \u003e\u003e\u003e %s \u003c\u003c\u003c"
          ],
          [
            65333,
            "memory near %s:"
          ],
          [
            65377,
            "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
          ],
          [
            65442,
            "(null)"
          ],
          [
            65449,
            "/proc/%d/smaps"
          ],
          [
            65492,
            "(deleted)"
          ],
          [
            65503,
            "[heap]"
          ],
          [
            65510,
            "[anon:libc_malloc]"
          ],
          [
            65540,
            ".jar"
          ],
          [
            65545,
            ".apk"
          ],
          [
            65550,
            ".ttf"
          ],
          [
            65555,
            ".dex"
          ],
          [
            65560,
            ".odex"
          ],
          [
            65566,
            ".vdex"
          ],
          [
            65578,
            "/boot"
          ],
          [
            65584,
            ".oat"
          ],
          [
            65589,
            ".art"
          ],
          [
            65600,
            "/dev/kgsl-3d0"
          ],
          [
            65614,
            "/dev/ashmem"
          ],
          [
            65626,
            "/dev/ashmem/dalvik-"
          ],
          [
            65646,
            "/dev/ashmem/dalvik-LinearAlloc"
          ],
          [
            65677,
            "/dev/ashmem/dalvik-alloc space"
          ],
          [
            65708,
            "/dev/ashmem/dalvik-main space"
          ],
          [
            65738,
            "/dev/ashmem/dalvik-large object space"
          ],
          [
            65776,
            "/dev/ashmem/dalvik-free list large object space"
          ],
          [
            65824,
            "/dev/ashmem/dalvik-non moving space"
          ],
          [
            65860,
            "/dev/ashmem/dalvik-zygote space"
          ],
          [
            65892,
            "/dev/ashmem/dalvik-indirect ref"
          ],
          [
            65924,
            "/dev/ashmem/dalvik-jit-code-cache"
          ],
          [
            65958,
            "/dev/ashmem/dalvik-data-code-cache"
          ],
          [
            65993,
            "/dev/ashmem/dalvik-CompilerMetadata"
          ],
          [
            66029,
            "/dev/ashmem/CursorWindow"
          ],
          [
            66054,
            "/dev/ashmem/libc malloc"
          ],
          [
            66097,
            "Shared_Clean: %zu kB"
          ],
          [
            66118,
            "Shared_Dirty: %zu kB"
          ],
          [
            66139,
            "Private_Clean: %zu kB"
          ],
          [
            66161,
            "Private_Dirty: %zu kB"
          ],
          [
            66183,
            "Swap: %zu kB"
          ],
          [
            66196,
            "SwapPss: %zu kB"
          ],
          [
            66238,
            "memory info:"
          ],
          [
            66252,
            "/proc/meminfo"
          ],
          [
            66266,
            "System Summary (From: /proc/meminfo)"
          ],
          [
            66305,
            "/proc/%d/status"
          ],
          [
            66321,
            "Process Status (From: /proc/PID/status)"
          ],
          [
            66363,
            "/proc/%d/limits"
          ],
          [
            66379,
            "Process Limits (From: /proc/PID/limits)"
          ],
          [
            66421,
            "Process Details (From: /proc/PID/smaps)"
          ],
          [
            66463,
            "Swap"
          ],
          [
            66468,
            "SwapPss"
          ],
          [
            66515,
            "Shared"
          ],
          [
            66522,
            "Private"
          ],
          [
            66530,
            "Total"
          ],
          [
            66536,
            "Clean"
          ],
          [
            66542,
            "Dirty"
          ],
          [
            66596,
            "TOTAL"
          ],
          [
            66604,
            "Process Dalvik Details (From: /proc/PID/smaps)"
          ],
          [
            66655,
            "Process Summary (From: /proc/PID/smaps)"
          ],
          [
            66737,
            "Native Heap:"
          ],
          [
            66763,
            "Private Other:"
          ],
          [
            66814,
            "TOTAL SWAP PSS:"
          ],
          [
            66830,
            "TOTAL SWAP:"
          ],
          [
            66846,
            "Native Heap"
          ],
          [
            66858,
            "Dalvik Heap"
          ],
          [
            66870,
            "Dalvik Other"
          ],
          [
            66883,
            "Stack"
          ],
          [
            66889,
            "Cursor"
          ],
          [
            66896,
            "Ashmem"
          ],
          [
            66903,
            "Gfx dev"
          ],
          [
            66911,
            "Other dev"
          ],
          [
            66921,
            ".so mmap"
          ],
          [
            66930,
            ".jar mmap"
          ],
          [
            66940,
            ".apk mmap"
          ],
          [
            66950,
            ".ttf mmap"
          ],
          [
            66960,
            ".dex mmap"
          ],
          [
            66970,
            ".oat mmap"
          ],
          [
            66980,
            ".art mmap"
          ],
          [
            66990,
            "Other mmap"
          ],
          [
            67001,
            "Unknown"
          ],
          [
            67020,
            ".Zygote"
          ],
          [
            67028,
            ".NonMoving"
          ],
          [
            67039,
            ".LinearAlloc"
          ],
          [
            67056,
            ".JITCache"
          ],
          [
            67066,
            ".CompilerMetadata"
          ],
          [
            67084,
            ".IndirectRef"
          ],
          [
            67097,
            ".Boot vdex"
          ],
          [
            67146,
            "libcorkscrew.so"
          ],
          [
            67162,
            "unwind_backtrace_signal_arch"
          ],
          [
            67191,
            "acquire_my_map_info_list"
          ],
          [
            67216,
            "release_my_map_info_list"
          ],
          [
            67241,
            "get_backtrace_symbols"
          ],
          [
            67263,
            "free_backtrace_symbols"
          ],
          [
            67286,
            "libunwind.so"
          ],
          [
            67299,
            "_Uarm_init_local"
          ],
          [
            67330,
            "_Uarm_step"
          ],
          [
            67409,
            "#%02zu pc %08x  %s"
          ],
          [
            67433,
            "#%02zu pc %08x  %s (%s)"
          ],
          [
            67462,
            "#%02zu pc %08x  %s (%s+%u)"
          ],
          [
            67496,
            "SIGSTKFLT"
          ]
        ],
        "sz": 75784,
        "ts": [
          {
            "c": 1.0,
            "d": "Binary is not digitally signed",
            "i": "metadata/unsigned",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "fopen"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-8",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "XGETBV instruction bytes",
            "e": [
              "0F 01 D0"
            ],
            "i": "metadata/binary/instruction::xgetbv-instr",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/binary/linking/static::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.699999988079071,
            "d": "Read file descriptor (read/pread)",
            "e": [
              "read"
            ],
            "i": "micro-behaviors/fs/file/read::read",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Line-based file reading (fgets)",
            "e": [
              "fgets"
            ],
            "i": "micro-behaviors/process/create/direct::fgets-loop",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "Shared_Clean: %zu kB",
              "Shared_Dirty: %zu kB",
              "Shared"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-6",
            "l": 1,
            "m": "C0027"
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses readdir",
            "e": [
              "readdir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-readdir",
            "l": 2
          },
          {
            "c": 0.4000000059604645,
            "d": "Terminate process immediately without cleanup",
            "e": [
              "exit"
            ],
            "i": "micro-behaviors/process/terminate/signal::_exit",
            "l": 2
          },
          {
            "a": "T1195.002",
            "c": 0.75,
            "d": "Regex component marker",
            "e": [
              "binary.section_count = 27.00"
            ],
            "i": "objectives/supply-chain/trojanized/backdoor::unexpected-crypto-cond-0--inline-13922",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Address to symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Compiler/project context token",
            "e": [
              "clang version"
            ],
            "i": "micro-behaviors/dylib/library/family::llvm-project-ref-b",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.01"
            ],
            "i": "metadata/binary/metrics/threshold::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary format is identified",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "metadata/binary/layout::binary-format-checked",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 75.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-20",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Abort program execution",
            "e": [
              "abort"
            ],
            "i": "micro-behaviors/os/signal/handler::abort",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "Imports dladdr symbol lookup",
            "e": [
              "dladdr"
            ],
            "i": "micro-behaviors/dylib/lookup::dladdr-import",
            "l": 2
          },
          {
            "a": "T1046",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "libxcrash_dumper.so"
            ],
            "i": "objectives/discovery/network/scan/port::rpc-service-enum-cond-1--inline-19957",
            "l": 1
          },
          {
            "c": 0.8500000238418579,
            "d": "Send signal to self",
            "e": [
              "raise"
            ],
            "i": "micro-behaviors/os/signal/handler::raise",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF .gnu_debugdata section (mini debug info)",
            "e": [
              ".gnu_debugdata"
            ],
            "i": "micro-behaviors/data/embedded/payload/compression::gnu-debugdata-section",
            "l": 2
          },
          {
            "a": "T1573",
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "Shared_Dirty: %zu kB",
              "Shared",
              "Shared_Clean: %zu kB"
            ],
            "i": "micro-behaviors/crypto/asymmetric/kem::kyber-encapsulation-terms--rx-5",
            "l": 1,
            "m": "C0027"
          },
          {
            "a": "T1082",
            "c": 0.4000000059604645,
            "d": "Query system configuration information",
            "e": [
              "sysconf"
            ],
            "i": "micro-behaviors/os/sysinfo/config::sysconf",
            "l": 2,
            "m": "E1082"
          },
          {
            "c": 1.0,
            "d": "Binary has 30+ imports",
            "e": [
              "binary.import_count = 75.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-30",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 0.00"
            ],
            "i": "metadata/binary/metrics/threshold::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ELF32 class marker",
            "e": [
              "elf.class_bits = 32.00"
            ],
            "i": "objectives/anti-static/pack/detection::elf32-class",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/binary/linking/static::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ sections (installer/packer)",
            "e": [
              "binary.section_count = 27.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-sections-20",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Zero recovered functions",
            "e": [
              "binary.func_count = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/payload/encrypted::zero-function-count",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail"
            ],
            "i": "metadata/hardening/build::stack-chk-fail",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Unmap files from memory",
            "e": [
              "munmap"
            ],
            "i": "micro-behaviors/fs/memory/mmap::munmap",
            "l": 2
          },
          {
            "a": "T1059.004",
            "c": 0.949999988079071,
            "d": "Executes command and captures output",
            "e": [
              "popen"
            ],
            "i": "micro-behaviors/process/create/popen::c-popen",
            "l": 3,
            "m": "E1059.004"
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (symbol)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-symbol",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "Multiple Android platform paths",
            "e": [
              "/system/"
            ],
            "i": "micro-behaviors/os/sysinfo/platform/mobile::android-platform-paths",
            "l": 3
          },
          {
            "c": 0.8600000143051147,
            "d": "Procfs maps path template",
            "e": [
              "/proc/%d/maps"
            ],
            "i": "micro-behaviors/fs/proc/info/memory::c-procfs-maps-template",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "open"
            ],
            "i": "micro-behaviors/fs/file/open::open-base",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Non-empty finalization array section",
            "e": [
              "elf.fini_array_count = 2.00"
            ],
            "i": "metadata/binary/section/content::fini-array-hooks",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Install signal handler (POSIX sigaction)",
            "e": [
              "sigaction"
            ],
            "i": "micro-behaviors/os/signal/handler::sigaction",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "localtime function (string)",
            "e": [
              "localtime_r"
            ],
            "i": "micro-behaviors/time/query::localtime-string",
            "l": 2
          },
          {
            "c": 0.9200000166893005,
            "d": "Regex component marker",
            "e": [
              "access"
            ],
            "i": "objectives/evasion/kernel-hide/userspace::preload-rootkit-hook-set--rx-5",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Check if file exists",
            "e": [
              "access"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-exists",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Open files",
            "e": [
              "fopen"
            ],
            "i": "micro-behaviors/fs/file/open::fopen",
            "l": 2
          },
          {
            "d": "mmap memory mapping function",
            "e": [
              "mmap"
            ],
            "i": "micro-behaviors/mem/alloc/executable::mmap-symbol",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 50+ imports",
            "e": [
              "binary.import_count = 75.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-50",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has 40+ imports",
            "e": [
              "binary.import_count = 75.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-40",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "ADB OPEN packet marker",
            "e": [
              "OPEN"
            ],
            "i": "micro-behaviors/communications/socket/tcp::open-token",
            "l": 1,
            "m": "C0001"
          },
          {
            "d": "Characteristic system library export __cxa_atexit",
            "e": [
              "cxa_atexit"
            ],
            "i": "micro-behaviors/dylib/library/libc::libc-characteristic-cxa-atexit",
            "l": 2
          },
          {
            "a": "T1027.010",
            "d": "Hardcoded standard base64 alphabet",
            "e": [
              "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
            ],
            "i": "micro-behaviors/data/encode/base64::alphabet-standard",
            "l": 2,
            "m": "B0032.001"
          },
          {
            "a": "T1071.001",
            "c": 0.8799999952316284,
            "d": "Command endpoint path marker",
            "e": [
              "/proc/%d/cmdline"
            ],
            "i": "objectives/command-and-control/beacon/network/json::c2-command-result-endpoints",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.75,
            "d": "String to long integer conversion (strtol)",
            "e": [
              "strtol"
            ],
            "i": "micro-behaviors/data/string/conversion::strtol",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "/system/usr/we-need-root/su"
            ],
            "i": "objectives/lateral-movement/brute-force/ssh::weak-login-pair-set--rx-4",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "dlsym function symbol",
            "e": [
              "dlsym"
            ],
            "i": "micro-behaviors/dylib/lookup::dlsym-symbol",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/binary/linking/static::elf-interpreter-section-name",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses opendir",
            "e": [
              "opendir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-opendir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "ICMP service/protocol reference",
            "e": [
              "ICMP",
              "icmp"
            ],
            "i": "micro-behaviors/communications/ip/services::services-icmp",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Write files",
            "e": [
              "write"
            ],
            "i": "micro-behaviors/fs/file/write/direct::write",
            "l": 2
          },
          {
            "c": 0.6000000238418579,
            "d": "/boot directory reference",
            "e": [
              "/boot"
            ],
            "i": "micro-behaviors/fs/path/system::boot-dir",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "libxcrash_dumper.so"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.03"
            ],
            "i": "metadata/binary/metrics/threshold::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Wait for child process state",
            "e": [
              "waitpid"
            ],
            "i": "micro-behaviors/process/control/wait::waitpid",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Get memory info from /proc/meminfo",
            "e": [
              "/proc/meminfo",
              "System Summary (From: /proc/meminfo)"
            ],
            "i": "micro-behaviors/fs/proc/system::system-meminfo",
            "l": 3
          },
          {
            "c": 0.6600000262260437,
            "d": "Reference to /bin/su",
            "e": [
              "/bin/su"
            ],
            "i": "micro-behaviors/fs/path/binary::binary-bin-su",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Schedule alarm timer",
            "e": [
              "alarm"
            ],
            "i": "micro-behaviors/time/schedule/timeout::alarm",
            "l": 2
          },
          {
            "c": 0.6600000262260437,
            "d": "Uses closedir",
            "e": [
              "closedir"
            ],
            "i": "micro-behaviors/fs/directory/readdir::readdir-closedir",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "Get process ID",
            "e": [
              "getpid"
            ],
            "i": "micro-behaviors/process/identity/query::getpid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 75.00"
            ],
            "i": "metadata/binary/metrics/threshold::many-imports-25",
            "l": 1
          },
          {
            "c": 0.6600000262260437,
            "d": "Look up file permissions",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/chmod/get::get-dup",
            "l": 2
          },
          {
            "a": "T1552.003",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "whitelist"
            ],
            "i": "objectives/credential-access/shell/history::shell-history-unless-cond-1--rx-4",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "Mirai proc format string",
            "e": [
              "/proc/%d/cmdline",
              "/proc/%d/task",
              "/proc/%d/net/icmp",
              "/proc/%d/status",
              "/proc/%d/fd",
              "/proc/%d/limits",
              "/proc/%d/net/tcp",
              "/proc/%d/comm",
              "/proc/%d/net/tcp6",
              "/proc/%d/net/unix",
              "/proc/%d/maps",
              "/proc/%d/net/udp6",
              "/proc/%d/net/icmp6",
              "/proc/%d/net/udp",
              "/proc/%d/smaps",
              "/proc/%d/fd/%d"
            ],
            "i": "well-known/malware/botnet/mirai/core::proc-format",
            "l": 1
          },
          {
            "c": 0.8199999928474426,
            "d": "Regex component marker",
            "e": [
              "fclose",
              "dlclose",
              "closedir",
              "close",
              "pclose"
            ],
            "i": "objectives/discovery/system/ics-environment/register::ics-register-flow-rate--rx-75",
            "l": 1
          },
          {
            "a": "T1614",
            "c": 0.6000000238418579,
            "d": "Country code ID token",
            "e": [
              " ID:"
            ],
            "i": "objectives/anti-analysis/geofencing/region::country-code-id",
            "l": 1,
            "m": "B0007.003"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/binary/linking/static::elf-dynsym-section-name",
            "l": 2
          },
          {
            "a": "T1552.003",
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "whitelist"
            ],
            "i": "objectives/credential-access/shell/history::zsh-history-unless-cond-2--rx-8",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynamic section name",
            "e": [
              ".dynamic"
            ],
            "i": "metadata/hardening/missing::elf-dynamic-section-name",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF interpreter section name",
            "e": [
              ".interp"
            ],
            "i": "metadata/hardening/missing::elf-interpreter-section-name",
            "l": 2
          },
          {
            "a": "T1497.001",
            "c": 0.800000011920929,
            "d": "Extremely low logic density (function sparsity)",
            "e": [
              "binary.complexity_per_kb = 0.00"
            ],
            "i": "objectives/anti-analysis/vm-detect/instruction::sparse-logic-density",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynsym section name",
            "e": [
              ".dynsym"
            ],
            "i": "metadata/hardening/missing::elf-dynsym-section-name",
            "l": 2
          },
          {
            "a": "T1574.006",
            "c": 0.8999999761581421,
            "d": "Dynamic library loading via dlopen",
            "e": [
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen",
            "l": 3
          },
          {
            "c": 0.800000011920929,
            "d": "Read file status and metadata (core)",
            "e": [
              "fstat"
            ],
            "i": "micro-behaviors/fs/file/stat::stat-core",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.800000011920929,
            "d": "Dynamic library unload",
            "e": [
              "dlclose"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlclose",
            "l": 3
          },
          {
            "a": "T1564.001",
            "c": 0.949999988079071,
            "d": "Hidden system binary path",
            "e": [
              "/bin/.ext"
            ],
            "i": "objectives/evasion/file-hiding/system-path::hidden-system-bin-reference",
            "l": 4,
            "m": "F0005"
          },
          {
            "c": 0.8999999761581421,
            "d": "ELF dynstr section name",
            "e": [
              ".dynstr"
            ],
            "i": "metadata/hardening/missing::elf-dynstr-section-name",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Imports ptrace debugger API",
            "e": [
              "ptrace"
            ],
            "i": "micro-behaviors/os/syscall/invoke::ptrace-import",
            "l": 3
          },
          {
            "a": "T1574.006",
            "c": 0.8500000238418579,
            "d": "Core dlopen/dlsym pattern",
            "e": [
              "dlsym",
              "dlopen"
            ],
            "i": "micro-behaviors/dylib/load/runtime::dlopen-dlsym",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Executes shell command and captures",
            "e": [
              "fgets",
              "popen"
            ],
            "i": "micro-behaviors/process/create/shell/capture::capture-command-output",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "dlsym with dlclose/dlerror",
            "e": [
              "dlsym",
              "dlclose"
            ],
            "i": "objectives/anti-static/obfuscation/reflection/class::dlsym-with-cleanup",
            "l": 1
          }
        ],
        "sha": "9fcedd59b7b011bccdb701bd867248e91e9fc48249ddcc6b47a5310277cde599",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!lib/armeabi-v7a/libxcrash_dumper.so",
        "type": "elf"
      },
      {
        "dp": 1,
        "id": 23,
        "ms": {
          "file": {
            "size": 21528.0
          },
          "text": {
            "tab_count": 19.0,
            "digit_ratio": 0.03,
            "space_count": 18.0,
            "total_lines": 11.0,
            "char_entropy": 3.64,
            "unique_chars": 131.0,
            "lines_over_200": 7.0,
            "lines_over_500": 5.0,
            "avg_line_length": 2480.55,
            "high_byte_ratio": 0.32,
            "lines_over_1000": 4.0,
            "max_line_length": 12903.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 11241.0,
            "last_line_length": 177.0,
            "long_token_count": 34.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.41,
            "line_length_stddev": 4148.11,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 2.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "sz": 21528,
        "sha": "39d29bfa0c27225431396ed508904582c579e2975c5b85582cb92ccca31b4bf7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!AndroidManifest.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 24,
        "ms": {
          "file": {
            "size": 1732.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.02,
            "total_lines": 6.0,
            "char_entropy": 3.99,
            "unique_chars": 89.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 389.5,
            "high_byte_ratio": 0.39,
            "lines_over_1000": 1.0,
            "max_line_length": 1147.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 635.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 1147.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "line_length_stddev": 431.41,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            146,
            "textAppearance"
          ],
          [
            161,
            "textColor"
          ],
          [
            175,
            "gravity"
          ],
          [
            185,
            "orientation"
          ],
          [
            202,
            "paddingRight"
          ],
          [
            217,
            "layout_width"
          ],
          [
            232,
            "layout_height"
          ],
          [
            250,
            "layout_marginLeft"
          ],
          [
            270,
            "layout_marginTop"
          ],
          [
            289,
            "layout_marginRight"
          ],
          [
            310,
            "layout_marginBottom"
          ],
          [
            330,
            "minHeight"
          ],
          [
            344,
            "maxLines"
          ],
          [
            353,
            "singleLine"
          ],
          [
            366,
            "layout_weight"
          ],
          [
            382,
            "layout_below"
          ],
          [
            399,
            "layout_alignLeft"
          ],
          [
            416,
            "paddingEnd"
          ],
          [
            431,
            "layout_marginStart"
          ],
          [
            452,
            "layout_marginEnd"
          ],
          [
            471,
            "layout_alignStart"
          ],
          [
            489,
            "LinearLayout"
          ],
          [
            506,
            "RelativeLayout"
          ],
          [
            523,
            "TextView"
          ],
          [
            534,
            "android"
          ],
          [
            542,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1732,
        "sha": "480535d45e1e5d26dd10bb3f1457eff67cfa80548ba63c68eb5c049fed2f818c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/--.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 25,
        "ms": {
          "file": {
            "size": 1324.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.76,
            "space_count": 58.0,
            "total_lines": 3.0,
            "char_entropy": 4.84,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 486.0,
            "high_byte_ratio": 0.14,
            "lines_over_1000": 1.0,
            "max_line_length": 1116.0,
            "non_ascii_ratio": 0.14,
            "null_byte_count": 220.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.15,
            "line_length_stddev": 459.11,
            "non_printable_ratio": 0.23,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M941.7,391.7c9.3,-14 6.2,-32.7 -6.2,-43.6 -14,-10.9 -32.7,-7.8 -43.6,6.2 -1.6,1.6 -174.3,205.4 -379.7,205.4 -199.2,0 -379.7,-205"
          ],
          [
            933,
            "android"
          ],
          [
            941,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            988,
            "path"
          ],
          [
            995,
            "vector"
          ]
        ],
        "sz": 1324,
        "sha": "4de71751a1f33f1c035b1b286d38aa9314ee6e76903796ce403020e49f422aca",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 26,
        "ms": {
          "file": {
            "size": 472.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.93,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 200.67,
            "high_byte_ratio": 0.33,
            "max_line_length": 521.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 193.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 521.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 228.91,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            77,
            "background"
          ],
          [
            90,
            "focusable"
          ],
          [
            102,
            "clickable"
          ],
          [
            114,
            "layout_width"
          ],
          [
            129,
            "layout_height"
          ],
          [
            147,
            "Switch"
          ],
          [
            156,
            "android"
          ],
          [
            164,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 472,
        "sha": "f92e3a4e9983fe62bd790ddbff41e27f7b953c2707b9b58bad2b12bfeeca0988",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-A.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 27,
        "ms": {
          "file": {
            "size": 1396.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 8.0,
            "char_entropy": 4.02,
            "unique_chars": 82.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 240.37,
            "high_byte_ratio": 0.42,
            "max_line_length": 787.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 491.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 247.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.25,
            "line_length_stddev": 237.66,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            118,
            "textAppearance"
          ],
          [
            133,
            "ellipsize"
          ],
          [
            147,
            "layout_gravity"
          ],
          [
            167,
            "fadingEdge"
          ],
          [
            182,
            "duplicateParentState"
          ],
          [
            203,
            "layout_width"
          ],
          [
            218,
            "layout_height"
          ],
          [
            236,
            "layout_marginLeft"
          ],
          [
            256,
            "layout_marginRight"
          ],
          [
            275,
            "singleLine"
          ],
          [
            288,
            "layout_weight"
          ],
          [
            304,
            "layout_below"
          ],
          [
            321,
            "layout_alignParentLeft"
          ],
          [
            346,
            "layout_alignParentTop"
          ],
          [
            370,
            "RelativeLayout"
          ],
          [
            387,
            "TextView"
          ],
          [
            398,
            "android"
          ],
          [
            406,
            "--androidx.appcompat.view.menu.ListMenuItemView"
          ],
          [
            454,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1396,
        "sha": "8da5a2e64b747946c32732ad68683e0ba7205c746705db96365408869c644fd0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-Y.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 28,
        "ms": {
          "file": {
            "size": 528.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 4.27,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 332.5,
            "high_byte_ratio": 0.31,
            "max_line_length": 649.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 184.0,
            "last_line_length": 649.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.28,
            "line_length_stddev": 316.5,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "theme"
          ],
          [
            86,
            "layout_gravity"
          ],
          [
            101,
            "layout_width"
          ],
          [
            116,
            "layout_height"
          ],
          [
            134,
            "android"
          ],
          [
            150,
            "\u003c\u003ccom.google.android.material.snackbar.Snackbar$SnackbarLayout"
          ],
          [
            213,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            268,
            "view"
          ]
        ],
        "sz": 528,
        "sha": "d303ff993c9efe73dbd9c98fad99766463c0264adadcb7fffe73601375332138",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-c.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 29,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.22,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 177.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 227.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.92,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "850352b6c69d9a82b2647fce05d52e4ab92421a5889bf75b022ab44f68dbb995",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-e.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 30,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.31
          },
          "file": {
            "size": 201.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.05,
            "pixel_entropy": 1.05,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 6.58
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            193,
            "IEND"
          ]
        ],
        "sz": 201,
        "sha": "a18cdaaf3742b1a3d4f484fa15d00fa34afb21495884301aafa3213338661ed6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-l.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 31,
        "ms": {
          "file": {
            "size": 532.0
          },
          "text": {
            "tab_count": 14.0,
            "total_lines": 2.0,
            "char_entropy": 4.05,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 340.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 663.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 204.0,
            "last_line_length": 663.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 322.5,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "layout_gravity"
          ],
          [
            98,
            "focusable"
          ],
          [
            110,
            "clickable"
          ],
          [
            124,
            "duplicateParentState"
          ],
          [
            145,
            "layout_width"
          ],
          [
            160,
            "layout_height"
          ],
          [
            178,
            "RadioButton"
          ],
          [
            192,
            "android"
          ],
          [
            200,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 532,
        "sha": "bddc3b23ebe7083aa66d7a7370c7edfe0d1b3f15e8a7a178118bc5a255d8605a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-o.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 32,
        "ms": {
          "file": {
            "size": 1100.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.51,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 772.5,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1527.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 496.0,
            "last_line_length": 1527.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 754.5,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_enabled"
          ],
          [
            92,
            "state_pressed"
          ],
          [
            110,
            "gravity"
          ],
          [
            124,
            "constantSize"
          ],
          [
            141,
            "android"
          ],
          [
            151,
            "bitmap"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            205,
            "item"
          ],
          [
            212,
            "selector"
          ]
        ],
        "sz": 1100,
        "sha": "0e3f9237c59d075e329678f1d9957dcecd5bd23e61e4c2682aa276f05d698a71",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/-u.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 33,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 404.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.28,
            "pixel_entropy": 1.28,
            "histogram_flatness": 0.16
          },
          "binary": {
            "overall_entropy": 7.21
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            396,
            "IEND"
          ]
        ],
        "sz": 404,
        "sha": "5ced2ab774853050255d7309e10b76217813d56f3f8ab8fb73ac3f635d90c676",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/06.png",
        "type": "png"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 34,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.47,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 212.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 1.0,
            "r_entropy": 0.47,
            "pixel_entropy": 0.47,
            "histogram_flatness": 0.06
          },
          "binary": {
            "overall_entropy": 3.96
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            204,
            "IEND"
          ]
        ],
        "sz": 212,
        "sha": "21f0b55280be10b187ceff8edef4a5a7047683e6e9fcf47de410aa3839f41094",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/09.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 35,
        "ms": {
          "png": {
            "a_entropy": 1.69,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 206.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 4.0,
            "pixel_entropy": 0.6,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 6.58
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            198,
            "IEND"
          ]
        ],
        "sz": 206,
        "sha": "6306048ba5f7eca43e7bdadeefa9412180508486fd543e02de93d2a013e223f0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/09.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 36,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.1,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 207.0
          },
          "image": {
            "width": 30.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.31,
            "edge_density": 0.03,
            "pixel_entropy": 0.31,
            "histogram_flatness": 0.04
          },
          "binary": {
            "overall_entropy": 4.04
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            199,
            "IEND"
          ]
        ],
        "sz": 207,
        "sha": "c56ab9375b149ba1c5ee268f22b3cf6507bb47986f628391500fba38147dab28",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0H.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 37,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 432.0
          },
          "image": {
            "width": 64.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 1.21,
            "pixel_entropy": 1.21,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 7.19
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            424,
            "IEND"
          ]
        ],
        "sz": 432,
        "sha": "2fa524cda78d7ebd66164a896a042277b7a56b8658fb318fc700a114cb04f7b2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0I.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 38,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 178.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 228.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.69,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "6ad3a4cafb509def8107e94ea2d19c09baf85c96a4a611abeae4ba54606c51bb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0N.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 39,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.19
          },
          "file": {
            "size": 1741.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 1.0,
            "r_entropy": 2.12,
            "edge_density": 0.03,
            "pixel_entropy": 2.12,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 7.43
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "VPLTE"
          ],
          [
            1031,
            "173.187.106.135:52794"
          ],
          [
            1733,
            "IEND"
          ]
        ],
        "sz": 1741,
        "sha": "9378630078490255127bb51a54dda506adf44396ce60a02bf72873e520a3b9d3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0X.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 40,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.05,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 198.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "drawable"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            144,
            "item"
          ],
          [
            151,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "72a069c1c1c4a6c80518cbab2c7895fe308f4a9d4dc07e384491e088c1a7d5e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0b.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 41,
        "ms": {
          "file": {
            "size": 612.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 4.14,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 153.6,
            "high_byte_ratio": 0.31,
            "max_line_length": 393.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 230.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 7.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.3,
            "line_length_stddev": 147.95,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "textAppearance"
          ],
          [
            101,
            "ellipsize"
          ],
          [
            115,
            "paddingLeft"
          ],
          [
            127,
            "paddingTop"
          ],
          [
            140,
            "paddingRight"
          ],
          [
            155,
            "paddingBottom"
          ],
          [
            171,
            "layout_width"
          ],
          [
            186,
            "layout_height"
          ],
          [
            204,
            "maxLines"
          ],
          [
            215,
            "TextView"
          ],
          [
            226,
            "android"
          ],
          [
            234,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 612,
        "sha": "d9007ee816f0ec564bc9958ed718c046e01ea13ec52e6ae12f5ea1660b7a4381",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0q.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 42,
        "ms": {
          "file": {
            "size": 1144.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.7,
            "space_count": 46.0,
            "total_lines": 3.0,
            "char_entropy": 4.88,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 426.67,
            "high_byte_ratio": 0.16,
            "max_line_length": 938.0,
            "non_ascii_ratio": 0.16,
            "null_byte_count": 222.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.17,
            "line_length_stddev": 378.23,
            "non_printable_ratio": 0.27,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            156,
            "PM12,7c2.76,0 5,2.24 5,5 0,0.65 -0.13,1.26 -0.36,1.83l2.92,2.92c1.51,-1.26 2.7,-2.89 3.43,-4.75 -1.73,-4.39 -6,-7.5 -11,-7.5 -1."
          ],
          [
            752,
            "android"
          ],
          [
            760,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            807,
            "path"
          ],
          [
            814,
            "vector"
          ]
        ],
        "sz": 1144,
        "sha": "2df3e0fe809521b7b725c6bcee3dce7c13ae855535544b2ea77f6af1033625d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/0w.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 43,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.21
          },
          "file": {
            "size": 159.0
          },
          "image": {
            "width": 12.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 1.47,
            "edge_density": 0.08,
            "pixel_entropy": 1.47,
            "histogram_flatness": 0.18
          },
          "binary": {
            "overall_entropy": 6.27
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            151,
            "IEND"
          ]
        ],
        "sz": 159,
        "sha": "5a6ca1d0d2fea53813da5b3c9037408087f9f753f58dd2e128a4a48f7689769f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/11.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 44,
        "ms": {
          "file": {
            "size": 2660.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.74,
            "space_count": 132.0,
            "total_lines": 9.0,
            "char_entropy": 4.74,
            "unique_chars": 95.0,
            "lines_over_200": 4.0,
            "lines_over_500": 3.0,
            "avg_line_length": 338.67,
            "high_byte_ratio": 0.19,
            "lines_over_1000": 1.0,
            "max_line_length": 1332.0,
            "non_ascii_ratio": 0.19,
            "null_byte_count": 590.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 833.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.19,
            "line_length_stddev": 456.77,
            "non_printable_ratio": 0.29,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            138,
            "name"
          ],
          [
            145,
            "height"
          ],
          [
            178,
            "viewportWidth"
          ],
          [
            196,
            "viewportHeight"
          ],
          [
            211,
            "fillColor"
          ],
          [
            225,
            "pathData"
          ],
          [
            234,
            "translateX"
          ],
          [
            247,
            "translateY"
          ],
          [
            260,
            "fillAlpha"
          ],
          [
            276,
            "M -7.0,-7.0 l 14.0,0.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l 0.0,14.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l -14.0,0.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l 0."
          ],
          [
            785,
            "M 7.0,-9.0 c 0.0,0.0 -14.0,0.0 -14.0,0.0 c -1.1044921875,0.0 -2.0,0.8955078125 -2.0,2.0 c 0.0,0.0 0.0,14.0 0.0,14.0 c 0.0,1.1044"
          ],
          [
            1561,
            "android"
          ],
          [
            1569,
            "box_dilate"
          ],
          [
            1584,
            "box_inner_merged"
          ],
          [
            1603,
            "box_outer_merged"
          ],
          [
            1622,
            "btn_checkbox_unchecked"
          ],
          [
            1655,
            "group"
          ],
          [
            1661,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1706,
            "icon_null"
          ],
          [
            1720,
            "path"
          ],
          [
            1727,
            "vector"
          ]
        ],
        "sz": 2660,
        "sha": "e618d2ffe965ae475f462281a349c0177b76bc95c1d0bac219325873a2b51ad7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/1L.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 45,
        "ms": {
          "file": {
            "size": 1228.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.01,
            "total_lines": 7.0,
            "char_entropy": 3.65,
            "unique_chars": 68.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 240.57,
            "high_byte_ratio": 0.41,
            "max_line_length": 617.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 533.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 75.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 214.13,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            98,
            "color"
          ],
          [
            104,
            "topLeftRadius"
          ],
          [
            122,
            "topRightRadius"
          ],
          [
            139,
            "bottomLeftRadius"
          ],
          [
            158,
            "bottomRightRadius"
          ],
          [
            184,
            "bottom"
          ],
          [
            193,
            "android"
          ],
          [
            203,
            "corners"
          ],
          [
            211,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            258,
            "item"
          ],
          [
            263,
            "layer-list"
          ],
          [
            278,
            "padding"
          ],
          [
            288,
            "shape"
          ],
          [
            296,
            "solid"
          ]
        ],
        "sz": 1228,
        "sha": "40c6e1a053975000d827da89dcd10258d7b9ad818fe33625c949e6adc2e060cd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/1M.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 46,
        "ms": {
          "file": {
            "size": 1304.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 4.34,
            "unique_chars": 84.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 823.5,
            "high_byte_ratio": 0.31,
            "lines_over_1000": 1.0,
            "max_line_length": 1110.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 449.0,
            "last_line_length": 537.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 286.5,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            120,
            "textColor"
          ],
          [
            134,
            "gravity"
          ],
          [
            147,
            "clipChildren"
          ],
          [
            162,
            "layout_width"
          ],
          [
            177,
            "layout_height"
          ],
          [
            199,
            "scaleType"
          ],
          [
            250,
            "layout_constraintDimensionRatio"
          ],
          [
            284,
            "layout_constraintLeft_toLeftOf"
          ],
          [
            315,
            "layout_constraintRight_toRightOf"
          ],
          [
            352,
            "layout_constraintTop_toTopOf"
          ],
          [
            387,
            "ImageView"
          ],
          [
            401,
            "android"
          ],
          [
            409,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            463,
            "androidx.core.remo.win.OppoItem"
          ],
          [
            501,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            543,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1304,
        "sha": "c1597d483e96f25d05165a7998814b06ec0c6366b3b542e7d3c8d6b8b59a5999",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/1m.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 47,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 7.0,
            "chunks_total": 11.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 54062.0
          },
          "image": {
            "width": 3200.0,
            "height": 3200.0,
            "channels": 1.0,
            "r_entropy": 0.91,
            "edge_density": 0.0,
            "pixel_entropy": 0.91,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 7.54
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            6160,
            "co39"
          ],
          [
            7693,
            "Bfwz"
          ],
          [
            8617,
            "Bfwy"
          ],
          [
            9288,
            "IDAT"
          ],
          [
            17189,
            "hM ./tTA`Jq"
          ],
          [
            17853,
            "gh30"
          ],
          [
            24035,
            "Z36C"
          ],
          [
            26675,
            "65WO"
          ],
          [
            29488,
            "5C3M"
          ],
          [
            30460,
            "Z3 WJC"
          ],
          [
            30564,
            "2FHC"
          ],
          [
            31443,
            "5C2A"
          ],
          [
            38626,
            "Ibnw"
          ],
          [
            54054,
            "IEND"
          ]
        ],
        "sz": 54062,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "f576f931b8640aea3e2da8b7566b428f64ddf1d2d6671951d9b31cda98708e54",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/1s.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 48,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 3.97,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 504.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 504.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 158.0,
            "last_line_length": 504.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "005b9002f91605d0ddfecd55b6da1b1b39e23dfd3c0965960fc1f0c45dea529d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/1u.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 49,
        "ms": {
          "file": {
            "size": 516.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 224.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            81,
            "height"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "android"
          ],
          [
            114,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            161,
            "shape"
          ],
          [
            169,
            "size"
          ],
          [
            176,
            "solid"
          ]
        ],
        "sz": 516,
        "sha": "976c8b16e6a0728e6389e244e8f8e27d2c5dc8b55a4d20e6d4735a49a1058743",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/1y.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 50,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 2.88,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 207.0
          },
          "image": {
            "width": 6.0,
            "height": 6.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 3.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            199,
            "IEND"
          ]
        ],
        "sz": 207,
        "sha": "5d4161bf9482b5d2a2346cd3fa2739ec3203d995bebac02e89a732943368bbfc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2C.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 51,
        "ms": {
          "file": {
            "size": 940.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.31,
            "space_count": 6.0,
            "total_lines": 3.0,
            "char_entropy": 4.35,
            "unique_chars": 80.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 390.67,
            "high_byte_ratio": 0.3,
            "max_line_length": 992.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 345.0,
            "last_line_length": 173.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.29,
            "line_length_stddev": 430.57,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "height"
          ],
          [
            113,
            "viewportWidth"
          ],
          [
            131,
            "viewportHeight"
          ],
          [
            146,
            "fillColor"
          ],
          [
            160,
            "pathData"
          ],
          [
            171,
            "strokeColor"
          ],
          [
            185,
            "strokeWidth"
          ],
          [
            197,
            "fillAlpha"
          ],
          [
            209,
            "//M12,12m-12,0a12,12 0,1 1,24 0a12,12 0,1 1,-24 0"
          ],
          [
            259,
            "HHM9.189,15.939l-3.127,-3.128l-1.061,1.061l4.189,4.189l9,-9l-1.061,-1.061z"
          ],
          [
            336,
            "android"
          ],
          [
            344,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            391,
            "path"
          ],
          [
            398,
            "vector"
          ]
        ],
        "sz": 940,
        "sha": "44246e967feecb0ca01223340810cde966e0fa2d87f36fce8ba6ef7c32fd464d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2D.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 52,
        "ms": {
          "file": {
            "size": 920.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.45,
            "space_count": 9.0,
            "total_lines": 3.0,
            "char_entropy": 4.8,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 355.33,
            "high_byte_ratio": 0.21,
            "max_line_length": 716.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 219.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.21,
            "line_length_stddev": 279.48,
            "non_printable_ratio": 0.31,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            156,
            "rM3,5h2L5,3c-1.1,0 -2,0.9 -2,2zM3,13h2v-2L3,11v2zM7,21h2v-2L7,19v2zM3,9h2L5,7L3,7v2zM13,3h-2v2h2L13,3zM19,3v2h2c0,-1.1 -0.9,-2 -"
          ],
          [
            530,
            "android"
          ],
          [
            538,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            585,
            "path"
          ],
          [
            592,
            "vector"
          ]
        ],
        "sz": 920,
        "sha": "3816c83d42d23c0dc86b97f887b3152009180c452cf3bbe51abd6990d44529a5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2D1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 53,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 4.06,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "avg_line_length": 147.2,
            "high_byte_ratio": 0.31,
            "max_line_length": 460.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 232.0,
            "last_line_length": 181.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 167.64,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "name"
          ],
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            166,
            "android"
          ],
          [
            174,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "path"
          ],
          [
            236,
            "vector"
          ]
        ],
        "sz": 588,
        "sha": "333a51cc775ff2e7a73d62b7bb82c6a517af505f8a3e20161759fbc6cf25c60d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2J.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 54,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.42
          },
          "file": {
            "size": 270.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.46,
            "pixel_entropy": 1.46,
            "histogram_flatness": 0.18
          },
          "binary": {
            "overall_entropy": 6.95
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            262,
            "IEND"
          ]
        ],
        "sz": 270,
        "sha": "6d34a8bb29be26e343781603588506f33bd1b93732a1c1bc9fd84678aa36b178",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2K.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 55,
        "ms": {
          "file": {
            "size": 1768.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 11.0,
            "char_entropy": 3.88,
            "unique_chars": 87.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 220.73,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1015.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 679.0,
            "empty_line_ratio": 0.27,
            "last_line_length": 249.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 283.78,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            144,
            "textColor"
          ],
          [
            158,
            "gravity"
          ],
          [
            168,
            "orientation"
          ],
          [
            185,
            "background"
          ],
          [
            198,
            "paddingTop"
          ],
          [
            211,
            "paddingBottom"
          ],
          [
            227,
            "layout_width"
          ],
          [
            242,
            "layout_height"
          ],
          [
            260,
            "layout_marginLeft"
          ],
          [
            280,
            "layout_marginTop"
          ],
          [
            299,
            "layout_marginRight"
          ],
          [
            320,
            "text"
          ],
          [
            334,
            "lines"
          ],
          [
            340,
            "inputType"
          ],
          [
            354,
            "textAllCaps"
          ],
          [
            366,
            "paddingStart"
          ],
          [
            381,
            "paddingEnd"
          ],
          [
            396,
            "layout_marginHorizontal"
          ],
          [
            422,
            "Button"
          ],
          [
            431,
            "EditText"
          ],
          [
            440,
            "LinearLayout"
          ],
          [
            457,
            "TextView"
          ],
          [
            468,
            "android"
          ],
          [
            476,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1768,
        "sha": "0a24e96fa5b862185899cd04193ab98790f3d6fa360b74825184cd1dd8cc2f3f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2Q.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 56,
        "ms": {
          "file": {
            "size": 448.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.66,
            "unique_chars": 44.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 588.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 588.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 195.0,
            "last_line_length": 588.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "radius"
          ],
          [
            83,
            "android"
          ],
          [
            93,
            "corners"
          ],
          [
            101,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            148,
            "shape"
          ],
          [
            156,
            "solid"
          ]
        ],
        "sz": 448,
        "sha": "a4274b0f59e0bb8e34b498476a48e92103658ef7968c1015f9725d32048e6dc0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2p.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 57,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 6.0,
            "char_entropy": 3.89,
            "unique_chars": 61.0,
            "lines_over_200": 2.0,
            "avg_line_length": 132.5,
            "high_byte_ratio": 0.34,
            "max_line_length": 310.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 253.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 106.16,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromYDelta"
          ],
          [
            121,
            "toYDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "96b7b9513447ff7885d30f0247c1d3356deba845d1de856cc436c900b2716f49",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/2p1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 58,
        "ms": {
          "file": {
            "size": 796.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 4.0,
            "char_entropy": 3.83,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 271.25,
            "high_byte_ratio": 0.4,
            "max_line_length": 668.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 315.0,
            "last_line_length": 135.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 229.29,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "orientation"
          ],
          [
            99,
            "layout_width"
          ],
          [
            114,
            "layout_height"
          ],
          [
            132,
            "baselineAligned"
          ],
          [
            150,
            "layoutDirection"
          ],
          [
            166,
            "LinearLayout"
          ],
          [
            183,
            "android"
          ],
          [
            191,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            238,
            "include"
          ],
          [
            248,
            "layout"
          ]
        ],
        "sz": 796,
        "sha": "9f1c4fd6bbd6fd719032ececb91a3d1e38d8b8568fd3fb72923c89c74dde632d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/30.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 59,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.19,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 2463.0
          },
          "image": {
            "width": 81.0,
            "height": 81.0,
            "channels": 2.0,
            "r_entropy": 2.72,
            "edge_density": 0.06,
            "pixel_entropy": 2.72,
            "histogram_flatness": 0.34
          },
          "binary": {
            "overall_entropy": 7.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            508,
            "Lopb"
          ],
          [
            1771,
            "206.166.82.167:43634"
          ],
          [
            2455,
            "IEND"
          ]
        ],
        "sz": 2463,
        "sha": "0f8db605d63bf1d6d35fd647d592ac4e70c9a712ff5d1c2114c8d58a88b8228a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/33.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 60,
        "ms": {
          "file": {
            "size": 468.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 622.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 622.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 201.0,
            "last_line_length": 622.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "state_selected"
          ],
          [
            79,
            "drawable"
          ],
          [
            90,
            "android"
          ],
          [
            98,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            145,
            "item"
          ],
          [
            152,
            "selector"
          ]
        ],
        "sz": 468,
        "sha": "e23cd050afc97f50afc72e1e6de7ad8e2bdb7aacaf4497d7d543db2258daa54d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/36.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 61,
        "ms": {
          "file": {
            "size": 1224.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.01,
            "unique_chars": 77.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 559.33,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1006.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 445.0,
            "last_line_length": 437.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 326.43,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            106,
            "layout_gravity"
          ],
          [
            126,
            "focusable"
          ],
          [
            140,
            "fitsSystemWindows"
          ],
          [
            158,
            "layout_width"
          ],
          [
            173,
            "layout_height"
          ],
          [
            191,
            "soundEffectsEnabled"
          ],
          [
            213,
            "importantForAccessibility"
          ],
          [
            241,
            "layout_behavior"
          ],
          [
            259,
            "FrameLayout"
          ],
          [
            273,
            "View"
          ],
          [
            280,
            "android"
          ],
          [
            288,
            "33androidx.coordinatorlayout.widget.CoordinatorLayout"
          ],
          [
            348,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            390,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1224,
        "sha": "6eb1d3b331fc3546d74b5953a3ebcb73b364d4ac61cc4853908321c9c92f882f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/38.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 62,
        "ms": {
          "png": {
            "a_entropy": 1.46,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.11
          },
          "file": {
            "size": 1023.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 4.0,
            "b_entropy": 2.02,
            "g_entropy": 2.02,
            "r_entropy": 2.02,
            "edge_density": 0.1,
            "pixel_entropy": 2.78,
            "histogram_flatness": 0.35
          },
          "binary": {
            "overall_entropy": 7.78
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            85,
            "q1a4"
          ],
          [
            777,
            "R9U9U"
          ],
          [
            1015,
            "IEND"
          ]
        ],
        "sz": 1023,
        "sha": "bb3dae975c8775febb63fb10cfd690083474fd0509321ccb6945857301ac663a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/39.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 63,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 3.99,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 506.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 506.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 156.0,
            "last_line_length": 506.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "9c6cba46748f3cb25c7de063d0c72313fdf528cfb4458591be5334bdca990c86",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3B.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 64,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 7.0,
            "char_entropy": 3.99,
            "unique_chars": 64.0,
            "lines_over_200": 2.0,
            "avg_line_length": 137.14,
            "high_byte_ratio": 0.34,
            "max_line_length": 498.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 293.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 160.56,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            134,
            "viewportWidth"
          ],
          [
            152,
            "viewportHeight"
          ],
          [
            167,
            "fillColor"
          ],
          [
            181,
            "pathData"
          ],
          [
            192,
            "android"
          ],
          [
            202,
            "group"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "path"
          ],
          [
            262,
            "vector"
          ]
        ],
        "sz": 744,
        "sha": "662159f6841efd115ccadd74920c8a7bd661bc1855c5afe072aa6ab579c08d9f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3O.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 65,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.14
          },
          "file": {
            "size": 375.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.8,
            "pixel_entropy": 0.8,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.34
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            367,
            "IEND"
          ]
        ],
        "sz": 375,
        "sha": "12ec9f9ad5fa3d7d897114af6c2297b66f31cb056e43daffbe80d23f6f66396d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3X.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 66,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "total_lines": 7.0,
            "char_entropy": 3.98,
            "unique_chars": 77.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 182.29,
            "high_byte_ratio": 0.39,
            "max_line_length": 871.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 362.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 7.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 292.5,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "layout_gravity"
          ],
          [
            110,
            "background"
          ],
          [
            123,
            "layout_width"
          ],
          [
            138,
            "layout_height"
          ],
          [
            154,
            "foreground"
          ],
          [
            167,
            "scaleType"
          ],
          [
            181,
            "FrameLayout"
          ],
          [
            195,
            "ImageButton"
          ],
          [
            209,
            "View"
          ],
          [
            216,
            "android"
          ],
          [
            224,
            "33com.example.android.camera.utils.AutoFitSurfaceView"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 948,
        "sha": "ba75b3987dfaf8104956e4a37297fa9b181f15dcd73ff5949fa672d58c49d41d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3X.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 67,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.3
          },
          "file": {
            "size": 197.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.98,
            "pixel_entropy": 1.98,
            "histogram_flatness": 0.25
          },
          "binary": {
            "overall_entropy": 6.5
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            189,
            "IEND"
          ]
        ],
        "sz": 197,
        "sha": "6151450ece3ab9667213c3987b6d8fffa25baf9ff43d53bcd9c94fd8ea7616d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3_.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 68,
        "ms": {
          "file": {
            "size": 640.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.22,
            "space_count": 5.0,
            "total_lines": 3.0,
            "char_entropy": 4.3,
            "unique_chars": 72.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 262.0,
            "high_byte_ratio": 0.28,
            "max_line_length": 612.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 239.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 247.68,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            224,
            "android"
          ],
          [
            232,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            279,
            "path"
          ],
          [
            286,
            "vector"
          ]
        ],
        "sz": 640,
        "sha": "c65d3ac57107637fbfcd68c709862228c8b0b92038c6ec11b91c9a5a771233e1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3c.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 69,
        "ms": {
          "file": {
            "size": 492.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 4.26,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 622.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 622.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 171.0,
            "last_line_length": 622.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "layout_gravity"
          ],
          [
            89,
            "layout_width"
          ],
          [
            104,
            "layout_height"
          ],
          [
            122,
            "android"
          ],
          [
            138,
            "\u003c\u003ccom.google.android.material.snackbar.Snackbar$SnackbarLayout"
          ],
          [
            201,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            256,
            "view"
          ]
        ],
        "sz": 492,
        "sha": "ec22d7b08bc022fa5f0b5ed62c35affa42c142daa77b1d7c430e2de6eb72511c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3h.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 70,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "total_lines": 2.0,
            "char_entropy": 3.78,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 386.5,
            "high_byte_ratio": 0.36,
            "max_line_length": 755.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 249.0,
            "last_line_length": 755.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "line_length_stddev": 368.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            86,
            "color"
          ],
          [
            100,
            "bottom"
          ],
          [
            109,
            "android"
          ],
          [
            117,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            164,
            "padding"
          ],
          [
            174,
            "shape"
          ],
          [
            182,
            "size"
          ],
          [
            189,
            "solid"
          ]
        ],
        "sz": 588,
        "sha": "02f18914dc5c53b9e00e10a6d881a028089566f7941e7baa35b8992bb3466529",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3i.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 71,
        "ms": {
          "file": {
            "size": 532.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.77,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 700.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 700.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 222.0,
            "last_line_length": 700.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_pressed"
          ],
          [
            82,
            "drawable"
          ],
          [
            93,
            "exitFadeDuration"
          ],
          [
            112,
            "android"
          ],
          [
            120,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            167,
            "item"
          ],
          [
            174,
            "selector"
          ]
        ],
        "sz": 532,
        "sha": "db5a7176115d76df55906372d4a8843fa2a7709edcc9b7e5be52770bd15403be",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3m.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 72,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 954.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 954.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 307.0,
            "last_line_length": 954.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 724,
        "sha": "78e03d5f64a073f9d10240d06df5403a161b131741a1108d371d369b0c108f8b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3n.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 73,
        "ms": {
          "file": {
            "size": 408.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 4.17,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "avg_line_length": 498.0,
            "high_byte_ratio": 0.27,
            "max_line_length": 498.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 158.0,
            "last_line_length": 498.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "layout_width"
          ],
          [
            79,
            "layout_height"
          ],
          [
            95,
            "scaleType"
          ],
          [
            109,
            "contentDescription"
          ],
          [
            128,
            "ImageView"
          ],
          [
            142,
            "android"
          ],
          [
            150,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 408,
        "sha": "c1ee15c39c1eca1b254b71f556b0c96ed6b6dc3b3d01beee4c5823d510b72ac8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3x.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 74,
        "ms": {
          "file": {
            "size": 1096.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.61,
            "space_count": 42.0,
            "total_lines": 3.0,
            "char_entropy": 4.9,
            "unique_chars": 78.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 420.67,
            "high_byte_ratio": 0.2,
            "lines_over_1000": 1.0,
            "max_line_length": 1080.0,
            "non_ascii_ratio": 0.2,
            "null_byte_count": 231.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.18,
            "line_length_stddev": 466.4,
            "non_printable_ratio": 0.28,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "autoMirrored"
          ],
          [
            116,
            "viewportWidth"
          ],
          [
            134,
            "viewportHeight"
          ],
          [
            149,
            "fillColor"
          ],
          [
            163,
            "pathData"
          ],
          [
            176,
            "M9.64,7.64c0.23,-0.5 0.36,-1.05 0.36,-1.64 0,-2.21 -1.79,-4 -4,-4S2,3.79 2,6s1.79,4 4,4c0.59,0 1.14,-0.13 1.64,-0.36L10,12l-2.36"
          ],
          [
            682,
            "android"
          ],
          [
            690,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            737,
            "path"
          ],
          [
            744,
            "vector"
          ]
        ],
        "sz": 1096,
        "sha": "30d56de8667e6cdeefb48d9a2a004b40520bcdbc65a7c0c843679022e17169fb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/3z.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 75,
        "ms": {
          "file": {
            "size": 644.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.29,
            "space_count": 16.0,
            "total_lines": 3.0,
            "char_entropy": 4.45,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "avg_line_length": 259.33,
            "high_byte_ratio": 0.26,
            "max_line_length": 436.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 224.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 167.14,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            153,
            "``M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"
          ],
          [
            254,
            "android"
          ],
          [
            262,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            309,
            "path"
          ],
          [
            316,
            "vector"
          ]
        ],
        "sz": 644,
        "sha": "fe1ff1e8f0a304f4548325530ed1f2c95044d61a542ab8757eb935b04c6a2f56",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/41.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 76,
        "ms": {
          "file": {
            "size": 388.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 4.2,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 140.0,
            "last_line_length": 484.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            65,
            "layout_width"
          ],
          [
            80,
            "layout_height"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "--androidx.appcompat.view.menu.ExpandedMenuView"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 388,
        "sha": "110dd04a557203b1a48bc8b85f460fd2fac57dfd69e9bd74ced0c6ec39707057",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/43.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 77,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 513.0
          },
          "image": {
            "width": 176.0,
            "height": 88.0,
            "channels": 1.0,
            "r_entropy": 1.1,
            "pixel_entropy": 1.1,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 7.12
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "3PLTE"
          ],
          [
            505,
            "IEND"
          ]
        ],
        "sz": 513,
        "sha": "d83543f0c82b62cf499f2618ad99431f9ef50da60b415980ec8e0e50b90e3893",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/48.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 78,
        "ms": {
          "file": {
            "size": 1320.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.74,
            "space_count": 119.0,
            "total_lines": 3.0,
            "char_entropy": 4.83,
            "unique_chars": 80.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 490.67,
            "high_byte_ratio": 0.16,
            "lines_over_1000": 1.0,
            "max_line_length": 1296.0,
            "non_ascii_ratio": 0.16,
            "null_byte_count": 235.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.09,
            "most_common_ratio": 0.16,
            "line_length_stddev": 569.56,
            "non_printable_ratio": 0.24,
            "repeated_char_sequences": 9.0,
            "max_inline_whitespace_run": 13.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "autoMirrored"
          ],
          [
            116,
            "viewportWidth"
          ],
          [
            134,
            "viewportHeight"
          ],
          [
            149,
            "fillColor"
          ],
          [
            163,
            "pathData"
          ],
          [
            176,
            "M6.0168,3.3333L6.5751,5.575L4.6668,7.4916C3.8751,5.7166 3.6001,4.1916             3.4834,3.3333H6.0168ZM14.4251,13.375L16.6668,1"
          ],
          [
            905,
            "android"
          ],
          [
            913,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            960,
            "path"
          ],
          [
            967,
            "vector"
          ]
        ],
        "sz": 1320,
        "sha": "8f9acacabaf2dfb4bb53dab7ce7bec9c1451ce0a0219ffaa41760ea82da3d2d6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4C.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 79,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 4.0,
            "space_count": 2.0,
            "total_lines": 3.0,
            "char_entropy": 3.98,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 316.67,
            "high_byte_ratio": 0.33,
            "max_line_length": 560.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 304.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 198.0,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            134,
            "viewportWidth"
          ],
          [
            152,
            "viewportHeight"
          ],
          [
            167,
            "fillColor"
          ],
          [
            181,
            "pathData"
          ],
          [
            192,
            "android"
          ],
          [
            202,
            "group"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "path"
          ],
          [
            262,
            "vector"
          ]
        ],
        "sz": 744,
        "sha": "b4a757841824d6f81acc189e3b9d5bc1990b43abad96ed15cca98f8b1fddc8df",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4F.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 80,
        "ms": {
          "file": {
            "size": 900.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.32,
            "space_count": 7.0,
            "total_lines": 3.0,
            "char_entropy": 4.34,
            "unique_chars": 78.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 371.33,
            "high_byte_ratio": 0.29,
            "max_line_length": 639.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 332.0,
            "last_line_length": 7.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.3,
            "line_length_stddev": 266.91,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "height"
          ],
          [
            109,
            "viewportWidth"
          ],
          [
            127,
            "viewportHeight"
          ],
          [
            142,
            "fillColor"
          ],
          [
            156,
            "pathData"
          ],
          [
            167,
            "strokeColor"
          ],
          [
            181,
            "strokeWidth"
          ],
          [
            193,
            "//M12,12m-12,0a12,12 0,1 1,24 0a12,12 0,1 1,-24 0"
          ],
          [
            243,
            "HHM9.189,15.939l-3.127,-3.128l-1.061,1.061l4.189,4.189l9,-9l-1.061,-1.061z"
          ],
          [
            320,
            "android"
          ],
          [
            328,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            375,
            "path"
          ],
          [
            382,
            "vector"
          ]
        ],
        "sz": 900,
        "sha": "428fe76819830be6d863774d5353026d36f10669949cda1dbe2d11b94333a6e3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4F1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 81,
        "ms": {
          "file": {
            "size": 528.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 4.34,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 171.0,
            "last_line_length": 654.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            77,
            "layout_width"
          ],
          [
            92,
            "layout_height"
          ],
          [
            110,
            "layout_marginTop"
          ],
          [
            129,
            "layout_marginBottom"
          ],
          [
            151,
            "android"
          ],
          [
            159,
            "99com.google.android.material.internal.CheckableImageButton"
          ],
          [
            219,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 528,
        "sha": "ad1a405c385710940d421316af63cc7c6a4907c86331e1308fffc9669ea362c6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4G.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 82,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 452.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.72,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.33
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATX"
          ],
          [
            444,
            "IEND"
          ]
        ],
        "sz": 452,
        "sha": "9a9a30c305022a2f8e075d2ed7d33f5c7711bba8d0d0385511fdb62f89f208e3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4P.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 83,
        "ms": {
          "file": {
            "size": 1228.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.01,
            "total_lines": 7.0,
            "char_entropy": 3.89,
            "unique_chars": 77.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 235.14,
            "high_byte_ratio": 0.38,
            "lines_over_1000": 1.0,
            "max_line_length": 1152.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 495.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 235.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 382.43,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            118,
            "enabled"
          ],
          [
            126,
            "ellipsize"
          ],
          [
            140,
            "layout_gravity"
          ],
          [
            157,
            "orientation"
          ],
          [
            174,
            "background"
          ],
          [
            187,
            "clickable"
          ],
          [
            199,
            "layout_width"
          ],
          [
            214,
            "layout_height"
          ],
          [
            230,
            "scaleType"
          ],
          [
            242,
            "singleLine"
          ],
          [
            255,
            "layout_weight"
          ],
          [
            273,
            "alpha"
          ],
          [
            279,
            "paddingStart"
          ],
          [
            294,
            "ImageView"
          ],
          [
            306,
            "LinearLayout"
          ],
          [
            323,
            "TextView"
          ],
          [
            334,
            "android"
          ],
          [
            342,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1228,
        "sha": "0e5a185eb16dbb0028e62f1b9ae91f4b8743db1486e93151849943a8dba1daea",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4W.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 84,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 167.0,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 167.0
          },
          "image": {
            "width": 1.0,
            "height": 1.0,
            "channels": 1.0
          },
          "binary": {
            "overall_entropy": 3.42
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            137,
            "IDAT"
          ],
          [
            159,
            "IEND"
          ]
        ],
        "sz": 167,
        "sha": "378694706fb7256dd2248e2af854efd71ec7e8885f61da2e16a2bd32fcf3d0a9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4_.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 85,
        "ms": {
          "png": {
            "a_entropy": 1.29,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 186.0
          },
          "image": {
            "width": 44.0,
            "height": 22.0,
            "channels": 4.0,
            "b_entropy": 0.99,
            "g_entropy": 0.99,
            "r_entropy": 0.99,
            "edge_density": 0.03,
            "pixel_entropy": 1.93,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 6.32
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            178,
            "IEND"
          ]
        ],
        "sz": 186,
        "sha": "7c8472b72441cc28a1ac53a08b4f0c14f310af338175ba6c46fd6342ac8ce2ff",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4r.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 86,
        "ms": {
          "file": {
            "size": 264.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 44.0,
            "lines_over_200": 1.0,
            "avg_line_length": 354.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 354.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 109.0,
            "last_line_length": 354.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            50,
            "base-config"
          ],
          [
            64,
            "cleartextTrafficPermitted"
          ],
          [
            92,
            "network-security-config"
          ]
        ],
        "sz": 264,
        "sha": "f4861a2727f78aa4a30a4dc82308b1ec645dcce1ed7ab8aa05e806684b4dbee7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/4u.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 87,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.06,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 496.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 496.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 151.0,
            "last_line_length": 496.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "6060220575952eaea18a4ffd58adece3d9ef30b7c59e747d9f03cbd9f1a945e9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/51.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 88,
        "ms": {
          "file": {
            "size": 1492.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.04,
            "total_lines": 4.0,
            "char_entropy": 3.88,
            "unique_chars": 81.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 519.75,
            "high_byte_ratio": 0.43,
            "max_line_length": 944.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 567.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 809.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 377.93,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            126,
            "layout_gravity"
          ],
          [
            143,
            "orientation"
          ],
          [
            162,
            "paddingLeft"
          ],
          [
            174,
            "paddingRight"
          ],
          [
            189,
            "focusable"
          ],
          [
            203,
            "focusableInTouchMode"
          ],
          [
            224,
            "layout_width"
          ],
          [
            239,
            "layout_height"
          ],
          [
            257,
            "baselineAligned"
          ],
          [
            273,
            "layout_weight"
          ],
          [
            289,
            "paddingStart"
          ],
          [
            304,
            "paddingEnd"
          ],
          [
            319,
            "FrameLayout"
          ],
          [
            331,
            "LinearLayout"
          ],
          [
            348,
            "View"
          ],
          [
            355,
            "android"
          ],
          [
            363,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            410,
            "include"
          ],
          [
            420,
            "layout"
          ],
          [
            429,
            "merge"
          ]
        ],
        "sz": 1492,
        "sha": "b2fac24c8c52699359c385a0b5f791dc34d35a528fa4c2d5b6551045b8d442c2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5A.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 89,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 227.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.88,
            "pixel_entropy": 0.88,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 6.8
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            219,
            "IEND"
          ]
        ],
        "sz": 227,
        "sha": "5eca0280bd38a6887b6e41765cf5da573133874625001eb90156eaeb35fbe088",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5J.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 90,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 4.0,
            "space_count": 2.0,
            "total_lines": 3.0,
            "char_entropy": 3.98,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 316.67,
            "high_byte_ratio": 0.33,
            "max_line_length": 560.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 304.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 198.0,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            134,
            "viewportWidth"
          ],
          [
            152,
            "viewportHeight"
          ],
          [
            167,
            "fillColor"
          ],
          [
            181,
            "pathData"
          ],
          [
            192,
            "android"
          ],
          [
            202,
            "group"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "path"
          ],
          [
            262,
            "vector"
          ]
        ],
        "sz": 744,
        "sha": "9e033875ecc30fec8e4b8fbe66c7344cc8a15969198538a825e454f61d678acb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5J.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 91,
        "ms": {
          "file": {
            "size": 3584.0
          },
          "text": {
            "tab_count": 19.0,
            "digit_ratio": 0.08,
            "total_lines": 5.0,
            "char_entropy": 3.28,
            "unique_chars": 88.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1027.2,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 4448.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 1713.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 483.0,
            "long_token_count": 19.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 1719.39,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            138,
            "textSize"
          ],
          [
            149,
            "gravity"
          ],
          [
            159,
            "orientation"
          ],
          [
            176,
            "background"
          ],
          [
            189,
            "layout_width"
          ],
          [
            204,
            "layout_height"
          ],
          [
            222,
            "text"
          ],
          [
            227,
            "layout_weight"
          ],
          [
            290,
            "LinearLayout"
          ],
          [
            307,
            "TextView"
          ],
          [
            318,
            "android"
          ],
          [
            326,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 3584,
        "sha": "f59b76d9e4455fd27b4b07f3d87c73e02b78219ce687fdb86487e7b5dfbb28d5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5K.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 92,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.22,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 238.67,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 226.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 150.76,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "b5dd844c7f079d145cd17e70cdba6d204fb9df0a1da350ced6f12c9eed8934b5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5P.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 93,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.87,
            "unique_chars": 61.0,
            "lines_over_200": 2.0,
            "avg_line_length": 159.6,
            "high_byte_ratio": 0.35,
            "max_line_length": 350.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 255.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 118.85,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromXDelta"
          ],
          [
            121,
            "toXDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "8a7fe1f0f57c25af9b2d4481680ce1f8eda246ee2522c49741d76605173e7d1c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5i.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 94,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.69,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 181.0
          },
          "image": {
            "width": 12.0,
            "height": 11.0,
            "channels": 2.0,
            "r_entropy": 0.44,
            "pixel_entropy": 0.44,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 3.77
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            173,
            "IEND"
          ]
        ],
        "sz": 181,
        "sha": "fa50162bdb3501c6b50cfa36c14dab9c94e48d57f558607ec9858124d70412f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5j.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 95,
        "ms": {
          "file": {
            "size": 680.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.71,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 301.33,
            "high_byte_ratio": 0.37,
            "max_line_length": 670.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 291.0,
            "last_line_length": 155.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 262.53,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "shape"
          ],
          [
            90,
            "color"
          ],
          [
            96,
            "topLeftRadius"
          ],
          [
            114,
            "topRightRadius"
          ],
          [
            131,
            "android"
          ],
          [
            141,
            "corners"
          ],
          [
            149,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            196,
            "item"
          ],
          [
            203,
            "selector"
          ],
          [
            222,
            "solid"
          ]
        ],
        "sz": 680,
        "sha": "2b2164112043a9a0fa4239daf715baec668020df6e6a0ee405d4a94ab174722a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5v.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 96,
        "ms": {
          "png": {
            "a_entropy": 0.61,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.19,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 245.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 4.0,
            "pixel_entropy": 2.15,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 4.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            237,
            "IEND"
          ]
        ],
        "sz": 245,
        "sha": "8c6846f4105ef1c02107e842142e9ce60b08819296e9510b2d0c12cf4560c5e1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/5z.9.png",
        "type": "png"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 97,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.08
          },
          "file": {
            "size": 19022.0
          },
          "image": {
            "width": 711.0,
            "height": 319.0,
            "channels": 1.0,
            "r_entropy": 5.44,
            "edge_density": 0.01,
            "pixel_entropy": 5.44,
            "histogram_flatness": 0.68
          },
          "binary": {
            "overall_entropy": 7.88
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            531,
            "H%IDATx"
          ],
          [
            3527,
            "2\u003e^K8"
          ],
          [
            4395,
            "sw4o"
          ],
          [
            14468,
            "A9V5"
          ],
          [
            14729,
            "$({)"
          ],
          [
            15672,
            "XHvslWM"
          ],
          [
            17491,
            "/7Be"
          ],
          [
            19014,
            "IEND"
          ]
        ],
        "sz": 19022,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.01"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "f04d993f586187eeae9e27dba77b216d2cded69dddbbe2888c931616898d5206",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/62.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 98,
        "ms": {
          "file": {
            "size": 528.0
          },
          "text": {
            "tab_count": 14.0,
            "total_lines": 2.0,
            "char_entropy": 4.04,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 337.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 657.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 204.0,
            "last_line_length": 657.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 319.5,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "layout_gravity"
          ],
          [
            98,
            "focusable"
          ],
          [
            110,
            "clickable"
          ],
          [
            124,
            "duplicateParentState"
          ],
          [
            145,
            "layout_width"
          ],
          [
            160,
            "layout_height"
          ],
          [
            178,
            "CheckBox"
          ],
          [
            189,
            "android"
          ],
          [
            197,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 528,
        "sha": "a1668762570692ea0c7a8f3239cfda92556924a749d34aa301fb41ab12a1004c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/65.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 99,
        "ms": {
          "png": {
            "a_entropy": 2.51,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.16
          },
          "file": {
            "size": 310.0
          },
          "image": {
            "width": 20.0,
            "height": 24.0,
            "channels": 4.0,
            "b_entropy": 0.78,
            "g_entropy": 0.78,
            "r_entropy": 0.78,
            "edge_density": 0.06,
            "pixel_entropy": 2.74,
            "histogram_flatness": 0.34
          },
          "binary": {
            "overall_entropy": 6.99
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            302,
            "IEND"
          ]
        ],
        "sz": 310,
        "sha": "5358737cb680ea1cdd6ba400d33316fabf872fd44f6a0e127bfc8bdd1632b374",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6E.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 100,
        "ms": {
          "file": {
            "size": 1176.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 20.0,
            "char_entropy": 3.74,
            "unique_chars": 76.0,
            "lines_over_200": 3.0,
            "avg_line_length": 82.65,
            "high_byte_ratio": 0.44,
            "max_line_length": 439.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 468.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 3.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 106.43,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "layout_gravity"
          ],
          [
            107,
            "orientation"
          ],
          [
            124,
            "scrollbars"
          ],
          [
            137,
            "layout_width"
          ],
          [
            152,
            "layout_height"
          ],
          [
            170,
            "FrameLayout"
          ],
          [
            182,
            "LinearLayout"
          ],
          [
            199,
            "android"
          ],
          [
            207,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            251,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            298,
            "include"
          ],
          [
            308,
            "layout"
          ]
        ],
        "sz": 1176,
        "sha": "f4687aa2b5087cff60e5050f1ebf9fcd986ca584796be28509e8af1f24a722bf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6J.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 101,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 1864.0
          },
          "image": {
            "width": 520.0,
            "height": 85.0,
            "channels": 1.0,
            "r_entropy": 0.8,
            "pixel_entropy": 0.8,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            1856,
            "IEND"
          ]
        ],
        "sz": 1864,
        "sha": "31442a437c63e913c4c69cab1d0ae59db1fd77191026656c9e233e0c996186ee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6W.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 102,
        "ms": {
          "file": {
            "size": 388.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 2.0,
            "char_entropy": 3.95,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 240.5,
            "high_byte_ratio": 0.29,
            "max_line_length": 350.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 157.0,
            "last_line_length": 131.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 109.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromAlpha"
          ],
          [
            104,
            "toAlpha"
          ],
          [
            114,
            "alpha"
          ],
          [
            122,
            "android"
          ],
          [
            130,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 388,
        "sha": "cd4c60c867f06dfbc76f061a26202cb62a404ee33adb17d632d9c5f9015b3d85",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6e.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 103,
        "ms": {
          "file": {
            "size": 1332.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 4.37,
            "unique_chars": 87.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 836.5,
            "high_byte_ratio": 0.31,
            "lines_over_1000": 1.0,
            "max_line_length": 1124.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 462.0,
            "last_line_length": 549.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.28,
            "line_length_stddev": 287.5,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            130,
            "textSize"
          ],
          [
            139,
            "textColor"
          ],
          [
            153,
            "gravity"
          ],
          [
            166,
            "clipChildren"
          ],
          [
            181,
            "layout_width"
          ],
          [
            196,
            "layout_height"
          ],
          [
            212,
            "scaleType"
          ],
          [
            226,
            "text"
          ],
          [
            270,
            "layout_constraintDimensionRatio"
          ],
          [
            304,
            "layout_constraintLeft_toLeftOf"
          ],
          [
            335,
            "layout_constraintRight_toRightOf"
          ],
          [
            372,
            "layout_constraintTop_toTopOf"
          ],
          [
            413,
            "TextView"
          ],
          [
            424,
            "android"
          ],
          [
            432,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            486,
            "androidx.core.remo.win.OppoItem"
          ],
          [
            524,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            566,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1332,
        "sha": "7569e06b34a9f26c30772764cc9168c186ddbef4b61e2aef592456b2438860b7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6f.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 104,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 42.75,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 171.0
          },
          "image": {
            "width": 2.0,
            "height": 2.0,
            "channels": 1.0
          },
          "binary": {
            "overall_entropy": 3.57
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            137,
            "IDAT"
          ],
          [
            163,
            "IEND"
          ]
        ],
        "sz": 171,
        "sha": "49903073ab23abfc11a55e1333eb2905c743e1b382006c27c15434fd76e0207c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6w.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 105,
        "ms": {
          "png": {
            "a_entropy": 1.96,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.22
          },
          "file": {
            "size": 508.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 4.0,
            "b_entropy": 2.29,
            "g_entropy": 2.3,
            "r_entropy": 2.31,
            "edge_density": 0.1,
            "pixel_entropy": 3.09,
            "histogram_flatness": 0.39
          },
          "binary": {
            "overall_entropy": 7.45
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            500,
            "IEND"
          ]
        ],
        "sz": 508,
        "sha": "6bf5e525d65668f8c130dc5c2cb85b863dea776d14a11c8d2adca7d16f9fb419",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/6x.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 106,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.31,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 186.0
          },
          "image": {
            "width": 19.0,
            "height": 16.0,
            "channels": 2.0,
            "r_entropy": 0.45,
            "pixel_entropy": 0.45,
            "histogram_flatness": 0.06
          },
          "binary": {
            "overall_entropy": 3.85
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            178,
            "IEND"
          ]
        ],
        "sz": 186,
        "sha": "a933aaebbeae489dea84e78e7fbc4079fdfda576fbdeb339401fda6cdc03e764",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/72.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 107,
        "ms": {
          "file": {
            "size": 1868.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "total_lines": 8.0,
            "char_entropy": 3.82,
            "unique_chars": 86.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 331.63,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 1613.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 704.0,
            "empty_line_ratio": 0.38,
            "last_line_length": 1613.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 532.42,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            130,
            "textAppearance"
          ],
          [
            147,
            "layout_gravity"
          ],
          [
            164,
            "orientation"
          ],
          [
            181,
            "background"
          ],
          [
            194,
            "visibility"
          ],
          [
            209,
            "duplicateParentState"
          ],
          [
            230,
            "layout_width"
          ],
          [
            245,
            "layout_height"
          ],
          [
            263,
            "layout_marginTop"
          ],
          [
            282,
            "layout_marginBottom"
          ],
          [
            302,
            "scaleType"
          ],
          [
            316,
            "minWidth"
          ],
          [
            325,
            "singleLine"
          ],
          [
            338,
            "layout_weight"
          ],
          [
            354,
            "ImageView"
          ],
          [
            366,
            "LinearLayout"
          ],
          [
            383,
            "Space"
          ],
          [
            391,
            "TextView"
          ],
          [
            402,
            "android"
          ],
          [
            410,
            "--androidx.appcompat.view.menu.ListMenuItemView"
          ],
          [
            458,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1868,
        "sha": "aa6f36a078ab342b42295c1f43eeccadc4f11f3b84d152d483c4e152a5d6ee17",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/75.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 108,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.28,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 484.0
          },
          "image": {
            "width": 35.0,
            "height": 25.0,
            "channels": 2.0,
            "r_entropy": 1.78,
            "edge_density": 0.13,
            "pixel_entropy": 1.78,
            "histogram_flatness": 0.22
          },
          "binary": {
            "overall_entropy": 6.35
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            177,
            "IDAT8"
          ],
          [
            476,
            "IEND"
          ]
        ],
        "sz": 484,
        "sha": "2e3d70230977af37c6d7739899a73e63937eebdfe6d802f1a957c43c2f2ab131",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7F.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 109,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.09,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 229.0
          },
          "image": {
            "width": 21.0,
            "height": 63.0,
            "channels": 2.0,
            "r_entropy": 1.14,
            "pixel_entropy": 1.14,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 3.97
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            221,
            "IEND"
          ]
        ],
        "sz": 229,
        "sha": "475f03b3ccff04fce91a7a912142d150a000b1d011da003745dc2c0e3f5fb092",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7P.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 110,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.08,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 204.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.56,
            "edge_density": 0.03,
            "pixel_entropy": 0.56,
            "histogram_flatness": 0.07
          },
          "binary": {
            "overall_entropy": 4.13
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            196,
            "IEND"
          ]
        ],
        "sz": 204,
        "sha": "3633ec99d66aae4332f9a6b2dbd3480513433001a8eec0e796d2bcb69d75b73f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7T.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 111,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 7414.0
          },
          "image": {
            "width": 600.0,
            "height": 600.0,
            "channels": 1.0,
            "r_entropy": 1.01,
            "edge_density": 0.01,
            "pixel_entropy": 1.01,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 7.48
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            3206,
            "zgee"
          ],
          [
            7406,
            "IEND"
          ]
        ],
        "sz": 7414,
        "sha": "d0908a0d7d8e52b7430dd052c303d6c6b0ee1b37354588a06c6d6f62b465cb43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7f.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 112,
        "ms": {
          "file": {
            "size": 668.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.01,
            "total_lines": 9.0,
            "char_entropy": 3.44,
            "unique_chars": 46.0,
            "avg_line_length": 98.89,
            "high_byte_ratio": 0.38,
            "max_line_length": 187.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 321.0,
            "empty_line_ratio": 0.22,
            "last_line_length": 95.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.36,
            "line_length_stddev": 62.47,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            93,
            "cache-path"
          ],
          [
            119,
            "external-cache-path"
          ],
          [
            141,
            "external-files-path"
          ],
          [
            165,
            "files-path"
          ],
          [
            180,
            "name"
          ],
          [
            187,
            "path"
          ]
        ],
        "sz": 668,
        "sha": "0da4871a68a75b071f255f1779f277e4f9c39a129a8c8d7340e88c5920b27136",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7j.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 113,
        "ms": {
          "file": {
            "size": 328.0
          },
          "text": {
            "digit_ratio": 0.27,
            "space_count": 5.0,
            "total_lines": 1.0,
            "char_entropy": 4.2,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 380.0,
            "high_byte_ratio": 0.21,
            "max_line_length": 380.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 124.0,
            "last_line_length": 380.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 328,
        "sha": "0ab3bc82b3b9fd8499202cafe3d494a9f66fba248d01e90b90e932c8849947cc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7u.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 114,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 2.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 15741.0
          },
          "image": {
            "width": 1200.0,
            "height": 1200.0,
            "channels": 1.0,
            "r_entropy": 0.95,
            "edge_density": 0.0,
            "pixel_entropy": 0.95,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 7.64
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            8281,
            "eli3"
          ],
          [
            8511,
            "/Jdt"
          ],
          [
            15733,
            "IEND"
          ]
        ],
        "sz": 15741,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "32abbd9cea32c8eb832e75ddc7f1b4396d538c31eb513912a0da01f30433a3c4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/7y.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 115,
        "ms": {
          "file": {
            "size": 700.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.21,
            "space_count": 21.0,
            "total_lines": 11.0,
            "char_entropy": 4.36,
            "unique_chars": 74.0,
            "lines_over_200": 1.0,
            "avg_line_length": 76.18,
            "high_byte_ratio": 0.26,
            "max_line_length": 412.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 261.0,
            "last_line_length": 3.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.31,
            "line_length_stddev": 112.06,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "name"
          ],
          [
            97,
            "height"
          ],
          [
            112,
            "viewportWidth"
          ],
          [
            130,
            "viewportHeight"
          ],
          [
            145,
            "fillColor"
          ],
          [
            159,
            "pathData"
          ],
          [
            170,
            "strokeWidth"
          ],
          [
            182,
            "IIM 8.59 16.59 L 13.17 12 L 8.59 7.41 L 10 6 L 16 12 L 10 18 L 8.59 16.59 Z"
          ],
          [
            260,
            "android"
          ],
          [
            268,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            315,
            "path"
          ],
          [
            322,
            "vector"
          ]
        ],
        "sz": 700,
        "sha": "4cdb19a98a545d6b5410379b9df49caff5626a7437b638df3a9957240228cf94",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/83.xml",
        "type": "xml"
      },
      {
        "k": {
          "source.imports[0]": "blobnoise",
          "source.imports[1]": "clamp",
          "source.imports[2]": "cos",
          "source.imports[3]": "dot",
          "source.imports[4]": "exp2",
          "source.imports[5]": "floor",
          "source.imports[6]": "fract",
          "source.imports[7]": "fractalblobnoise",
          "source.imports[8]": "hash",
          "source.imports[9]": "length",
          "source.has_imports": true,
          "source.imports[10]": "main",
          "source.imports[11]": "min",
          "source.imports[12]": "mix",
          "source.imports[13]": "pow",
          "source.imports[14]": "simplegridnoise",
          "source.imports[15]": "sin",
          "source.imports[16]": "texture2D",
          "source.imports[17]": "vec2",
          "source.imports[18]": "vec4"
        },
        "dp": 1,
        "id": 116,
        "is": [
          "vec2",
          "dot",
          "vec2",
          "dot",
          "vec2",
          "fract",
          "sin",
          "simplegridnoise",
          "floor",
          "fract",
          "vec2",
          "cos",
          "hash",
          "vec2",
          "min",
          "length",
          "blobnoise",
          "pow",
          "cos",
          "clamp",
          "simplegridnoise",
          "fractalblobnoise",
          "blobnoise",
          "exp2",
          "vec2",
          "main",
          "vec2",
          "fractalblobnoise",
          "mix",
          "texture2D",
          "vec4",
          "vec4"
        ],
        "ms": {
          "file": {
            "size": 1270.0
          },
          "text": {
            "tab_count": 33.0,
            "digit_ratio": 0.14,
            "space_count": 170.0,
            "total_lines": 48.0,
            "char_entropy": 5.11,
            "unique_chars": 57.0,
            "import_density": 66.67,
            "avg_line_length": 25.48,
            "max_line_length": 99.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 1.0,
            "most_common_char": "o",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.05,
            "line_length_stddev": 25.69,
            "normalized_import_count": 4.62,
            "max_inline_whitespace_run": 1.0
          },
          "imports": {
            "total": 32.0,
            "unique_modules": 19.0,
            "third_party_count": 32.0,
            "third_party_ratio": 1.0
          },
          "strings": {},
          "comments": {
            "chars": 35.0,
            "lines": 1.0,
            "total": 1.0,
            "to_code_ratio": 0.02
          },
          "functions": {},
          "identifiers": {}
        },
        "sz": 1270,
        "sha": "9edd14b3e5294ce7a4f3b5210581578db5d9f175ff9806a4c1ed4705cb07278b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/88.glsl",
        "type": "kotlin"
      },
      {
        "dp": 1,
        "id": 117,
        "ms": {
          "file": {
            "size": 524.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.99,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 656.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 211.0,
            "last_line_length": 656.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 524,
        "sha": "64ea9ab83e9764bd67a2daad236a36d72f16feff3caf8cdc1428979db9cb5479",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8E.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 118,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.19
          },
          "file": {
            "size": 272.0
          },
          "image": {
            "width": 27.0,
            "height": 27.0,
            "channels": 2.0,
            "r_entropy": 1.81,
            "pixel_entropy": 1.81,
            "histogram_flatness": 0.23
          },
          "binary": {
            "overall_entropy": 6.99
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            264,
            "IEND"
          ]
        ],
        "sz": 272,
        "sha": "dc08af9d14e6b673bf9f31c248236f0457b322464036647473e3a32a23773f0e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8T.png",
        "type": "png"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 119,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.86,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 221.0
          },
          "image": {
            "width": 16.0,
            "height": 16.0,
            "channels": 1.0,
            "r_entropy": 0.74,
            "pixel_entropy": 0.74,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 4.02
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            168,
            "IDAT"
          ],
          [
            213,
            "IEND"
          ]
        ],
        "sz": 221,
        "sha": "559bf783d765c02338e97952bdc9c6689c7ff99090b8c9813369118da8b080f0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8V.9.png",
        "type": "png"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 120,
        "ms": {
          "file": {
            "size": 956.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.27,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 408.67,
            "high_byte_ratio": 0.33,
            "max_line_length": 762.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 332.0,
            "last_line_length": 327.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 261.61,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            97,
            "focusable"
          ],
          [
            109,
            "layout_width"
          ],
          [
            124,
            "layout_height"
          ],
          [
            142,
            "textCursorDrawable"
          ],
          [
            163,
            "errorIconDrawable"
          ],
          [
            183,
            "hintEnabled"
          ],
          [
            197,
            "TextView"
          ],
          [
            208,
            "android"
          ],
          [
            222,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            280,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            336,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            378,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 956,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "cursor"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-url-navigation-action--rx-19",
            "l": 1
          }
        ],
        "sha": "f1313a691d4f7249f18b63051eb785dee2a943643bb7242290a585ab46022769",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8_.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 121,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 884.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.8,
            "pixel_entropy": 0.8,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.72
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            93,
            "ThF%dDo"
          ],
          [
            516,
            "8XMS"
          ],
          [
            876,
            "IEND"
          ]
        ],
        "sz": 884,
        "sha": "86763a30af2a934c7c13b123b36443d1d17918b71c6149bc6ee80115b872593d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8j.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 122,
        "ms": {
          "file": {
            "size": 548.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.02,
            "total_lines": 3.0,
            "char_entropy": 4.14,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 232.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 584.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 203.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 584.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 253.07,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            77,
            "layout_width"
          ],
          [
            92,
            "layout_height"
          ],
          [
            108,
            "foreground"
          ],
          [
            123,
            "foregroundGravity"
          ],
          [
            143,
            "android"
          ],
          [
            151,
            ",,androidx.appcompat.widget.ContentFrameLayout"
          ],
          [
            198,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            245,
            "merge"
          ]
        ],
        "sz": 548,
        "sha": "a86155ed553d9268e6bcb6be673255b40f1f3d4bd62de9c1ad53bdb8d7d01862",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8s.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 123,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 7.0,
            "char_entropy": 4.0,
            "unique_chars": 68.0,
            "lines_over_200": 2.0,
            "avg_line_length": 151.71,
            "high_byte_ratio": 0.36,
            "max_line_length": 411.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 314.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 411.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 153.42,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            100,
            "interpolator"
          ],
          [
            117,
            "duration"
          ],
          [
            146,
            "shareInterpolator"
          ],
          [
            164,
            "fromXScale"
          ],
          [
            179,
            "toXScale"
          ],
          [
            188,
            "fromYScale"
          ],
          [
            203,
            "toYScale"
          ],
          [
            212,
            "fromAlpha"
          ],
          [
            226,
            "toAlpha"
          ],
          [
            236,
            "alpha"
          ],
          [
            244,
            "android"
          ],
          [
            252,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            299,
            "scale"
          ]
        ],
        "sz": 812,
        "sha": "89d8ae91b190b9f85cdbc1853ca518f234de4be10cb90f90f987a7f36cec49f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8v.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 124,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.14,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 280.0
          },
          "image": {
            "width": 32.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 0.38,
            "pixel_entropy": 0.38,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 3.96
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            272,
            "IEND"
          ]
        ],
        "sz": 280,
        "sha": "a04708369abe0920ded20d87d58aebf6992ebb67efefa248a8421895efc5353f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/8w.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 2,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 125,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.32,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 247.0
          },
          "image": {
            "width": 16.0,
            "height": 16.0,
            "channels": 3.0,
            "b_entropy": 0.77,
            "g_entropy": 0.77,
            "r_entropy": 0.77,
            "pixel_entropy": 2.35,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 4.72
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            239,
            "IEND"
          ]
        ],
        "sz": 247,
        "sha": "d27af435101ca4cbec0c840bd30687918cd39eb83aab1487420855623a45998b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/93.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 126,
        "ms": {
          "file": {
            "size": 444.0
          },
          "text": {
            "total_lines": 2.0,
            "char_entropy": 4.18,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 278.5,
            "high_byte_ratio": 0.31,
            "max_line_length": 513.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 166.0,
            "last_line_length": 513.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 234.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            70,
            "gravity"
          ],
          [
            78,
            "layout_width"
          ],
          [
            93,
            "layout_height"
          ],
          [
            111,
            "importantForAccessibility"
          ],
          [
            139,
            "TextView"
          ],
          [
            150,
            "android"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 444,
        "sha": "f61852bc56443c4b70bd1104b1c49a5755e804a8354293d686107ad5dd124d80",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/99.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 127,
        "ms": {
          "file": {
            "size": 440.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 4.02,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 564.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 564.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 168.0,
            "last_line_length": 564.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            70,
            "orientation"
          ],
          [
            87,
            "paddingBottom"
          ],
          [
            103,
            "layout_width"
          ],
          [
            118,
            "layout_height"
          ],
          [
            134,
            "LinearLayout"
          ],
          [
            151,
            "android"
          ],
          [
            159,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 440,
        "sha": "d0a096af1d992864ab20515a6494a29ffd692d631bf4229c26e3f2c499d6c7fc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9A.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 128,
        "ms": {
          "file": {
            "size": 1116.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 3.63,
            "unique_chars": 67.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 293.2,
            "high_byte_ratio": 0.36,
            "max_line_length": 701.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 521.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 509.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 276.66,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "height"
          ],
          [
            162,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            207,
            "labelOpacity"
          ],
          [
            224,
            "objectAnimator"
          ],
          [
            239,
            "paddingEnd"
          ],
          [
            252,
            "paddingStart"
          ]
        ],
        "sz": 1116,
        "sha": "feedc887f16dac07ba4d7f54f7894b8ce0e1746fd4c63b38281a6821a5f39f28",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9O.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 129,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 254.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.96,
            "pixel_entropy": 0.96,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 6.69
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATH"
          ],
          [
            246,
            "IEND"
          ]
        ],
        "sz": 254,
        "sha": "6adcfc9dd1e1b82b985d223fc8a01c8e8f0dd3b9051d38062674b2380af79a50",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9P.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 130,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 2696.0
          },
          "image": {
            "width": 300.0,
            "height": 300.0,
            "channels": 1.0,
            "r_entropy": 0.79,
            "edge_density": 0.01,
            "pixel_entropy": 0.79,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 6.85
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            1624,
            "`-1x`"
          ],
          [
            2529,
            "2F6X"
          ],
          [
            2688,
            "IEND"
          ]
        ],
        "sz": 2696,
        "sha": "3bba219cc7d5fae8acec74ba8854b0c946de8f36f17597198c8c70b276e5ffed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9V.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 131,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 593.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.95,
            "pixel_entropy": 0.95,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 7.45
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            585,
            "IEND"
          ]
        ],
        "sz": 593,
        "sha": "71a2ba63a5d4e91f7c14324fa1c3eb9290b73cb7b3c7828018d05adb1cfaab45",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9V1.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 132,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.08,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 200.0
          },
          "image": {
            "width": 38.0,
            "height": 33.0,
            "channels": 2.0,
            "r_entropy": 0.27,
            "pixel_entropy": 0.27,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 4.2
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            192,
            "IEND"
          ]
        ],
        "sz": 200,
        "sha": "a0d63ec76ec21d40fe96a4b6fb4f4aac5b61a6b63a63472dab055e0d9e9890b1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9X.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 133,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 513.0
          },
          "image": {
            "width": 176.0,
            "height": 88.0,
            "channels": 1.0,
            "r_entropy": 1.1,
            "pixel_entropy": 1.1,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 7.09
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "3PLTE"
          ],
          [
            505,
            "IEND"
          ]
        ],
        "sz": 513,
        "sha": "55bc27772f6d35be9334fb80c371b327db25faa9a6098c3c14049e92654ac1bf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9Z.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 134,
        "ms": {
          "file": {
            "size": 868.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.05,
            "total_lines": 8.0,
            "char_entropy": 3.59,
            "unique_chars": 60.0,
            "lines_over_200": 2.0,
            "avg_line_length": 147.87,
            "high_byte_ratio": 0.41,
            "max_line_length": 371.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 389.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 155.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 123.75,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "gravity"
          ],
          [
            92,
            "height"
          ],
          [
            101,
            "shape"
          ],
          [
            109,
            "color"
          ],
          [
            117,
            "android"
          ],
          [
            125,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            172,
            "item"
          ],
          [
            177,
            "layer-list"
          ],
          [
            200,
            "size"
          ],
          [
            207,
            "solid"
          ]
        ],
        "sz": 868,
        "sha": "bd21c3ddaa1477146013857cffdc7cee0558279a3ce9001fef85999433144159",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9e.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 135,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 984.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.79,
            "pixel_entropy": 0.79,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.73
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            976,
            "IEND"
          ]
        ],
        "sz": 984,
        "sha": "0eed99d0a5e36a468b557605e6ccea495c029f3569844a45f4b5d8dadd77d4a7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/9t.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 136,
        "ms": {
          "file": {
            "size": 576.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.66,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 776.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 776.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 247.0,
            "last_line_length": 776.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "color"
          ],
          [
            90,
            "radius"
          ],
          [
            99,
            "android"
          ],
          [
            109,
            "corners"
          ],
          [
            117,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            164,
            "shape"
          ],
          [
            172,
            "solid"
          ],
          [
            180,
            "stroke"
          ]
        ],
        "sz": 576,
        "sha": "2fb72f5e001cc1776cafd51a6a6471cc60634c770926253e5fb4586c65ef3bb6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/A1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 137,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.66,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 804.0,
            "high_byte_ratio": 0.4,
            "max_line_length": 804.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 249.0,
            "last_line_length": 804.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_focused"
          ],
          [
            80,
            "state_pressed"
          ],
          [
            98,
            "drawable"
          ],
          [
            109,
            "android"
          ],
          [
            117,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            164,
            "item"
          ],
          [
            171,
            "selector"
          ]
        ],
        "sz": 588,
        "sha": "ac83852b603a8fb80e5c3d8d74e1909e2d7e22502cdafc784c0e795c32e99ca6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/A4.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 138,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 10.0,
            "char_entropy": 4.2,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 70.7,
            "high_byte_ratio": 0.26,
            "max_line_length": 360.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 231.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 102.65,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            176,
            "fillAlpha"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            222,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            269,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "362fba7777da45d9149b94c79047ff40975269fee1331e11f263eb1b834c0fe5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/A6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 139,
        "ms": {
          "file": {
            "size": 820.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.47,
            "space_count": 21.0,
            "total_lines": 3.0,
            "char_entropy": 4.7,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 321.0,
            "high_byte_ratio": 0.23,
            "max_line_length": 789.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 237.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.25,
            "line_length_stddev": 331.07,
            "non_printable_ratio": 0.37,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            168,
            "M12,4.5C7,4.5 2.73,7.61 1,12c1.73,4.39 6,7.5 11,7.5s9.27,-3.11 11,-7.5c-1.73,-4.39 -6,-7.5 -11,-7.5zM12,17c-2.76,0 -5,-2.24 -5,-"
          ],
          [
            404,
            "android"
          ],
          [
            412,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            459,
            "path"
          ],
          [
            466,
            "vector"
          ]
        ],
        "sz": 820,
        "sha": "0f994a3913ea0f741e0c228f5e739a3140a1603d67986b23ca93ab40af149370",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 140,
        "ms": {
          "file": {
            "size": 1656.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.04,
            "total_lines": 7.0,
            "char_entropy": 3.46,
            "unique_chars": 77.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 322.29,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1043.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 791.0,
            "last_line_length": 1043.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 372.63,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "valueType"
          ],
          [
            148,
            "propertyName"
          ],
          [
            165,
            "ordering"
          ],
          [
            176,
            "android"
          ],
          [
            184,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            231,
            "objectAnimator"
          ]
        ],
        "sz": 1656,
        "sha": "6c042115787e059ad23c3a94afa2a48a21915c9cbc038766d18058b01473365f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AA1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 141,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 437.0
          },
          "image": {
            "width": 72.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.42,
            "edge_density": 0.01,
            "pixel_entropy": 0.42,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 5.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            429,
            "IEND"
          ]
        ],
        "sz": 437,
        "sha": "8c3de5389a4fedf23b1efdf1c7737ca7eb44f381c22369153dfa972613a4c448",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AB.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 142,
        "ms": {
          "file": {
            "size": 2476.0
          },
          "text": {
            "tab_count": 24.0,
            "digit_ratio": 0.03,
            "total_lines": 18.0,
            "char_entropy": 3.66,
            "unique_chars": 95.0,
            "lines_over_200": 9.0,
            "lines_over_500": 1.0,
            "avg_line_length": 198.72,
            "high_byte_ratio": 0.47,
            "max_line_length": 602.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 991.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 179.0,
            "long_token_count": 10.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 137.12,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            134,
            "gravity"
          ],
          [
            144,
            "layout_gravity"
          ],
          [
            161,
            "orientation"
          ],
          [
            178,
            "background"
          ],
          [
            193,
            "paddingLeft"
          ],
          [
            205,
            "paddingRight"
          ],
          [
            220,
            "visibility"
          ],
          [
            233,
            "clipToPadding"
          ],
          [
            249,
            "layout_width"
          ],
          [
            264,
            "layout_height"
          ],
          [
            280,
            "minHeight"
          ],
          [
            294,
            "FrameLayout"
          ],
          [
            306,
            "LinearLayout"
          ],
          [
            323,
            "TextView"
          ],
          [
            334,
            "View"
          ],
          [
            341,
            "android"
          ],
          [
            351,
            "android.widget.Space"
          ],
          [
            372,
            "++androidx.appcompat.widget.AlertDialogLayout"
          ],
          [
            418,
            "%%androidx.core.widget.NestedScrollView"
          ],
          [
            458,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            505,
            "include"
          ],
          [
            515,
            "layout"
          ]
        ],
        "sz": 2476,
        "sha": "80e3e155024376b2348b9749f1acd0d63c92920b3b1408e3ff94b1b2ac44fe07",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AK.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 143,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.24
          },
          "file": {
            "size": 1255.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 1.0,
            "r_entropy": 0.93,
            "edge_density": 0.05,
            "pixel_entropy": 0.93,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 6.68
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            696,
            "IDATX"
          ],
          [
            1247,
            "IEND"
          ]
        ],
        "sz": 1255,
        "sha": "59ae0ad3c9dc2d4f9e912a385d9eebf3c83b4c2b7e2cd48d34ec292d2d328c59",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AO.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 144,
        "ms": {
          "png": {
            "a_entropy": 2.27,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.33
          },
          "file": {
            "size": 430.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 4.0,
            "b_entropy": 2.62,
            "g_entropy": 2.64,
            "r_entropy": 2.64,
            "edge_density": 0.23,
            "pixel_entropy": 3.56,
            "histogram_flatness": 0.44
          },
          "binary": {
            "overall_entropy": 7.32
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            422,
            "IEND"
          ]
        ],
        "sz": 430,
        "sha": "a0f1b06174dc7702a2e07a1c8761013b15ecc4885ad246ba709a70b84841fa94",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AV.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 145,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 3.98,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 500.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 500.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 160.0,
            "last_line_length": 500.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "40e15e585d804bc6d61ccee4c6fb1090dfad0a0c29a5020229e0fd11353f4e3c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/AZ.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 146,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.65,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 186.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 2.0,
            "r_entropy": 0.79,
            "edge_density": 0.09,
            "pixel_entropy": 0.79,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 3.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            178,
            "IEND"
          ]
        ],
        "sz": 186,
        "sha": "f62d7aa1f9297302a43332a59834755edbd3a38670b8c523614ae1366b5f947f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ac.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 147,
        "ms": {
          "file": {
            "size": 524.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.99,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 656.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 211.0,
            "last_line_length": 656.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 524,
        "sha": "23c738b7c0a24b504acefba5d58c7fd6a55c4fc52372690d438d058614be90d1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ah.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 148,
        "ms": {
          "file": {
            "size": 2360.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.76,
            "space_count": 130.0,
            "total_lines": 5.0,
            "char_entropy": 4.44,
            "unique_chars": 83.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 555.2,
            "high_byte_ratio": 0.23,
            "lines_over_1000": 1.0,
            "max_line_length": 2388.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 600.0,
            "last_line_length": 155.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.07,
            "most_common_ratio": 0.22,
            "line_length_stddev": 920.15,
            "non_printable_ratio": 0.31,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "interpolator"
          ],
          [
            113,
            "duration"
          ],
          [
            122,
            "valueFrom"
          ],
          [
            136,
            "valueTo"
          ],
          [
            144,
            "valueType"
          ],
          [
            156,
            "propertyName"
          ],
          [
            173,
            "ordering"
          ],
          [
            186,
            "M -7.0,-7.0 l 14.0,0.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l 0.0,14.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l -14.0,0.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l 0."
          ],
          [
            694,
            "CM 0.0,-1.0 l 0.0,0.0 c 0.5522847498,0.0 1.0,0.4477152502 1.0,1.0 l 0.0,0.0 c 0.0,0.5522847498 -0.4477152502,1.0 -1.0,1.0 l 0.0,"
          ],
          [
            1277,
            "android"
          ],
          [
            1285,
            "fillAlpha"
          ],
          [
            1297,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1344,
            "objectAnimator"
          ],
          [
            1361,
            "pathData"
          ]
        ],
        "sz": 2360,
        "sha": "8ee615100fbfba2fd08cd11c001d462a02afe6c72a634123295f889f7287eead",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Al.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 149,
        "ms": {
          "file": {
            "size": 1220.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.25,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 398.25,
            "high_byte_ratio": 0.35,
            "max_line_length": 769.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 405.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 675.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.25,
            "line_length_stddev": 329.69,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            114,
            "orientation"
          ],
          [
            131,
            "visibility"
          ],
          [
            144,
            "layout_width"
          ],
          [
            159,
            "layout_height"
          ],
          [
            177,
            "text"
          ],
          [
            184,
            "insetTop"
          ],
          [
            195,
            "insetBottom"
          ],
          [
            209,
            "contentDescription"
          ],
          [
            228,
            "checkedButton"
          ],
          [
            246,
            "selectionRequired"
          ],
          [
            266,
            "singleSelection"
          ],
          [
            284,
            "android"
          ],
          [
            298,
            "11com.google.android.material.button.MaterialButton"
          ],
          [
            350,
            "\u003c\u003ccom.google.android.material.button.MaterialButtonToggleGroup"
          ],
          [
            413,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            455,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1220,
        "sha": "d4aca4a96815bd1bbe27cf41f8538c3e30419160bd6fdda3b24cac7a6d404fee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Am.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 150,
        "ms": {
          "file": {
            "size": 660.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 3.95,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "avg_line_length": 164.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 277.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 157.9,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "name"
          ],
          [
            89,
            "drawable"
          ],
          [
            98,
            "animation"
          ],
          [
            112,
            "aapt"
          ],
          [
            119,
            "android"
          ],
          [
            129,
            "animated-vector"
          ],
          [
            147,
            "eye_mask"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            237,
            "strike_through"
          ],
          [
            254,
            "target"
          ]
        ],
        "sz": 660,
        "sha": "71448388faaf30915cc1597c53ae798ce917b92ffd768a9c7e32789df19604ef",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ao.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 151,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.34,
            "space_count": 10.0,
            "total_lines": 3.0,
            "char_entropy": 4.44,
            "unique_chars": 73.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.67,
            "high_byte_ratio": 0.27,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 237.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 268.41,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "eeM19,6.41L17.59,5 12,10.59 6.41,5 5,6.41 10.59,12 5,17.59 6.41,19 12,13.41 17.59,19 19,17.59 13.41,12z"
          ],
          [
            270,
            "android"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            325,
            "path"
          ],
          [
            332,
            "vector"
          ]
        ],
        "sz": 684,
        "sha": "a95d295c06ca964b5e3f535d750cb3c80437fb0d354b807b26d19529a5009e45",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/B2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 152,
        "ms": {
          "file": {
            "size": 768.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.27,
            "unique_chars": 72.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 242.75,
            "high_byte_ratio": 0.32,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 268.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 139.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.28,
            "line_length_stddev": 248.42,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "textAppearance"
          ],
          [
            113,
            "textColor"
          ],
          [
            127,
            "gravity"
          ],
          [
            137,
            "layout_gravity"
          ],
          [
            154,
            "paddingLeft"
          ],
          [
            166,
            "paddingTop"
          ],
          [
            179,
            "paddingRight"
          ],
          [
            194,
            "paddingBottom"
          ],
          [
            210,
            "focusable"
          ],
          [
            222,
            "layout_width"
          ],
          [
            237,
            "layout_height"
          ],
          [
            255,
            "android"
          ],
          [
            263,
            "//androidx.appcompat.view.menu.ActionMenuItemView"
          ],
          [
            313,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 768,
        "sha": "497e69c7115c788d547bc3cc02abea35091937bae0cee47f77e40e9852496939",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/B8.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 153,
        "ms": {
          "file": {
            "size": 1444.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 9.0,
            "char_entropy": 4.13,
            "unique_chars": 85.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 213.11,
            "high_byte_ratio": 0.38,
            "lines_over_1000": 1.0,
            "max_line_length": 1045.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 509.0,
            "empty_line_ratio": 0.22,
            "last_line_length": 331.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 314.41,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            146,
            "theme"
          ],
          [
            154,
            "textAppearance"
          ],
          [
            169,
            "textColor"
          ],
          [
            181,
            "ellipsize"
          ],
          [
            195,
            "layout_gravity"
          ],
          [
            217,
            "paddingLeft"
          ],
          [
            229,
            "paddingTop"
          ],
          [
            242,
            "paddingRight"
          ],
          [
            257,
            "paddingBottom"
          ],
          [
            273,
            "visibility"
          ],
          [
            286,
            "layout_width"
          ],
          [
            301,
            "layout_height"
          ],
          [
            319,
            "layout_marginLeft"
          ],
          [
            339,
            "minWidth"
          ],
          [
            350,
            "maxLines"
          ],
          [
            359,
            "layout_weight"
          ],
          [
            375,
            "textAlignment"
          ],
          [
            393,
            "layout_marginStart"
          ],
          [
            414,
            "Button"
          ],
          [
            423,
            "TextView"
          ],
          [
            434,
            "android"
          ],
          [
            450,
            "::com.google.android.material.snackbar.SnackbarContentLayout"
          ],
          [
            511,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            566,
            "view"
          ]
        ],
        "sz": 1444,
        "sha": "82809ae273dd193f7ce17df7da643f0dbe2879d48d29ae618d0ad4cf005cc4b7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/BA.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 154,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.08
          },
          "file": {
            "size": 651.0
          },
          "image": {
            "width": 64.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 0.97,
            "pixel_entropy": 0.97,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 7.65
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            643,
            "IEND"
          ]
        ],
        "sz": 651,
        "sha": "d19092254aa4133fba8b7795fb5db560ad5dcd16c6f79201bec31b0f1e9b608b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/BG.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 155,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.08
          },
          "file": {
            "size": 173.0
          },
          "image": {
            "width": 32.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 0.56,
            "edge_density": 0.03,
            "pixel_entropy": 0.56,
            "histogram_flatness": 0.07
          },
          "binary": {
            "overall_entropy": 6.31
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            165,
            "IEND"
          ]
        ],
        "sz": 173,
        "sha": "52549a8d0b6c35faf2795efdf6b4c5fe2cb34b7e8b1039cca7aa2769b6cab3d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/BO.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 156,
        "ms": {
          "file": {
            "size": 1120.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.54,
            "space_count": 16.0,
            "total_lines": 3.0,
            "char_entropy": 4.53,
            "unique_chars": 81.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 458.67,
            "high_byte_ratio": 0.28,
            "max_line_length": 938.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 354.0,
            "last_line_length": 431.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.26,
            "line_length_stddev": 380.58,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "height"
          ],
          [
            113,
            "viewportWidth"
          ],
          [
            131,
            "viewportHeight"
          ],
          [
            146,
            "fillColor"
          ],
          [
            160,
            "pathData"
          ],
          [
            171,
            "strokeColor"
          ],
          [
            185,
            "strokeWidth"
          ],
          [
            199,
            "fillType"
          ],
          [
            212,
            "M67.4,37C67.4,53.7895 53.7895,67.4 37,67.4C20.2105,67.4 6.6,53.7895 6.6,37C6.6,20.2105 20.2105,6.6 37,6.6C53.7895,6.6 67.4,20.21"
          ],
          [
            355,
            "M73.1,37C73.1,17.0637 56.9373,0.9 37,0.9C17.0627,0.9 0.9,17.0637 0.9,37C0.9,56.9373 17.0627,73.1 37,73.1C56.9373,73.1 73.1,56.93"
          ],
          [
            496,
            "android"
          ],
          [
            504,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            551,
            "path"
          ],
          [
            558,
            "vector"
          ]
        ],
        "sz": 1120,
        "sha": "d4b27253e659a05b5545dfed5b00f2d9a271b33a0a976841723b82005101a2c4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/BX.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 157,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.19,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 178.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 228.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.69,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "7b90af3799e6df2ddf5c97deb5b303bc16d8febc5855cf81e3369c39baae1ef7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Bq.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 158,
        "ms": {
          "file": {
            "size": 1000.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.14,
            "space_count": 9.0,
            "total_lines": 2.0,
            "char_entropy": 4.2,
            "unique_chars": 85.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 632.5,
            "high_byte_ratio": 0.32,
            "max_line_length": 958.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 391.0,
            "last_line_length": 307.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 325.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            118,
            "name"
          ],
          [
            132,
            "height"
          ],
          [
            167,
            "rotation"
          ],
          [
            176,
            "autoMirrored"
          ],
          [
            191,
            "viewportWidth"
          ],
          [
            209,
            "viewportHeight"
          ],
          [
            224,
            "fillColor"
          ],
          [
            238,
            "pathData"
          ],
          [
            249,
            "M0,0 L24,0 L24,24 L0,24 L0,0 Z"
          ],
          [
            282,
            "M7,14 L12,9 L17,14 L7,14 Z"
          ],
          [
            311,
            "android"
          ],
          [
            321,
            "arrow"
          ],
          [
            329,
            "group"
          ],
          [
            335,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            382,
            "path"
          ],
          [
            389,
            "vector"
          ]
        ],
        "sz": 1000,
        "sha": "6b065731f38237b336fb170afc2b8537dac51122fd1761713b6a0f5bc14b2c47",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Bx.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 159,
        "ms": {
          "file": {
            "size": 524.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.98,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 211.0,
            "last_line_length": 658.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 524,
        "sha": "3485d0988a926bc76f896cb7aab8641a4f273296520f101039b034e03287298d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/C5.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 160,
        "ms": {
          "file": {
            "size": 2456.0
          },
          "text": {
            "tab_count": 25.0,
            "digit_ratio": 0.03,
            "total_lines": 10.0,
            "char_entropy": 3.67,
            "unique_chars": 94.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 353.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 2379.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 984.0,
            "empty_line_ratio": 0.4,
            "last_line_length": 817.0,
            "long_token_count": 13.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 716.51,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            142,
            "textAppearance"
          ],
          [
            159,
            "layout_gravity"
          ],
          [
            176,
            "orientation"
          ],
          [
            193,
            "background"
          ],
          [
            206,
            "paddingTop"
          ],
          [
            219,
            "visibility"
          ],
          [
            234,
            "layout"
          ],
          [
            241,
            "layout_width"
          ],
          [
            256,
            "layout_height"
          ],
          [
            274,
            "layout_marginTop"
          ],
          [
            293,
            "layout_marginBottom"
          ],
          [
            313,
            "minHeight"
          ],
          [
            325,
            "singleLine"
          ],
          [
            338,
            "layout_weight"
          ],
          [
            356,
            "layout_marginStart"
          ],
          [
            377,
            "layout_marginEnd"
          ],
          [
            396,
            "FrameLayout"
          ],
          [
            408,
            "ImageView"
          ],
          [
            420,
            "LinearLayout"
          ],
          [
            437,
            "TextView"
          ],
          [
            448,
            "ViewStub"
          ],
          [
            459,
            "android"
          ],
          [
            467,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            514,
            "include"
          ]
        ],
        "sz": 2456,
        "sha": "53780dc1287350ea16d5b52fab6ee8036f3ed4008084ece4e8fffb0826bfc4f5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/C7.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 161,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 452.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.72,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.33
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATX"
          ],
          [
            444,
            "IEND"
          ]
        ],
        "sz": 452,
        "sha": "9a9a30c305022a2f8e075d2ed7d33f5c7711bba8d0d0385511fdb62f89f208e3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/C9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 162,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.99,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 178.0
          },
          "image": {
            "width": 18.0,
            "height": 5.0,
            "channels": 2.0,
            "r_entropy": 0.92,
            "edge_density": 0.11,
            "pixel_entropy": 0.92,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 3.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            170,
            "IEND"
          ]
        ],
        "sz": 178,
        "sha": "1411ae65d8160573c166d2a572106fd1103c12f242f67feec5feaa550197e5f5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/CA.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 163,
        "ms": {
          "file": {
            "size": 612.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 3.98,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 259.33,
            "high_byte_ratio": 0.32,
            "max_line_length": 403.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 251.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 160.7,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            155,
            "android"
          ],
          [
            165,
            "group"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "path"
          ],
          [
            225,
            "vector"
          ]
        ],
        "sz": 612,
        "sha": "a6f85a9a50f3b1a57da31e3df91378ae704c9f196317d3bc5da541a5fa62d8ad",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/CG.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 164,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.01,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 504.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 504.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 156.0,
            "last_line_length": 504.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "c039f810a5b6429035cca5c0017d69a2d8ed31fc6c027e56d866c93bb46f45da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/CZ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 165,
        "ms": {
          "file": {
            "size": 1728.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.48,
            "space_count": 38.0,
            "total_lines": 8.0,
            "char_entropy": 4.68,
            "unique_chars": 98.0,
            "lines_over_200": 4.0,
            "lines_over_500": 3.0,
            "avg_line_length": 256.88,
            "high_byte_ratio": 0.24,
            "max_line_length": 649.0,
            "non_ascii_ratio": 0.24,
            "null_byte_count": 562.0,
            "empty_line_ratio": 0.38,
            "last_line_length": 545.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 271.91,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            142,
            "name"
          ],
          [
            149,
            "height"
          ],
          [
            182,
            "viewportWidth"
          ],
          [
            200,
            "viewportHeight"
          ],
          [
            215,
            "fillColor"
          ],
          [
            229,
            "pathData"
          ],
          [
            240,
            "strokeColor"
          ],
          [
            254,
            "strokeWidth"
          ],
          [
            266,
            "translateX"
          ],
          [
            279,
            "translateY"
          ],
          [
            296,
            "M 0.0,-5.0 c -2.7619934082,0.0 -5.0,2.2380065918 -5.0,5.0 c 0.0,2.7619934082 2.2380065918,5.0 5.0,5.0 c 2.7619934082,0.0 5.0,-2."
          ],
          [
            499,
            "M 0.0,-9.0 c 4.9705627482,0.0 9.0,4.0294372518 9.0,9.0 c 0.0,4.9705627482 -4.0294372518,9.0 -9.0,9.0 c -4.9705627482,0.0 -9.0,-4"
          ],
          [
            700,
            "android"
          ],
          [
            710,
            "btn_radio_to_on_mtrl"
          ],
          [
            733,
            "btn_radio_to_on_mtrl_0"
          ],
          [
            756,
            "dot_group"
          ],
          [
            770,
            "dot_path"
          ],
          [
            781,
            "group"
          ],
          [
            787,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            834,
            "path"
          ],
          [
            839,
            "ring_outer"
          ],
          [
            854,
            "ring_outer_path"
          ],
          [
            872,
            "vector"
          ]
        ],
        "sz": 1728,
        "sha": "2a12a29193791d349bb512452f54e3d67755ded679c47b4b8e1540e88695e72f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Cb.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 166,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 384.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.77,
            "pixel_entropy": 0.77,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.28
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            376,
            "IEND"
          ]
        ],
        "sz": 384,
        "sha": "ca48f604262f2b4ef8b100c73130efe2ad33ef8c2a2c1b3516f24f51b7b04665",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Cd.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 167,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.07,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 524.0
          },
          "image": {
            "width": 54.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.64,
            "edge_density": 0.03,
            "pixel_entropy": 0.64,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 6.49
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            164,
            "SIDATX"
          ],
          [
            516,
            "IEND"
          ]
        ],
        "sz": 524,
        "sha": "bd893783c8d2bebb167ac05a27cdaea5dfd651fe8d64bcb30c14e7b925380c79",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Cg.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 168,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c68273c2d11300f756a7bf8e7f13e9cc1b3af9cd91ccf0338a4c5d44ebdae0ea",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Cg.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 169,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.09,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 494.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 494.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 150.0,
            "last_line_length": 494.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "81a62f2354f4619523a6a19da7c4138b9b0ed8a4ab6e5d8118b8c1f717e27b0e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Cu.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 170,
        "ms": {
          "file": {
            "size": 304.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.87,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 372.0,
            "high_byte_ratio": 0.27,
            "max_line_length": 372.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 130.0,
            "last_line_length": 372.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.35,
            "non_printable_ratio": 0.53,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            64,
            "tileMode"
          ],
          [
            75,
            "android"
          ],
          [
            85,
            "bitmap"
          ],
          [
            92,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 304,
        "sha": "0be66459db6f4860c062d9cbb88cfb11db969ae65f1aef6fe1ab746af5903b88",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Cv.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 171,
        "ms": {
          "file": {
            "size": 2832.0
          },
          "text": {
            "tab_count": 24.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 9.0,
            "char_entropy": 4.08,
            "unique_chars": 99.0,
            "lines_over_200": 6.0,
            "lines_over_500": 1.0,
            "avg_line_length": 427.11,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1963.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 1014.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 482.0,
            "long_token_count": 14.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 571.94,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            162,
            "textSize"
          ],
          [
            171,
            "textColor"
          ],
          [
            188,
            "background"
          ],
          [
            201,
            "layout_width"
          ],
          [
            216,
            "layout_height"
          ],
          [
            234,
            "layout_marginTop"
          ],
          [
            259,
            "progress"
          ],
          [
            270,
            "text"
          ],
          [
            277,
            "layout_marginStart"
          ],
          [
            298,
            "layout_marginEnd"
          ],
          [
            315,
            "elevation"
          ],
          [
            329,
            "layout_constrainedWidth"
          ],
          [
            392,
            "layout_constraintEnd_toEndOf"
          ],
          [
            423,
            "layout_constraintStart_toEndOf"
          ],
          [
            454,
            "layout_constraintStart_toStartOf"
          ],
          [
            491,
            "layout_constraintTop_toBottomOf"
          ],
          [
            525,
            "layout_constraintTop_toTopOf"
          ],
          [
            563,
            "TextView"
          ],
          [
            574,
            "View"
          ],
          [
            581,
            "android"
          ],
          [
            589,
            ",,androidx.appcompat.widget.AppCompatImageView"
          ],
          [
            636,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            694,
            "EEcom.google.android.material.progressindicator.LinearProgressIndicator"
          ],
          [
            766,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            808,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2832,
        "sha": "72c76674c026ba67c168b0a5c0d81e12fae44ea7a8f191080934504171f9e433",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/D2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 172,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.22,
            "unique_chars": 68.0,
            "lines_over_200": 2.0,
            "avg_line_length": 238.67,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 226.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 150.76,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "c815f02b7436479d78e63d632b7a999bf924ebf3f02fe138bb0f69c17454af6f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DC.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 173,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "space_count": 4.0,
            "total_lines": 11.0,
            "char_entropy": 4.08,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "avg_line_length": 68.36,
            "high_byte_ratio": 0.34,
            "max_line_length": 348.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 220.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.29,
            "line_length_stddev": 94.15,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "ellipsize"
          ],
          [
            98,
            "gravity"
          ],
          [
            113,
            "paddingLeft"
          ],
          [
            125,
            "paddingRight"
          ],
          [
            140,
            "layout_width"
          ],
          [
            155,
            "layout_height"
          ],
          [
            171,
            "minHeight"
          ],
          [
            185,
            "TextView"
          ],
          [
            196,
            "android"
          ],
          [
            204,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 588,
        "sha": "913826a466828797415462a2f6841c1780bc4436a15545df5d5e93cd03938f21",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DF.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 174,
        "ms": {
          "file": {
            "size": 1584.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 5.0,
            "char_entropy": 3.74,
            "unique_chars": 77.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 430.4,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1605.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 681.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 39.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 597.34,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            104,
            "state_enabled"
          ],
          [
            120,
            "interpolator"
          ],
          [
            137,
            "duration"
          ],
          [
            148,
            "valueTo"
          ],
          [
            156,
            "valueType"
          ],
          [
            168,
            "propertyName"
          ],
          [
            183,
            "state_hovered"
          ],
          [
            199,
            "startDelay"
          ],
          [
            212,
            "state_dragged"
          ],
          [
            230,
            "android"
          ],
          [
            244,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            286,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            333,
            "item"
          ],
          [
            340,
            "objectAnimator"
          ],
          [
            357,
            "selector"
          ],
          [
            366,
            "translationZ"
          ]
        ],
        "sz": 1584,
        "sha": "5a462952daa25d7eb0e1dddfebec1fd2b00d0f2a7c41ecb3ecb206d3120682de",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DG.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 175,
        "ms": {
          "file": {
            "size": 1160.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.03,
            "space_count": 3.0,
            "total_lines": 17.0,
            "char_entropy": 3.63,
            "unique_chars": 71.0,
            "lines_over_200": 1.0,
            "avg_line_length": 93.29,
            "high_byte_ratio": 0.41,
            "max_line_length": 359.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 503.0,
            "empty_line_ratio": 0.12,
            "last_line_length": 115.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 79.22,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "state_checked"
          ],
          [
            104,
            "state_pressed"
          ],
          [
            122,
            "drawable"
          ],
          [
            131,
            "insetLeft"
          ],
          [
            143,
            "insetRight"
          ],
          [
            158,
            "insetTop"
          ],
          [
            169,
            "insetBottom"
          ],
          [
            183,
            "android"
          ],
          [
            191,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            238,
            "inset"
          ],
          [
            246,
            "item"
          ],
          [
            251,
            "layer-list"
          ],
          [
            266,
            "selector"
          ]
        ],
        "sz": 1160,
        "sha": "5355946120f8961c4c0e2a69a1390824a52f747312b008fd2d6af71077ba0f50",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DP.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 176,
        "ms": {
          "file": {
            "size": 1052.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 3.95,
            "unique_chars": 77.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 283.6,
            "high_byte_ratio": 0.39,
            "max_line_length": 579.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 409.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 171.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 205.42,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            104,
            "ellipsize"
          ],
          [
            118,
            "layout_gravity"
          ],
          [
            135,
            "orientation"
          ],
          [
            152,
            "clickable"
          ],
          [
            164,
            "layout_width"
          ],
          [
            179,
            "layout_height"
          ],
          [
            195,
            "scaleType"
          ],
          [
            207,
            "singleLine"
          ],
          [
            220,
            "layout_weight"
          ],
          [
            236,
            "paddingStart"
          ],
          [
            251,
            "ImageView"
          ],
          [
            263,
            "LinearLayout"
          ],
          [
            280,
            "TextView"
          ],
          [
            291,
            "android"
          ],
          [
            299,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1052,
        "sha": "d7d65ec31206be6b0e8ff6adf9c8069bcbca10b09bec786d32a5ffd476de01b5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DS.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 177,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 3.0,
            "char_entropy": 3.47,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 315.33,
            "high_byte_ratio": 0.42,
            "max_line_length": 808.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 314.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 808.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "line_length_stddev": 352.89,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "android"
          ],
          [
            82,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            129,
            "item"
          ],
          [
            134,
            "layer-list"
          ],
          [
            149,
            "shape"
          ],
          [
            157,
            "solid"
          ]
        ],
        "sz": 684,
        "sha": "2bf2ace29d39988a6f7d4390745bc46fff14cdce7f31826a14e305d1aaa8e6c3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DU.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 178,
        "ms": {
          "file": {
            "size": 1572.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.03,
            "space_count": 4.0,
            "total_lines": 31.0,
            "char_entropy": 3.62,
            "unique_chars": 69.0,
            "lines_over_200": 1.0,
            "avg_line_length": 69.87,
            "high_byte_ratio": 0.43,
            "max_line_length": 294.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 670.0,
            "empty_line_ratio": 0.03,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 64.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "state_checked"
          ],
          [
            111,
            "drawable"
          ],
          [
            138,
            "state_indeterminate"
          ],
          [
            160,
            "android"
          ],
          [
            170,
            "animated-selector"
          ],
          [
            194,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            236,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            283,
            "item"
          ],
          [
            288,
            "transition"
          ]
        ],
        "sz": 1572,
        "sha": "1eb65614b274214fffa5b184bb15d3ed7fcf2c80d217af2c5811dd04efd22952",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DV.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 179,
        "ms": {
          "png": {
            "a_entropy": 1.67,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.15
          },
          "file": {
            "size": 766.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 4.0,
            "b_entropy": 2.13,
            "g_entropy": 2.14,
            "r_entropy": 2.16,
            "edge_density": 0.07,
            "pixel_entropy": 2.9,
            "histogram_flatness": 0.36
          },
          "binary": {
            "overall_entropy": 7.66
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            758,
            "IEND"
          ]
        ],
        "sz": 766,
        "sha": "e89afcb0b3934bf96e2e45ec7aa48fe8888bb1c929ea2bbb66b3dbef9350ed4f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/DW.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 180,
        "ms": {
          "file": {
            "size": 2352.0
          },
          "text": {
            "tab_count": 19.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 16.0,
            "char_entropy": 4.08,
            "unique_chars": 105.0,
            "lines_over_200": 7.0,
            "lines_over_500": 1.0,
            "avg_line_length": 197.69,
            "high_byte_ratio": 0.39,
            "max_line_length": 710.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 850.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 175.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 193.87,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            182,
            "textAppearance"
          ],
          [
            197,
            "textColor"
          ],
          [
            209,
            "ellipsize"
          ],
          [
            223,
            "gravity"
          ],
          [
            233,
            "orientation"
          ],
          [
            250,
            "background"
          ],
          [
            263,
            "paddingRight"
          ],
          [
            278,
            "fadingEdge"
          ],
          [
            291,
            "layout_width"
          ],
          [
            306,
            "layout_height"
          ],
          [
            324,
            "layout_marginLeft"
          ],
          [
            344,
            "layout_marginTop"
          ],
          [
            363,
            "layout_marginRight"
          ],
          [
            384,
            "layout_marginBottom"
          ],
          [
            404,
            "minHeight"
          ],
          [
            418,
            "maxLines"
          ],
          [
            427,
            "singleLine"
          ],
          [
            440,
            "layout_weight"
          ],
          [
            456,
            "layout_below"
          ],
          [
            473,
            "layout_alignLeft"
          ],
          [
            490,
            "paddingEnd"
          ],
          [
            505,
            "layout_marginStart"
          ],
          [
            526,
            "layout_marginEnd"
          ],
          [
            545,
            "layout_alignStart"
          ],
          [
            563,
            "maxHeight"
          ],
          [
            577,
            "maxWidth"
          ],
          [
            588,
            "FrameLayout"
          ],
          [
            600,
            "LinearLayout"
          ],
          [
            617,
            "RelativeLayout"
          ],
          [
            634,
            "TextView"
          ],
          [
            645,
            "android"
          ],
          [
            653,
            "00androidx.preference.internal.PreferenceImageView"
          ],
          [
            710,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            752,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2352,
        "sha": "511cf8ff1cd79d3ad4a8c79bab643fbe6d8b9df48dcad4801b79f41b6df9ba5c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/De.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 181,
        "ms": {
          "file": {
            "size": 1656.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.05,
            "total_lines": 7.0,
            "char_entropy": 3.4,
            "unique_chars": 72.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 322.86,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1045.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 807.0,
            "last_line_length": 1045.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.36,
            "line_length_stddev": 372.78,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "valueType"
          ],
          [
            148,
            "propertyName"
          ],
          [
            165,
            "ordering"
          ],
          [
            176,
            "android"
          ],
          [
            184,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            231,
            "objectAnimator"
          ]
        ],
        "sz": 1656,
        "sha": "188414b8a6377367745ddadc7bc2326b376d3312a9ae18eb2679e4c456dff5f6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Df.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 182,
        "ms": {
          "file": {
            "size": 768.0
          },
          "text": {
            "tab_count": 3.0,
            "space_count": 2.0,
            "total_lines": 7.0,
            "char_entropy": 4.27,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "avg_line_length": 134.86,
            "high_byte_ratio": 0.29,
            "max_line_length": 500.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 277.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 161.06,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "layout_width"
          ],
          [
            108,
            "layout_height"
          ],
          [
            163,
            "layout_constraintEnd_toEndOf"
          ],
          [
            192,
            "layout_constraintStart_toStartOf"
          ],
          [
            229,
            "layout_constraintTop_toTopOf"
          ],
          [
            260,
            "View"
          ],
          [
            267,
            "android"
          ],
          [
            281,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            323,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            370,
            "merge"
          ]
        ],
        "sz": 768,
        "sha": "8f0debba2abc424ac34fbd5a5144fb2848c637993128c7f49abc27eed49145e4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Di.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 183,
        "ms": {
          "png": {
            "a_entropy": 0.59,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.42,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 244.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 4.0,
            "pixel_entropy": 2.15,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 4.77
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            236,
            "IEND"
          ]
        ],
        "sz": 244,
        "sha": "671d27e5a4b42111174b888d57118e05075a556d703bd54f9335202d2a416791",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Dt.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 184,
        "ms": {
          "png": {
            "a_entropy": 0.5,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.54,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 222.0
          },
          "image": {
            "width": 6.0,
            "height": 6.0,
            "channels": 4.0,
            "pixel_entropy": 2.13,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 4.46
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            214,
            "IEND"
          ]
        ],
        "sz": 222,
        "sha": "8436624220fba246ae816a3aab379dfd7ff2a484284ab24c3af4989778705bb3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/E2.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 185,
        "ms": {
          "file": {
            "size": 1064.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.51,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1514.0,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 1514.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 466.0,
            "last_line_length": 1514.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            90,
            "state_window_focused"
          ],
          [
            111,
            "state_enabled"
          ],
          [
            127,
            "state_pressed"
          ],
          [
            145,
            "drawable"
          ],
          [
            156,
            "android"
          ],
          [
            164,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            211,
            "item"
          ],
          [
            218,
            "selector"
          ]
        ],
        "sz": 1064,
        "sha": "cf94b763018d8aff10c34215d716d3cd798428530851bf12cf2376169dd39824",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/E7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 186,
        "ms": {
          "file": {
            "size": 1176.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 2.0,
            "char_entropy": 4.04,
            "unique_chars": 80.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 749.5,
            "high_byte_ratio": 0.32,
            "max_line_length": 928.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 481.0,
            "last_line_length": 571.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 178.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            126,
            "name"
          ],
          [
            133,
            "height"
          ],
          [
            148,
            "viewportWidth"
          ],
          [
            166,
            "viewportHeight"
          ],
          [
            181,
            "fillColor"
          ],
          [
            195,
            "pathData"
          ],
          [
            206,
            "strokeColor"
          ],
          [
            220,
            "strokeWidth"
          ],
          [
            234,
            "trimPathEnd"
          ],
          [
            246,
            "strokeLineCap"
          ],
          [
            264,
            "aapt"
          ],
          [
            271,
            "android"
          ],
          [
            279,
            "clip-path"
          ],
          [
            299,
            "eye_mask"
          ],
          [
            310,
            "group"
          ],
          [
            318,
            "http://schemas.android.com/aapt"
          ],
          [
            350,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            397,
            "path"
          ],
          [
            404,
            "strike_through"
          ],
          [
            421,
            "vector"
          ]
        ],
        "sz": 1176,
        "sha": "c9a46361f87cdb2f5f512023d7158677cb0e328420669f07ff0762c4f11b7c6f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/EF.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 187,
        "ms": {
          "png": {
            "a_entropy": 1.96,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.23
          },
          "file": {
            "size": 524.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 4.0,
            "b_entropy": 2.31,
            "g_entropy": 2.31,
            "r_entropy": 2.31,
            "edge_density": 0.2,
            "pixel_entropy": 3.16,
            "histogram_flatness": 0.39
          },
          "binary": {
            "overall_entropy": 7.39
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            44,
            "V1KBQ"
          ],
          [
            50,
            "vpphpphtpp|?"
          ],
          [
            516,
            "IEND"
          ]
        ],
        "sz": 524,
        "sha": "e3e822f5a92f27266d4e88bee03320413de2521b55f7407dfcda7c2a95c20a83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/EM.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 188,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.06,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 2305.0
          },
          "image": {
            "width": 192.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 3.04,
            "edge_density": 0.01,
            "pixel_entropy": 3.04,
            "histogram_flatness": 0.38
          },
          "binary": {
            "overall_entropy": 7.71
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            466,
            "IP06"
          ],
          [
            2297,
            "IEND"
          ]
        ],
        "sz": 2305,
        "sha": "e1a2b864d0114a8471662f8e30ffcbb2eb9ffd414d36239612def8c7792a450a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ER.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 189,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.99,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 178.0
          },
          "image": {
            "width": 18.0,
            "height": 5.0,
            "channels": 2.0,
            "r_entropy": 0.72,
            "edge_density": 0.11,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 3.66
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            170,
            "IEND"
          ]
        ],
        "sz": 178,
        "sha": "25f25112cc46b285767de7b5b058cfc0a9efd5f21cfe724af031505d66a9eceb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Eb.9.png",
        "type": "png"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 190,
        "ms": {
          "file": {
            "size": 3168.0
          },
          "text": {
            "tab_count": 30.0,
            "digit_ratio": 0.02,
            "space_count": 6.0,
            "total_lines": 14.0,
            "char_entropy": 4.24,
            "unique_chars": 129.0,
            "lines_over_200": 10.0,
            "lines_over_500": 2.0,
            "avg_line_length": 298.07,
            "high_byte_ratio": 0.37,
            "lines_over_1000": 1.0,
            "max_line_length": 1149.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 1156.0,
            "empty_line_ratio": 0.07,
            "last_line_length": 265.0,
            "long_token_count": 15.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 268.87,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            206,
            "theme"
          ],
          [
            214,
            "textSize"
          ],
          [
            223,
            "textStyle"
          ],
          [
            235,
            "textColor"
          ],
          [
            249,
            "gravity"
          ],
          [
            259,
            "layout_gravity"
          ],
          [
            276,
            "orientation"
          ],
          [
            293,
            "background"
          ],
          [
            306,
            "layout_width"
          ],
          [
            321,
            "layout_height"
          ],
          [
            339,
            "layout_marginLeft"
          ],
          [
            359,
            "layout_marginTop"
          ],
          [
            378,
            "layout_marginRight"
          ],
          [
            399,
            "text"
          ],
          [
            404,
            "layout_weight"
          ],
          [
            420,
            "inputType"
          ],
          [
            434,
            "textCursorDrawable"
          ],
          [
            453,
            "paddingStart"
          ],
          [
            470,
            "layout_marginHorizontal"
          ],
          [
            496,
            "endIconMode"
          ],
          [
            510,
            "helperTextEnabled"
          ],
          [
            530,
            "hintEnabled"
          ],
          [
            544,
            "layout_constraintEnd_toEndOf"
          ],
          [
            573,
            "layout_constraintStart_toStartOf"
          ],
          [
            610,
            "layout_constraintTop_toBottomOf"
          ],
          [
            644,
            "layout_constraintTop_toTopOf"
          ],
          [
            675,
            "passwordToggleDrawable"
          ],
          [
            700,
            "passwordToggleEnabled"
          ],
          [
            722,
            "LinearLayout"
          ],
          [
            739,
            "TextView"
          ],
          [
            750,
            "View"
          ],
          [
            757,
            "android"
          ],
          [
            765,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            823,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            881,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            937,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            979,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1032,
            "161.174.232.174:1767"
          ]
        ],
        "sz": 3168,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "cursor"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-url-navigation-action--rx-19",
            "l": 1
          }
        ],
        "sha": "917866941b9282ab652978235844fb20be1348fb263587ced074bb4cbf33b34e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Eh.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 191,
        "ms": {
          "file": {
            "size": 652.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 7.0,
            "char_entropy": 4.33,
            "unique_chars": 70.0,
            "lines_over_200": 2.0,
            "avg_line_length": 116.29,
            "high_byte_ratio": 0.31,
            "max_line_length": 329.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 218.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.27,
            "line_length_stddev": 138.57,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "layout_gravity"
          ],
          [
            106,
            "background"
          ],
          [
            119,
            "visibility"
          ],
          [
            132,
            "layout_width"
          ],
          [
            147,
            "layout_height"
          ],
          [
            165,
            "minWidth"
          ],
          [
            174,
            "minHeight"
          ],
          [
            188,
            "layout_marginEnd"
          ],
          [
            207,
            "android"
          ],
          [
            215,
            "99com.google.android.material.internal.CheckableImageButton"
          ],
          [
            275,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 652,
        "sha": "0ba32cbd36d9b7f811dfe6bda8183185d31e16bf9f61589805a1f8a52326a34d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ej.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 192,
        "ms": {
          "file": {
            "size": 472.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.95,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 200.67,
            "high_byte_ratio": 0.33,
            "max_line_length": 521.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 191.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 521.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 228.91,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            77,
            "background"
          ],
          [
            90,
            "focusable"
          ],
          [
            102,
            "clickable"
          ],
          [
            114,
            "layout_width"
          ],
          [
            129,
            "layout_height"
          ],
          [
            147,
            "CheckBox"
          ],
          [
            158,
            "android"
          ],
          [
            166,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 472,
        "sha": "db8a960c913377f45de018245582ff21a6c0db2f72d00b7185ac495b9777e4d9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Eq.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 193,
        "ms": {
          "png": {
            "a_entropy": 1.23,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 262.0
          },
          "image": {
            "width": 66.0,
            "height": 33.0,
            "channels": 4.0,
            "b_entropy": 0.99,
            "g_entropy": 0.99,
            "r_entropy": 0.99,
            "edge_density": 0.02,
            "pixel_entropy": 1.93,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 6.63
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            254,
            "IEND"
          ]
        ],
        "sz": 262,
        "sha": "646021cc77e7f4bd68ab59fb32d306f81a2042125e6cdaa16184a062a8183f79",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Er.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 194,
        "ms": {
          "file": {
            "size": 436.0
          },
          "text": {
            "tab_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 4.1,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 273.5,
            "high_byte_ratio": 0.31,
            "max_line_length": 503.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 166.0,
            "last_line_length": 503.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 229.5,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            70,
            "gravity"
          ],
          [
            83,
            "layout_width"
          ],
          [
            98,
            "layout_height"
          ],
          [
            116,
            "horizontalSpacing"
          ],
          [
            136,
            "GridView"
          ],
          [
            147,
            "android"
          ],
          [
            155,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 436,
        "sha": "57ad1465c9cba0874ade5042305ea1fbc9e3fac8be8311a8b5d5dda0240a4f4b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ex.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 195,
        "ms": {
          "file": {
            "size": 1504.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 4.19,
            "unique_chars": 87.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 408.4,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1329.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 494.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 7.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.24,
            "line_length_stddev": 501.06,
            "non_printable_ratio": 0.37,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            122,
            "theme"
          ],
          [
            130,
            "gravity"
          ],
          [
            143,
            "visibility"
          ],
          [
            158,
            "fitsSystemWindows"
          ],
          [
            176,
            "layout_width"
          ],
          [
            191,
            "layout_height"
          ],
          [
            209,
            "layout_alignParentTop"
          ],
          [
            233,
            "touchscreenBlocksFocus"
          ],
          [
            258,
            "navigationContentDescription"
          ],
          [
            289,
            "android"
          ],
          [
            297,
            ",,androidx.appcompat.widget.ActionBarContainer"
          ],
          [
            344,
            "..androidx.appcompat.widget.ActionBarContextView"
          ],
          [
            393,
            "00androidx.appcompat.widget.ActionBarOverlayLayout"
          ],
          [
            444,
            "!!androidx.appcompat.widget.Toolbar"
          ],
          [
            486,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            528,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            575,
            "include"
          ],
          [
            585,
            "layout"
          ]
        ],
        "sz": 1504,
        "sha": "cfeb8164a87ef4c528f65d8df4ada491b578e5611c205e1a53ea4eae03bb033a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ey.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 196,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.11,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 738.0
          },
          "image": {
            "width": 96.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 2.3,
            "edge_density": 0.02,
            "pixel_entropy": 2.3,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 6.96
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            196,
            "IDATX"
          ],
          [
            730,
            "IEND"
          ]
        ],
        "sz": 738,
        "sha": "8fcf5b9da03c68dff65adfa8713db9ce3b5e423a9f5046f1785ab640c2a647fb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/F8.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 197,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 307.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.61,
            "pixel_entropy": 0.61,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 6.86
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            299,
            "IEND"
          ]
        ],
        "sz": 307,
        "sha": "18620c151330289bba196c1cc1e2699f98061a35be3551876296a8c4d592ba17",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/FG.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 198,
        "ms": {
          "file": {
            "size": 1528.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.78,
            "space_count": 148.0,
            "total_lines": 11.0,
            "char_entropy": 4.82,
            "unique_chars": 80.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 153.64,
            "high_byte_ratio": 0.15,
            "lines_over_1000": 1.0,
            "max_line_length": 1248.0,
            "non_ascii_ratio": 0.15,
            "null_byte_count": 246.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.1,
            "most_common_ratio": 0.14,
            "line_length_stddev": 347.58,
            "non_printable_ratio": 0.22,
            "repeated_char_sequences": 11.0,
            "max_inline_whitespace_run": 13.0
          }
        },
        "ss": [
          [
            97,
            "height"
          ],
          [
            112,
            "autoMirrored"
          ],
          [
            127,
            "viewportWidth"
          ],
          [
            145,
            "viewportHeight"
          ],
          [
            160,
            "fillColor"
          ],
          [
            174,
            "pathData"
          ],
          [
            187,
            "M5.2834,9.3083V10.7833L4.1084,11.4916L3.1334,10.5166C3.8084,10.0416             4.5251,9.6333 5.2834,9.3083ZM14.75,9.325C15.4917"
          ],
          [
            1090,
            "android"
          ],
          [
            1098,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1145,
            "path"
          ],
          [
            1152,
            "vector"
          ]
        ],
        "sz": 1528,
        "sha": "2d825b79cce60203492ff09a04826db0ac8d9eb9bc0fb9fb139ae1aa5cde0f67",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/FL.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 199,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.33,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1096.0
          },
          "image": {
            "width": 41.0,
            "height": 41.0,
            "channels": 2.0,
            "r_entropy": 3.05,
            "edge_density": 0.13,
            "pixel_entropy": 3.05,
            "histogram_flatness": 0.38
          },
          "binary": {
            "overall_entropy": 7.3
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            450,
            "i2dw"
          ],
          [
            1088,
            "IEND"
          ]
        ],
        "sz": 1096,
        "sha": "9f849bcd788adceb32f4c1a5aa892749bd1e244a3787bfbfbd30d3b6f5d8e9db",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/FM.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 200,
        "ms": {
          "file": {
            "size": 3184.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.02,
            "space_count": 5.0,
            "total_lines": 13.0,
            "char_entropy": 4.19,
            "unique_chars": 110.0,
            "lines_over_200": 7.0,
            "lines_over_500": 3.0,
            "avg_line_length": 327.85,
            "high_byte_ratio": 0.38,
            "lines_over_1000": 1.0,
            "max_line_length": 1305.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 1104.0,
            "empty_line_ratio": 0.15,
            "last_line_length": 451.0,
            "long_token_count": 17.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 388.25,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            193,
            "paddingBottom"
          ],
          [
            209,
            "visibility"
          ],
          [
            224,
            "layout"
          ],
          [
            231,
            "inflatedId"
          ],
          [
            244,
            "layout_width"
          ],
          [
            259,
            "layout_height"
          ],
          [
            277,
            "layout_marginLeft"
          ],
          [
            297,
            "layout_marginTop"
          ],
          [
            316,
            "layout_marginRight"
          ],
          [
            337,
            "layout_marginBottom"
          ],
          [
            359,
            "minWidth"
          ],
          [
            370,
            "text"
          ],
          [
            377,
            "importantForAccessibility"
          ],
          [
            405,
            "layout_marginStart"
          ],
          [
            426,
            "layout_marginEnd"
          ],
          [
            445,
            "accessibilityPaneTitle"
          ],
          [
            470,
            "barrierDirection"
          ],
          [
            487,
            "barrierMargin"
          ],
          [
            505,
            "constraint_referenced_ids"
          ],
          [
            533,
            "layout_constraintEnd_toEndOf"
          ],
          [
            564,
            "layout_constraintEnd_toStartOf"
          ],
          [
            595,
            "layout_constraintStart_toStartOf"
          ],
          [
            632,
            "layout_constraintTop_toBottomOf"
          ],
          [
            666,
            "layout_constraintTop_toTopOf"
          ],
          [
            697,
            "Button"
          ],
          [
            706,
            "TextView"
          ],
          [
            717,
            "ViewStub"
          ],
          [
            728,
            "android"
          ],
          [
            736,
            "((androidx.constraintlayout.widget.Barrier"
          ],
          [
            779,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            837,
            "11com.google.android.material.button.MaterialButton"
          ],
          [
            889,
            "55com.google.android.material.timepicker.TimePickerView"
          ],
          [
            945,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            987,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1032,
            "77material_textinput_timepicker, material_timepicker_view"
          ]
        ],
        "sz": 3184,
        "sha": "98b2b5942451e386997ec9f664eab25f3ab0a13ccbf048e9e50a143dfcd1adf2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/FR.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 201,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 785.0
          },
          "image": {
            "width": 128.0,
            "height": 128.0,
            "channels": 2.0,
            "r_entropy": 0.48,
            "pixel_entropy": 0.48,
            "histogram_flatness": 0.06
          },
          "binary": {
            "overall_entropy": 7.63
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            777,
            "IEND"
          ]
        ],
        "sz": 785,
        "sha": "6002eb56783b956b5f91e6ddffaf36cc867402a01a225e627b4c25c8d21a4e23",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/FY.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 202,
        "ms": {
          "file": {
            "size": 532.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 700.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 700.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 222.0,
            "last_line_length": 700.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_pressed"
          ],
          [
            82,
            "drawable"
          ],
          [
            93,
            "exitFadeDuration"
          ],
          [
            112,
            "android"
          ],
          [
            120,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            167,
            "item"
          ],
          [
            174,
            "selector"
          ]
        ],
        "sz": 532,
        "sha": "26235427f764aa64d10f386e268f22abfd0efe934bb97f9f7f5fb11bc1431696",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/FZ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 203,
        "ms": {
          "file": {
            "size": 648.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.35,
            "space_count": 11.0,
            "total_lines": 3.0,
            "char_entropy": 4.44,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "avg_line_length": 261.33,
            "high_byte_ratio": 0.26,
            "max_line_length": 440.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 225.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 168.74,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            153,
            "eeM19,6.41L17.59,5 12,10.59 6.41,5 5,6.41 10.59,12 5,17.59 6.41,19 12,13.41 17.59,19 19,17.59 13.41,12z"
          ],
          [
            259,
            "android"
          ],
          [
            267,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            314,
            "path"
          ],
          [
            321,
            "vector"
          ]
        ],
        "sz": 648,
        "sha": "68ac9aadda3cde3f84df788f16549ec6e62c295310802a40521f8fdd9a920fbf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Fe.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 204,
        "ms": {
          "file": {
            "size": 640.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.32,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 4.47,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "avg_line_length": 258.0,
            "high_byte_ratio": 0.26,
            "max_line_length": 432.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 225.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 165.74,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            249,
            "android"
          ],
          [
            257,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            304,
            "path"
          ],
          [
            311,
            "vector"
          ]
        ],
        "sz": 640,
        "sha": "74f13910c634a6b4730de4fa99c5a595cd4939df021fbe79a5a4f73f6094565a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Fg.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 205,
        "ms": {
          "file": {
            "size": 852.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.44,
            "space_count": 9.0,
            "total_lines": 3.0,
            "char_entropy": 4.81,
            "unique_chars": 77.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 329.33,
            "high_byte_ratio": 0.21,
            "max_line_length": 644.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 222.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.22,
            "line_length_stddev": 249.04,
            "non_printable_ratio": 0.34,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            156,
            ".M20,5L4,5c-1.1,0 -1.99,0.9 -1.99,2L2,17c0,1.1 0.9,2 2,2h16c1.1,0 2,-0.9 2,-2L22,7c0,-1.1 -0.9,-2 -2,-2zM11,8h2v2h-2L11,8zM11,11"
          ],
          [
            462,
            "android"
          ],
          [
            470,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            517,
            "path"
          ],
          [
            524,
            "vector"
          ]
        ],
        "sz": 852,
        "sha": "35ef38a96f288d0fc296a21db7289c2ff0d90f998cc0bb435caf6caf1dc8899b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Fl.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 206,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.33,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 212.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 4.02
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            187,
            "UD_E"
          ],
          [
            204,
            "IEND"
          ]
        ],
        "sz": 212,
        "sha": "93b7657184473d5881669b80e3d43fd64e442d1ed71be4ced3518380b6cec69d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Fx.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 207,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 167.0,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 167.0
          },
          "image": {
            "width": 1.0,
            "height": 1.0,
            "channels": 1.0
          },
          "binary": {
            "overall_entropy": 3.42
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            137,
            "IDAT"
          ],
          [
            159,
            "IEND"
          ]
        ],
        "sz": 167,
        "sha": "378694706fb7256dd2248e2af854efd71ec7e8885f61da2e16a2bd32fcf3d0a9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Fx1.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 208,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.02,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 502.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 502.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 150.0,
            "last_line_length": 502.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "9b735e849bee018c416276cabba3d2198fd4e1f1d41b7714ee08c020860dca83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/G3.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 209,
        "ms": {
          "png": {
            "a_entropy": 1.3,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 203.0
          },
          "image": {
            "width": 44.0,
            "height": 22.0,
            "channels": 4.0,
            "b_entropy": 0.99,
            "g_entropy": 0.99,
            "r_entropy": 0.99,
            "edge_density": 0.03,
            "pixel_entropy": 1.92,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 6.53
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            195,
            "IEND"
          ]
        ],
        "sz": 203,
        "sha": "0fd2f53946eb93b3154f44bdafc8896ea93195a64ce5fc64049e8b7293cd6801",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/G7.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 210,
        "ms": {
          "file": {
            "size": 708.0
          },
          "text": {
            "tab_count": 5.0,
            "total_lines": 4.0,
            "char_entropy": 3.68,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 238.75,
            "high_byte_ratio": 0.39,
            "max_line_length": 851.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 307.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 851.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 354.16,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "android"
          ],
          [
            82,
            "device-admin"
          ],
          [
            97,
            "force-lock"
          ],
          [
            110,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            157,
            "limit-password"
          ],
          [
            174,
            "reset-password"
          ],
          [
            189,
            "uses-policies"
          ],
          [
            207,
            "watch-login"
          ],
          [
            219,
            "wipe-data"
          ]
        ],
        "sz": 708,
        "sha": "673753ffb30e7f8b2b2ca8ab7fddcb7ff85d1e44d99bf7d2d281dc07292f82da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/GH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 211,
        "ms": {
          "file": {
            "size": 320.0
          },
          "text": {
            "digit_ratio": 0.22,
            "space_count": 5.0,
            "total_lines": 1.0,
            "char_entropy": 4.18,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 372.0,
            "high_byte_ratio": 0.21,
            "max_line_length": 372.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 123.0,
            "last_line_length": 372.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            107,
            "android"
          ],
          [
            115,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            162,
            "pathInterpolator"
          ]
        ],
        "sz": 320,
        "sha": "a8d7341c20d07c9fdab602e7c39187c9abb9caf5fbf9b2832cd6d9f18a2c86c2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Gb.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 212,
        "ms": {
          "file": {
            "size": 980.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.64,
            "space_count": 32.0,
            "total_lines": 3.0,
            "char_entropy": 4.83,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 375.33,
            "high_byte_ratio": 0.2,
            "max_line_length": 776.0,
            "non_ascii_ratio": 0.2,
            "null_byte_count": 218.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.19,
            "line_length_stddev": 305.51,
            "non_printable_ratio": 0.3,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M18,16.08c-0.76,0 -1.44,0.3 -1.96,0.77L8.91,12.7c0.05,-0.23 0.09,-0.46 0.09,-0.7s-0.04,-0.47 -0.09,-0.7l7.05,-4.11c0.54,0.5 1.25"
          ],
          [
            591,
            "android"
          ],
          [
            599,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            646,
            "path"
          ],
          [
            653,
            "vector"
          ]
        ],
        "sz": 980,
        "sha": "909f4468b73823cb500570ab47067a41b3730aac73729afdb73ea325d3dda04b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ge.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 213,
        "ms": {
          "file": {
            "size": 388.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 2.0,
            "char_entropy": 3.95,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 240.5,
            "high_byte_ratio": 0.29,
            "max_line_length": 350.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 158.0,
            "last_line_length": 131.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 109.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromAlpha"
          ],
          [
            104,
            "toAlpha"
          ],
          [
            114,
            "alpha"
          ],
          [
            122,
            "android"
          ],
          [
            130,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 388,
        "sha": "88f95c20a2135aae08e8682cf36bd9fd29904f073424dba9033d99f699d533bf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Gn.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 214,
        "ms": {
          "file": {
            "size": 1216.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "total_lines": 7.0,
            "char_entropy": 3.79,
            "unique_chars": 74.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 230.86,
            "high_byte_ratio": 0.38,
            "max_line_length": 513.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 530.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.33,
            "line_length_stddev": 185.86,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "state_enabled"
          ],
          [
            114,
            "duration"
          ],
          [
            125,
            "valueTo"
          ],
          [
            133,
            "valueType"
          ],
          [
            145,
            "propertyName"
          ],
          [
            162,
            "state_liftable"
          ],
          [
            177,
            "state_lifted"
          ],
          [
            194,
            "android"
          ],
          [
            208,
            "elevation"
          ],
          [
            220,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            262,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            309,
            "item"
          ],
          [
            316,
            "objectAnimator"
          ],
          [
            333,
            "selector"
          ]
        ],
        "sz": 1216,
        "sha": "66112e17301efa194dcf01055d78a7a9e32f13127cb548090cdf2d241bea5bd8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Gz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 215,
        "ms": {
          "file": {
            "size": 756.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.35,
            "space_count": 11.0,
            "total_lines": 4.0,
            "char_entropy": 4.6,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 229.75,
            "high_byte_ratio": 0.27,
            "max_line_length": 661.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 232.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.25,
            "line_length_stddev": 249.31,
            "non_printable_ratio": 0.38,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "autoMirrored"
          ],
          [
            116,
            "viewportWidth"
          ],
          [
            134,
            "viewportHeight"
          ],
          [
            149,
            "fillColor"
          ],
          [
            163,
            "pathData"
          ],
          [
            176,
            "M16,1L4,1c-1.1,0 -2,0.9 -2,2v14h2L4,3h12L16,1zM19,5L8,5c-1.1,0 -2,0.9 -2,2v14c0,1.1 0.9,2 2,2h11c1.1,0 2,-0.9 2,-2L21,7c0,-1.1 -"
          ],
          [
            342,
            "android"
          ],
          [
            350,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            397,
            "path"
          ],
          [
            404,
            "vector"
          ]
        ],
        "sz": 756,
        "sha": "84dbdf78ad99472866fd7f9f40447fcae377c02e0780935987a960bdb6d69ecc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/H1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 216,
        "ms": {
          "file": {
            "size": 852.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.02,
            "total_lines": 10.0,
            "char_entropy": 3.95,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 109.9,
            "high_byte_ratio": 0.35,
            "max_line_length": 388.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 339.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 137.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 129.04,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            100,
            "interpolator"
          ],
          [
            117,
            "duration"
          ],
          [
            146,
            "shareInterpolator"
          ],
          [
            164,
            "fromXScale"
          ],
          [
            179,
            "toXScale"
          ],
          [
            188,
            "fromYScale"
          ],
          [
            203,
            "toYScale"
          ],
          [
            212,
            "fromAlpha"
          ],
          [
            226,
            "toAlpha"
          ],
          [
            236,
            "alpha"
          ],
          [
            244,
            "android"
          ],
          [
            252,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            299,
            "scale"
          ]
        ],
        "sz": 852,
        "sha": "ceb9157864e5cc562a21f1e4663139240d73289fc51a30c996a8c2ee8e89ec5d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/HA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 217,
        "ms": {
          "file": {
            "size": 2724.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 19.0,
            "char_entropy": 3.41,
            "unique_chars": 85.0,
            "lines_over_200": 10.0,
            "lines_over_500": 2.0,
            "avg_line_length": 202.21,
            "high_byte_ratio": 0.44,
            "max_line_length": 586.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 1288.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 235.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.33,
            "line_length_stddev": 185.93,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            104,
            "state_focused"
          ],
          [
            120,
            "state_enabled"
          ],
          [
            136,
            "state_pressed"
          ],
          [
            154,
            "duration"
          ],
          [
            165,
            "valueTo"
          ],
          [
            173,
            "valueType"
          ],
          [
            185,
            "propertyName"
          ],
          [
            200,
            "state_hovered"
          ],
          [
            216,
            "startDelay"
          ],
          [
            231,
            "android"
          ],
          [
            239,
            "elevation"
          ],
          [
            251,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            298,
            "item"
          ],
          [
            305,
            "objectAnimator"
          ],
          [
            322,
            "selector"
          ],
          [
            337,
            "translationZ"
          ]
        ],
        "sz": 2724,
        "sha": "6dc1153135b986f5b8cccb58ec97402fcf49c71cb7029496d6cfa656e008f39e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/HE.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 218,
        "ms": {
          "file": {
            "size": 352.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 4.03,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 444.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 444.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 138.0,
            "last_line_length": 444.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "layout_width"
          ],
          [
            75,
            "layout_height"
          ],
          [
            93,
            "TextView"
          ],
          [
            104,
            "android"
          ],
          [
            112,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            299,
            "127.3.1.16:772"
          ]
        ],
        "sz": 352,
        "sha": "50c990ee5e6d055726e04811fb1f43009766f1d2e28b51a1dc1b24a3e1fa4d05",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/HQ.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 219,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.18,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 541.0
          },
          "image": {
            "width": 64.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 2.81,
            "edge_density": 0.03,
            "pixel_entropy": 2.81,
            "histogram_flatness": 0.35
          },
          "binary": {
            "overall_entropy": 6.53
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            196,
            "DIDATH"
          ],
          [
            318,
            "Yxaa"
          ],
          [
            533,
            "IEND"
          ]
        ],
        "sz": 541,
        "sha": "c7954e2bfbd01e5bbc9d774dd4d743d3f8a26613129fac8071b741bab3018ab0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/HS.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 220,
        "ms": {
          "file": {
            "size": 1948.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.02,
            "total_lines": 10.0,
            "char_entropy": 3.92,
            "unique_chars": 88.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 270.9,
            "high_byte_ratio": 0.42,
            "lines_over_1000": 1.0,
            "max_line_length": 1167.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 718.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 528.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 342.19,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            142,
            "textSize"
          ],
          [
            151,
            "textColor"
          ],
          [
            165,
            "gravity"
          ],
          [
            175,
            "orientation"
          ],
          [
            192,
            "background"
          ],
          [
            205,
            "layout_width"
          ],
          [
            220,
            "layout_height"
          ],
          [
            238,
            "layout_marginTop"
          ],
          [
            257,
            "adjustViewBounds"
          ],
          [
            276,
            "progress"
          ],
          [
            287,
            "text"
          ],
          [
            292,
            "paddingStart"
          ],
          [
            307,
            "paddingEnd"
          ],
          [
            322,
            "layout_marginStart"
          ],
          [
            343,
            "layout_marginEnd"
          ],
          [
            360,
            "elevation"
          ],
          [
            374,
            "FrameLayout"
          ],
          [
            386,
            "LinearLayout"
          ],
          [
            403,
            "TextView"
          ],
          [
            414,
            "View"
          ],
          [
            421,
            "android"
          ],
          [
            429,
            ",,androidx.appcompat.widget.AppCompatImageView"
          ],
          [
            476,
            "EEcom.google.android.material.progressindicator.LinearProgressIndicator"
          ],
          [
            548,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1948,
        "sha": "60229279487c23e114e1e7b03359d99ae81a5692f506cc0b1d3f32e8504522d4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Hk.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 221,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "tab_count": 13.0,
            "digit_ratio": 0.34,
            "space_count": 10.0,
            "total_lines": 3.0,
            "char_entropy": 4.42,
            "unique_chars": 72.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.67,
            "high_byte_ratio": 0.27,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 239.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.29,
            "line_length_stddev": 268.41,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "eeM19,6.41L17.59,5 12,10.59 6.41,5 5,6.41 10.59,12 5,17.59 6.41,19 12,13.41 17.59,19 19,17.59 13.41,12z"
          ],
          [
            270,
            "android"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            325,
            "path"
          ],
          [
            332,
            "vector"
          ]
        ],
        "sz": 684,
        "sha": "4a7487daaff30f9af3a165a391122dc02f416a6ee43ea010ee3af181ab971880",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Hv.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 222,
        "ms": {
          "file": {
            "size": 1860.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.02,
            "total_lines": 9.0,
            "char_entropy": 3.84,
            "unique_chars": 87.0,
            "lines_over_200": 8.0,
            "lines_over_500": 1.0,
            "avg_line_length": 285.78,
            "high_byte_ratio": 0.42,
            "max_line_length": 699.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 733.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 211.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 178.78,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            130,
            "textSize"
          ],
          [
            139,
            "ellipsize"
          ],
          [
            153,
            "layout_gravity"
          ],
          [
            173,
            "paddingBottom"
          ],
          [
            189,
            "visibility"
          ],
          [
            204,
            "duplicateParentState"
          ],
          [
            225,
            "clipChildren"
          ],
          [
            240,
            "clipToPadding"
          ],
          [
            256,
            "layout_width"
          ],
          [
            271,
            "layout_height"
          ],
          [
            289,
            "layout_marginTop"
          ],
          [
            308,
            "layout_marginBottom"
          ],
          [
            330,
            "maxLines"
          ],
          [
            341,
            "contentDescription"
          ],
          [
            362,
            "FrameLayout"
          ],
          [
            374,
            "ImageView"
          ],
          [
            388,
            "TextView"
          ],
          [
            399,
            "View"
          ],
          [
            406,
            "android"
          ],
          [
            414,
            "33com.google.android.material.internal.BaselineLayout"
          ],
          [
            468,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            515,
            "merge"
          ]
        ],
        "sz": 1860,
        "sha": "2186ff0aeb83800876eeaf33cdc3239760b86d36630ed476bb03373d8a1a08a1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Hy.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 223,
        "ms": {
          "file": {
            "size": 1608.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 4.32,
            "unique_chars": 87.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 692.0,
            "high_byte_ratio": 0.34,
            "lines_over_1000": 1.0,
            "max_line_length": 1815.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 535.0,
            "last_line_length": 167.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 794.64,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            126,
            "layout_gravity"
          ],
          [
            143,
            "orientation"
          ],
          [
            160,
            "layout_width"
          ],
          [
            175,
            "layout_height"
          ],
          [
            193,
            "layout_marginTop"
          ],
          [
            212,
            "constraint_referenced_ids"
          ],
          [
            240,
            "flow_horizontalGap"
          ],
          [
            261,
            "layout_constraintEnd_toEndOf"
          ],
          [
            290,
            "layout_constraintStart_toStartOf"
          ],
          [
            327,
            "layout_constraintTop_toBottomOf"
          ],
          [
            361,
            "layout_constraintTop_toTopOf"
          ],
          [
            392,
            "android"
          ],
          [
            400,
            ",,androidx.constraintlayout.helper.widget.Flow"
          ],
          [
            453,
            "44com.google.android.material.timepicker.ClockFaceView"
          ],
          [
            508,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            550,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            597,
            "include"
          ],
          [
            607,
            "layout"
          ],
          [
            614,
            "33material_clock_display,material_clock_period_toggle"
          ],
          [
            670,
            "merge"
          ]
        ],
        "sz": 1608,
        "sha": "29d4e17cd91aa82a91c7fc48273ea720421be14280a82d511b484e6f56e92ed9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/I-.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 224,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 476.0
          },
          "image": {
            "width": 128.0,
            "height": 128.0,
            "channels": 2.0,
            "r_entropy": 0.65,
            "pixel_entropy": 0.65,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 6.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            448,
            "TUUUUUU"
          ],
          [
            468,
            "IEND"
          ]
        ],
        "sz": 476,
        "sha": "52a0358e54439373ca39f99cd83cf3a7be73c257f07fae83edd83c9b4891895d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/I3.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 225,
        "ms": {
          "file": {
            "size": 1656.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.49,
            "space_count": 38.0,
            "total_lines": 8.0,
            "char_entropy": 4.72,
            "unique_chars": 97.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 244.88,
            "high_byte_ratio": 0.24,
            "max_line_length": 713.0,
            "non_ascii_ratio": 0.24,
            "null_byte_count": 530.0,
            "empty_line_ratio": 0.38,
            "last_line_length": 713.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 271.06,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            134,
            "name"
          ],
          [
            141,
            "height"
          ],
          [
            156,
            "viewportWidth"
          ],
          [
            174,
            "viewportHeight"
          ],
          [
            189,
            "fillColor"
          ],
          [
            203,
            "pathData"
          ],
          [
            214,
            "strokeColor"
          ],
          [
            228,
            "strokeWidth"
          ],
          [
            240,
            "translateX"
          ],
          [
            253,
            "translateY"
          ],
          [
            270,
            "M 0.0,-5.0 c -2.7619934082,0.0 -5.0,2.2380065918 -5.0,5.0 c 0.0,2.7619934082 2.2380065918,5.0 5.0,5.0 c 2.7619934082,0.0 5.0,-2."
          ],
          [
            473,
            "M 0.0,-9.0 c 4.9705627482,0.0 9.0,4.0294372518 9.0,9.0 c 0.0,4.9705627482 -4.0294372518,9.0 -9.0,9.0 c -4.9705627482,0.0 -9.0,-4"
          ],
          [
            674,
            "android"
          ],
          [
            684,
            "btn_radio_to_off_mtrl"
          ],
          [
            708,
            "btn_radio_to_off_mtrl_0"
          ],
          [
            732,
            "dot_group"
          ],
          [
            746,
            "dot_path"
          ],
          [
            757,
            "group"
          ],
          [
            763,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            810,
            "path"
          ],
          [
            815,
            "ring_outer"
          ],
          [
            830,
            "ring_outer_path"
          ],
          [
            848,
            "vector"
          ]
        ],
        "sz": 1656,
        "sha": "f2c4cdf65caa5981c52511bca1f3e5413695f82445183d6a95d0dd8120dd6a14",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/I7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 226,
        "ms": {
          "file": {
            "size": 1120.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.73,
            "space_count": 43.0,
            "total_lines": 3.0,
            "char_entropy": 4.88,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 420.67,
            "high_byte_ratio": 0.17,
            "max_line_length": 914.0,
            "non_ascii_ratio": 0.17,
            "null_byte_count": 218.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.17,
            "line_length_stddev": 366.84,
            "non_printable_ratio": 0.27,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            731,
            "android"
          ],
          [
            739,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            786,
            "path"
          ],
          [
            793,
            "vector"
          ]
        ],
        "sz": 1120,
        "sha": "ab5568909b3e333d344b4302eee42a5925d68619a861b5d6cad5f19fbf1e6d3f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/IB.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 227,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.12
          },
          "file": {
            "size": 201.0
          },
          "image": {
            "width": 18.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.17,
            "edge_density": 0.06,
            "pixel_entropy": 1.17,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 6.59
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            193,
            "IEND"
          ]
        ],
        "sz": 201,
        "sha": "0e631dbfe2575dd16d3fd6c59641dfa4abb5e162d60f59049e4459f0af29fbf6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/IC.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 228,
        "ms": {
          "file": {
            "size": 600.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.19,
            "space_count": 2.0,
            "total_lines": 3.0,
            "char_entropy": 4.3,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "avg_line_length": 244.0,
            "high_byte_ratio": 0.27,
            "max_line_length": 388.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 227.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 151.26,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            153,
            "33M9,16.2L4.8,12l-1.4,1.4L9,19 21,7l-1.4,-1.4L9,16.2z"
          ],
          [
            209,
            "android"
          ],
          [
            217,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            264,
            "path"
          ],
          [
            271,
            "vector"
          ]
        ],
        "sz": 600,
        "sha": "5df9a282d0c275dd29ecc476fcc69dbf8c54fb1aefea05339b95fadeb05eba76",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ID.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 229,
        "ms": {
          "file": {
            "size": 1560.0
          },
          "text": {
            "tab_count": 15.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 12.0,
            "char_entropy": 3.98,
            "unique_chars": 87.0,
            "lines_over_200": 5.0,
            "avg_line_length": 175.75,
            "high_byte_ratio": 0.4,
            "max_line_length": 485.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 585.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 135.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 159.57,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            132,
            "ellipsize"
          ],
          [
            146,
            "gravity"
          ],
          [
            156,
            "layout_gravity"
          ],
          [
            173,
            "orientation"
          ],
          [
            192,
            "paddingLeft"
          ],
          [
            204,
            "paddingTop"
          ],
          [
            217,
            "paddingRight"
          ],
          [
            232,
            "visibility"
          ],
          [
            245,
            "layout_width"
          ],
          [
            260,
            "layout_height"
          ],
          [
            278,
            "layout_marginRight"
          ],
          [
            303,
            "scaleType"
          ],
          [
            315,
            "singleLine"
          ],
          [
            328,
            "textAlignment"
          ],
          [
            346,
            "layout_marginEnd"
          ],
          [
            363,
            "ImageView"
          ],
          [
            375,
            "LinearLayout"
          ],
          [
            392,
            "android"
          ],
          [
            402,
            "android.widget.Space"
          ],
          [
            423,
            "%%androidx.appcompat.widget.DialogTitle"
          ],
          [
            463,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1560,
        "sha": "03264e24cf176327f18665a4bfb5f9038feefe08195e72e11e7f03d06946c078",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ig.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 230,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.85,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 203.0
          },
          "image": {
            "width": 10.0,
            "height": 12.0,
            "channels": 2.0,
            "r_entropy": 1.19,
            "edge_density": 0.09,
            "pixel_entropy": 1.19,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 3.77
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            153,
            "IDAT"
          ],
          [
            195,
            "IEND"
          ]
        ],
        "sz": 203,
        "sha": "5e3f13ee854fa41354ca7378358b99f8e41f3b1c9968c313b630b02de8704e6e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/In.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 231,
        "ms": {
          "png": {
            "a_entropy": 3.22,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.03,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1779.0
          },
          "image": {
            "width": 192.0,
            "height": 72.0,
            "channels": 4.0,
            "b_entropy": 1.01,
            "g_entropy": 1.01,
            "r_entropy": 1.01,
            "edge_density": 0.01,
            "pixel_entropy": 2.5,
            "histogram_flatness": 0.31
          },
          "binary": {
            "overall_entropy": 7.61
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            1771,
            "IEND"
          ]
        ],
        "sz": 1779,
        "sha": "a8252f52638c80df119db031626198a4a8d4b32ee618e96c3a36b9b946e26894",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/J6.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 232,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 622.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 622.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 198.0,
            "last_line_length": 622.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "drawable"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            144,
            "item"
          ],
          [
            151,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "2834f19bfadea4abe888807089fa737c1da8f3cee6d2b60ded60804d71b8ea31",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/J7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 233,
        "ms": {
          "file": {
            "size": 1408.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.11,
            "space_count": 3.0,
            "total_lines": 7.0,
            "char_entropy": 3.46,
            "unique_chars": 74.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 281.14,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1567.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 647.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 527.77,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "state_enabled"
          ],
          [
            111,
            "drawable"
          ],
          [
            122,
            "color"
          ],
          [
            128,
            "scaleWidth"
          ],
          [
            150,
            "android"
          ],
          [
            166,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            213,
            "item"
          ],
          [
            218,
            "layer-list"
          ],
          [
            233,
            "scale"
          ],
          [
            241,
            "selector"
          ]
        ],
        "sz": 1408,
        "sha": "0662cd56987613eb79ca40c69b90c13dd0572834c978a5b3bd9d75809f09df8a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/J71.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 234,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.22,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 208.0
          },
          "image": {
            "width": 20.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 1.1,
            "edge_density": 0.04,
            "pixel_entropy": 1.1,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 3.87
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            200,
            "IEND"
          ]
        ],
        "sz": 208,
        "sha": "c0f930a722a16df986923bf419081d1090f9476a7287c8b655ab36ffc08064cb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/J8.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 235,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 6929.0
          },
          "image": {
            "width": 512.0,
            "height": 512.0,
            "channels": 1.0,
            "r_entropy": 1.03,
            "edge_density": 0.01,
            "pixel_entropy": 1.03,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 7.29
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            1334,
            "155.131.187.46:2272"
          ],
          [
            1583,
            "143.40.11.144:55435"
          ],
          [
            4525,
            "gv95"
          ],
          [
            5669,
            "VBV7"
          ],
          [
            6921,
            "IEND"
          ]
        ],
        "sz": 6929,
        "sha": "5e6cfd2802859bc956b7002f821118c6d639384f7b51f71c17c705272d4d5f8e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/JQ.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 236,
        "ms": {
          "file": {
            "size": 556.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.18,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 222.0,
            "high_byte_ratio": 0.25,
            "max_line_length": 552.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 217.0,
            "last_line_length": 107.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 236.89,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "valueFrom"
          ],
          [
            120,
            "valueTo"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "aapt"
          ],
          [
            152,
            "android"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            194,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            241,
            "objectAnimator"
          ],
          [
            258,
            "trimPathEnd"
          ]
        ],
        "sz": 556,
        "sha": "3c4a31913cbe7e41a41a94a5c50b064590100469fa2f79c48427192a7d90a295",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/JR.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 237,
        "ms": {
          "png": {
            "a_entropy": 1.23,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 278.0
          },
          "image": {
            "width": 66.0,
            "height": 33.0,
            "channels": 4.0,
            "b_entropy": 0.99,
            "g_entropy": 0.99,
            "r_entropy": 0.99,
            "edge_density": 0.02,
            "pixel_entropy": 1.93,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 6.81
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            270,
            "IEND"
          ]
        ],
        "sz": 278,
        "sha": "498b0cbd09b6b4feed8aca9ed77d235f5bb272c53d21b332649a00e942d989da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/JV.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 238,
        "ms": {
          "file": {
            "size": 504.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.09,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 212.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 555.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 192.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 555.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 244.78,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            77,
            "background"
          ],
          [
            90,
            "focusable"
          ],
          [
            102,
            "clickable"
          ],
          [
            114,
            "layout_width"
          ],
          [
            129,
            "layout_height"
          ],
          [
            147,
            "android"
          ],
          [
            155,
            "\u0026\u0026androidx.appcompat.widget.SwitchCompat"
          ],
          [
            196,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 504,
        "sha": "3e7250dbd09e60c9dad7056178ba975f729e5dc9384ef84c983a76e318b324d5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/J_.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 239,
        "ms": {
          "file": {
            "size": 508.0
          },
          "text": {
            "tab_count": 3.0,
            "total_lines": 2.0,
            "char_entropy": 3.91,
            "unique_chars": 55.0,
            "lines_over_200": 2.0,
            "avg_line_length": 326.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 394.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 204.0,
            "last_line_length": 259.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 67.5,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "interpolator"
          ],
          [
            89,
            "duration"
          ],
          [
            100,
            "shareInterpolator"
          ],
          [
            118,
            "fromAlpha"
          ],
          [
            132,
            "toAlpha"
          ],
          [
            142,
            "alpha"
          ],
          [
            150,
            "android"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 508,
        "sha": "a2541b5b016ecd3aa81e4d1ead2591ba6132ce9eb06b39d6f0c5788a1fb9f2da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Je.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 240,
        "ms": {
          "file": {
            "size": 784.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.92,
            "unique_chars": 64.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 342.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 504.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 315.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 170.1,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "name"
          ],
          [
            91,
            "interpolator"
          ],
          [
            108,
            "drawable"
          ],
          [
            119,
            "shareInterpolator"
          ],
          [
            137,
            "animation"
          ],
          [
            151,
            "aapt"
          ],
          [
            158,
            "android"
          ],
          [
            168,
            "animated-vector"
          ],
          [
            186,
            "http://schemas.android.com/aapt"
          ],
          [
            218,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            271,
            "target"
          ]
        ],
        "sz": 784,
        "sha": "b7d7f59d8fd202a7f6c0bbc03e453109e4e262b4f3bc4e48314ed76bc2497a4b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Jk.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 241,
        "ms": {
          "file": {
            "size": 816.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.76,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 275.25,
            "high_byte_ratio": 0.39,
            "max_line_length": 892.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 338.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 892.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 363.81,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            99,
            "drawable"
          ],
          [
            126,
            "android"
          ],
          [
            136,
            "animated-selector"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            201,
            "item"
          ],
          [
            206,
            "transition"
          ]
        ],
        "sz": 816,
        "sha": "5dda31bac48ed5013946e63c4fa6eda7fe8bed0817eabdd194723bc8d07138f1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Jn.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 242,
        "ms": {
          "file": {
            "size": 316.0
          },
          "text": {
            "digit_ratio": 0.18,
            "space_count": 5.0,
            "total_lines": 1.0,
            "char_entropy": 4.14,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 368.0,
            "high_byte_ratio": 0.21,
            "max_line_length": 368.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 125.0,
            "last_line_length": 368.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            69,
            "M 0.0,0.0 l 1.0,0.0 l 0.0,1.0"
          ],
          [
            101,
            "android"
          ],
          [
            109,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            156,
            "pathInterpolator"
          ]
        ],
        "sz": 316,
        "sha": "68b7fc0e819c526c7e31c1413b1821bc0ccfcf4ab550c356a7f740a9d84917dc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Jo.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 243,
        "ms": {
          "file": {
            "size": 1644.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 6.0,
            "char_entropy": 4.28,
            "unique_chars": 92.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 354.5,
            "high_byte_ratio": 0.34,
            "lines_over_1000": 1.0,
            "max_line_length": 1634.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 571.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 235.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "line_length_stddev": 580.17,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            146,
            "textSize"
          ],
          [
            155,
            "textStyle"
          ],
          [
            167,
            "textColor"
          ],
          [
            181,
            "gravity"
          ],
          [
            194,
            "background"
          ],
          [
            207,
            "layout_width"
          ],
          [
            222,
            "layout_height"
          ],
          [
            238,
            "foreground"
          ],
          [
            257,
            "scaleType"
          ],
          [
            278,
            "cardBackgroundColor"
          ],
          [
            300,
            "cardCornerRadius"
          ],
          [
            317,
            "cardElevation"
          ],
          [
            372,
            "layout_constraintEnd_toEndOf"
          ],
          [
            401,
            "layout_constraintStart_toStartOf"
          ],
          [
            438,
            "layout_constraintTop_toTopOf"
          ],
          [
            467,
            "ImageView"
          ],
          [
            481,
            "TextView"
          ],
          [
            492,
            "android"
          ],
          [
            500,
            "!!androidx.cardview.widget.CardView"
          ],
          [
            536,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            594,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            636,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1644,
        "sha": "918a1de7ce0e3e589c663ad6e6fa55f1b65582cdb67ad4a7bf6f12d5234e1acf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Jq.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 244,
        "ms": {
          "file": {
            "size": 480.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 626.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 626.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 208.0,
            "last_line_length": 626.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            70,
            "height"
          ],
          [
            79,
            "shape"
          ],
          [
            87,
            "color"
          ],
          [
            95,
            "android"
          ],
          [
            103,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            158,
            "size"
          ],
          [
            165,
            "solid"
          ]
        ],
        "sz": 480,
        "sha": "c4ca2020e495e04dd5a941811941634ff39bb6323d6cac9ae798a4dcebeb8c95",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/K0.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 245,
        "ms": {
          "file": {
            "size": 384.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.93,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "avg_line_length": 500.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 500.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 149.0,
            "last_line_length": 500.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            69,
            "layout_width"
          ],
          [
            84,
            "layout_height"
          ],
          [
            102,
            "TextView"
          ],
          [
            113,
            "android"
          ],
          [
            121,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 384,
        "sha": "dfc3430f4887e92add9b039fcec5906c5eb36d949d61ec5eac1ca466c2a5a007",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/K1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 246,
        "ms": {
          "file": {
            "size": 612.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.22,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.37,
            "unique_chars": 71.0,
            "lines_over_200": 2.0,
            "avg_line_length": 248.0,
            "high_byte_ratio": 0.27,
            "max_line_length": 402.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 223.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 155.53,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            153,
            "AAM20,11L7.8,11l5.6,-5.6L12,4l-8,8l8,8l1.4,-1.4L7.8,13L20,13L20,11z"
          ],
          [
            223,
            "android"
          ],
          [
            231,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            278,
            "path"
          ],
          [
            285,
            "vector"
          ]
        ],
        "sz": 612,
        "sha": "b2b8eab570357610a73322e777914936a1eb6399ade30906783eae1a0d632564",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/K3.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 247,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 10.0,
            "char_entropy": 4.2,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 70.7,
            "high_byte_ratio": 0.26,
            "max_line_length": 360.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 231.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 102.65,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            176,
            "fillAlpha"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            222,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            269,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "362fba7777da45d9149b94c79047ff40975269fee1331e11f263eb1b834c0fe5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/KA.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 248,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.05,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 236.0
          },
          "image": {
            "width": 28.0,
            "height": 84.0,
            "channels": 2.0,
            "r_entropy": 1.22,
            "pixel_entropy": 1.22,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 4.1
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            168,
            "/IDATX"
          ],
          [
            228,
            "IEND"
          ]
        ],
        "sz": 236,
        "sha": "fd719e497aaf091c3166cb51bf4404ca4bc3b6545dfbefbfaa0cf31f0790b7d1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Kp.9.png",
        "type": "png"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 249,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 5.0,
            "chunks_total": 9.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 37278.0
          },
          "image": {
            "width": 2400.0,
            "height": 2400.0,
            "channels": 1.0,
            "r_entropy": 0.71,
            "edge_density": 0.0,
            "pixel_entropy": 0.71,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.76
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            1112,
            "Eine"
          ],
          [
            2416,
            "43QX"
          ],
          [
            2552,
            "57QX"
          ],
          [
            5183,
            "173Q"
          ],
          [
            9517,
            "NGF_"
          ],
          [
            16732,
            "2N U"
          ],
          [
            17492,
            "IDAT"
          ],
          [
            22406,
            "MO4P"
          ],
          [
            23638,
            "564U U"
          ],
          [
            32088,
            "/z Bzflm"
          ],
          [
            35995,
            "`M4W@`"
          ],
          [
            36192,
            "PXijXdp"
          ],
          [
            37270,
            "IEND"
          ]
        ],
        "sz": 37278,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "2c17f7317dae315d5d31935bcb890d9a25f468975a734be2df0503e850a58936",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Kp.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 250,
        "ms": {
          "file": {
            "size": 736.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.31,
            "space_count": 21.0,
            "total_lines": 3.0,
            "char_entropy": 4.54,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 299.33,
            "high_byte_ratio": 0.27,
            "max_line_length": 722.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 237.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.26,
            "line_length_stddev": 299.06,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 2.0,
            "max_inline_whitespace_run": 13.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "autoMirrored"
          ],
          [
            116,
            "viewportWidth"
          ],
          [
            134,
            "viewportHeight"
          ],
          [
            149,
            "fillColor"
          ],
          [
            163,
            "pathData"
          ],
          [
            176,
            "M15,8v8H5V8h10m1,-2H4c-0.55,0 -1,0.45 -1,1v10c0,0.55 0.45,1 1,1h12c0.55,0             1,-0.45 1,-1v-3.5l4,4v-11l-4,4V7c0,-0.55 -"
          ],
          [
            321,
            "android"
          ],
          [
            329,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            376,
            "path"
          ],
          [
            383,
            "vector"
          ]
        ],
        "sz": 736,
        "sha": "4a959580080ebb1d822a2459a4234d2abf0dd0b65d9c28bda8c258dafc888c51",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Kq.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 251,
        "ms": {
          "file": {
            "size": 680.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 3.82,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 217.25,
            "high_byte_ratio": 0.33,
            "max_line_length": 671.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 297.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 671.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 270.89,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "name"
          ],
          [
            85,
            "drawable"
          ],
          [
            94,
            "animation"
          ],
          [
            108,
            "android"
          ],
          [
            118,
            "animated-vector"
          ],
          [
            134,
            "dot_group"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            191,
            "ring_outer"
          ],
          [
            206,
            "ring_outer_path"
          ],
          [
            224,
            "target"
          ]
        ],
        "sz": 680,
        "sha": "7c6c4a8050ea6cc64f69715d784105a7f85e368c41077a1d2a9e8515656a90bf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ks.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 252,
        "ms": {
          "file": {
            "size": 1656.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.04,
            "total_lines": 7.0,
            "char_entropy": 3.45,
            "unique_chars": 73.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 322.29,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1043.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 791.0,
            "last_line_length": 1043.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 372.63,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "valueType"
          ],
          [
            148,
            "propertyName"
          ],
          [
            165,
            "ordering"
          ],
          [
            176,
            "android"
          ],
          [
            184,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            231,
            "objectAnimator"
          ]
        ],
        "sz": 1656,
        "sha": "16feaf7a29851dbc193a814ed30a92ed8ee2d0ed6cbff3a87a5bf9627d072a7a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Kv.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 253,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.19,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 178.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 228.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.69,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "fa27a56c724536f7b968c8837a5a430469e56e71cba9539a5ecfeeaa935b16c2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/LA.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 2
        },
        "dp": 1,
        "id": 254,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.18
          },
          "file": {
            "size": 107.0
          },
          "image": {
            "width": 14.0,
            "height": 14.0,
            "channels": 3.0,
            "b_entropy": 0.59,
            "g_entropy": 0.59,
            "r_entropy": 0.59,
            "pixel_entropy": 0.82,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 5.38
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            99,
            "IEND"
          ]
        ],
        "sz": 107,
        "sha": "8430ec003e003f3f2ba2f78d48fd150e25407667e530e82e87a7d4841c0fd676",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/LD.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 255,
        "ms": {
          "file": {
            "size": 380.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 4.24,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "avg_line_length": 470.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 470.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 137.0,
            "last_line_length": 470.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "layout_width"
          ],
          [
            75,
            "layout_height"
          ],
          [
            93,
            "android"
          ],
          [
            101,
            "%%com.google.android.material.chip.Chip"
          ],
          [
            141,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 380,
        "sha": "6b0c0657de06dbd73b7d7116cb59914a9e99f421c8c52bad61e89da0b92257ff",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/LH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 256,
        "ms": {
          "file": {
            "size": 656.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 7.0,
            "char_entropy": 3.84,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "avg_line_length": 121.71,
            "high_byte_ratio": 0.35,
            "max_line_length": 292.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 273.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 171.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 84.39,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromYDelta"
          ],
          [
            121,
            "toYDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 656,
        "sha": "190d0aa5af3260aa5a34d9f76f0fb16f49ebef830f3c7fe5083757ff33a7f6f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/LJ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 257,
        "ms": {
          "file": {
            "size": 1208.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 6.0,
            "char_entropy": 3.82,
            "unique_chars": 72.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 281.83,
            "high_byte_ratio": 0.43,
            "max_line_length": 881.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 461.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 881.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 298.29,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            102,
            "gravity"
          ],
          [
            112,
            "orientation"
          ],
          [
            131,
            "paddingLeft"
          ],
          [
            143,
            "paddingTop"
          ],
          [
            156,
            "paddingRight"
          ],
          [
            171,
            "paddingBottom"
          ],
          [
            187,
            "layout_width"
          ],
          [
            202,
            "layout_height"
          ],
          [
            218,
            "layout_weight"
          ],
          [
            236,
            "layoutDirection"
          ],
          [
            254,
            "Button"
          ],
          [
            263,
            "android"
          ],
          [
            271,
            "))androidx.appcompat.widget.ButtonBarLayout"
          ],
          [
            315,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1208,
        "sha": "f4bdf32838d03e4037fe136b277ed2399f7356858f699470c560c14e44a82b83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/LN.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 258,
        "ms": {
          "file": {
            "size": 372.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 476.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 163.0,
            "last_line_length": 476.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "shape"
          ],
          [
            70,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "solid"
          ]
        ],
        "sz": 372,
        "sha": "49f4ee033a368be6286501a7786bb178320100987f959bc33c98e7da1fc861f1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/LT.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 259,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 171.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.06,
            "edge_density": 0.01,
            "pixel_entropy": 1.06,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 6.04
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            163,
            "IEND"
          ]
        ],
        "sz": 171,
        "sha": "239d602c9c65f156fe024613207955ac8fbdd395ae6ec3efa51be98e3a4473f4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/L_.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 260,
        "ms": {
          "file": {
            "size": 576.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.66,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 776.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 776.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 247.0,
            "last_line_length": 776.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "color"
          ],
          [
            90,
            "radius"
          ],
          [
            99,
            "android"
          ],
          [
            109,
            "corners"
          ],
          [
            117,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            164,
            "shape"
          ],
          [
            172,
            "solid"
          ],
          [
            180,
            "stroke"
          ]
        ],
        "sz": 576,
        "sha": "2fb72f5e001cc1776cafd51a6a6471cc60634c770926253e5fb4586c65ef3bb6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/La.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 261,
        "ms": {
          "file": {
            "size": 1860.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.01,
            "total_lines": 9.0,
            "char_entropy": 3.83,
            "unique_chars": 84.0,
            "lines_over_200": 8.0,
            "lines_over_500": 1.0,
            "avg_line_length": 287.33,
            "high_byte_ratio": 0.42,
            "max_line_length": 699.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 724.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 211.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 178.89,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            130,
            "textSize"
          ],
          [
            139,
            "ellipsize"
          ],
          [
            153,
            "layout_gravity"
          ],
          [
            173,
            "paddingBottom"
          ],
          [
            189,
            "visibility"
          ],
          [
            204,
            "duplicateParentState"
          ],
          [
            225,
            "clipChildren"
          ],
          [
            240,
            "clipToPadding"
          ],
          [
            256,
            "layout_width"
          ],
          [
            271,
            "layout_height"
          ],
          [
            289,
            "layout_marginTop"
          ],
          [
            308,
            "layout_marginBottom"
          ],
          [
            330,
            "maxLines"
          ],
          [
            341,
            "contentDescription"
          ],
          [
            362,
            "FrameLayout"
          ],
          [
            374,
            "ImageView"
          ],
          [
            388,
            "TextView"
          ],
          [
            399,
            "View"
          ],
          [
            406,
            "android"
          ],
          [
            414,
            "33com.google.android.material.internal.BaselineLayout"
          ],
          [
            468,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            515,
            "merge"
          ]
        ],
        "sz": 1860,
        "sha": "f10d78cfa8afb027ec2a3688178e193ef668f858263f3b552c60a7bb510ff1c1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ld.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 262,
        "ms": {
          "file": {
            "size": 488.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 212.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "drawable"
          ],
          [
            73,
            "state_activated"
          ],
          [
            91,
            "android"
          ],
          [
            99,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            146,
            "item"
          ],
          [
            153,
            "selector"
          ]
        ],
        "sz": 488,
        "sha": "da0a3572fd1df178a2eae8904a681506f2688f6ec869f3284693e6821ced3f4d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Lg.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 263,
        "ms": {
          "file": {
            "size": 1796.0
          },
          "text": {
            "tab_count": 35.0,
            "digit_ratio": 0.05,
            "total_lines": 14.0,
            "char_entropy": 3.48,
            "unique_chars": 77.0,
            "lines_over_200": 5.0,
            "lines_over_500": 1.0,
            "avg_line_length": 177.5,
            "high_byte_ratio": 0.42,
            "max_line_length": 539.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 841.0,
            "empty_line_ratio": 0.07,
            "last_line_length": 115.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.34,
            "line_length_stddev": 162.73,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "state_enabled"
          ],
          [
            114,
            "duration"
          ],
          [
            125,
            "valueTo"
          ],
          [
            133,
            "valueType"
          ],
          [
            145,
            "propertyName"
          ],
          [
            160,
            "state_hovered"
          ],
          [
            176,
            "startDelay"
          ],
          [
            191,
            "android"
          ],
          [
            199,
            "elevation"
          ],
          [
            211,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            258,
            "item"
          ],
          [
            265,
            "objectAnimator"
          ],
          [
            282,
            "selector"
          ],
          [
            297,
            "translationZ"
          ]
        ],
        "sz": 1796,
        "sha": "5c3b2529023f55cfdccb7abb3401e6ae3b9f3c6d1f34494ac48f37fd49ea8a81",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Lm.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 264,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.73,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 209.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 3.95
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            201,
            "IEND"
          ]
        ],
        "sz": 209,
        "sha": "636d7f24be686e9515f7d6830ce936baa0a5416468220e94e8e257547967e22c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Lq.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 265,
        "ms": {
          "file": {
            "size": 728.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "total_lines": 4.0,
            "char_entropy": 3.79,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 250.25,
            "high_byte_ratio": 0.41,
            "max_line_length": 913.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 290.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 913.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 383.44,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            81,
            "paddingTop"
          ],
          [
            94,
            "layout_width"
          ],
          [
            109,
            "layout_height"
          ],
          [
            127,
            "layoutDirection"
          ],
          [
            143,
            "LinearLayout"
          ],
          [
            160,
            "android"
          ],
          [
            168,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            215,
            "include"
          ],
          [
            225,
            "layout"
          ]
        ],
        "sz": 728,
        "sha": "9c009696b70fd8998dc4a5d810f2764571865a1f4dffeafeac1c5a7579aee516",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ly.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 266,
        "ms": {
          "file": {
            "size": 596.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.26,
            "max_line_length": 438.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 233.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 152.5,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "trimPathEnd"
          ]
        ],
        "sz": 596,
        "sha": "763f77b8b8d2aef0b3205e15e18abe6a1d877b513903ce8fd00711ed05ebf784",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 267,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "de2a9556b7d58bb36af3f7e7dd6a2101203e99d39c70ee620e230b12f18d84c0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M11.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 268,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c68273c2d11300f756a7bf8e7f13e9cc1b3af9cd91ccf0338a4c5d44ebdae0ea",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M12.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 269,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 2.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 16555.0
          },
          "image": {
            "width": 1200.0,
            "height": 1200.0,
            "channels": 1.0,
            "r_entropy": 0.74,
            "edge_density": 0.0,
            "pixel_entropy": 0.74,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.75
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            8368,
            "9hdiy"
          ],
          [
            9287,
            "OIDAT"
          ],
          [
            14097,
            "Fool"
          ],
          [
            16547,
            "IEND"
          ]
        ],
        "sz": 16555,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "657954ed17257c576059bd3b2eb694a61635f1f9a52b32c1938c5cdf9d7b3fc5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M3.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 270,
        "ms": {
          "file": {
            "size": 648.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.08,
            "space_count": 9.0,
            "total_lines": 11.0,
            "char_entropy": 4.17,
            "unique_chars": 69.0,
            "lines_over_200": 1.0,
            "avg_line_length": 71.27,
            "high_byte_ratio": 0.28,
            "max_line_length": 358.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 259.0,
            "last_line_length": 3.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.33,
            "line_length_stddev": 97.47,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "name"
          ],
          [
            97,
            "height"
          ],
          [
            112,
            "viewportWidth"
          ],
          [
            130,
            "viewportHeight"
          ],
          [
            145,
            "fillColor"
          ],
          [
            159,
            "pathData"
          ],
          [
            170,
            "strokeWidth"
          ],
          [
            184,
            "M 7 14 L 12 9 L 17 14 Z"
          ],
          [
            210,
            "android"
          ],
          [
            218,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            265,
            "path"
          ],
          [
            272,
            "vector"
          ]
        ],
        "sz": 648,
        "sha": "dc0a33f4dd72c030676a7c55ef74d746f7e4ea1bdd535585b0fc16dd04eb8c1b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M3.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 271,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.07,
            "space_count": 4.0,
            "total_lines": 3.0,
            "char_entropy": 4.1,
            "unique_chars": 66.0,
            "lines_over_200": 2.0,
            "avg_line_length": 231.33,
            "high_byte_ratio": 0.28,
            "max_line_length": 352.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 227.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 140.04,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            155,
            "M7 14l5-5 5 5z"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "path"
          ],
          [
            234,
            "vector"
          ]
        ],
        "sz": 564,
        "sha": "b1b69ae00c7a838be2bd114a4b6e392b4c05827978ebae236cd18308026d5a38",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M4.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 272,
        "ms": {
          "file": {
            "size": 124.0
          },
          "text": {
            "digit_ratio": 0.1,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.02,
            "unique_chars": 27.0,
            "avg_line_length": 52.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 116.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 71.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 116.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.45,
            "line_length_stddev": 48.11,
            "non_printable_ratio": 0.58,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            40,
            "layer-list"
          ]
        ],
        "sz": 124,
        "sha": "9b0ac791a3fa953e28b526e020fd2e629b40812ee1bc4693ff5fdfef15044202",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/M6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 273,
        "ms": {
          "file": {
            "size": 1720.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.02,
            "total_lines": 12.0,
            "char_entropy": 4.02,
            "unique_chars": 95.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 193.92,
            "high_byte_ratio": 0.4,
            "max_line_length": 905.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 623.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 465.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 274.66,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            158,
            "textAppearance"
          ],
          [
            173,
            "textColor"
          ],
          [
            185,
            "ellipsize"
          ],
          [
            199,
            "gravity"
          ],
          [
            212,
            "background"
          ],
          [
            227,
            "paddingLeft"
          ],
          [
            239,
            "paddingTop"
          ],
          [
            252,
            "paddingRight"
          ],
          [
            267,
            "paddingBottom"
          ],
          [
            283,
            "clipToPadding"
          ],
          [
            299,
            "layout_width"
          ],
          [
            314,
            "layout_height"
          ],
          [
            332,
            "baselineAligned"
          ],
          [
            348,
            "minHeight"
          ],
          [
            360,
            "singleLine"
          ],
          [
            373,
            "layout_weight"
          ],
          [
            389,
            "layout_below"
          ],
          [
            406,
            "layout_alignLeft"
          ],
          [
            423,
            "paddingStart"
          ],
          [
            438,
            "paddingEnd"
          ],
          [
            453,
            "layout_alignStart"
          ],
          [
            471,
            "LinearLayout"
          ],
          [
            488,
            "RelativeLayout"
          ],
          [
            505,
            "TextView"
          ],
          [
            516,
            "android"
          ],
          [
            524,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            571,
            "include"
          ],
          [
            581,
            "layout"
          ]
        ],
        "sz": 1720,
        "sha": "e54bee2b4dca7fd621d5059a99b49b5d16397498dd22a993cb303bca62f24de9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/MA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 274,
        "ms": {
          "file": {
            "size": 312.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 3.0,
            "char_entropy": 3.88,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 127.33,
            "high_byte_ratio": 0.28,
            "max_line_length": 324.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 132.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 324.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 141.07,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            56,
            "fromYDelta"
          ],
          [
            71,
            "toYDelta"
          ],
          [
            82,
            "android"
          ],
          [
            90,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            135,
            "translate"
          ]
        ],
        "sz": 312,
        "sha": "c8aa902a6f828a1866bdae23f874d10766cf25ae1972fceaff9feec3b4248970",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/MC.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 275,
        "ms": {
          "png": {
            "a_entropy": 1.67,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.15
          },
          "file": {
            "size": 799.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 4.0,
            "b_entropy": 2.17,
            "g_entropy": 2.18,
            "r_entropy": 2.18,
            "edge_density": 0.13,
            "pixel_entropy": 2.97,
            "histogram_flatness": 0.37
          },
          "binary": {
            "overall_entropy": 7.69
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            791,
            "IEND"
          ]
        ],
        "sz": 799,
        "sha": "c54c764bb1668dd0f30a55ca1daaafc8f5afcc5b289e831351e6e4e185956d05",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ME.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 276,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.02,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 502.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 502.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 150.0,
            "last_line_length": 502.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "ff8610fd047780352925c09ee9a0dc2e0592ca7c7f55012941dfaeca232aa570",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ME.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 277,
        "ms": {
          "file": {
            "size": 556.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.15,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "avg_line_length": 166.25,
            "high_byte_ratio": 0.25,
            "max_line_length": 486.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 219.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 187.99,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "valueFrom"
          ],
          [
            120,
            "valueTo"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "aapt"
          ],
          [
            152,
            "android"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            194,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            241,
            "objectAnimator"
          ],
          [
            258,
            "trimPathEnd"
          ]
        ],
        "sz": 556,
        "sha": "0d7b6958af8b182cb2bbe9d3f075a9aff0478a38b5072426b46cc4505b1b7c16",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/MH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 278,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "tab_count": 13.0,
            "digit_ratio": 0.3,
            "space_count": 5.0,
            "total_lines": 3.0,
            "char_entropy": 4.46,
            "unique_chars": 74.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.0,
            "high_byte_ratio": 0.26,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 239.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 267.47,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "eeM12,2C6.48,2 2,6.48 2,12s4.48,10 10,10s10,-4.48 10,-10S17.52,2 12,2zM11,16H9V8h2V16zM15,16h-2V8h2V16z"
          ],
          [
            270,
            "android"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            325,
            "path"
          ],
          [
            332,
            "vector"
          ]
        ],
        "sz": 684,
        "sha": "c1d7e9dccb89edb4f0e834496177b0c3d779f58c12f6a30306f3dad59386ba9e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ML.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 279,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.46,
            "space_count": 15.0,
            "total_lines": 3.0,
            "char_entropy": 4.74,
            "unique_chars": 78.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 318.33,
            "high_byte_ratio": 0.23,
            "max_line_length": 781.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 234.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.24,
            "line_length_stddev": 327.3,
            "non_printable_ratio": 0.38,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            168,
            "M15.5,14l-0.8,0l-0.3,-0.3c1,-1.1 1.6,-2.6 1.6,-4.2C16,5.9 13.1,3 9.5,3C5.9,3 3,5.9 3,9.5S5.9,16 9.5,16c1.6,0 3.1,-0.6 4.2,-1.6l0"
          ],
          [
            397,
            "android"
          ],
          [
            405,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            452,
            "path"
          ],
          [
            459,
            "vector"
          ]
        ],
        "sz": 812,
        "sha": "dcaee2da754f0523e4a0d778cbf4b3e80a16b12cd5ac24e4c13d95ebda10c68d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/MN.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 280,
        "ms": {
          "file": {
            "size": 864.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.26,
            "unique_chars": 79.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 273.25,
            "high_byte_ratio": 0.32,
            "max_line_length": 568.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 300.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 209.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 204.63,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            110,
            "textAppearance"
          ],
          [
            125,
            "textColor"
          ],
          [
            137,
            "ellipsize"
          ],
          [
            151,
            "gravity"
          ],
          [
            166,
            "paddingLeft"
          ],
          [
            178,
            "paddingRight"
          ],
          [
            193,
            "layout_width"
          ],
          [
            208,
            "layout_height"
          ],
          [
            224,
            "minHeight"
          ],
          [
            236,
            "drawableLeft"
          ],
          [
            253,
            "drawablePadding"
          ],
          [
            269,
            "drawableStart"
          ],
          [
            285,
            "paddingStart"
          ],
          [
            300,
            "paddingEnd"
          ],
          [
            315,
            "CheckedTextView"
          ],
          [
            333,
            "android"
          ],
          [
            341,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 864,
        "sha": "e4b0ba711730e8fef70c80b3239c21ca82d76a66a645d946b49cda28efafa3d2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/MP.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 281,
        "ms": {
          "file": {
            "size": 1136.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "total_lines": 3.0,
            "char_entropy": 4.03,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 482.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 873.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 467.0,
            "last_line_length": 39.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 342.46,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            122,
            "name"
          ],
          [
            129,
            "height"
          ],
          [
            144,
            "viewportWidth"
          ],
          [
            162,
            "viewportHeight"
          ],
          [
            177,
            "fillColor"
          ],
          [
            191,
            "pathData"
          ],
          [
            202,
            "strokeColor"
          ],
          [
            216,
            "strokeWidth"
          ],
          [
            228,
            "strokeLineCap"
          ],
          [
            246,
            "aapt"
          ],
          [
            253,
            "android"
          ],
          [
            261,
            "clip-path"
          ],
          [
            281,
            "eye_mask"
          ],
          [
            292,
            "group"
          ],
          [
            300,
            "http://schemas.android.com/aapt"
          ],
          [
            332,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            379,
            "path"
          ],
          [
            386,
            "strike_through"
          ],
          [
            403,
            "vector"
          ]
        ],
        "sz": 1136,
        "sha": "c5d0b0919ea7410ed9342c073e13b9c1f3ab85cadd9b25339f0164eaa787bc9c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/MP1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 282,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.12,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 851.0
          },
          "image": {
            "width": 71.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.51,
            "edge_density": 0.06,
            "pixel_entropy": 1.51,
            "histogram_flatness": 0.19
          },
          "binary": {
            "overall_entropy": 7.21
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            177,
            "IDATX"
          ],
          [
            843,
            "IEND"
          ]
        ],
        "sz": 851,
        "sha": "bb4b092ae69c429e9d4f7ff97c60ba10c2e443a2b0ca19a9f6c77854bf32e293",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ml.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 283,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.26,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1526.0
          },
          "image": {
            "width": 54.0,
            "height": 54.0,
            "channels": 2.0,
            "r_entropy": 2.94,
            "edge_density": 0.09,
            "pixel_entropy": 2.94,
            "histogram_flatness": 0.37
          },
          "binary": {
            "overall_entropy": 7.52
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            213,
            "IDATX"
          ],
          [
            1085,
            "/tp\"Uxm"
          ],
          [
            1518,
            "IEND"
          ]
        ],
        "sz": 1526,
        "sha": "1417574134c5e9321c0b18fea711a08448ccf49957f55e10cedafb13237510f7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Mr.9.png",
        "type": "png"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 284,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 2.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 9631.0
          },
          "image": {
            "width": 800.0,
            "height": 800.0,
            "channels": 1.0,
            "r_entropy": 0.98,
            "edge_density": 0.01,
            "pixel_entropy": 0.98,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 7.42
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            4332,
            "4W7T"
          ],
          [
            7510,
            "GS7CCH"
          ],
          [
            9275,
            "OIDAT"
          ],
          [
            9623,
            "IEND"
          ]
        ],
        "sz": 9631,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.01"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "c719935e6d26fbf996f3a0719f887814a7d606b4070ebb303496f64c39cb05aa",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ms.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 285,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 2.88,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 207.0
          },
          "image": {
            "width": 6.0,
            "height": 6.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 3.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            199,
            "IEND"
          ]
        ],
        "sz": 207,
        "sha": "e98f192f013a9226010482ab8e14c7f215fb16bda3ccb0ddaec3ed0b27119e7c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Mz.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 286,
        "ms": {
          "file": {
            "size": 508.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.89,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "avg_line_length": 214.67,
            "high_byte_ratio": 0.32,
            "max_line_length": 446.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 208.0,
            "last_line_length": 171.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 173.82,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "interpolator"
          ],
          [
            89,
            "duration"
          ],
          [
            100,
            "shareInterpolator"
          ],
          [
            118,
            "fromAlpha"
          ],
          [
            132,
            "toAlpha"
          ],
          [
            142,
            "alpha"
          ],
          [
            150,
            "android"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 508,
        "sha": "9aded97f71c7ea36f869e372ba447ea87eaa6137a79320d2b739fdb431e83dd1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/N9.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 287,
        "ms": {
          "file": {
            "size": 1532.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 4.0,
            "char_entropy": 3.87,
            "unique_chars": 84.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 536.75,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1012.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 579.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 811.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 398.26,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            126,
            "layout_gravity"
          ],
          [
            143,
            "orientation"
          ],
          [
            162,
            "paddingLeft"
          ],
          [
            174,
            "paddingRight"
          ],
          [
            189,
            "paddingBottom"
          ],
          [
            205,
            "focusable"
          ],
          [
            219,
            "focusableInTouchMode"
          ],
          [
            240,
            "layout_width"
          ],
          [
            255,
            "layout_height"
          ],
          [
            271,
            "layout_weight"
          ],
          [
            287,
            "paddingStart"
          ],
          [
            302,
            "paddingEnd"
          ],
          [
            317,
            "FrameLayout"
          ],
          [
            329,
            "LinearLayout"
          ],
          [
            346,
            "View"
          ],
          [
            353,
            "android"
          ],
          [
            361,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            408,
            "include"
          ],
          [
            418,
            "layout"
          ],
          [
            427,
            "merge"
          ]
        ],
        "sz": 1532,
        "sha": "70b314ae743b969b5b8b8a838a4387e57505a007ed17c73ef412830773121ec7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 288,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.05,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 198.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "drawable"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            144,
            "item"
          ],
          [
            151,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "7cb4070f489fe6d3f36fa3f585dda834682f01afd0b8d6ea94769344a1cb8382",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NI.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 289,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.09,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 228.0
          },
          "image": {
            "width": 21.0,
            "height": 63.0,
            "channels": 2.0,
            "r_entropy": 1.14,
            "pixel_entropy": 1.14,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 3.98
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            220,
            "IEND"
          ]
        ],
        "sz": 228,
        "sha": "89c28e887b0d60c01b35dcd2be654f416bffb66e8565716dc983e3b0204967e8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NM.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 290,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.63,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 182.0
          },
          "image": {
            "width": 24.0,
            "height": 6.0,
            "channels": 2.0,
            "r_entropy": 1.42,
            "edge_density": 0.09,
            "pixel_entropy": 1.42,
            "histogram_flatness": 0.18
          },
          "binary": {
            "overall_entropy": 3.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            174,
            "IEND"
          ]
        ],
        "sz": 182,
        "sha": "779a2606a931a399a2c9d3bd01f3c510c412f2916478aa687e430e6003b0a5f3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NP.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 291,
        "ms": {
          "file": {
            "size": 484.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.6,
            "unique_chars": 45.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 644.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 644.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 216.0,
            "last_line_length": 644.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            66,
            "radius"
          ],
          [
            75,
            "android"
          ],
          [
            85,
            "corners"
          ],
          [
            93,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            140,
            "item"
          ],
          [
            147,
            "selector"
          ],
          [
            158,
            "shape"
          ]
        ],
        "sz": 484,
        "sha": "a0a46b1f2b8424b9b4be7a476be13993f2b00eea44555d2ea583fcabe75dd8d8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NQ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 292,
        "ms": {
          "file": {
            "size": 372.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "shape"
          ],
          [
            70,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "solid"
          ]
        ],
        "sz": 372,
        "sha": "a74705cc23c8b627ecf6c62096a2f0ff04629c0e050df45713c471557f5809e4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NR.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 293,
        "ms": {
          "file": {
            "size": 792.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 4.11,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 210.4,
            "high_byte_ratio": 0.38,
            "max_line_length": 514.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 283.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 325.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 185.43,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            91,
            "fitsSystemWindows"
          ],
          [
            111,
            "layout"
          ],
          [
            118,
            "inflatedId"
          ],
          [
            131,
            "layout_width"
          ],
          [
            146,
            "layout_height"
          ],
          [
            164,
            "android"
          ],
          [
            172,
            "//androidx.appcompat.widget.FitWindowsFrameLayout"
          ],
          [
            222,
            "((androidx.appcompat.widget.ViewStubCompat"
          ],
          [
            265,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            312,
            "include"
          ]
        ],
        "sz": 792,
        "sha": "e26955f43f523ec8e68bf4ed109a279d405cafc331ca611a9323ca9f75ba0deb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NU.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 294,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 254.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.96,
            "pixel_entropy": 0.96,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 6.69
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATH"
          ],
          [
            246,
            "IEND"
          ]
        ],
        "sz": 254,
        "sha": "6adcfc9dd1e1b82b985d223fc8a01c8e8f0dd3b9051d38062674b2380af79a50",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/NV.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 295,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.27
          },
          "file": {
            "size": 1376.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 1.0,
            "r_entropy": 2.28,
            "edge_density": 0.04,
            "pixel_entropy": 2.28,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 7.34
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "APLTE"
          ],
          [
            438,
            "IDATX"
          ],
          [
            1368,
            "IEND"
          ]
        ],
        "sz": 1376,
        "sha": "2d8d17d10c91736da04f5ed805942cb74fac8fc368292cfc74433d20106d36f5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Nn.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 296,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.16
          },
          "file": {
            "size": 8058.0
          },
          "image": {
            "width": 252.0,
            "height": 198.0,
            "channels": 1.0,
            "r_entropy": 2.75,
            "edge_density": 0.06,
            "pixel_entropy": 2.75,
            "histogram_flatness": 0.34
          },
          "binary": {
            "overall_entropy": 7.96
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            257,
            "ooo[[[444"
          ],
          [
            447,
            "uudddYYY"
          ],
          [
            495,
            "WWEEE"
          ],
          [
            513,
            "!!iii]]]N@;"
          ],
          [
            573,
            "ll222"
          ],
          [
            651,
            "AAA40"
          ],
          [
            1621,
            "Tpqsq"
          ],
          [
            2365,
            "161.88.52.146:8919"
          ],
          [
            5552,
            "/uut"
          ],
          [
            6555,
            "/ILS"
          ],
          [
            8050,
            "IEND"
          ]
        ],
        "sz": 8058,
        "sha": "a5b58b64034c445e9d66ec290422816441c2cceddc5264fafc31d71e9b8f022a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/O-.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 297,
        "ms": {
          "file": {
            "size": 648.0
          },
          "text": {
            "tab_count": 2.0,
            "space_count": 1.0,
            "total_lines": 11.0,
            "char_entropy": 4.34,
            "unique_chars": 73.0,
            "lines_over_200": 1.0,
            "avg_line_length": 74.18,
            "high_byte_ratio": 0.32,
            "max_line_length": 432.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 206.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.25,
            "line_length_stddev": 115.62,
            "non_printable_ratio": 0.38,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "description"
          ],
          [
            96,
            "accessibilityEventTypes"
          ],
          [
            122,
            "accessibilityFeedbackType"
          ],
          [
            150,
            "notificationTimeout"
          ],
          [
            172,
            "accessibilityFlags"
          ],
          [
            193,
            "canRetrieveWindowContent"
          ],
          [
            220,
            "canPerformGestures"
          ],
          [
            241,
            "canTakeScreenshot"
          ],
          [
            261,
            "accessibility-service"
          ],
          [
            285,
            "android"
          ],
          [
            293,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 648,
        "sha": "47195ca8021a547eebd0ccb27e8e5a55686543150b19e93cb23e35d7cabd6ecd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/O2.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 2,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 298,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.16,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 223.0
          },
          "image": {
            "width": 8.0,
            "height": 8.0,
            "channels": 3.0,
            "b_entropy": 0.64,
            "g_entropy": 0.64,
            "r_entropy": 0.64,
            "pixel_entropy": 2.23,
            "histogram_flatness": 0.28
          },
          "binary": {
            "overall_entropy": 4.31
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            215,
            "IEND"
          ]
        ],
        "sz": 223,
        "sha": "99c14d6855b8be296d58017d3751b8dc849c47b6d1d80ab614ff9075080e461b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/O3.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 299,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 10.0,
            "char_entropy": 4.2,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 70.7,
            "high_byte_ratio": 0.26,
            "max_line_length": 360.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 231.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 102.65,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            176,
            "fillAlpha"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            222,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            269,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "d0be186781c215b87e81a653408ee26ec54e8f548f1650eb79f5b0518ed23003",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/O5.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 300,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.03,
            "total_lines": 11.0,
            "char_entropy": 4.18,
            "unique_chars": 69.0,
            "lines_over_200": 1.0,
            "avg_line_length": 64.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 342.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 209.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 90.63,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "textAppearance"
          ],
          [
            97,
            "textColor"
          ],
          [
            111,
            "gravity"
          ],
          [
            121,
            "paddingLeft"
          ],
          [
            133,
            "paddingRight"
          ],
          [
            148,
            "layout_width"
          ],
          [
            163,
            "layout_height"
          ],
          [
            181,
            "maxLines"
          ],
          [
            192,
            "TextView"
          ],
          [
            203,
            "android"
          ],
          [
            211,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 564,
        "sha": "07473a1788b0e240b0fbcc62bf5c261e14a2df016bb6c38a797151e466730aae",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/O8.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 301,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 7.0,
            "chunks_total": 11.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 51776.0
          },
          "image": {
            "width": 3200.0,
            "height": 3200.0,
            "channels": 1.0,
            "r_entropy": 0.7,
            "edge_density": 0.0,
            "pixel_entropy": 0.7,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.55
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            13165,
            "`#\u003e`"
          ],
          [
            15231,
            "USYN"
          ],
          [
            23946,
            "3k5y"
          ],
          [
            25041,
            "UW73"
          ],
          [
            25372,
            "u136"
          ],
          [
            33900,
            "IDATB"
          ],
          [
            34651,
            "72wf"
          ],
          [
            47258,
            "Hlqv"
          ],
          [
            49239,
            "Iyhf"
          ],
          [
            49284,
            "P 156"
          ],
          [
            50308,
            "IDAT"
          ],
          [
            51768,
            "IEND"
          ]
        ],
        "sz": 51776,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "9ff9485a5688c48f9fa7865925983f1d1bf81cfb071bbd400f3abe267209c177",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/OA.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 302,
        "ms": {
          "file": {
            "size": 820.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.86,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 354.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 650.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 350.0,
            "last_line_length": 405.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 264.97,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "valueFrom"
          ],
          [
            142,
            "valueTo"
          ],
          [
            150,
            "valueType"
          ],
          [
            162,
            "propertyName"
          ],
          [
            179,
            "android"
          ],
          [
            187,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            234,
            "objectAnimator"
          ],
          [
            251,
            "opacity"
          ],
          [
            261,
            "scale"
          ]
        ],
        "sz": 820,
        "sha": "84d15611cbb5377afb34be6090d1f0ee523f05cb8f908d0b283e219bcc0a54db",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/OH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 303,
        "ms": {
          "file": {
            "size": 372.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 476.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 163.0,
            "last_line_length": 476.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "shape"
          ],
          [
            70,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "solid"
          ]
        ],
        "sz": 372,
        "sha": "cb486473bc0f7d6c90dea564fd61bb612496371b6b0bcab82b95a10cf70db41e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/OK.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 304,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 7899.0
          },
          "image": {
            "width": 600.0,
            "height": 600.0,
            "channels": 1.0,
            "r_entropy": 0.79,
            "edge_density": 0.01,
            "pixel_entropy": 0.79,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.56
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            1244,
            "O57U7"
          ],
          [
            2880,
            "Jdru"
          ],
          [
            6791,
            "Xqqu"
          ],
          [
            7613,
            "X.dme"
          ],
          [
            7891,
            "IEND"
          ]
        ],
        "sz": 7899,
        "sha": "e1c927e7144a6ee0cd2219e605f54eea546b144bccbb7f8e1784ce52fa19af93",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/OM.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 305,
        "ms": {
          "file": {
            "size": 524.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.98,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 211.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 524,
        "sha": "bba632c7c1d26eb8eec537912b77cd903ab32b55e718b5ed9d7243c4eb07ecfc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/OR.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 306,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 6.0,
            "char_entropy": 3.85,
            "unique_chars": 66.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 181.83,
            "high_byte_ratio": 0.39,
            "max_line_length": 649.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 326.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 221.26,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "gravity"
          ],
          [
            100,
            "orientation"
          ],
          [
            119,
            "padding"
          ],
          [
            127,
            "visibility"
          ],
          [
            140,
            "layout_width"
          ],
          [
            155,
            "layout_height"
          ],
          [
            171,
            "layout_weight"
          ],
          [
            189,
            "FrameLayout"
          ],
          [
            201,
            "LinearLayout"
          ],
          [
            218,
            "TextView"
          ],
          [
            229,
            "android"
          ],
          [
            237,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 812,
        "sha": "c060c274d928ce309d7e4f90ae0120052e310217df10927945a10e347f0e2434",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/OU.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 307,
        "ms": {
          "file": {
            "size": 1632.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 5.0,
            "char_entropy": 3.74,
            "unique_chars": 76.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 443.6,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1661.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 704.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 39.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 618.75,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            108,
            "state_enabled"
          ],
          [
            124,
            "interpolator"
          ],
          [
            141,
            "duration"
          ],
          [
            152,
            "valueTo"
          ],
          [
            160,
            "valueType"
          ],
          [
            172,
            "propertyName"
          ],
          [
            187,
            "state_hovered"
          ],
          [
            203,
            "startDelay"
          ],
          [
            216,
            "state_dragged"
          ],
          [
            234,
            "android"
          ],
          [
            248,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            290,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            337,
            "item"
          ],
          [
            344,
            "objectAnimator"
          ],
          [
            361,
            "selector"
          ],
          [
            376,
            "translationZ"
          ]
        ],
        "sz": 1632,
        "sha": "91e37cc066e63497efbc25123e2fdfe2a6eaa60a68a529731f87e0b2d166a1f6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Od.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 308,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.02,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 258.0
          },
          "image": {
            "width": 42.0,
            "height": 126.0,
            "channels": 2.0,
            "r_entropy": 1.14,
            "pixel_entropy": 1.14,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 4.27
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            250,
            "IEND"
          ]
        ],
        "sz": 258,
        "sha": "4f186547c3fe5796ef49da96d60a4a9a4b347357eaff3794f38e5f2aade3e400",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Of.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 309,
        "ms": {
          "file": {
            "size": 124.0
          },
          "text": {
            "digit_ratio": 0.1,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.02,
            "unique_chars": 27.0,
            "avg_line_length": 52.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 116.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 71.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 116.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.45,
            "line_length_stddev": 48.11,
            "non_printable_ratio": 0.58,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            40,
            "layer-list"
          ]
        ],
        "sz": 124,
        "sha": "9b0ac791a3fa953e28b526e020fd2e629b40812ee1bc4693ff5fdfef15044202",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Of.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 310,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.24,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 272.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 0.47,
            "pixel_entropy": 0.47,
            "histogram_flatness": 0.06
          },
          "binary": {
            "overall_entropy": 3.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            216,
            "``P`"
          ],
          [
            264,
            "IEND"
          ]
        ],
        "sz": 272,
        "sha": "991f73be600ad8821a6743db54af513f9b047058e95066e22fcdd1d72032bc58",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Of1.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 2
        },
        "dp": 1,
        "id": 311,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 138.0
          },
          "image": {
            "width": 30.0,
            "height": 30.0,
            "channels": 3.0,
            "b_entropy": 0.47,
            "g_entropy": 0.47,
            "r_entropy": 0.47,
            "pixel_entropy": 0.63,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 5.86
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "QIDATH"
          ],
          [
            130,
            "IEND"
          ]
        ],
        "sz": 138,
        "sha": "b44eeda34d7a529c2fe55719eb098fa29707caa91d18de06a7a775d6e6bcf973",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ot.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 312,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 422.0
          },
          "image": {
            "width": 132.0,
            "height": 66.0,
            "channels": 1.0,
            "r_entropy": 1.13,
            "pixel_entropy": 1.13,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 6.77
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "3PLTE"
          ],
          [
            414,
            "IEND"
          ]
        ],
        "sz": 422,
        "sha": "3cfd0554844896b500c33513b1e89ed62028d0c80df73d3c5935479f49704a3c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ou.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 313,
        "ms": {
          "file": {
            "size": 828.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.47,
            "space_count": 16.0,
            "total_lines": 3.0,
            "char_entropy": 4.76,
            "unique_chars": 78.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 324.33,
            "high_byte_ratio": 0.23,
            "max_line_length": 799.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 233.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.24,
            "line_length_stddev": 335.78,
            "non_printable_ratio": 0.37,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            168,
            "M12,14c1.7,0 3,-1.3 3,-3l0,-6c0,-1.7 -1.3,-3 -3,-3c-1.7,0 -3,1.3 -3,3l0,6C9,12.7 10.3,14 12,14zM17.299999,11c0,3 -2.5,5.1 -5.3,5"
          ],
          [
            414,
            "android"
          ],
          [
            422,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            469,
            "path"
          ],
          [
            476,
            "vector"
          ]
        ],
        "sz": 828,
        "sha": "39cf5a5dbea8e01a0b8c441f0183834c7b0a6ce853f4c711dfc4d61ff4741103",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ov.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 314,
        "ms": {
          "file": {
            "size": 1028.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 3.65,
            "unique_chars": 68.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 272.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 847.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 469.0,
            "last_line_length": 35.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 317.29,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "ordering"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "objectAnimator"
          ],
          [
            250,
            "strokeWidth"
          ]
        ],
        "sz": 1028,
        "sha": "cefd4ee781e1467cfd10819e5463ae9408d9f1614b6da7607d7a263c2df0fecf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ow.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 315,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.02,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 502.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 502.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 150.0,
            "last_line_length": 502.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "d42330a6572ef80b74893fd8490c5eb1d9f777f56d8a6abc732b7d45a559f6d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/P1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 316,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.34,
            "space_count": 10.0,
            "total_lines": 3.0,
            "char_entropy": 4.42,
            "unique_chars": 72.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.67,
            "high_byte_ratio": 0.27,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 239.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 268.41,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "eeM19,6.41L17.59,5 12,10.59 6.41,5 5,6.41 10.59,12 5,17.59 6.41,19 12,13.41 17.59,19 19,17.59 13.41,12z"
          ],
          [
            270,
            "android"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            325,
            "path"
          ],
          [
            332,
            "vector"
          ]
        ],
        "sz": 684,
        "sha": "d466d9c879ad33f83cca8560bedcfb823991b110609b79ce4c24b4d77f1b5c81",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/P11.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 317,
        "ms": {
          "file": {
            "size": 484.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 632.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 632.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 208.0,
            "last_line_length": 632.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            70,
            "shape"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "radius"
          ],
          [
            95,
            "android"
          ],
          [
            105,
            "corners"
          ],
          [
            113,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            168,
            "solid"
          ]
        ],
        "sz": 484,
        "sha": "5e66219d4e8498d8f38d79a6d39f3015e4b41459aaf94d0cc6bdeafc8aa3ad7a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/PA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 318,
        "ms": {
          "file": {
            "size": 648.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.08,
            "space_count": 9.0,
            "total_lines": 11.0,
            "char_entropy": 4.17,
            "unique_chars": 70.0,
            "lines_over_200": 1.0,
            "avg_line_length": 71.27,
            "high_byte_ratio": 0.28,
            "max_line_length": 358.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 258.0,
            "last_line_length": 3.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.32,
            "line_length_stddev": 97.47,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "name"
          ],
          [
            97,
            "height"
          ],
          [
            112,
            "viewportWidth"
          ],
          [
            130,
            "viewportHeight"
          ],
          [
            145,
            "fillColor"
          ],
          [
            159,
            "pathData"
          ],
          [
            170,
            "strokeWidth"
          ],
          [
            184,
            "M 7 10 L 12 15 L 17 10 Z"
          ],
          [
            211,
            "android"
          ],
          [
            219,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            266,
            "path"
          ],
          [
            273,
            "vector"
          ]
        ],
        "sz": 648,
        "sha": "df6a361808990923b166fc2809390c79e270349b55131e8b314e8e31e3e00af0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/PF.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 319,
        "ms": {
          "file": {
            "size": 1128.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.06,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.64,
            "unique_chars": 73.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 302.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 564.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 513.0,
            "last_line_length": 345.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 182.66,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "propertyName"
          ],
          [
            153,
            "ordering"
          ],
          [
            164,
            "alpha"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "objectAnimator"
          ]
        ],
        "sz": 1128,
        "sha": "63c6f61ed51626feaab5b0274ad4d1bea6586e380cf61bf33a2e695895bc2526",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/PF1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 320,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.12,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 2816.0
          },
          "image": {
            "width": 108.0,
            "height": 108.0,
            "channels": 2.0,
            "r_entropy": 2.74,
            "edge_density": 0.02,
            "pixel_entropy": 2.74,
            "histogram_flatness": 0.34
          },
          "binary": {
            "overall_entropy": 7.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            2002,
            "XZ65"
          ],
          [
            2331,
            "MA8Z"
          ],
          [
            2808,
            "IEND"
          ]
        ],
        "sz": 2816,
        "sha": "b4af73e52266be570c2c163d987e64348066db311b41e7a382000529c0136c6b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Pi.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 321,
        "ms": {
          "file": {
            "size": 1768.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "total_lines": 15.0,
            "char_entropy": 4.02,
            "unique_chars": 88.0,
            "lines_over_200": 6.0,
            "avg_line_length": 159.2,
            "high_byte_ratio": 0.4,
            "max_line_length": 425.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 637.0,
            "empty_line_ratio": 0.27,
            "last_line_length": 339.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 147.02,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            160,
            "textColor"
          ],
          [
            172,
            "ellipsize"
          ],
          [
            186,
            "gravity"
          ],
          [
            196,
            "layout_gravity"
          ],
          [
            216,
            "background"
          ],
          [
            231,
            "paddingLeft"
          ],
          [
            243,
            "paddingTop"
          ],
          [
            256,
            "paddingRight"
          ],
          [
            271,
            "paddingBottom"
          ],
          [
            287,
            "layout_width"
          ],
          [
            302,
            "layout_height"
          ],
          [
            320,
            "layout_marginTop"
          ],
          [
            339,
            "baselineAligned"
          ],
          [
            357,
            "maxLines"
          ],
          [
            366,
            "singleLine"
          ],
          [
            379,
            "layout_weight"
          ],
          [
            395,
            "layout_below"
          ],
          [
            412,
            "layout_alignLeft"
          ],
          [
            429,
            "textAlignment"
          ],
          [
            445,
            "paddingStart"
          ],
          [
            460,
            "paddingEnd"
          ],
          [
            475,
            "layout_alignStart"
          ],
          [
            493,
            "LinearLayout"
          ],
          [
            510,
            "RelativeLayout"
          ],
          [
            527,
            "TextView"
          ],
          [
            538,
            "android"
          ],
          [
            546,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            593,
            "include"
          ],
          [
            603,
            "layout"
          ]
        ],
        "sz": 1768,
        "sha": "4c655bc10211e96f572adfd51813003feab04e7823adf07e71f8a277a63f0cd9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Pn.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 322,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 3.36,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 215.0
          },
          "image": {
            "width": 8.0,
            "height": 8.0,
            "channels": 1.0,
            "r_entropy": 0.64,
            "pixel_entropy": 0.64,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 3.9
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            177,
            "`b````"
          ],
          [
            207,
            "IEND"
          ]
        ],
        "sz": 215,
        "sha": "2f7fbda0ba6e53e9a47e2fc0e24e32c447c613a5808c2d6285dc651e83a07ad7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Pq.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 323,
        "ms": {
          "file": {
            "size": 864.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.26,
            "unique_chars": 79.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 273.25,
            "high_byte_ratio": 0.32,
            "max_line_length": 568.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 300.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 209.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 204.63,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            110,
            "textAppearance"
          ],
          [
            125,
            "textColor"
          ],
          [
            137,
            "ellipsize"
          ],
          [
            151,
            "gravity"
          ],
          [
            166,
            "paddingLeft"
          ],
          [
            178,
            "paddingRight"
          ],
          [
            193,
            "layout_width"
          ],
          [
            208,
            "layout_height"
          ],
          [
            224,
            "minHeight"
          ],
          [
            236,
            "drawableLeft"
          ],
          [
            253,
            "drawablePadding"
          ],
          [
            269,
            "drawableStart"
          ],
          [
            285,
            "paddingStart"
          ],
          [
            300,
            "paddingEnd"
          ],
          [
            315,
            "CheckedTextView"
          ],
          [
            333,
            "android"
          ],
          [
            341,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 864,
        "sha": "fe85acef6c38b2a1672bdafac894a378d976bf3ff8778afe5a71f196bf67de1e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Px.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 324,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.47,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 211.0
          },
          "image": {
            "width": 6.0,
            "height": 6.0,
            "channels": 4.0,
            "pixel_entropy": 1.5,
            "histogram_flatness": 0.19
          },
          "binary": {
            "overall_entropy": 3.9
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            203,
            "IEND"
          ]
        ],
        "sz": 211,
        "sha": "dbc0af61f440bb3f5382b8ea3fa578659f76c7a6aef620a68afc43a909f2e0e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Q1.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 325,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.22,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 2834.0
          },
          "image": {
            "width": 81.0,
            "height": 81.0,
            "channels": 2.0,
            "r_entropy": 3.13,
            "edge_density": 0.07,
            "pixel_entropy": 3.13,
            "histogram_flatness": 0.39
          },
          "binary": {
            "overall_entropy": 7.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            780,
            "Ysnt"
          ],
          [
            2826,
            "IEND"
          ]
        ],
        "sz": 2834,
        "sha": "1f9538745cfd3209cc09ed451c198302aac3a1c5da41e87394377814b1bcc5ee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Q11.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 326,
        "ms": {
          "file": {
            "size": 516.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 224.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            81,
            "height"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "android"
          ],
          [
            114,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            161,
            "shape"
          ],
          [
            169,
            "size"
          ],
          [
            176,
            "solid"
          ]
        ],
        "sz": 516,
        "sha": "976c8b16e6a0728e6389e244e8f8e27d2c5dc8b55a4d20e6d4735a49a1058743",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Q3.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 327,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.04,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 202.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.41,
            "pixel_entropy": 0.41,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 4.08
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            194,
            "IEND"
          ]
        ],
        "sz": 202,
        "sha": "e7e36c3cbcedc97bc28aff91ed72c4310b16c331713a1698a692c66d46f63227",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/QD.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 328,
        "ms": {
          "file": {
            "size": 448.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 44.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 594.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 594.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 195.0,
            "last_line_length": 594.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "radius"
          ],
          [
            83,
            "android"
          ],
          [
            93,
            "corners"
          ],
          [
            101,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            148,
            "shape"
          ],
          [
            156,
            "solid"
          ]
        ],
        "sz": 448,
        "sha": "068246f945cdc21fb13a4dae5d2bdb0b887559925dc5ad821b47fb1675c47413",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/QH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 329,
        "ms": {
          "file": {
            "size": 2724.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 19.0,
            "char_entropy": 3.41,
            "unique_chars": 85.0,
            "lines_over_200": 10.0,
            "lines_over_500": 2.0,
            "avg_line_length": 201.47,
            "high_byte_ratio": 0.44,
            "max_line_length": 586.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 1288.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 235.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.33,
            "line_length_stddev": 185.73,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            104,
            "state_focused"
          ],
          [
            120,
            "state_enabled"
          ],
          [
            136,
            "state_pressed"
          ],
          [
            154,
            "duration"
          ],
          [
            165,
            "valueTo"
          ],
          [
            173,
            "valueType"
          ],
          [
            185,
            "propertyName"
          ],
          [
            200,
            "state_hovered"
          ],
          [
            216,
            "startDelay"
          ],
          [
            231,
            "android"
          ],
          [
            239,
            "elevation"
          ],
          [
            251,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            298,
            "item"
          ],
          [
            305,
            "objectAnimator"
          ],
          [
            322,
            "selector"
          ],
          [
            337,
            "translationZ"
          ]
        ],
        "sz": 2724,
        "sha": "d7ed136f2574440ddda6ba8dd51bd7b54b4d58aed104d9020b69f0a651aaaeab",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/QV.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 330,
        "ms": {
          "file": {
            "size": 1676.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 3.0,
            "char_entropy": 4.27,
            "unique_chars": 90.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 734.0,
            "high_byte_ratio": 0.36,
            "lines_over_1000": 1.0,
            "max_line_length": 1046.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 555.0,
            "last_line_length": 921.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.25,
            "line_length_stddev": 356.52,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            126,
            "orientation"
          ],
          [
            143,
            "layout_width"
          ],
          [
            158,
            "layout_height"
          ],
          [
            176,
            "layout_marginTop"
          ],
          [
            195,
            "layout_marginStart"
          ],
          [
            216,
            "constraint_referenced_ids"
          ],
          [
            244,
            "flow_verticalGap"
          ],
          [
            300,
            "layout_constraintStart_toEndOf"
          ],
          [
            331,
            "layout_constraintStart_toStartOf"
          ],
          [
            368,
            "layout_constraintTop_toTopOf"
          ],
          [
            399,
            "android"
          ],
          [
            407,
            ",,androidx.constraintlayout.helper.widget.Flow"
          ],
          [
            460,
            "44com.google.android.material.timepicker.ClockFaceView"
          ],
          [
            515,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            557,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            604,
            "include"
          ],
          [
            614,
            "layout"
          ],
          [
            621,
            "33material_clock_display,material_clock_period_toggle"
          ],
          [
            677,
            "merge"
          ]
        ],
        "sz": 1676,
        "sha": "c32f667d3462a38332d53ec8275ab658bae492a83c50734a2f9d88627d751af9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qc.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 331,
        "ms": {
          "file": {
            "size": 1324.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.76,
            "space_count": 58.0,
            "total_lines": 3.0,
            "char_entropy": 4.84,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 488.0,
            "high_byte_ratio": 0.15,
            "lines_over_1000": 1.0,
            "max_line_length": 1116.0,
            "non_ascii_ratio": 0.15,
            "null_byte_count": 220.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.15,
            "line_length_stddev": 458.34,
            "non_printable_ratio": 0.23,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M941.7,391.7c9.3,-14 6.2,-32.7 -6.2,-43.6 -14,-10.9 -32.7,-7.8 -43.6,6.2 -1.6,1.6 -174.3,205.4 -379.7,205.4 -199.2,0 -379.7,-205"
          ],
          [
            933,
            "android"
          ],
          [
            941,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            988,
            "path"
          ],
          [
            995,
            "vector"
          ]
        ],
        "sz": 1324,
        "sha": "22b47c1771dcdf5e25b16e41b1256115352762bab76ccaa8b70e677caed39293",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qe.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 332,
        "ms": {
          "file": {
            "size": 660.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 3.95,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "avg_line_length": 164.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 277.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 157.9,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "name"
          ],
          [
            89,
            "drawable"
          ],
          [
            98,
            "animation"
          ],
          [
            112,
            "aapt"
          ],
          [
            119,
            "android"
          ],
          [
            129,
            "animated-vector"
          ],
          [
            147,
            "eye_mask"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            237,
            "strike_through"
          ],
          [
            254,
            "target"
          ]
        ],
        "sz": 660,
        "sha": "db727dd4f4a76af293cb05af16fd373d6650c8eaba26cfdfce04e3ff4b0eaf68",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qk.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 333,
        "ms": {
          "file": {
            "size": 280.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.93,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 340.0,
            "high_byte_ratio": 0.26,
            "max_line_length": 340.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 116.0,
            "last_line_length": 340.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            54,
            "pathData"
          ],
          [
            65,
            "android"
          ],
          [
            73,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            120,
            "pathInterpolator"
          ]
        ],
        "sz": 280,
        "sha": "d43e88156cfc707eeb22e4e2cd45c928000f8f652e7e844916e3714aa7c6cbbf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qq.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 334,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.19
          },
          "file": {
            "size": 1749.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 1.0,
            "r_entropy": 2.12,
            "edge_density": 0.04,
            "pixel_entropy": 2.12,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 7.44
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "YPLTE"
          ],
          [
            1741,
            "IEND"
          ]
        ],
        "sz": 1749,
        "sha": "6bce6597afcce75fd592970a1159d66fe4102a060a961f20da42c190ce14cc22",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qt.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 2
        },
        "dp": 1,
        "id": 335,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.15
          },
          "file": {
            "size": 98.0
          },
          "image": {
            "width": 15.0,
            "height": 15.0,
            "channels": 3.0,
            "b_entropy": 0.72,
            "g_entropy": 0.72,
            "r_entropy": 0.72,
            "pixel_entropy": 1.04,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 5.31
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            90,
            "IEND"
          ]
        ],
        "sz": 98,
        "sha": "0d773e62c756422313262846c787e58f67e0ee87e45e1ae9942002e816c4cb9e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qv.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 336,
        "ms": {
          "file": {
            "size": 756.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.62,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1058.0,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1058.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 317.0,
            "last_line_length": 1058.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_focused"
          ],
          [
            84,
            "state_enabled"
          ],
          [
            102,
            "drawable"
          ],
          [
            113,
            "state_activated"
          ],
          [
            131,
            "android"
          ],
          [
            139,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            186,
            "item"
          ],
          [
            193,
            "selector"
          ]
        ],
        "sz": 756,
        "sha": "9a696a3f7e3bad6c6e4b51b3d27722aac27adb585a10350c2f6630b10dad9eed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Qw.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 337,
        "ms": {
          "file": {
            "size": 312.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 3.0,
            "char_entropy": 3.88,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 127.33,
            "high_byte_ratio": 0.28,
            "max_line_length": 324.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 132.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 324.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 141.07,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            56,
            "fromYDelta"
          ],
          [
            71,
            "toYDelta"
          ],
          [
            82,
            "android"
          ],
          [
            90,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            135,
            "translate"
          ]
        ],
        "sz": 312,
        "sha": "193e06875ef59f3d92f87e8c56986dfae3500e747275ea6555d8b8892e504b8e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/R2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 338,
        "ms": {
          "file": {
            "size": 956.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 3.94,
            "unique_chars": 77.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 264.0,
            "high_byte_ratio": 0.42,
            "max_line_length": 903.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 354.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 7.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 338.43,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "visibility"
          ],
          [
            106,
            "layout_width"
          ],
          [
            121,
            "layout_height"
          ],
          [
            145,
            "layout_centerInParent"
          ],
          [
            167,
            "keepScreenOn"
          ],
          [
            182,
            "ImageView"
          ],
          [
            196,
            "RelativeLayout"
          ],
          [
            213,
            "WebView"
          ],
          [
            223,
            "android"
          ],
          [
            231,
            "55androidx.swiperefreshlayout.widget.SwipeRefreshLayout"
          ],
          [
            287,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 956,
        "sha": "b8a35aa6c9f02820d42b779903aa35f3d06ee0e418472a2171b73bae7815079a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/R5.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 339,
        "ms": {
          "file": {
            "size": 780.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.0,
            "total_lines": 2.0,
            "char_entropy": 4.2,
            "unique_chars": 69.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 499.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 870.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 268.0,
            "last_line_length": 129.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 370.5,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "layout_gravity"
          ],
          [
            120,
            "duplicateParentState"
          ],
          [
            141,
            "layout_width"
          ],
          [
            156,
            "layout_height"
          ],
          [
            174,
            "layout_marginLeft"
          ],
          [
            194,
            "layout_marginTop"
          ],
          [
            213,
            "layout_marginRight"
          ],
          [
            234,
            "layout_marginBottom"
          ],
          [
            254,
            "scaleType"
          ],
          [
            268,
            "layout_marginStart"
          ],
          [
            289,
            "layout_marginEnd"
          ],
          [
            306,
            "ImageView"
          ],
          [
            320,
            "android"
          ],
          [
            328,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 780,
        "sha": "21bc9af527d4aa111674650e9737e0e5ef2d7b88ed76c4d6cc0b2745662eb8fa",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/R6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 340,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 196.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "drawable"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            144,
            "item"
          ],
          [
            151,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "ad54af5efb5f788e54431d580b72bdc2b13e092e880494d425d723751e782cb4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/R61.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 341,
        "ms": {
          "file": {
            "size": 672.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.35,
            "space_count": 8.0,
            "total_lines": 3.0,
            "char_entropy": 4.54,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "avg_line_length": 268.67,
            "high_byte_ratio": 0.25,
            "max_line_length": 462.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 227.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 176.64,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            153,
            "zzM12,2C6.48,2 2,6.48 2,12s4.48,10 10,10 10,-4.48 10,-10S17.52,2 12,2zM10,17l-5,-5 1.41,-1.41L10,14.17l7.59,-7.59L19,8l-9,9z"
          ],
          [
            280,
            "android"
          ],
          [
            288,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            335,
            "path"
          ],
          [
            342,
            "vector"
          ]
        ],
        "sz": 672,
        "sha": "b483342a55b455a75423e708aae17c4e8e7be2eebace97a663dcd9104ca39b1c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/RT.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 342,
        "ms": {
          "file": {
            "size": 3096.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.02,
            "space_count": 5.0,
            "total_lines": 17.0,
            "char_entropy": 3.91,
            "unique_chars": 104.0,
            "lines_over_200": 6.0,
            "lines_over_500": 2.0,
            "avg_line_length": 250.35,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1709.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 1183.0,
            "empty_line_ratio": 0.35,
            "last_line_length": 463.0,
            "long_token_count": 10.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 413.88,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            210,
            "textAppearance"
          ],
          [
            225,
            "textColor"
          ],
          [
            237,
            "ellipsize"
          ],
          [
            251,
            "gravity"
          ],
          [
            261,
            "layout_gravity"
          ],
          [
            278,
            "orientation"
          ],
          [
            295,
            "background"
          ],
          [
            310,
            "paddingLeft"
          ],
          [
            322,
            "paddingTop"
          ],
          [
            335,
            "paddingRight"
          ],
          [
            350,
            "paddingBottom"
          ],
          [
            366,
            "scrollbars"
          ],
          [
            379,
            "fadingEdge"
          ],
          [
            392,
            "clipChildren"
          ],
          [
            407,
            "clipToPadding"
          ],
          [
            423,
            "layout_width"
          ],
          [
            438,
            "layout_height"
          ],
          [
            456,
            "layout_marginTop"
          ],
          [
            475,
            "layout_marginBottom"
          ],
          [
            497,
            "baselineAligned"
          ],
          [
            515,
            "minWidth"
          ],
          [
            524,
            "minHeight"
          ],
          [
            538,
            "maxLines"
          ],
          [
            547,
            "singleLine"
          ],
          [
            560,
            "layout_weight"
          ],
          [
            576,
            "layout_below"
          ],
          [
            593,
            "layout_alignLeft"
          ],
          [
            610,
            "textAlignment"
          ],
          [
            626,
            "paddingStart"
          ],
          [
            641,
            "paddingEnd"
          ],
          [
            656,
            "layout_alignStart"
          ],
          [
            676,
            "labelFor"
          ],
          [
            685,
            "LinearLayout"
          ],
          [
            702,
            "RelativeLayout"
          ],
          [
            719,
            "SeekBar"
          ],
          [
            729,
            "TextView"
          ],
          [
            740,
            "android"
          ],
          [
            748,
            "++androidx.preference.UnPressableLinearLayout"
          ],
          [
            794,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            841,
            "include"
          ],
          [
            851,
            "layout"
          ]
        ],
        "sz": 3096,
        "sha": "487389642031b4534723140346e875cf73ad521463b8857cd905f44152ef0589",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/RX.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 343,
        "ms": {
          "file": {
            "size": 576.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.28,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 236.67,
            "high_byte_ratio": 0.29,
            "max_line_length": 671.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 205.0,
            "last_line_length": 671.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 307.13,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "gravity"
          ],
          [
            86,
            "layout_width"
          ],
          [
            101,
            "layout_height"
          ],
          [
            119,
            "divider"
          ],
          [
            129,
            "dividerPadding"
          ],
          [
            146,
            "android"
          ],
          [
            154,
            "((androidx.appcompat.widget.ActionMenuView"
          ],
          [
            203,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            245,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 576,
        "sha": "a2509d641bfb1b5465610ca899fe0a52e1d4149999d91d0c21e3a09360e8deb7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Rq.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 344,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 6929.0
          },
          "image": {
            "width": 512.0,
            "height": 512.0,
            "channels": 1.0,
            "r_entropy": 1.03,
            "edge_density": 0.01,
            "pixel_entropy": 1.03,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 7.29
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            1334,
            "155.131.187.46:2272"
          ],
          [
            1583,
            "143.40.11.144:55435"
          ],
          [
            4525,
            "gv95"
          ],
          [
            5669,
            "VBV7"
          ],
          [
            6921,
            "IEND"
          ]
        ],
        "sz": 6929,
        "sha": "5e6cfd2802859bc956b7002f821118c6d639384f7b51f71c17c705272d4d5f8e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Rs.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 345,
        "ms": {
          "file": {
            "size": 940.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.0,
            "total_lines": 4.0,
            "char_entropy": 4.33,
            "unique_chars": 78.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 295.25,
            "high_byte_ratio": 0.31,
            "max_line_length": 688.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 323.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 213.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 249.21,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            112,
            "ellipsize"
          ],
          [
            126,
            "gravity"
          ],
          [
            141,
            "paddingLeft"
          ],
          [
            153,
            "paddingRight"
          ],
          [
            168,
            "layout_width"
          ],
          [
            183,
            "layout_height"
          ],
          [
            199,
            "minHeight"
          ],
          [
            213,
            "drawablePadding"
          ],
          [
            229,
            "textAlignment"
          ],
          [
            245,
            "paddingStart"
          ],
          [
            260,
            "paddingEnd"
          ],
          [
            275,
            "drawableLeftCompat"
          ],
          [
            296,
            "drawableStartCompat"
          ],
          [
            318,
            "CheckedTextView"
          ],
          [
            336,
            "android"
          ],
          [
            350,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            392,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 940,
        "sha": "97dd552f2dcc2bfc823b0120e5a0fa238e2815ef7dc82918243aad4b26a6e506",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ru.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 346,
        "ms": {
          "file": {
            "size": 1196.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.62,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 327.2,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1244.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 536.0,
            "last_line_length": 155.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 466.07,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "propertyName"
          ],
          [
            149,
            "ordering"
          ],
          [
            160,
            "android"
          ],
          [
            168,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            215,
            "objectAnimator"
          ]
        ],
        "sz": 1196,
        "sha": "8d1b064a38d86fcda815d43ad0c06e4246f88c5caf7fb558a13ae8541cda4a8c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Rx.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 347,
        "ms": {
          "file": {
            "size": 1312.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 6.0,
            "char_entropy": 3.91,
            "unique_chars": 76.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 296.83,
            "high_byte_ratio": 0.4,
            "max_line_length": 791.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 498.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 791.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 270.15,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            116,
            "textColor"
          ],
          [
            130,
            "orientation"
          ],
          [
            147,
            "layout_width"
          ],
          [
            162,
            "layout_height"
          ],
          [
            180,
            "layout_marginLeft"
          ],
          [
            200,
            "layout_marginTop"
          ],
          [
            219,
            "layout_marginRight"
          ],
          [
            240,
            "layout_marginBottom"
          ],
          [
            260,
            "minHeight"
          ],
          [
            274,
            "overScrollMode"
          ],
          [
            291,
            "layout_marginStart"
          ],
          [
            312,
            "layout_marginEnd"
          ],
          [
            331,
            "EditText"
          ],
          [
            340,
            "LinearLayout"
          ],
          [
            355,
            "ScrollView"
          ],
          [
            370,
            "TextView"
          ],
          [
            381,
            "android"
          ],
          [
            389,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1312,
        "sha": "2db1b39e3f05bb7c48b96303a624b8630f3e499004d7a95d2e10499cc2a0724b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SF.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 348,
        "ms": {
          "file": {
            "size": 440.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 3.0,
            "char_entropy": 4.12,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "avg_line_length": 188.67,
            "high_byte_ratio": 0.34,
            "max_line_length": 441.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 163.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 441.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 185.58,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            70,
            "textAppearance"
          ],
          [
            90,
            "layout_width"
          ],
          [
            105,
            "layout_height"
          ],
          [
            121,
            "singleLine"
          ],
          [
            134,
            "DateTimeView"
          ],
          [
            151,
            "android"
          ],
          [
            159,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 440,
        "sha": "1c677c0d3a1f61e8952a93a4e677dfc8db9145ca29452bb7c5df6c62bc84224f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SH.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 349,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.31
          },
          "file": {
            "size": 201.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.05,
            "pixel_entropy": 1.05,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 6.58
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            193,
            "IEND"
          ]
        ],
        "sz": 201,
        "sha": "a18cdaaf3742b1a3d4f484fa15d00fa34afb21495884301aafa3213338661ed6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SI.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 350,
        "ms": {
          "file": {
            "size": 1120.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.54,
            "space_count": 16.0,
            "total_lines": 3.0,
            "char_entropy": 4.51,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 460.67,
            "high_byte_ratio": 0.29,
            "max_line_length": 938.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 354.0,
            "last_line_length": 437.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.26,
            "line_length_stddev": 380.45,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "height"
          ],
          [
            113,
            "viewportWidth"
          ],
          [
            131,
            "viewportHeight"
          ],
          [
            146,
            "fillColor"
          ],
          [
            160,
            "pathData"
          ],
          [
            171,
            "strokeColor"
          ],
          [
            185,
            "strokeWidth"
          ],
          [
            199,
            "fillType"
          ],
          [
            212,
            "M67.4,37C67.4,53.7895 53.7895,67.4 37,67.4C20.2105,67.4 6.6,53.7895 6.6,37C6.6,20.2105 20.2105,6.6 37,6.6C53.7895,6.6 67.4,20.21"
          ],
          [
            355,
            "M73.1,37C73.1,17.0637 56.9373,0.9 37,0.9C17.0627,0.9 0.9,17.0637 0.9,37C0.9,56.9373 17.0627,73.1 37,73.1C56.9373,73.1 73.1,56.93"
          ],
          [
            496,
            "android"
          ],
          [
            504,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            551,
            "path"
          ],
          [
            558,
            "vector"
          ]
        ],
        "sz": 1120,
        "sha": "109db006a32d917c95d1c7a68d11c27f65db84b0bc8c059aab478a0fa6969fa5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SK.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 351,
        "ms": {
          "file": {
            "size": 796.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.72,
            "unique_chars": 60.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 344.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 645.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 361.0,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 249.1,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            108,
            "startOffset"
          ],
          [
            120,
            "propertyName"
          ],
          [
            137,
            "android"
          ],
          [
            145,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            190,
            "iconScale"
          ],
          [
            204,
            "objectAnimator"
          ],
          [
            221,
            "opacity"
          ],
          [
            231,
            "scale"
          ]
        ],
        "sz": 796,
        "sha": "cd8ee9dab8373a752f1248301775f6f20823eac8eb48f02d7d74db6c0c2d494f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SQ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 352,
        "ms": {
          "file": {
            "size": 988.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 5.0,
            "char_entropy": 3.96,
            "unique_chars": 71.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 264.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 807.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 374.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.28,
            "line_length_stddev": 297.92,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "layout_gravity"
          ],
          [
            114,
            "visibility"
          ],
          [
            127,
            "layout_width"
          ],
          [
            142,
            "layout_height"
          ],
          [
            160,
            "layout_marginTop"
          ],
          [
            179,
            "layout_marginBottom"
          ],
          [
            199,
            "scaleType"
          ],
          [
            213,
            "layout_marginStart"
          ],
          [
            234,
            "layout_marginEnd"
          ],
          [
            253,
            "FrameLayout"
          ],
          [
            265,
            "ImageView"
          ],
          [
            279,
            "android"
          ],
          [
            287,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 988,
        "sha": "04fec888da8d3aacb4be2dab07875224cd7aa9ba11e1afd3e7e0ea9d0b9f4b86",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SS.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 353,
        "ms": {
          "file": {
            "size": 640.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.03,
            "total_lines": 4.0,
            "char_entropy": 4.13,
            "unique_chars": 70.0,
            "lines_over_200": 2.0,
            "avg_line_length": 204.75,
            "high_byte_ratio": 0.33,
            "max_line_length": 428.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 236.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.29,
            "line_length_stddev": 186.12,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "textAppearance"
          ],
          [
            105,
            "textColor"
          ],
          [
            117,
            "ellipsize"
          ],
          [
            131,
            "gravity"
          ],
          [
            146,
            "paddingLeft"
          ],
          [
            158,
            "paddingRight"
          ],
          [
            173,
            "layout_width"
          ],
          [
            188,
            "layout_height"
          ],
          [
            204,
            "minHeight"
          ],
          [
            218,
            "TextView"
          ],
          [
            229,
            "android"
          ],
          [
            237,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 640,
        "sha": "1112561ba781d446f5d1f3bf4d9e61868fe722f9e4b8d0e2f286e24335171a7b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SU.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 354,
        "ms": {
          "file": {
            "size": 448.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.63,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 594.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 594.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 195.0,
            "last_line_length": 594.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "radius"
          ],
          [
            83,
            "android"
          ],
          [
            93,
            "corners"
          ],
          [
            101,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            148,
            "shape"
          ],
          [
            156,
            "solid"
          ]
        ],
        "sz": 448,
        "sha": "62bbcd7846fcc68c0392bca7364eb96cf347bb84f38678d79dcb78f8e773c1c6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/SZ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 355,
        "ms": {
          "file": {
            "size": 820.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.81,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 354.67,
            "high_byte_ratio": 0.35,
            "max_line_length": 652.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 358.0,
            "last_line_length": 405.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 265.71,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "valueFrom"
          ],
          [
            142,
            "valueTo"
          ],
          [
            150,
            "valueType"
          ],
          [
            162,
            "propertyName"
          ],
          [
            179,
            "android"
          ],
          [
            187,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            234,
            "objectAnimator"
          ],
          [
            251,
            "opacity"
          ],
          [
            261,
            "scale"
          ]
        ],
        "sz": 820,
        "sha": "7fe7e7fcbc03d1402bf1c6f5397d82041628487096dda3f2ee15c77fc76b4b99",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Sf.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 356,
        "ms": {
          "file": {
            "size": 792.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.52,
            "space_count": 20.0,
            "total_lines": 3.0,
            "char_entropy": 4.74,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 307.67,
            "high_byte_ratio": 0.22,
            "max_line_length": 581.0,
            "non_ascii_ratio": 0.22,
            "null_byte_count": 219.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.24,
            "line_length_stddev": 222.9,
            "non_printable_ratio": 0.37,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M22,3L7,3c-0.69,0 -1.23,0.35 -1.59,0.88L0,12l5.41,8.11c0.36,0.53 0.9,0.89 1.59,0.89h15c1.1,0 2,-0.9 2,-2L24,5c0,-1.1 -0.9,-2 -2,"
          ],
          [
            403,
            "android"
          ],
          [
            411,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            458,
            "path"
          ],
          [
            465,
            "vector"
          ]
        ],
        "sz": 792,
        "sha": "908040c0917a99daf34f59b4257e1634c6adf0a2151bbcf7ac3049cdcadd3f98",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Sn.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 357,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 464.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.08,
            "pixel_entropy": 1.08,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 7.36
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            456,
            "IEND"
          ]
        ],
        "sz": 464,
        "sha": "5080b07eb486ba05ede737b567eb2bb89d7b79a3edb5c2ca8141c6eba012b75d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Sr.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 358,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.06,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "avg_line_length": 200.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 176.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 476.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 201.62,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "ellipsize"
          ],
          [
            89,
            "layout_width"
          ],
          [
            104,
            "layout_height"
          ],
          [
            120,
            "singleLine"
          ],
          [
            135,
            "TextView"
          ],
          [
            146,
            "android"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 464,
        "sha": "f7a51bd60a6af1a3578d7d7d728f4aa0cb0d7334babb39312eeca4e0b12ef771",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/St.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 359,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 3.0,
            "chunks_total": 7.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 23123.0
          },
          "image": {
            "width": 1600.0,
            "height": 1600.0,
            "channels": 1.0,
            "r_entropy": 0.72,
            "edge_density": 0.0,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.72
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            8144,
            "K. u"
          ],
          [
            9288,
            "IDAT"
          ],
          [
            9329,
            "HOVH"
          ],
          [
            23115,
            "IEND"
          ]
        ],
        "sz": 23123,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "0af4097ea92179cccac66313cedbf1c339efac835ad426a190af8a324e4565d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Sz.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 2,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 360,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.52,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 225.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 3.0,
            "b_entropy": 0.47,
            "g_entropy": 0.47,
            "r_entropy": 0.47,
            "pixel_entropy": 2.05,
            "histogram_flatness": 0.26
          },
          "binary": {
            "overall_entropy": 4.27
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            217,
            "IEND"
          ]
        ],
        "sz": 225,
        "sha": "42aee0b03883e94df5e543348a397d1302c1b8221895871a83b81899f5a9647b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/T2.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 361,
        "ms": {
          "file": {
            "size": 752.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.46,
            "space_count": 12.0,
            "total_lines": 3.0,
            "char_entropy": 4.76,
            "unique_chars": 80.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 295.33,
            "high_byte_ratio": 0.23,
            "max_line_length": 542.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 223.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.25,
            "line_length_stddev": 207.21,
            "non_printable_ratio": 0.38,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M11.99,2C6.47,2 2,6.48 2,12s4.47,10 9.99,10C17.52,22 22,17.52 22,12S17.52,2 11.99,2zM12,20c-4.42,0 -8,-3.58 -8,-8s3.58,-8 8,-8s8"
          ],
          [
            361,
            "android"
          ],
          [
            369,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            416,
            "path"
          ],
          [
            423,
            "vector"
          ]
        ],
        "sz": 752,
        "sha": "36a71a00f1449b917ca0c0118ee2f819bf3f3da2d60384b467ab6ceaa651f3ed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/T2.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 362,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.17,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 187.0
          },
          "image": {
            "width": 25.0,
            "height": 22.0,
            "channels": 2.0,
            "r_entropy": 0.27,
            "pixel_entropy": 0.27,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT8"
          ],
          [
            179,
            "IEND"
          ]
        ],
        "sz": 187,
        "sha": "0caaea0060b3772ba433c0e9e3a5452f26f3421ba5023c855157270bc675b309",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/TF.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 363,
        "ms": {
          "file": {
            "size": 1304.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 11.0,
            "char_entropy": 3.92,
            "unique_chars": 81.0,
            "lines_over_200": 4.0,
            "avg_line_length": 161.64,
            "high_byte_ratio": 0.41,
            "max_line_length": 430.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 498.0,
            "empty_line_ratio": 0.27,
            "last_line_length": 255.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 141.62,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            118,
            "textAppearance"
          ],
          [
            133,
            "ellipsize"
          ],
          [
            147,
            "layout_gravity"
          ],
          [
            164,
            "orientation"
          ],
          [
            181,
            "background"
          ],
          [
            196,
            "paddingLeft"
          ],
          [
            208,
            "paddingRight"
          ],
          [
            223,
            "fadingEdge"
          ],
          [
            238,
            "duplicateParentState"
          ],
          [
            259,
            "layout_width"
          ],
          [
            274,
            "layout_height"
          ],
          [
            292,
            "layout_marginRight"
          ],
          [
            313,
            "minWidth"
          ],
          [
            322,
            "singleLine"
          ],
          [
            335,
            "ImageView"
          ],
          [
            347,
            "LinearLayout"
          ],
          [
            364,
            "TextView"
          ],
          [
            375,
            "android"
          ],
          [
            383,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1304,
        "sha": "8158293ba942519bf98a093e454ff187eeeb33ec40ae6daf2da3efa300b494dd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/TK.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 364,
        "ms": {
          "file": {
            "size": 720.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.93,
            "unique_chars": 69.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 321.33,
            "high_byte_ratio": 0.38,
            "max_line_length": 588.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 279.0,
            "last_line_length": 135.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 193.46,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "orientation"
          ],
          [
            99,
            "layout_width"
          ],
          [
            114,
            "layout_height"
          ],
          [
            132,
            "baselineAligned"
          ],
          [
            150,
            "layout_marginStart"
          ],
          [
            169,
            "LinearLayout"
          ],
          [
            186,
            "android"
          ],
          [
            194,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            241,
            "include"
          ],
          [
            251,
            "layout"
          ]
        ],
        "sz": 720,
        "sha": "14da500d551cc5a551dc2b1fe1cc2af37b1f3dab930215e7b3fa72841a245044",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/TP.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 365,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.16
          },
          "file": {
            "size": 321.0
          },
          "image": {
            "width": 32.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 1.57,
            "pixel_entropy": 1.57,
            "histogram_flatness": 0.2
          },
          "binary": {
            "overall_entropy": 7.09
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            313,
            "IEND"
          ]
        ],
        "sz": 321,
        "sha": "caf1e473df6702c2a6a95d738f1d6f2b73196766b504e5ff333b3c8e747e047b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/TQ.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 366,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c283813f9b000c696dc87d14fb4e48ddc39798ef384462c93b0d1b576b0cf666",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/TV.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 367,
        "ms": {
          "png": {
            "a_entropy": 1.69,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 206.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 4.0,
            "pixel_entropy": 0.6,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 6.58
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            198,
            "IEND"
          ]
        ],
        "sz": 206,
        "sha": "6306048ba5f7eca43e7bdadeefa9412180508486fd543e02de93d2a013e223f0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ti.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 368,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.38,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 327.0
          },
          "image": {
            "width": 18.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 1.32,
            "edge_density": 0.09,
            "pixel_entropy": 1.32,
            "histogram_flatness": 0.17
          },
          "binary": {
            "overall_entropy": 5.47
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            319,
            "IEND"
          ]
        ],
        "sz": 327,
        "sha": "0fa17d8754d6d163cc433f087cad6c083173ac87ad7097e76950a25eec5f3e90",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Tl.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 369,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.34,
            "total_lines": 3.0,
            "char_entropy": 4.42,
            "unique_chars": 73.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.67,
            "high_byte_ratio": 0.27,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 237.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 268.41,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "eeM19,6.41L17.59,5,12,10.59,6.41,5,5,6.41,10.59,12,5,17.59,6.41,19,12,13.41,17.59,19,19,17.59,13.41,12z"
          ],
          [
            270,
            "android"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            325,
            "path"
          ],
          [
            332,
            "vector"
          ]
        ],
        "sz": 684,
        "sha": "36af76aa53bcc6298690fe39bdcea4c1d23a8b3a25f0b8dc0975f7be05d8dfcb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ts.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 370,
        "ms": {
          "file": {
            "size": 660.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "total_lines": 6.0,
            "char_entropy": 3.95,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "avg_line_length": 136.5,
            "high_byte_ratio": 0.3,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 277.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 154.14,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "name"
          ],
          [
            89,
            "drawable"
          ],
          [
            98,
            "animation"
          ],
          [
            112,
            "aapt"
          ],
          [
            119,
            "android"
          ],
          [
            129,
            "animated-vector"
          ],
          [
            147,
            "eye_mask"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            237,
            "strike_through"
          ],
          [
            254,
            "target"
          ]
        ],
        "sz": 660,
        "sha": "532fd8544cc71cdb5f6df23a093b9ec36e6387b70da9e5cfd0adb4f90ef51fda",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Tt.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 371,
        "ms": {
          "png": {
            "a_entropy": 1.46,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.11
          },
          "file": {
            "size": 991.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 4.0,
            "b_entropy": 1.99,
            "g_entropy": 1.99,
            "r_entropy": 2.01,
            "edge_density": 0.05,
            "pixel_entropy": 2.73,
            "histogram_flatness": 0.34
          },
          "binary": {
            "overall_entropy": 7.75
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            983,
            "IEND"
          ]
        ],
        "sz": 991,
        "sha": "e319e0d59755ea3a04a890a353aa9bd801b9a9aec0eaf9841a17762fbeed597f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/UG.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 372,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.14
          },
          "file": {
            "size": 375.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.8,
            "pixel_entropy": 0.8,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.34
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            367,
            "IEND"
          ]
        ],
        "sz": 375,
        "sha": "12ec9f9ad5fa3d7d897114af6c2297b66f31cb056e43daffbe80d23f6f66396d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/UM.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 373,
        "ms": {
          "file": {
            "size": 1056.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 9.0,
            "char_entropy": 4.14,
            "unique_chars": 79.0,
            "lines_over_200": 4.0,
            "avg_line_length": 152.22,
            "high_byte_ratio": 0.35,
            "max_line_length": 381.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 376.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 319.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 147.64,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            122,
            "textAppearance"
          ],
          [
            137,
            "textColor"
          ],
          [
            149,
            "ellipsize"
          ],
          [
            163,
            "orientation"
          ],
          [
            180,
            "background"
          ],
          [
            195,
            "paddingLeft"
          ],
          [
            207,
            "paddingTop"
          ],
          [
            220,
            "paddingRight"
          ],
          [
            235,
            "paddingBottom"
          ],
          [
            251,
            "layout_width"
          ],
          [
            266,
            "layout_height"
          ],
          [
            282,
            "layout_margin"
          ],
          [
            300,
            "maxWidth"
          ],
          [
            311,
            "maxLines"
          ],
          [
            320,
            "paddingStart"
          ],
          [
            335,
            "paddingEnd"
          ],
          [
            348,
            "LinearLayout"
          ],
          [
            365,
            "TextView"
          ],
          [
            376,
            "android"
          ],
          [
            384,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1056,
        "sha": "1c26037f6791a31deed5be0f962e367ec348e18c262d5b19604a817f2c337c30",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/UO.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 374,
        "ms": {
          "file": {
            "size": 372.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 42.0,
            "lines_over_200": 1.0,
            "avg_line_length": 476.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 162.0,
            "last_line_length": 476.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "shape"
          ],
          [
            70,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "solid"
          ]
        ],
        "sz": 372,
        "sha": "1469ff8e217833764641de0c58da86b38dd3755ca699dce6e411449726d82fad",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/UQ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 375,
        "ms": {
          "file": {
            "size": 352.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 4.08,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "avg_line_length": 440.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 440.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 137.0,
            "last_line_length": 440.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "layout_width"
          ],
          [
            75,
            "layout_height"
          ],
          [
            93,
            "TextView"
          ],
          [
            104,
            "android"
          ],
          [
            112,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 352,
        "sha": "de883ff4106709e6533d5f6a6a38af977523afcb8abac7e69f645461722b4401",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/UU.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 376,
        "ms": {
          "png": {
            "bit_depth": 4.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.12
          },
          "file": {
            "size": 1185.0
          },
          "image": {
            "width": 212.0,
            "height": 45.0,
            "channels": 1.0,
            "r_entropy": 2.25,
            "edge_density": 0.19,
            "pixel_entropy": 2.25,
            "histogram_flatness": 0.28
          },
          "binary": {
            "overall_entropy": 7.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            124,
            "IDATX"
          ],
          [
            1177,
            "IEND"
          ]
        ],
        "sz": 1185,
        "sha": "b59d6a07d3a6a0e42b74b08e939dd843ccf671054fe708193c462b5b2a883f3b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/U_.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 377,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 595.0
          },
          "image": {
            "width": 54.0,
            "height": 54.0,
            "channels": 2.0,
            "r_entropy": 1.58,
            "pixel_entropy": 1.58,
            "histogram_flatness": 0.2
          },
          "binary": {
            "overall_entropy": 7.59
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            587,
            "IEND"
          ]
        ],
        "sz": 595,
        "sha": "4f2f8c2a7b042e55aa8f43f4ce8134b3217ee9cda432c5ff8d4c33d09d86df68",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/U_1.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 378,
        "ms": {
          "file": {
            "size": 448.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 2.0,
            "char_entropy": 3.69,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 293.5,
            "high_byte_ratio": 0.36,
            "max_line_length": 473.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 195.0,
            "last_line_length": 114.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "line_length_stddev": 179.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "radius"
          ],
          [
            83,
            "android"
          ],
          [
            93,
            "corners"
          ],
          [
            101,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            148,
            "shape"
          ],
          [
            156,
            "solid"
          ]
        ],
        "sz": 448,
        "sha": "1cc817fa9601d61470b3d200e26734ae94c154ae888bdbf6c5e29d4941e74b77",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ug.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 379,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 290.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.85,
            "pixel_entropy": 0.85,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 6.86
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATX"
          ],
          [
            282,
            "IEND"
          ]
        ],
        "sz": 290,
        "sha": "5d02a81102644428ca639aec3df626eeb4a839a9ddc76fc2b158b04461d7f00f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ui.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 380,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.28,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 208.0
          },
          "image": {
            "width": 9.0,
            "height": 9.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 3.92
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            200,
            "IEND"
          ]
        ],
        "sz": 208,
        "sha": "91b8358e22ac1b8554c71a528414acf30088d9ad562bdac3814844771c14c8a9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Us.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 381,
        "ms": {
          "file": {
            "size": 528.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.21,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 220.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 565.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 187.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 565.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 247.02,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            77,
            "paddingBottom"
          ],
          [
            93,
            "scrollbars"
          ],
          [
            106,
            "clipToPadding"
          ],
          [
            122,
            "layout_width"
          ],
          [
            137,
            "layout_height"
          ],
          [
            155,
            "android"
          ],
          [
            163,
            "77com.google.android.material.internal.NavigationMenuView"
          ],
          [
            221,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 528,
        "sha": "168b4646d20cd486c6c665d49a751e3447fdfc1dc6798b5081c94e3486079865",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Uz.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 382,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.17,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 189.0
          },
          "image": {
            "width": 25.0,
            "height": 22.0,
            "channels": 2.0,
            "r_entropy": 0.44,
            "pixel_entropy": 0.44,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 3.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT8"
          ],
          [
            181,
            "IEND"
          ]
        ],
        "sz": 189,
        "sha": "23439b8899f4b63d68ae9385eaa49286a4b95b95f79b8b8d37de3b0e4fdbc747",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/V-.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 383,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.21,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 198.0
          },
          "image": {
            "width": 20.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 0.5,
            "edge_density": 0.04,
            "pixel_entropy": 0.5,
            "histogram_flatness": 0.06
          },
          "binary": {
            "overall_entropy": 3.66
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            190,
            "IEND"
          ]
        ],
        "sz": 198,
        "sha": "6b2372b414abc1cfcfd71c98f51901a84c46c5b712046aae019b6110de265175",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/V-1.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 384,
        "ms": {
          "file": {
            "size": 1196.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.61,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 327.2,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1244.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 536.0,
            "last_line_length": 155.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 466.07,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "propertyName"
          ],
          [
            149,
            "ordering"
          ],
          [
            160,
            "android"
          ],
          [
            168,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            215,
            "objectAnimator"
          ]
        ],
        "sz": 1196,
        "sha": "87675b479e31720a2d7275f1357c87a5d66b45b96daf023b64bd9e127853bbb2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/V1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 385,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 946.0
          },
          "image": {
            "width": 128.0,
            "height": 128.0,
            "channels": 2.0,
            "r_entropy": 0.68,
            "pixel_entropy": 0.68,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.67
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            131,
            "D33I"
          ],
          [
            859,
            "Y[@BDFHJLNPRTVXZ\\^aBeFiJmNqRuVyZ}"
          ],
          [
            938,
            "IEND"
          ]
        ],
        "sz": 946,
        "sha": "53340b0b0f529b26db6af632a0112708233bf312448c5b89a1357b2cd70b3f42",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/V4.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 386,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.17
          },
          "file": {
            "size": 356.0
          },
          "image": {
            "width": 32.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 1.53,
            "pixel_entropy": 1.53,
            "histogram_flatness": 0.19
          },
          "binary": {
            "overall_entropy": 7.19
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            348,
            "IEND"
          ]
        ],
        "sz": 356,
        "sha": "c8825cd637e59a02500d8b7518562f0c91bef2edd971ba3e5ad0f416794d618e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/V9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 387,
        "ms": {
          "file": {
            "size": 712.0
          },
          "text": {
            "tab_count": 5.0,
            "total_lines": 6.0,
            "char_entropy": 4.26,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 150.17,
            "high_byte_ratio": 0.32,
            "max_line_length": 405.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 249.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 39.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 142.06,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            94,
            "gravity"
          ],
          [
            107,
            "paddingBottom"
          ],
          [
            123,
            "layout_width"
          ],
          [
            138,
            "layout_height"
          ],
          [
            156,
            "autoSizeTextType"
          ],
          [
            175,
            "firstBaselineToTopHeight"
          ],
          [
            200,
            "lineHeight"
          ],
          [
            215,
            "TextView"
          ],
          [
            226,
            "android"
          ],
          [
            240,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            282,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 712,
        "sha": "cb4af1c031243bf2adfeb922f96e52b44299da674414f690d4338b73eef51db1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/V9.xml",
        "type": "xml"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 388,
        "ms": {
          "file": {
            "size": 3240.0
          },
          "text": {
            "tab_count": 26.0,
            "digit_ratio": 0.02,
            "space_count": 7.0,
            "total_lines": 14.0,
            "char_entropy": 4.26,
            "unique_chars": 133.0,
            "lines_over_200": 10.0,
            "lines_over_500": 2.0,
            "avg_line_length": 304.36,
            "high_byte_ratio": 0.37,
            "lines_over_1000": 1.0,
            "max_line_length": 1154.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 1179.0,
            "empty_line_ratio": 0.07,
            "last_line_length": 265.0,
            "long_token_count": 16.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 272.96,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            214,
            "theme"
          ],
          [
            222,
            "textSize"
          ],
          [
            231,
            "textStyle"
          ],
          [
            243,
            "textColor"
          ],
          [
            255,
            "textColorHint"
          ],
          [
            273,
            "gravity"
          ],
          [
            283,
            "orientation"
          ],
          [
            300,
            "background"
          ],
          [
            313,
            "layout_width"
          ],
          [
            328,
            "layout_height"
          ],
          [
            346,
            "layout_marginLeft"
          ],
          [
            366,
            "layout_marginTop"
          ],
          [
            385,
            "layout_marginRight"
          ],
          [
            406,
            "text"
          ],
          [
            418,
            "layout_weight"
          ],
          [
            434,
            "inputType"
          ],
          [
            448,
            "textCursorDrawable"
          ],
          [
            467,
            "paddingStart"
          ],
          [
            484,
            "layout_marginHorizontal"
          ],
          [
            510,
            "endIconMode"
          ],
          [
            524,
            "helperTextEnabled"
          ],
          [
            544,
            "hintEnabled"
          ],
          [
            558,
            "layout_constraintEnd_toEndOf"
          ],
          [
            587,
            "layout_constraintStart_toStartOf"
          ],
          [
            624,
            "layout_constraintTop_toBottomOf"
          ],
          [
            658,
            "layout_constraintTop_toTopOf"
          ],
          [
            689,
            "passwordToggleDrawable"
          ],
          [
            714,
            "passwordToggleEnabled"
          ],
          [
            736,
            "LinearLayout"
          ],
          [
            753,
            "TextView"
          ],
          [
            764,
            "View"
          ],
          [
            771,
            "android"
          ],
          [
            779,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            837,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            895,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            951,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            993,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1037,
            "143.150.230.182:1765"
          ],
          [
            1046,
            "161.174.232.174:1767"
          ]
        ],
        "sz": 3240,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "cursor"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-url-navigation-action--rx-19",
            "l": 1
          }
        ],
        "sha": "5580df0b64bfb9f2e92533728d7601ca53d7f7d3215531e9c4c0f2cfacc0ed31",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/VA.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 389,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.02,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 260.0
          },
          "image": {
            "width": 42.0,
            "height": 126.0,
            "channels": 2.0,
            "r_entropy": 1.24,
            "pixel_entropy": 1.24,
            "histogram_flatness": 0.16
          },
          "binary": {
            "overall_entropy": 4.35
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            252,
            "IEND"
          ]
        ],
        "sz": 260,
        "sha": "94ae2273a335672c1c67988e7af595d42e80526edb7f5654ee130dce06fd40d7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/VK.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 390,
        "ms": {
          "file": {
            "size": 1604.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 6.0,
            "char_entropy": 4.28,
            "unique_chars": 89.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 345.83,
            "high_byte_ratio": 0.34,
            "lines_over_1000": 1.0,
            "max_line_length": 1628.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 554.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 207.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "line_length_stddev": 579.74,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            142,
            "textSize"
          ],
          [
            151,
            "textColor"
          ],
          [
            165,
            "gravity"
          ],
          [
            178,
            "background"
          ],
          [
            191,
            "layout_width"
          ],
          [
            206,
            "layout_height"
          ],
          [
            222,
            "foreground"
          ],
          [
            241,
            "scaleType"
          ],
          [
            262,
            "cardBackgroundColor"
          ],
          [
            284,
            "cardCornerRadius"
          ],
          [
            301,
            "cardElevation"
          ],
          [
            356,
            "layout_constraintEnd_toEndOf"
          ],
          [
            385,
            "layout_constraintStart_toStartOf"
          ],
          [
            422,
            "layout_constraintTop_toTopOf"
          ],
          [
            451,
            "ImageView"
          ],
          [
            465,
            "TextView"
          ],
          [
            476,
            "android"
          ],
          [
            484,
            "!!androidx.cardview.widget.CardView"
          ],
          [
            520,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            578,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            620,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1604,
        "sha": "37581d54924c8f200675b642b321a8acb6c74b02885f4f203e3dead2bd76d19e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/VT.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 391,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 631.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 1.28,
            "pixel_entropy": 1.28,
            "histogram_flatness": 0.16
          },
          "binary": {
            "overall_entropy": 7.6
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            623,
            "IEND"
          ]
        ],
        "sz": 631,
        "sha": "683691d79ef11e863fe4ec84ddc631696e5984b5584fc4549d6586dbaca220c7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/VW.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 392,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 415.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.39,
            "pixel_entropy": 1.39,
            "histogram_flatness": 0.17
          },
          "binary": {
            "overall_entropy": 7.42
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            407,
            "IEND"
          ]
        ],
        "sz": 415,
        "sha": "1e3b02e24fa431b1abe0a97ad6723fad43df79fda8176c1060b6fbd31178619f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/VW1.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 393,
        "ms": {
          "file": {
            "size": 304.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 42.0,
            "lines_over_200": 1.0,
            "avg_line_length": 378.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 378.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 130.0,
            "last_line_length": 378.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.52,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "radius"
          ],
          [
            75,
            "android"
          ],
          [
            83,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            130,
            "ripple"
          ]
        ],
        "sz": 304,
        "sha": "7695fd74f8a36df3a4ba7d1c101f71a61a3354c0c0989d6363fa7f8ad59fe2ef",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Vc.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 394,
        "ms": {
          "file": {
            "size": 2520.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.84,
            "space_count": 132.0,
            "total_lines": 5.0,
            "char_entropy": 4.66,
            "unique_chars": 86.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 567.2,
            "high_byte_ratio": 0.17,
            "lines_over_1000": 1.0,
            "max_line_length": 2448.0,
            "non_ascii_ratio": 0.17,
            "null_byte_count": 456.0,
            "last_line_length": 155.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.06,
            "most_common_ratio": 0.16,
            "line_length_stddev": 944.06,
            "non_printable_ratio": 0.24,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "interpolator"
          ],
          [
            113,
            "duration"
          ],
          [
            122,
            "valueFrom"
          ],
          [
            136,
            "valueTo"
          ],
          [
            144,
            "valueType"
          ],
          [
            156,
            "propertyName"
          ],
          [
            173,
            "ordering"
          ],
          [
            186,
            "M 7.0,-9.0 c 0.0,0.0 -14.0,0.0 -14.0,0.0 c -1.1044921875,0.0 -2.0,0.8955078125 -2.0,2.0 c 0.0,0.0 0.0,14.0 0.0,14.0 c 0.0,1.1044"
          ],
          [
            920,
            "M 7.0,-9.0 c 0.0,0.0 -14.0,0.0 -14.0,0.0 c -1.1044921875,0.0 -2.0,0.8955078125 -2.0,2.0 c 0.0,0.0 0.0,14.0 0.0,14.0 c 0.0,1.1044"
          ],
          [
            1695,
            "android"
          ],
          [
            1703,
            "fillAlpha"
          ],
          [
            1715,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1762,
            "objectAnimator"
          ],
          [
            1779,
            "pathData"
          ]
        ],
        "sz": 2520,
        "sha": "83639378694206ce50e5fc5facef63c6b64321a1231b1f1bd26d8e76d73f6e43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Ve.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 395,
        "ms": {
          "file": {
            "size": 544.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 4.0,
            "char_entropy": 4.16,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 173.25,
            "high_byte_ratio": 0.33,
            "max_line_length": 609.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 195.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 609.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 252.83,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            81,
            "paddingTop"
          ],
          [
            94,
            "paddingBottom"
          ],
          [
            110,
            "clipToPadding"
          ],
          [
            126,
            "layout_width"
          ],
          [
            141,
            "layout_height"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            211,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 544,
        "sha": "5853747dacd7dd598a10ca313db1feccc179d4a50b9851a5ee23d40ce40e9517",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Vj.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 396,
        "ms": {
          "file": {
            "size": 304.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.83,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 376.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 376.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 130.0,
            "last_line_length": 376.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.35,
            "non_printable_ratio": 0.52,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "radius"
          ],
          [
            75,
            "android"
          ],
          [
            83,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            130,
            "ripple"
          ]
        ],
        "sz": 304,
        "sha": "940fa98d3b37415e0e0e3f8714ae9955c39a43e2c43382c4c72d99ff4f51f17f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Vl.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 397,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.07
          },
          "file": {
            "size": 1208.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 1.08,
            "pixel_entropy": 1.08,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 7.8
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            1200,
            "IEND"
          ]
        ],
        "sz": 1208,
        "sha": "5e0799a0d0b5d43ed5ae3a378aaa0847a810ceeff58db9a0f7836ebf4ef17146",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Vq.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 398,
        "ms": {
          "png": {
            "a_entropy": 1.67,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.15
          },
          "file": {
            "size": 799.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 4.0,
            "b_entropy": 2.17,
            "g_entropy": 2.18,
            "r_entropy": 2.18,
            "edge_density": 0.13,
            "pixel_entropy": 2.97,
            "histogram_flatness": 0.37
          },
          "binary": {
            "overall_entropy": 7.69
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            791,
            "IEND"
          ]
        ],
        "sz": 799,
        "sha": "c54c764bb1668dd0f30a55ca1daaafc8f5afcc5b289e831351e6e4e185956d05",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Vy.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 399,
        "ms": {
          "file": {
            "size": 524.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.98,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 211.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 524,
        "sha": "3e2b6cbfeda39cee81fc6560c1079d9c7d3587ff0bd867cd5a0207119f2f7b84",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WF.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 400,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.48,
            "space_count": 39.0,
            "total_lines": 3.0,
            "char_entropy": 4.58,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 287.33,
            "high_byte_ratio": 0.24,
            "max_line_length": 520.0,
            "non_ascii_ratio": 0.24,
            "null_byte_count": 220.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.06,
            "most_common_ratio": 0.25,
            "line_length_stddev": 198.49,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M12 2C6.47 2 2 6.47 2 12s4.47 10 10 10 10-4.47 10-10S17.53 2 12 2zm5 13.59L15.59 17 12 13.41 8.41 17 7 15.59 10.59 12 7 8.41 8.4"
          ],
          [
            335,
            "android"
          ],
          [
            343,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            390,
            "path"
          ],
          [
            397,
            "vector"
          ]
        ],
        "sz": 724,
        "sha": "e0d7a332685e547d9d9a9f43377e7fe4f63ace04a2a3c56c7064fe1b114bfe07",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WG.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 401,
        "ms": {
          "file": {
            "size": 1028.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 3.65,
            "unique_chars": 69.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 272.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 847.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 469.0,
            "last_line_length": 35.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 317.29,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "ordering"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "objectAnimator"
          ],
          [
            250,
            "strokeWidth"
          ]
        ],
        "sz": 1028,
        "sha": "0463f7a8f3000c1af89aa522a6ceb7fc189762c8a1d4bc6f6af816eedcf7d9d9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WO.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 402,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.07,
            "space_count": 4.0,
            "total_lines": 3.0,
            "char_entropy": 4.11,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 231.33,
            "high_byte_ratio": 0.28,
            "max_line_length": 352.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 227.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 140.04,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            155,
            "M7 10l5 5 5-5z"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "path"
          ],
          [
            234,
            "vector"
          ]
        ],
        "sz": 564,
        "sha": "d89e4f1db9e340040521b6c9fd66344e9f42f0d41966ca8a134bcd3aa4fba15f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WP.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 403,
        "ms": {
          "file": {
            "size": 984.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 8.0,
            "char_entropy": 3.84,
            "unique_chars": 70.0,
            "lines_over_200": 3.0,
            "avg_line_length": 169.13,
            "high_byte_ratio": 0.41,
            "max_line_length": 498.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 382.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 75.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 156.49,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            98,
            "gravity"
          ],
          [
            108,
            "layout_gravity"
          ],
          [
            125,
            "orientation"
          ],
          [
            142,
            "paddingRight"
          ],
          [
            157,
            "layout_width"
          ],
          [
            172,
            "layout_height"
          ],
          [
            190,
            "minWidth"
          ],
          [
            201,
            "text"
          ],
          [
            206,
            "paddingEnd"
          ],
          [
            221,
            "Button"
          ],
          [
            228,
            "LinearLayout"
          ],
          [
            245,
            "android"
          ],
          [
            253,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 984,
        "sha": "cd8299ac9a2af81fc36f781284ca092f4d740b030b65ba0314b52cf16bc696bf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WT.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 404,
        "ms": {
          "file": {
            "size": 932.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.87,
            "unique_chars": 69.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 306.75,
            "high_byte_ratio": 0.36,
            "max_line_length": 659.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 377.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 659.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 244.34,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            110,
            "shape"
          ],
          [
            118,
            "color"
          ],
          [
            126,
            "radius"
          ],
          [
            156,
            "bottom"
          ],
          [
            163,
            "insetLeft"
          ],
          [
            175,
            "insetRight"
          ],
          [
            190,
            "insetTop"
          ],
          [
            201,
            "insetBottom"
          ],
          [
            215,
            "android"
          ],
          [
            225,
            "corners"
          ],
          [
            233,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            280,
            "inset"
          ],
          [
            288,
            "padding"
          ],
          [
            306,
            "solid"
          ]
        ],
        "sz": 932,
        "sha": "bb20abb5ec81b8f7ad25923a22d3157cf6f787eb359c6cac91ef02883514d1e9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WT1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 405,
        "ms": {
          "file": {
            "size": 684.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.3,
            "space_count": 5.0,
            "total_lines": 3.0,
            "char_entropy": 4.46,
            "unique_chars": 75.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.67,
            "high_byte_ratio": 0.27,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 239.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 268.41,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "eeM12,2C6.48,2 2,6.48 2,12s4.48,10 10,10s10,-4.48 10,-10S17.52,2 12,2zM11,16H9V8h2V16zM15,16h-2V8h2V16z"
          ],
          [
            270,
            "android"
          ],
          [
            278,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            325,
            "path"
          ],
          [
            332,
            "vector"
          ]
        ],
        "sz": 684,
        "sha": "2aa69e39ab461f5518e7463164c6a31303b9edc96d630aed7e5c04f61ec58d9b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/WY.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 406,
        "ms": {
          "file": {
            "size": 940.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.06,
            "total_lines": 4.0,
            "char_entropy": 3.49,
            "unique_chars": 57.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 328.25,
            "high_byte_ratio": 0.43,
            "max_line_length": 859.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 422.0,
            "last_line_length": 143.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 321.1,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "color"
          ],
          [
            86,
            "radius"
          ],
          [
            95,
            "state_activated"
          ],
          [
            113,
            "android"
          ],
          [
            123,
            "corners"
          ],
          [
            131,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            178,
            "item"
          ],
          [
            185,
            "selector"
          ],
          [
            196,
            "shape"
          ],
          [
            204,
            "solid"
          ]
        ],
        "sz": 940,
        "sha": "203c93d2bced0e65fc8920d6eb6630a845bc91e5ea6648f240e46fa6a8efc69c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Wa.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 407,
        "ms": {
          "file": {
            "size": 1012.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 4.36,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 418.67,
            "high_byte_ratio": 0.29,
            "max_line_length": 653.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 348.0,
            "last_line_length": 7.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 292.02,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            106,
            "layout_gravity"
          ],
          [
            132,
            "layout_width"
          ],
          [
            147,
            "layout_height"
          ],
          [
            202,
            "layout_constraintEnd_toEndOf"
          ],
          [
            231,
            "layout_constraintStart_toStartOf"
          ],
          [
            268,
            "layout_constraintTop_toTopOf"
          ],
          [
            297,
            "selectorSize"
          ],
          [
            314,
            "android"
          ],
          [
            328,
            "44com.google.android.material.timepicker.ClockHandView"
          ],
          [
            383,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            425,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            472,
            "merge"
          ]
        ],
        "sz": 1012,
        "sha": "ea57702c7e116b83bab78ce1baa9486ccb481179dd6ccb750fc2ec0b661ea248",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Wl.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 408,
        "ms": {
          "file": {
            "size": 688.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.0,
            "total_lines": 4.0,
            "char_entropy": 4.37,
            "unique_chars": 70.0,
            "lines_over_200": 2.0,
            "avg_line_length": 212.25,
            "high_byte_ratio": 0.29,
            "max_line_length": 453.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 227.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 180.11,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            86,
            "gravity"
          ],
          [
            101,
            "addStatesFromChildren"
          ],
          [
            125,
            "descendantFocusability"
          ],
          [
            148,
            "layout_width"
          ],
          [
            163,
            "layout_height"
          ],
          [
            179,
            "listSelector"
          ],
          [
            196,
            "horizontalSpacing"
          ],
          [
            216,
            "verticalSpacing"
          ],
          [
            234,
            "android"
          ],
          [
            242,
            "??com.google.android.material.datepicker.MaterialCalendarGridView"
          ],
          [
            308,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 688,
        "sha": "e13da70dead806ce6f018ccba1da3feb335f63c41c03e1e51bd2b8d584c640f6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Wn.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 409,
        "ms": {
          "file": {
            "size": 1796.0
          },
          "text": {
            "tab_count": 35.0,
            "digit_ratio": 0.05,
            "total_lines": 14.0,
            "char_entropy": 3.48,
            "unique_chars": 77.0,
            "lines_over_200": 5.0,
            "lines_over_500": 1.0,
            "avg_line_length": 177.5,
            "high_byte_ratio": 0.42,
            "max_line_length": 539.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 841.0,
            "empty_line_ratio": 0.07,
            "last_line_length": 115.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.34,
            "line_length_stddev": 162.73,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "state_enabled"
          ],
          [
            114,
            "duration"
          ],
          [
            125,
            "valueTo"
          ],
          [
            133,
            "valueType"
          ],
          [
            145,
            "propertyName"
          ],
          [
            160,
            "state_hovered"
          ],
          [
            176,
            "startDelay"
          ],
          [
            191,
            "android"
          ],
          [
            199,
            "elevation"
          ],
          [
            211,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            258,
            "item"
          ],
          [
            265,
            "objectAnimator"
          ],
          [
            282,
            "selector"
          ],
          [
            297,
            "translationZ"
          ]
        ],
        "sz": 1796,
        "sha": "442a42badc7628419baf9f8136318618d0732b80d535a875a312e223136b85d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Wo.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 410,
        "ms": {
          "file": {
            "size": 2672.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.88,
            "space_count": 175.0,
            "total_lines": 4.0,
            "char_entropy": 4.58,
            "unique_chars": 75.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 704.25,
            "high_byte_ratio": 0.08,
            "lines_over_1000": 1.0,
            "max_line_length": 2638.0,
            "non_ascii_ratio": 0.08,
            "null_byte_count": 237.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": ".",
            "whitespace_ratio": 0.07,
            "most_common_ratio": 0.13,
            "line_length_stddev": 1116.99,
            "non_printable_ratio": 0.13,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            2256,
            "android"
          ],
          [
            2264,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            2311,
            "path"
          ],
          [
            2318,
            "vector"
          ]
        ],
        "sz": 2672,
        "sha": "60b10f6a9b800d230a445cbd4d38dc85234eb2533c028a0137a5c28eaf91c04e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/X0.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 411,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.05,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 235.0
          },
          "image": {
            "width": 28.0,
            "height": 84.0,
            "channels": 2.0,
            "r_entropy": 1.11,
            "pixel_entropy": 1.11,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 4.1
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            227,
            "IEND"
          ]
        ],
        "sz": 235,
        "sha": "cc162d4b8c12ee329e37c8d651442f0ef0a9d1c6f88ef352e54da8dfd9a50dfe",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/X3.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 412,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 420.0
          },
          "image": {
            "width": 132.0,
            "height": 66.0,
            "channels": 1.0,
            "r_entropy": 1.13,
            "pixel_entropy": 1.13,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 6.84
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "3PLTE"
          ],
          [
            412,
            "IEND"
          ]
        ],
        "sz": 420,
        "sha": "afbcaede66a97ddc9b54c4d9891c09415cb6944d79c4c1ae8440cda553963957",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/X5.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 413,
        "ms": {
          "file": {
            "size": 820.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.86,
            "unique_chars": 68.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 354.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 650.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 350.0,
            "last_line_length": 405.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 264.97,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "valueFrom"
          ],
          [
            142,
            "valueTo"
          ],
          [
            150,
            "valueType"
          ],
          [
            162,
            "propertyName"
          ],
          [
            179,
            "android"
          ],
          [
            187,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            234,
            "objectAnimator"
          ],
          [
            251,
            "opacity"
          ],
          [
            261,
            "scale"
          ]
        ],
        "sz": 820,
        "sha": "cad27b06707230990ca00e499c0052a2d3344c7bec6536e8ceb855ab6572eff4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/X8.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 414,
        "ms": {
          "file": {
            "size": 476.0
          },
          "text": {
            "tab_count": 3.0,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.09,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "avg_line_length": 198.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 485.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 185.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 485.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 207.76,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "textSize"
          ],
          [
            83,
            "textColor"
          ],
          [
            97,
            "gravity"
          ],
          [
            105,
            "visibility"
          ],
          [
            118,
            "layout_width"
          ],
          [
            133,
            "layout_height"
          ],
          [
            151,
            "TextView"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 476,
        "sha": "a496fbd39434c35dc01ba97fcde1b285e9c8553a377bea1a18bc7f4c155b1def",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/X9.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 415,
        "ms": {
          "file": {
            "size": 488.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 212.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "drawable"
          ],
          [
            73,
            "state_activated"
          ],
          [
            91,
            "android"
          ],
          [
            99,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            146,
            "item"
          ],
          [
            153,
            "selector"
          ]
        ],
        "sz": 488,
        "sha": "7a4d0a0d004eb0da1cd76cb285e0f71a962976936fda11ec6399b49e1c561960",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/XB.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 416,
        "ms": {
          "file": {
            "size": 124.0
          },
          "text": {
            "digit_ratio": 0.1,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.02,
            "unique_chars": 27.0,
            "avg_line_length": 52.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 116.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 71.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 116.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.45,
            "line_length_stddev": 48.11,
            "non_printable_ratio": 0.58,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            40,
            "layer-list"
          ]
        ],
        "sz": 124,
        "sha": "9b0ac791a3fa953e28b526e020fd2e629b40812ee1bc4693ff5fdfef15044202",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/XM.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 417,
        "ms": {
          "file": {
            "size": 2072.0
          },
          "text": {
            "tab_count": 19.0,
            "digit_ratio": 0.01,
            "total_lines": 19.0,
            "char_entropy": 3.88,
            "unique_chars": 89.0,
            "lines_over_200": 7.0,
            "avg_line_length": 154.21,
            "high_byte_ratio": 0.45,
            "max_line_length": 500.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 754.0,
            "empty_line_ratio": 0.21,
            "last_line_length": 247.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 148.05,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            146,
            "textAppearance"
          ],
          [
            161,
            "ellipsize"
          ],
          [
            175,
            "layout_gravity"
          ],
          [
            192,
            "orientation"
          ],
          [
            209,
            "background"
          ],
          [
            222,
            "visibility"
          ],
          [
            235,
            "fadingEdge"
          ],
          [
            250,
            "duplicateParentState"
          ],
          [
            271,
            "layout_width"
          ],
          [
            286,
            "layout_height"
          ],
          [
            304,
            "layout_marginTop"
          ],
          [
            323,
            "layout_marginBottom"
          ],
          [
            343,
            "scaleType"
          ],
          [
            357,
            "minWidth"
          ],
          [
            366,
            "singleLine"
          ],
          [
            379,
            "layout_weight"
          ],
          [
            395,
            "layout_below"
          ],
          [
            412,
            "layout_alignParentTop"
          ],
          [
            434,
            "ImageView"
          ],
          [
            446,
            "LinearLayout"
          ],
          [
            463,
            "RelativeLayout"
          ],
          [
            480,
            "TextView"
          ],
          [
            491,
            "android"
          ],
          [
            499,
            "--androidx.appcompat.view.menu.ListMenuItemView"
          ],
          [
            547,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2072,
        "sha": "58db49bbed4ad91d98dd43b22540ab0ec66a3aa25bdaa4c4eeb13054c47f2dee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/XS.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 418,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 4.19,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 143.2,
            "high_byte_ratio": 0.27,
            "max_line_length": 436.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 229.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 151.98,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "duration"
          ],
          [
            97,
            "startOffset"
          ],
          [
            109,
            "valueFrom"
          ],
          [
            123,
            "valueTo"
          ],
          [
            131,
            "valueType"
          ],
          [
            143,
            "propertyName"
          ],
          [
            160,
            "aapt"
          ],
          [
            167,
            "android"
          ],
          [
            177,
            "http://schemas.android.com/aapt"
          ],
          [
            209,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            256,
            "objectAnimator"
          ],
          [
            273,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "3f1531eddcc166e47399b095f3704c09a1f87c6d710f6bf07d1ff6b49f270c24",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/XT.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 419,
        "ms": {
          "file": {
            "size": 548.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.14,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "avg_line_length": 165.75,
            "high_byte_ratio": 0.27,
            "max_line_length": 452.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 215.0,
            "last_line_length": 107.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 169.79,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "duration"
          ],
          [
            91,
            "valueFrom"
          ],
          [
            105,
            "valueTo"
          ],
          [
            113,
            "valueType"
          ],
          [
            125,
            "propertyName"
          ],
          [
            142,
            "aapt"
          ],
          [
            149,
            "android"
          ],
          [
            159,
            "http://schemas.android.com/aapt"
          ],
          [
            191,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            238,
            "objectAnimator"
          ],
          [
            255,
            "pathData"
          ]
        ],
        "sz": 548,
        "sha": "6e17b86290c00416799510a541e70864b966720be0846b0498da41276ca497ca",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/XT1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 420,
        "ms": {
          "file": {
            "size": 3464.0
          },
          "text": {
            "tab_count": 32.0,
            "digit_ratio": 0.01,
            "space_count": 7.0,
            "total_lines": 17.0,
            "char_entropy": 4.05,
            "unique_chars": 107.0,
            "lines_over_200": 13.0,
            "lines_over_500": 1.0,
            "avg_line_length": 275.53,
            "high_byte_ratio": 0.39,
            "lines_over_1000": 1.0,
            "max_line_length": 1074.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 1293.0,
            "empty_line_ratio": 0.12,
            "last_line_length": 363.0,
            "long_token_count": 14.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 237.21,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            190,
            "textSize"
          ],
          [
            199,
            "textColor"
          ],
          [
            213,
            "gravity"
          ],
          [
            223,
            "layout_gravity"
          ],
          [
            240,
            "orientation"
          ],
          [
            257,
            "background"
          ],
          [
            270,
            "paddingTop"
          ],
          [
            283,
            "paddingBottom"
          ],
          [
            299,
            "layout_width"
          ],
          [
            314,
            "layout_height"
          ],
          [
            332,
            "layout_marginTop"
          ],
          [
            364,
            "text"
          ],
          [
            371,
            "layout_marginStart"
          ],
          [
            392,
            "layout_marginEnd"
          ],
          [
            411,
            "backgroundTintMode"
          ],
          [
            432,
            "paddingVertical"
          ],
          [
            448,
            "layoutManager"
          ],
          [
            503,
            "layout_constraintEnd_toEndOf"
          ],
          [
            532,
            "layout_constraintStart_toStartOf"
          ],
          [
            569,
            "layout_constraintTop_toBottomOf"
          ],
          [
            603,
            "layout_constraintTop_toTopOf"
          ],
          [
            634,
            "layout_constraintVertical_bias"
          ],
          [
            665,
            "spanCount"
          ],
          [
            677,
            "ImageView"
          ],
          [
            689,
            "LinearLayout"
          ],
          [
            706,
            "TextView"
          ],
          [
            717,
            "View"
          ],
          [
            724,
            "android"
          ],
          [
            732,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            784,
            "..androidx.recyclerview.widget.GridLayoutManager"
          ],
          [
            833,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            883,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            925,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 3464,
        "sha": "e13e455ad259ab25c991801dfdb31d2a7c1265b948c8c005522aa951a0c1739a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/XV.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 421,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.03,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 430.0
          },
          "image": {
            "width": 72.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.42,
            "edge_density": 0.01,
            "pixel_entropy": 0.42,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 5.98
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            422,
            "IEND"
          ]
        ],
        "sz": 430,
        "sha": "2552cd1bcdd9882d6c258833fb70bc081a31a2a093ef9c256f92431370a6e5de",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Xp.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 422,
        "ms": {
          "file": {
            "size": 1492.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.78,
            "space_count": 149.0,
            "total_lines": 3.0,
            "char_entropy": 4.8,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 550.67,
            "high_byte_ratio": 0.15,
            "lines_over_1000": 1.0,
            "max_line_length": 1476.0,
            "non_ascii_ratio": 0.15,
            "null_byte_count": 233.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.1,
            "most_common_ratio": 0.14,
            "line_length_stddev": 654.4,
            "non_printable_ratio": 0.21,
            "repeated_char_sequences": 11.0,
            "max_inline_whitespace_run": 13.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "autoMirrored"
          ],
          [
            116,
            "viewportWidth"
          ],
          [
            134,
            "viewportHeight"
          ],
          [
            149,
            "fillColor"
          ],
          [
            163,
            "pathData"
          ],
          [
            176,
            "M5.2834,9.3083V10.7833L4.1084,11.4916L3.1334,10.5166C3.8084,10.0416             4.5251,9.6333 5.2834,9.3083ZM14.75,9.325C15.4917"
          ],
          [
            1079,
            "android"
          ],
          [
            1087,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1134,
            "path"
          ],
          [
            1141,
            "vector"
          ]
        ],
        "sz": 1492,
        "sha": "c8321364802409baf4d76e2a84e303871585bdc95b0395040c5ecea0e2051105",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Xr.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 2,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 423,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.52,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 225.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 3.0,
            "b_entropy": 0.47,
            "g_entropy": 0.47,
            "r_entropy": 0.47,
            "pixel_entropy": 2.05,
            "histogram_flatness": 0.26
          },
          "binary": {
            "overall_entropy": 4.33
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            179,
            "beee"
          ],
          [
            217,
            "IEND"
          ]
        ],
        "sz": 225,
        "sha": "18b328d8017e677d5aad3dbd66bae356b5cac978c6f0670938ea648e51d0eb66",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Xs.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 424,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.19,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 216.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 0.25,
            "pixel_entropy": 0.25,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.57
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT8"
          ],
          [
            208,
            "IEND"
          ]
        ],
        "sz": 216,
        "sha": "fb71e11c090133a97fe84fa3b76a263b429c9032ec467854b0e32a3157a5eba5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Xs1.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 425,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 465.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.74,
            "pixel_entropy": 0.74,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.38
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            457,
            "IEND"
          ]
        ],
        "sz": 465,
        "sha": "4c717ce1ffb551c765981add65d1956132d8f522337de2866b045f0a60485426",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Y4.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 426,
        "ms": {
          "file": {
            "size": 2712.0
          },
          "text": {
            "tab_count": 20.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 9.0,
            "char_entropy": 4.07,
            "unique_chars": 110.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 402.0,
            "high_byte_ratio": 0.38,
            "lines_over_1000": 1.0,
            "max_line_length": 1859.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 1034.0,
            "empty_line_ratio": 0.22,
            "last_line_length": 1859.0,
            "long_token_count": 14.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 592.62,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            162,
            "textSize"
          ],
          [
            171,
            "textColor"
          ],
          [
            185,
            "gravity"
          ],
          [
            195,
            "orientation"
          ],
          [
            212,
            "background"
          ],
          [
            225,
            "paddingTop"
          ],
          [
            238,
            "paddingBottom"
          ],
          [
            254,
            "layout_width"
          ],
          [
            269,
            "layout_height"
          ],
          [
            287,
            "layout_marginTop"
          ],
          [
            306,
            "text"
          ],
          [
            313,
            "layout_marginStart"
          ],
          [
            334,
            "paddingVertical"
          ],
          [
            350,
            "layoutManager"
          ],
          [
            368,
            "layout_constraintEnd_toEndOf"
          ],
          [
            397,
            "layout_constraintStart_toStartOf"
          ],
          [
            434,
            "layout_constraintTop_toBottomOf"
          ],
          [
            468,
            "layout_constraintTop_toTopOf"
          ],
          [
            497,
            "spanCount"
          ],
          [
            509,
            "LinearLayout"
          ],
          [
            526,
            "TextView"
          ],
          [
            537,
            "View"
          ],
          [
            544,
            "android"
          ],
          [
            552,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            604,
            "..androidx.recyclerview.widget.GridLayoutManager"
          ],
          [
            653,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            703,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            745,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2712,
        "sha": "31ac9a7c74df5a1350cd4aa087c2a7032da15851e4e4fd029ad5e00c5f56a273",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Y8.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 427,
        "ms": {
          "file": {
            "size": 352.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 4.06,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "avg_line_length": 440.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 440.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 138.0,
            "last_line_length": 440.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "layout_width"
          ],
          [
            75,
            "layout_height"
          ],
          [
            93,
            "TextView"
          ],
          [
            104,
            "android"
          ],
          [
            112,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            299,
            "127.3.1.16:772"
          ]
        ],
        "sz": 352,
        "sha": "ed50021d45924a283eab06b5f772430d31962a6d0eafc844d75a5ee7833132a2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 428,
        "ms": {
          "file": {
            "size": 320.0
          },
          "text": {
            "digit_ratio": 0.22,
            "space_count": 5.0,
            "total_lines": 1.0,
            "char_entropy": 4.18,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 372.0,
            "high_byte_ratio": 0.21,
            "max_line_length": 372.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 123.0,
            "last_line_length": 372.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            107,
            "android"
          ],
          [
            115,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            162,
            "pathInterpolator"
          ]
        ],
        "sz": 320,
        "sha": "a8d7341c20d07c9fdab602e7c39187c9abb9caf5fbf9b2832cd6d9f18a2c86c2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YF.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 429,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 6.0,
            "char_entropy": 3.9,
            "unique_chars": 61.0,
            "lines_over_200": 2.0,
            "avg_line_length": 132.5,
            "high_byte_ratio": 0.34,
            "max_line_length": 310.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 253.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 106.16,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromYDelta"
          ],
          [
            121,
            "toYDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "bd39ff0c53b7129220964689f6d14733a700f423ad493c8e96573b917b968538",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YF1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 430,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 2.47,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 178.0
          },
          "image": {
            "width": 12.0,
            "height": 3.0,
            "channels": 2.0,
            "r_entropy": 0.92,
            "edge_density": 0.21,
            "pixel_entropy": 0.92,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 3.65
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            170,
            "IEND"
          ]
        ],
        "sz": 178,
        "sha": "4bc8f4d13d2acccc1338f73ff90cd97695d9210e04de5da924215243c8950bf3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YH.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 431,
        "ms": {
          "file": {
            "size": 800.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.52,
            "space_count": 19.0,
            "total_lines": 3.0,
            "char_entropy": 4.73,
            "unique_chars": 77.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 312.67,
            "high_byte_ratio": 0.22,
            "max_line_length": 594.0,
            "non_ascii_ratio": 0.22,
            "null_byte_count": 224.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.24,
            "line_length_stddev": 228.23,
            "non_printable_ratio": 0.36,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M15.5,14h-0.79l-0.28,-0.27C15.41,12.59 16,11.11 16,9.5 16,5.91 13.09,3 9.5,3S3,5.91 3,9.5 5.91,16 9.5,16c1.61,0 3.09,-0.59 4.23,"
          ],
          [
            408,
            "android"
          ],
          [
            416,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            463,
            "path"
          ],
          [
            470,
            "vector"
          ]
        ],
        "sz": 800,
        "sha": "cd4411a64074215ce93d6fc1db460a5d5e682404c822ca4e0f9792428a3c2da3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YH.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 432,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 884.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.8,
            "pixel_entropy": 0.8,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.72
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            93,
            "ThF%dDo"
          ],
          [
            516,
            "8XMS"
          ],
          [
            876,
            "IEND"
          ]
        ],
        "sz": 884,
        "sha": "86763a30af2a934c7c13b123b36443d1d17918b71c6149bc6ee80115b872593d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YJ.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 433,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 13.0,
            "digit_ratio": 0.37,
            "space_count": 9.0,
            "total_lines": 3.0,
            "char_entropy": 4.58,
            "unique_chars": 74.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 298.67,
            "high_byte_ratio": 0.26,
            "max_line_length": 722.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 236.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.26,
            "line_length_stddev": 299.5,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            168,
            "M17,1.01L7,1c-1.1,0 -2,0.9 -2,2v18c0,1.1 0.9,2 2,2h10c1.1,0 2,-0.9 2,-2L19,3c0,-1.1 -0.9,-1.99 -2,-1.99zM17,19L7,19L7,5h10v14zM1"
          ],
          [
            331,
            "android"
          ],
          [
            339,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            386,
            "path"
          ],
          [
            393,
            "vector"
          ]
        ],
        "sz": 744,
        "sha": "ff1457f16d648440bbde6965b608eff55adaea8a22de783297bfa7406ecec421",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YL.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 434,
        "ms": {
          "file": {
            "size": 452.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 4.08,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "avg_line_length": 275.5,
            "high_byte_ratio": 0.27,
            "max_line_length": 370.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 181.0,
            "last_line_length": 181.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 94.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "interpolator"
          ],
          [
            89,
            "duration"
          ],
          [
            98,
            "valueFrom"
          ],
          [
            112,
            "valueTo"
          ],
          [
            120,
            "propertyName"
          ],
          [
            137,
            "alpha"
          ],
          [
            145,
            "android"
          ],
          [
            153,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            200,
            "objectAnimator"
          ]
        ],
        "sz": 452,
        "sha": "0b51013fc0f5e916a727b75512c1ee9206178bd134509b7b4be6a397fa4d9a6b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YQ.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 435,
        "ms": {
          "png": {
            "bit_depth": 4.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 275.0
          },
          "image": {
            "width": 128.0,
            "height": 128.0,
            "channels": 1.0,
            "r_entropy": 0.74,
            "edge_density": 0.04,
            "pixel_entropy": 0.74,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 5.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            267,
            "IEND"
          ]
        ],
        "sz": 275,
        "sha": "b0aa010e7a885e4b7a669c16c7ba10fcd862a12dff3f142c7354778442a63fde",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/YW.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 436,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 281.0
          },
          "image": {
            "width": 64.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 0.89,
            "pixel_entropy": 0.89,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 6.99
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            273,
            "IEND"
          ]
        ],
        "sz": 281,
        "sha": "43ccf1f0a5e9e9ed9a6df33e1b3d378d49dbc8dc60d83b1cdb985e5e48f52497",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Yh.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 437,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.57,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 825.0
          },
          "image": {
            "width": 27.0,
            "height": 27.0,
            "channels": 2.0,
            "r_entropy": 3.61,
            "edge_density": 0.21,
            "pixel_entropy": 3.61,
            "histogram_flatness": 0.45
          },
          "binary": {
            "overall_entropy": 7.04
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            212,
            "PIDAT8"
          ],
          [
            817,
            "IEND"
          ]
        ],
        "sz": 825,
        "sha": "b52228a35520e2d786e962e85013fe7f7c97ffb42677f3bdabc032fbb709952a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Yt.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 438,
        "ms": {
          "file": {
            "size": 956.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 3.86,
            "unique_chars": 68.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 252.8,
            "high_byte_ratio": 0.37,
            "max_line_length": 524.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 392.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 275.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 172.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            106,
            "height"
          ],
          [
            115,
            "shape"
          ],
          [
            123,
            "color"
          ],
          [
            129,
            "topLeftRadius"
          ],
          [
            147,
            "topRightRadius"
          ],
          [
            164,
            "bottomLeftRadius"
          ],
          [
            183,
            "bottomRightRadius"
          ],
          [
            218,
            "android"
          ],
          [
            228,
            "corners"
          ],
          [
            236,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            283,
            "item"
          ],
          [
            288,
            "layer-list"
          ],
          [
            311,
            "size"
          ],
          [
            318,
            "solid"
          ]
        ],
        "sz": 956,
        "sha": "940d4493fd89b41a636e6445973d7f9b04dbb8a2e040dfaff378176fc29a4532",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Yw.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 439,
        "ms": {
          "file": {
            "size": 424.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 3.0,
            "char_entropy": 3.67,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "avg_line_length": 186.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 425.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 188.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 425.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 177.51,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "drawable"
          ],
          [
            69,
            "android"
          ],
          [
            77,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            124,
            "item"
          ],
          [
            129,
            "transition"
          ]
        ],
        "sz": 424,
        "sha": "ef1b11940d0cdba0acbdab5fd505e2d3dc3376d82ac3611c86a7dcd34efac219",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Z4.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 440,
        "ms": {
          "file": {
            "size": 2720.0
          },
          "text": {
            "tab_count": 25.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 19.0,
            "char_entropy": 3.74,
            "unique_chars": 95.0,
            "lines_over_200": 10.0,
            "lines_over_500": 1.0,
            "avg_line_length": 203.79,
            "high_byte_ratio": 0.45,
            "max_line_length": 734.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 1078.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 211.0,
            "long_token_count": 14.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 163.65,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            150,
            "gravity"
          ],
          [
            160,
            "layout_gravity"
          ],
          [
            177,
            "orientation"
          ],
          [
            194,
            "background"
          ],
          [
            209,
            "paddingLeft"
          ],
          [
            221,
            "paddingRight"
          ],
          [
            236,
            "visibility"
          ],
          [
            249,
            "clipToPadding"
          ],
          [
            265,
            "layout_width"
          ],
          [
            280,
            "layout_height"
          ],
          [
            296,
            "minHeight"
          ],
          [
            310,
            "contentDescription"
          ],
          [
            331,
            "backgroundTint"
          ],
          [
            348,
            "FrameLayout"
          ],
          [
            360,
            "ImageView"
          ],
          [
            372,
            "LinearLayout"
          ],
          [
            389,
            "TextView"
          ],
          [
            400,
            "android"
          ],
          [
            410,
            "android.widget.Space"
          ],
          [
            431,
            "++androidx.appcompat.widget.AlertDialogLayout"
          ],
          [
            477,
            "%%androidx.core.widget.NestedScrollView"
          ],
          [
            523,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            565,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            612,
            "include"
          ],
          [
            622,
            "layout"
          ]
        ],
        "sz": 2720,
        "sha": "6f7caecb1578241cb8d107559a3279bdc83cba097a46de7ec96edfed0dbca173",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ZD.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 441,
        "ms": {
          "file": {
            "size": 528.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 4.27,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 332.5,
            "high_byte_ratio": 0.31,
            "max_line_length": 649.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 184.0,
            "last_line_length": 649.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.28,
            "line_length_stddev": 316.5,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "theme"
          ],
          [
            86,
            "layout_gravity"
          ],
          [
            101,
            "layout_width"
          ],
          [
            116,
            "layout_height"
          ],
          [
            134,
            "android"
          ],
          [
            150,
            "\u003c\u003ccom.google.android.material.snackbar.Snackbar$SnackbarLayout"
          ],
          [
            213,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            268,
            "view"
          ]
        ],
        "sz": 528,
        "sha": "17f2a37c22cdbe7c3579c5aaf292541f6deee0b4f20cd6437c8a8f6b0f7b754d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ZF.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 442,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 4.41,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "avg_line_length": 182.8,
            "high_byte_ratio": 0.28,
            "max_line_length": 445.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 240.0,
            "last_line_length": 7.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.26,
            "line_length_stddev": 184.53,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "gravity"
          ],
          [
            105,
            "addStatesFromChildren"
          ],
          [
            129,
            "descendantFocusability"
          ],
          [
            152,
            "layout_width"
          ],
          [
            167,
            "layout_height"
          ],
          [
            183,
            "listSelector"
          ],
          [
            200,
            "horizontalSpacing"
          ],
          [
            220,
            "verticalSpacing"
          ],
          [
            238,
            "defaultFocusHighlightEnabled"
          ],
          [
            269,
            "android"
          ],
          [
            277,
            "??com.google.android.material.datepicker.MaterialCalendarGridView"
          ],
          [
            343,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 744,
        "sha": "f151053506ee1798adc1f1bb10a3779d466ce0e4d1e68cc6e4efae5d24b357fd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ZW.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 443,
        "ms": {
          "file": {
            "size": 1216.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.06,
            "total_lines": 5.0,
            "char_entropy": 3.52,
            "unique_chars": 64.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 339.2,
            "high_byte_ratio": 0.43,
            "max_line_length": 516.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 543.0,
            "last_line_length": 115.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 167.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            94,
            "state_selected"
          ],
          [
            111,
            "height"
          ],
          [
            128,
            "color"
          ],
          [
            136,
            "radius"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "corners"
          ],
          [
            163,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            210,
            "item"
          ],
          [
            217,
            "selector"
          ],
          [
            228,
            "shape"
          ],
          [
            236,
            "size"
          ],
          [
            243,
            "solid"
          ],
          [
            251,
            "stroke"
          ]
        ],
        "sz": 1216,
        "sha": "a8b193327e736799bdab2957d047d9799c7369f8384263d1a256f8166244b366",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ZY.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 444,
        "ms": {
          "file": {
            "size": 320.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 4.0,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "avg_line_length": 408.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 408.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 126.0,
            "last_line_length": 408.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            56,
            "layout_width"
          ],
          [
            71,
            "layout_height"
          ],
          [
            89,
            "FrameLayout"
          ],
          [
            103,
            "android"
          ],
          [
            111,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 320,
        "sha": "6347517f1ba86fdad1953da675eaebfabcd014d0d87fbb839e32a5ec2b9f2a85",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Za.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 445,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.18
          },
          "file": {
            "size": 472.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 1.04,
            "pixel_entropy": 1.04,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 7.44
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATH"
          ],
          [
            464,
            "IEND"
          ]
        ],
        "sz": 472,
        "sha": "5c80d88a7b82ef5833255bf70ff1c26c3efb2a92ae90cac222f3200f59e0b1ea",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/Zk.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 446,
        "ms": {
          "png": {
            "a_entropy": 0.61,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.75,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 244.0
          },
          "image": {
            "width": 9.0,
            "height": 9.0,
            "channels": 4.0,
            "pixel_entropy": 2.15,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 4.66
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            168,
            "7IDAT"
          ],
          [
            236,
            "IEND"
          ]
        ],
        "sz": 244,
        "sha": "a2f1a37af8e699320a2fadbe54eeaa6112d5a3522d57d682edf04fe97be3b47e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_6.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 447,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.12
          },
          "file": {
            "size": 563.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 1.45,
            "pixel_entropy": 1.45,
            "histogram_flatness": 0.18
          },
          "binary": {
            "overall_entropy": 7.49
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            399,
            "HQ8I8"
          ],
          [
            555,
            "IEND"
          ]
        ],
        "sz": 563,
        "sha": "7442cda653acbacdf9aef256aa191e5ebb6071a1747312aec45e1db8252a3cfb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_7.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 448,
        "ms": {
          "file": {
            "size": 2688.0
          },
          "text": {
            "tab_count": 27.0,
            "digit_ratio": 0.02,
            "space_count": 5.0,
            "total_lines": 12.0,
            "char_entropy": 4.16,
            "unique_chars": 101.0,
            "lines_over_200": 6.0,
            "lines_over_500": 2.0,
            "avg_line_length": 300.58,
            "high_byte_ratio": 0.39,
            "lines_over_1000": 1.0,
            "max_line_length": 1208.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 939.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 255.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 381.46,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            182,
            "textSize"
          ],
          [
            191,
            "textColor"
          ],
          [
            208,
            "background"
          ],
          [
            221,
            "paddingBottom"
          ],
          [
            237,
            "layout_width"
          ],
          [
            252,
            "layout_height"
          ],
          [
            270,
            "layout_marginTop"
          ],
          [
            302,
            "text"
          ],
          [
            314,
            "inputType"
          ],
          [
            326,
            "imeOptions"
          ],
          [
            341,
            "textAllCaps"
          ],
          [
            353,
            "paddingStart"
          ],
          [
            368,
            "paddingEnd"
          ],
          [
            383,
            "layout_marginEnd"
          ],
          [
            402,
            "backgroundTint"
          ],
          [
            417,
            "drawableTint"
          ],
          [
            471,
            "layout_constraintEnd_toEndOf"
          ],
          [
            500,
            "layout_constraintStart_toStartOf"
          ],
          [
            537,
            "layout_constraintTop_toBottomOf"
          ],
          [
            571,
            "layout_constraintTop_toTopOf"
          ],
          [
            602,
            "Button"
          ],
          [
            611,
            "TextView"
          ],
          [
            622,
            "android"
          ],
          [
            630,
            ",,androidx.appcompat.widget.AppCompatImageView"
          ],
          [
            677,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            735,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            793,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            849,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            891,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2688,
        "sha": "9d50d62bfa9fb62d772db9d9b55c8479575f9bf5159d23111596f1d415805976",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_8.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 449,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 3.0,
            "chunks_total": 7.0,
            "compression_ratio": 0.26
          },
          "file": {
            "size": 23820.0
          },
          "image": {
            "width": 300.0,
            "height": 300.0,
            "channels": 1.0,
            "r_entropy": 7.57,
            "edge_density": 0.01,
            "pixel_entropy": 7.57,
            "histogram_flatness": 0.95
          },
          "binary": {
            "overall_entropy": 7.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            948,
            "~}|{zyxwvutsrqponmlkjihgfedcba`_^]\\[Z"
          ],
          [
            986,
            "YXWVUTSRQPONMLKJIHGFEDCBA@?\u003e=\u003c;:9876543210/.-,+*)('\u0026%$#\"!"
          ],
          [
            2251,
            "O5EP"
          ],
          [
            2442,
            "BPYL"
          ],
          [
            3145,
            "TNKX"
          ],
          [
            3694,
            "4AER"
          ],
          [
            4034,
            "Jeem"
          ],
          [
            4522,
            "SAJA"
          ],
          [
            4967,
            "iEYIXMD"
          ],
          [
            6451,
            "ZQQT"
          ],
          [
            8844,
            "U80P"
          ],
          [
            9288,
            "IDAT"
          ],
          [
            9324,
            "/wB1"
          ],
          [
            11151,
            "KZ8T"
          ],
          [
            16119,
            "aibio"
          ],
          [
            16277,
            "WRIU"
          ],
          [
            16380,
            "V_RV_"
          ],
          [
            17301,
            "S9U3"
          ],
          [
            17325,
            "N_TR"
          ],
          [
            19861,
            "NAK7E"
          ],
          [
            20774,
            ".Za5/gU"
          ],
          [
            21443,
            "DETRB"
          ],
          [
            22407,
            "HLE6"
          ],
          [
            22437,
            "LTQU"
          ],
          [
            23755,
            "z5 e"
          ],
          [
            23812,
            "IEND"
          ]
        ],
        "sz": 23820,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.01"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "a": "T1027.003",
            "c": 0.699999988079071,
            "d": "Image pixel entropy in steganographic range",
            "e": [
              "image.pixel_entropy = 7.57"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::high-pixel-entropy",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "a": "T1027.003",
            "c": 0.699999988079071,
            "d": "Image histogram near-uniform distribution",
            "e": [
              "image.histogram_flatness = 0.95"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::high-histogram-flatness",
            "l": 1,
            "m": "B0032.001"
          },
          {
            "a": "T1027.003",
            "c": 0.6000000238418579,
            "d": "Red channel entropy above normal",
            "e": [
              "image.r_entropy = 7.57"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::r-channel-high",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "cc15e06df3e672a7805e7023474bc2af61facb672d5456b1ac68b768e77115a8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_I.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 450,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 7.0,
            "char_entropy": 3.99,
            "unique_chars": 64.0,
            "lines_over_200": 2.0,
            "avg_line_length": 137.14,
            "high_byte_ratio": 0.34,
            "max_line_length": 498.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 293.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 160.56,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            134,
            "viewportWidth"
          ],
          [
            152,
            "viewportHeight"
          ],
          [
            167,
            "fillColor"
          ],
          [
            181,
            "pathData"
          ],
          [
            192,
            "android"
          ],
          [
            202,
            "group"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "path"
          ],
          [
            262,
            "vector"
          ]
        ],
        "sz": 744,
        "sha": "86caf22c2eaa83d593134143aafcbaaa40becb97467e8ec9e1937e7117e2fe60",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_R.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 451,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 1171.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.72,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.76
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            602,
            "fl71"
          ],
          [
            1163,
            "IEND"
          ]
        ],
        "sz": 1171,
        "sha": "ec698a3217bce74d8bc4a44bb008f2dbd3d1aebff1af1e9641805143dbf9fa87",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_W.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 452,
        "ms": {
          "png": {
            "bit_depth": 4.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.12
          },
          "file": {
            "size": 1185.0
          },
          "image": {
            "width": 212.0,
            "height": 45.0,
            "channels": 1.0,
            "r_entropy": 2.25,
            "edge_density": 0.19,
            "pixel_entropy": 2.25,
            "histogram_flatness": 0.28
          },
          "binary": {
            "overall_entropy": 7.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            124,
            "IDATX"
          ],
          [
            1177,
            "IEND"
          ]
        ],
        "sz": 1185,
        "sha": "b59d6a07d3a6a0e42b74b08e939dd843ccf671054fe708193c462b5b2a883f3b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_a.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 453,
        "ms": {
          "file": {
            "size": 428.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 4.17,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 538.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 538.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 154.0,
            "last_line_length": 538.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            69,
            "layout_width"
          ],
          [
            84,
            "layout_height"
          ],
          [
            100,
            "listSelector"
          ],
          [
            117,
            "android"
          ],
          [
            125,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            169,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 428,
        "sha": "940d9da7768b5d431424058fcaf03a303d1e1eb21058d946b065d176a1409f4e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_d.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 454,
        "ms": {
          "file": {
            "size": 1656.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.1,
            "total_lines": 7.0,
            "char_entropy": 3.43,
            "unique_chars": 74.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 322.86,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1045.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 799.0,
            "last_line_length": 1045.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 373.47,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "valueType"
          ],
          [
            148,
            "propertyName"
          ],
          [
            165,
            "ordering"
          ],
          [
            176,
            "android"
          ],
          [
            184,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            231,
            "objectAnimator"
          ]
        ],
        "sz": 1656,
        "sha": "93535bfe6190f38074bec6196b7134e71e0146fc1014467d2e0989c9fa74c67b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_l.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 455,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.27
          },
          "file": {
            "size": 1376.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 1.0,
            "r_entropy": 2.28,
            "edge_density": 0.04,
            "pixel_entropy": 2.28,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 7.34
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "APLTE"
          ],
          [
            438,
            "IDATX"
          ],
          [
            1368,
            "IEND"
          ]
        ],
        "sz": 1376,
        "sha": "2d8d17d10c91736da04f5ed805942cb74fac8fc368292cfc74433d20106d36f5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/_v.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 456,
        "ms": {
          "file": {
            "size": 952.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 3.99,
            "unique_chars": 77.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 324.75,
            "high_byte_ratio": 0.4,
            "max_line_length": 697.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 354.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 697.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 276.14,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            98,
            "layout_gravity"
          ],
          [
            118,
            "visibility"
          ],
          [
            131,
            "layout_width"
          ],
          [
            146,
            "layout_height"
          ],
          [
            164,
            "minWidth"
          ],
          [
            173,
            "layout_weight"
          ],
          [
            191,
            "Button"
          ],
          [
            200,
            "TextView"
          ],
          [
            211,
            "android"
          ],
          [
            227,
            "::com.google.android.material.snackbar.SnackbarContentLayout"
          ],
          [
            288,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            343,
            "view"
          ]
        ],
        "sz": 952,
        "sha": "6fa575036ebcc6550d18b20d58696731a464602e6e4ef9aede4888c158671236",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/a2.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 457,
        "ms": {
          "png": {
            "a_entropy": 1.54,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 753.0
          },
          "image": {
            "width": 60.0,
            "height": 72.0,
            "channels": 4.0,
            "b_entropy": 0.87,
            "g_entropy": 0.87,
            "r_entropy": 0.87,
            "edge_density": 0.03,
            "pixel_entropy": 2.46,
            "histogram_flatness": 0.31
          },
          "binary": {
            "overall_entropy": 7.61
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            745,
            "IEND"
          ]
        ],
        "sz": 753,
        "sha": "24f5db226f1cd56e5e775f82c37f65f3d1eec9091b26b74861629caf0019c3bd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/a6.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 458,
        "ms": {
          "file": {
            "size": 612.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 11.0,
            "char_entropy": 4.0,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "avg_line_length": 70.91,
            "high_byte_ratio": 0.34,
            "max_line_length": 326.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 244.0,
            "last_line_length": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 87.14,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            85,
            "layout_width"
          ],
          [
            100,
            "layout_height"
          ],
          [
            118,
            "layout_marginTop"
          ],
          [
            137,
            "layout_marginRight"
          ],
          [
            158,
            "text"
          ],
          [
            172,
            "Button"
          ],
          [
            181,
            "RelativeLayout"
          ],
          [
            198,
            "android"
          ],
          [
            206,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 612,
        "sha": "12e84b7b9b7e8019a8372a063511904f1cecb10acd9775d78e70e03692adc46d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/aA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 459,
        "ms": {
          "file": {
            "size": 716.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.03,
            "total_lines": 5.0,
            "char_entropy": 3.81,
            "unique_chars": 62.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 187.6,
            "high_byte_ratio": 0.36,
            "max_line_length": 523.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 296.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 188.17,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "shape"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "radius"
          ],
          [
            113,
            "insetLeft"
          ],
          [
            125,
            "insetRight"
          ],
          [
            140,
            "insetTop"
          ],
          [
            151,
            "insetBottom"
          ],
          [
            165,
            "android"
          ],
          [
            175,
            "corners"
          ],
          [
            183,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            230,
            "inset"
          ],
          [
            246,
            "solid"
          ]
        ],
        "sz": 716,
        "sha": "53046982701738b86eac4591556856fd56a2b6e64f7f35a9349108f5a0f5f304",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/aD.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 460,
        "ms": {
          "file": {
            "size": 372.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 4.27,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "avg_line_length": 460.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 460.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 128.0,
            "last_line_length": 460.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.28,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            56,
            "layout_width"
          ],
          [
            71,
            "layout_height"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "==com.google.android.material.timepicker.ChipTextInputComboView"
          ],
          [
            161,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 372,
        "sha": "604c67d9149b4c90ecac4f1f51421add0dd6f233621ea766d6018cc2e979febd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/aO.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 461,
        "ms": {
          "file": {
            "size": 984.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 7.0,
            "char_entropy": 4.16,
            "unique_chars": 75.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 184.57,
            "high_byte_ratio": 0.36,
            "max_line_length": 709.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 342.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 238.77,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            103,
            "paddingLeft"
          ],
          [
            115,
            "paddingTop"
          ],
          [
            128,
            "paddingRight"
          ],
          [
            143,
            "paddingBottom"
          ],
          [
            159,
            "layout_width"
          ],
          [
            174,
            "layout_height"
          ],
          [
            197,
            "inputType"
          ],
          [
            209,
            "imeOptions"
          ],
          [
            224,
            "FrameLayout"
          ],
          [
            238,
            "android"
          ],
          [
            246,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            304,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            360,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 984,
        "sha": "8f5f794fb5b4ca2d74474895d7d458ceb8a9d4fc5f86270ac590cdfab706f98b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/aR.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 462,
        "ms": {
          "file": {
            "size": 1116.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 3.74,
            "unique_chars": 70.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 291.6,
            "high_byte_ratio": 0.35,
            "max_line_length": 695.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 498.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 507.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 274.58,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "height"
          ],
          [
            162,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            207,
            "labelOpacity"
          ],
          [
            224,
            "objectAnimator"
          ],
          [
            239,
            "paddingEnd"
          ],
          [
            252,
            "paddingStart"
          ]
        ],
        "sz": 1116,
        "sha": "bd92a4b0bd7d12c2b5564c3d7813de38006bf11987604a9a7f34c6ef0c616254",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/aR1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 463,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.14
          },
          "file": {
            "size": 623.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.9,
            "pixel_entropy": 0.9,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 7.56
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "6IDATX"
          ],
          [
            230,
            "140.231.79.164:12550"
          ],
          [
            615,
            "IEND"
          ]
        ],
        "sz": 623,
        "sha": "e64c2e57627e24ec1ed37e67344c2bf31d1d6bdd2d8d715840c1edf0bd1425b6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/aW.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 464,
        "ms": {
          "file": {
            "size": 480.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 45.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 630.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 630.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 211.0,
            "last_line_length": 630.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            78,
            "shape"
          ],
          [
            86,
            "color"
          ],
          [
            94,
            "android"
          ],
          [
            102,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            157,
            "size"
          ],
          [
            164,
            "solid"
          ]
        ],
        "sz": 480,
        "sha": "2307daa94738a044ec13383af9a7355e2f7739fddb0b124c4829f28361f95d45",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ag.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 465,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c74dd8d138e9741b72ac037065fd7c9cea24c6e1354daa1d7c2d4210add40dc1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ag1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 466,
        "ms": {
          "file": {
            "size": 1116.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 3.63,
            "unique_chars": 67.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 293.2,
            "high_byte_ratio": 0.36,
            "max_line_length": 701.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 521.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 509.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 276.66,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "height"
          ],
          [
            162,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            207,
            "labelOpacity"
          ],
          [
            224,
            "objectAnimator"
          ],
          [
            239,
            "paddingEnd"
          ],
          [
            252,
            "paddingStart"
          ]
        ],
        "sz": 1116,
        "sha": "8d881dac8254100d59a47c41f027af87411c209c5e3573971db789f42d2c01cc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ai.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 467,
        "ms": {
          "file": {
            "size": 1016.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 4.0,
            "char_entropy": 4.35,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 317.25,
            "high_byte_ratio": 0.3,
            "max_line_length": 946.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 347.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 167.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 368.97,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            106,
            "textSize"
          ],
          [
            115,
            "textColor"
          ],
          [
            129,
            "gravity"
          ],
          [
            142,
            "background"
          ],
          [
            155,
            "layout_width"
          ],
          [
            170,
            "layout_height"
          ],
          [
            225,
            "layout_constraintEnd_toEndOf"
          ],
          [
            254,
            "layout_constraintStart_toStartOf"
          ],
          [
            291,
            "layout_constraintTop_toTopOf"
          ],
          [
            322,
            "TextView"
          ],
          [
            333,
            "android"
          ],
          [
            341,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            399,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            441,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1016,
        "sha": "dbd39eea6ceaad9c7d969d54e010d45a919941f125423af703161f7d6207bb96",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ao.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 468,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.05,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 229.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.25,
            "pixel_entropy": 0.25,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.77
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            221,
            "IEND"
          ]
        ],
        "sz": 229,
        "sha": "f65a87efa2f53d6fe2d848cfca1f6c90aea5e9fc67ff47f5949a6dd2a76ebe1b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/au.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 469,
        "ms": {
          "file": {
            "size": 448.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 45.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 588.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 588.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 193.0,
            "last_line_length": 588.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "radius"
          ],
          [
            83,
            "android"
          ],
          [
            93,
            "corners"
          ],
          [
            101,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            148,
            "shape"
          ],
          [
            156,
            "solid"
          ]
        ],
        "sz": 448,
        "sha": "5b96294fd1621f5f997351834a06732e35477175ac43bbec637c263d7b82ec0a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/b4.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 470,
        "ms": {
          "file": {
            "size": 492.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 4.26,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 622.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 622.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 171.0,
            "last_line_length": 622.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "layout_gravity"
          ],
          [
            89,
            "layout_width"
          ],
          [
            104,
            "layout_height"
          ],
          [
            122,
            "android"
          ],
          [
            138,
            "\u003c\u003ccom.google.android.material.snackbar.Snackbar$SnackbarLayout"
          ],
          [
            201,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            256,
            "view"
          ]
        ],
        "sz": 492,
        "sha": "ced48aeb0e981facffd07835470b84da5b53e80f9c6bccf43f445d8140f3ff06",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/b9.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 471,
        "ms": {
          "file": {
            "size": 1020.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 6.0,
            "char_entropy": 4.42,
            "unique_chars": 84.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 211.17,
            "high_byte_ratio": 0.3,
            "max_line_length": 853.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 341.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 247.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 301.53,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            122,
            "layout_gravity"
          ],
          [
            142,
            "scrollbars"
          ],
          [
            155,
            "fadingEdge"
          ],
          [
            168,
            "clipToPadding"
          ],
          [
            184,
            "layout_width"
          ],
          [
            199,
            "layout_height"
          ],
          [
            217,
            "cacheColorHint"
          ],
          [
            234,
            "divider"
          ],
          [
            244,
            "overScrollMode"
          ],
          [
            259,
            "textAlignment"
          ],
          [
            277,
            "paddingBottomNoButtons"
          ],
          [
            302,
            "paddingTopNoTitle"
          ],
          [
            322,
            "android"
          ],
          [
            330,
            "66androidx.appcompat.app.AlertController$RecycleListView"
          ],
          [
            401,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            443,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            498,
            "view"
          ]
        ],
        "sz": 1020,
        "sha": "ebc1592e0105d3e25248f7cd117ad826ede8bc957623c025c9706a5297d509c6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/b91.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 472,
        "ms": {
          "file": {
            "size": 132.0
          },
          "text": {
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.15,
            "unique_chars": 26.0,
            "avg_line_length": 168.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 168.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 71.0,
            "last_line_length": 168.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.42,
            "non_printable_ratio": 0.55,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            42,
            "linearInterpolator"
          ]
        ],
        "sz": 132,
        "sha": "b94a37a5c87f404d610098d2214b5c8f0e381a0842303e1c9dc34a08e34e28e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bC.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 473,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.19,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 776.0
          },
          "image": {
            "width": 64.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 3.01,
            "edge_density": 0.07,
            "pixel_entropy": 3.01,
            "histogram_flatness": 0.38
          },
          "binary": {
            "overall_entropy": 7.03
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            196,
            "/IDATX"
          ],
          [
            344,
            "DT6D"
          ],
          [
            768,
            "IEND"
          ]
        ],
        "sz": 776,
        "sha": "5c7c682ffb64f4b531de0f9549c0da11c337576e426618522bfd1d35a451a414",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bK.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 474,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c74dd8d138e9741b72ac037065fd7c9cea24c6e1354daa1d7c2d4210add40dc1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bP.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 475,
        "ms": {
          "file": {
            "size": 1888.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 23.0,
            "char_entropy": 3.58,
            "unique_chars": 82.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 108.09,
            "high_byte_ratio": 0.37,
            "max_line_length": 604.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 890.0,
            "last_line_length": 75.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 114.11,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            110,
            "duration"
          ],
          [
            121,
            "startOffset"
          ],
          [
            133,
            "propertyName"
          ],
          [
            150,
            "android"
          ],
          [
            160,
            "color"
          ],
          [
            168,
            "contentFade"
          ],
          [
            180,
            "elevation"
          ],
          [
            192,
            "expansion"
          ],
          [
            204,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            251,
            "iconFade"
          ],
          [
            262,
            "objectAnimator"
          ],
          [
            285,
            "translationXCurveDownwards"
          ],
          [
            314,
            "translationXCurveUpwards"
          ],
          [
            341,
            "translationXLinear"
          ],
          [
            362,
            "translationYCurveDownwards"
          ],
          [
            391,
            "translationYCurveUpwards"
          ],
          [
            418,
            "translationYLinear"
          ]
        ],
        "sz": 1888,
        "sha": "207d4ff2e3edc66f9091e779a3840ab75608771281f669879ccd42ce8ac933a9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bT.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 476,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 228.0
          },
          "image": {
            "width": 64.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 0.41,
            "edge_density": 0.02,
            "pixel_entropy": 0.41,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 6.33
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            220,
            "IEND"
          ]
        ],
        "sz": 228,
        "sha": "b84a277807f8f3bb5378e6353d99d1344aee10bd9a05f47c30afe3832d9ca7f0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bW.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 477,
        "ms": {
          "file": {
            "size": 744.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 7.0,
            "char_entropy": 3.99,
            "unique_chars": 64.0,
            "lines_over_200": 2.0,
            "avg_line_length": 137.14,
            "high_byte_ratio": 0.34,
            "max_line_length": 498.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 293.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 160.56,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            134,
            "viewportWidth"
          ],
          [
            152,
            "viewportHeight"
          ],
          [
            167,
            "fillColor"
          ],
          [
            181,
            "pathData"
          ],
          [
            192,
            "android"
          ],
          [
            202,
            "group"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "path"
          ],
          [
            262,
            "vector"
          ]
        ],
        "sz": 744,
        "sha": "cdd3b1f784c764b460638a289a8acbdea5271115bcd82c34a5ace3e0f6f5cc59",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bX.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 478,
        "ms": {
          "file": {
            "size": 1216.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.04,
            "total_lines": 5.0,
            "char_entropy": 3.52,
            "unique_chars": 63.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 339.2,
            "high_byte_ratio": 0.43,
            "max_line_length": 516.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 543.0,
            "last_line_length": 115.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 167.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            94,
            "state_selected"
          ],
          [
            111,
            "height"
          ],
          [
            128,
            "color"
          ],
          [
            136,
            "radius"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "corners"
          ],
          [
            163,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            210,
            "item"
          ],
          [
            217,
            "selector"
          ],
          [
            228,
            "shape"
          ],
          [
            236,
            "size"
          ],
          [
            243,
            "solid"
          ],
          [
            251,
            "stroke"
          ]
        ],
        "sz": 1216,
        "sha": "960ba0247392733731a02e92516aa4b11120ae67201d315436546bf15d1c9455",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ba.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 479,
        "ms": {
          "file": {
            "size": 1172.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.04,
            "space_count": 3.0,
            "total_lines": 7.0,
            "char_entropy": 3.76,
            "unique_chars": 78.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 226.29,
            "high_byte_ratio": 0.39,
            "lines_over_1000": 1.0,
            "max_line_length": 1165.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 497.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 7.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 388.92,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            100,
            "state_focused"
          ],
          [
            116,
            "state_enabled"
          ],
          [
            132,
            "state_pressed"
          ],
          [
            161,
            "insetLeft"
          ],
          [
            173,
            "insetRight"
          ],
          [
            188,
            "insetTop"
          ],
          [
            199,
            "insetBottom"
          ],
          [
            213,
            "alpha"
          ],
          [
            221,
            "android"
          ],
          [
            229,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            276,
            "inset"
          ],
          [
            284,
            "item"
          ],
          [
            289,
            "nine-patch"
          ],
          [
            304,
            "selector"
          ]
        ],
        "sz": 1172,
        "sha": "8fa71f86c1cfe1a71386f855c244de5b97b4e0b66dab57b7c569ab1e632e155d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bb.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 480,
        "ms": {
          "file": {
            "size": 740.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 6.0,
            "char_entropy": 3.8,
            "unique_chars": 65.0,
            "lines_over_200": 2.0,
            "avg_line_length": 168.5,
            "high_byte_ratio": 0.41,
            "max_line_length": 454.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 300.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 135.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 161.83,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "gravity"
          ],
          [
            92,
            "orientation"
          ],
          [
            104,
            "background"
          ],
          [
            117,
            "layout_width"
          ],
          [
            132,
            "layout_height"
          ],
          [
            148,
            "LinearLayout"
          ],
          [
            165,
            "View"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "include"
          ],
          [
            237,
            "layout"
          ]
        ],
        "sz": 740,
        "sha": "6bb90c54e4ed8ed4918bf6c4343e1a93ad6f6bb2b06dbb4eb5ad23e6ae99e213",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bl.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 481,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 3.99,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 506.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 506.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 156.0,
            "last_line_length": 506.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "eaf226a569519284df5c4027699f82906ca6f6136a2e12b3d845a708855991dc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bn.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 482,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.26,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 186.0
          },
          "image": {
            "width": 36.0,
            "height": 10.0,
            "channels": 2.0,
            "r_entropy": 0.88,
            "edge_density": 0.11,
            "pixel_entropy": 0.88,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 3.86
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            178,
            "IEND"
          ]
        ],
        "sz": 186,
        "sha": "f232714ccbecca97adc63b0811d62629057c77dcbd0b062c82e26754cb744831",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bu.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 483,
        "ms": {
          "file": {
            "size": 1072.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.65,
            "unique_chars": 69.0,
            "lines_over_200": 4.0,
            "avg_line_length": 290.4,
            "high_byte_ratio": 0.4,
            "max_line_length": 483.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 478.0,
            "last_line_length": 35.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 154.42,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "state_enabled"
          ],
          [
            102,
            "duration"
          ],
          [
            113,
            "valueTo"
          ],
          [
            121,
            "valueType"
          ],
          [
            133,
            "propertyName"
          ],
          [
            148,
            "state_hovered"
          ],
          [
            166,
            "android"
          ],
          [
            174,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "item"
          ],
          [
            228,
            "objectAnimator"
          ],
          [
            245,
            "selector"
          ],
          [
            254,
            "translationZ"
          ]
        ],
        "sz": 1072,
        "sha": "54d73659c2b28fe76f7a2b1f58546f053aeadc2e57c346755303da61c7bbf190",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bu.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 484,
        "ms": {
          "file": {
            "size": 1616.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 5.0,
            "char_entropy": 3.81,
            "unique_chars": 82.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 457.6,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1811.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 612.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 7.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 687.32,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "layout_gravity"
          ],
          [
            115,
            "orientation"
          ],
          [
            132,
            "background"
          ],
          [
            145,
            "layout_width"
          ],
          [
            160,
            "layout_height"
          ],
          [
            184,
            "text"
          ],
          [
            189,
            "ImageView"
          ],
          [
            201,
            "LinearLayout"
          ],
          [
            218,
            "android"
          ],
          [
            226,
            "11com.google.android.material.button.MaterialButton"
          ],
          [
            278,
            "55com.google.android.material.textview.MaterialTextView"
          ],
          [
            334,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1616,
        "sha": "3e26dce37a51ae9971d38ce68d47badef911598306cbaa246964007d8024fde4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/bz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 485,
        "ms": {
          "file": {
            "size": 264.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.87,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 324.0,
            "high_byte_ratio": 0.28,
            "max_line_length": 324.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 112.0,
            "last_line_length": 324.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.35,
            "non_printable_ratio": 0.52,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            54,
            "color"
          ],
          [
            62,
            "android"
          ],
          [
            70,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            117,
            "ripple"
          ]
        ],
        "sz": 264,
        "sha": "717f9ea2f37f4ec18d586b58a8996a19b52237c4219860e790f294428dc90bc6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/c1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 486,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.87,
            "unique_chars": 61.0,
            "lines_over_200": 2.0,
            "avg_line_length": 159.6,
            "high_byte_ratio": 0.35,
            "max_line_length": 350.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 255.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 118.85,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromYDelta"
          ],
          [
            121,
            "toYDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "a155403d68ca77c34b2fb6bba196827e7295f3a157b07268911f296aede784be",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/c4.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 487,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.12,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 417.0
          },
          "image": {
            "width": 36.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.8,
            "edge_density": 0.06,
            "pixel_entropy": 0.8,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 6.03
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            165,
            "IDATH"
          ],
          [
            409,
            "IEND"
          ]
        ],
        "sz": 417,
        "sha": "77f0ebab2416404eb1d562342e431541d885686dd1e49d6dc93be1a86c2273c4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cM.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 488,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 823.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.57,
            "pixel_entropy": 0.57,
            "histogram_flatness": 0.07
          },
          "binary": {
            "overall_entropy": 7.65
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            45,
            "KHTQ"
          ],
          [
            815,
            "IEND"
          ]
        ],
        "sz": 823,
        "sha": "ab73b729bb95878120a3bdc8dc915f3aaa1d7070fc644a0de64d40941ad507ed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cR.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 489,
        "ms": {
          "file": {
            "size": 2052.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 12.0,
            "char_entropy": 3.96,
            "unique_chars": 93.0,
            "lines_over_200": 5.0,
            "lines_over_500": 1.0,
            "avg_line_length": 232.58,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1097.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 758.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 263.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 307.66,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            174,
            "textAppearance"
          ],
          [
            189,
            "textColor"
          ],
          [
            201,
            "ellipsize"
          ],
          [
            215,
            "gravity"
          ],
          [
            225,
            "layout_gravity"
          ],
          [
            242,
            "orientation"
          ],
          [
            259,
            "background"
          ],
          [
            274,
            "paddingLeft"
          ],
          [
            286,
            "paddingTop"
          ],
          [
            299,
            "paddingRight"
          ],
          [
            314,
            "paddingBottom"
          ],
          [
            330,
            "clipToPadding"
          ],
          [
            346,
            "layout_width"
          ],
          [
            361,
            "layout_height"
          ],
          [
            379,
            "baselineAligned"
          ],
          [
            395,
            "minHeight"
          ],
          [
            409,
            "maxLines"
          ],
          [
            418,
            "singleLine"
          ],
          [
            431,
            "layout_weight"
          ],
          [
            447,
            "layout_below"
          ],
          [
            464,
            "layout_alignLeft"
          ],
          [
            481,
            "textAlignment"
          ],
          [
            497,
            "paddingStart"
          ],
          [
            512,
            "paddingEnd"
          ],
          [
            527,
            "layout_alignStart"
          ],
          [
            545,
            "LinearLayout"
          ],
          [
            562,
            "RelativeLayout"
          ],
          [
            579,
            "TextView"
          ],
          [
            590,
            "android"
          ],
          [
            598,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            645,
            "include"
          ],
          [
            655,
            "layout"
          ]
        ],
        "sz": 2052,
        "sha": "468ae9890fea1d7bd8ce7640641a9d2e9d91da9f69f47119b052657dd14f9c06",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cR.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 490,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 954.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 954.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 307.0,
            "last_line_length": 954.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 724,
        "sha": "bd988df7957295dbc382b9810439a629b50ffcb574ef9f296a7562e9ee6f82a7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cR1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 491,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.06,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 286.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.27,
            "pixel_entropy": 0.27,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.92
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            200,
            "AIDATX"
          ],
          [
            278,
            "IEND"
          ]
        ],
        "sz": 286,
        "sha": "f81412c5131046a83f5d9de1d10e2b4b31f6e2657c4c08743825cd40f605fdd3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ca.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 492,
        "ms": {
          "file": {
            "size": 872.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "total_lines": 7.0,
            "char_entropy": 3.81,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 172.0,
            "high_byte_ratio": 0.42,
            "max_line_length": 831.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 342.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 7.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.28,
            "line_length_stddev": 276.53,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "ellipsize"
          ],
          [
            102,
            "orientation"
          ],
          [
            119,
            "visibility"
          ],
          [
            132,
            "layout_width"
          ],
          [
            147,
            "layout_height"
          ],
          [
            165,
            "layout_marginTop"
          ],
          [
            182,
            "singleLine"
          ],
          [
            195,
            "LinearLayout"
          ],
          [
            212,
            "TextView"
          ],
          [
            223,
            "android"
          ],
          [
            231,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 872,
        "sha": "c77af22fd1631e84d0df3cc195bf019883318228a044936331087c72d38bdb66",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cf.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 493,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.0,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 496.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 496.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 160.0,
            "last_line_length": 496.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "ff41124d7e373921122c8081c2a2c93596299df8b91eef2d6040af1a50f34907",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ch.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 494,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.23
          },
          "file": {
            "size": 264.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 0.94,
            "pixel_entropy": 0.94,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 6.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDAT8"
          ],
          [
            256,
            "IEND"
          ]
        ],
        "sz": 264,
        "sha": "7e87b3e0229126dc3c2bdaddcd8f330f3bb5f7613a05024c3cd6445dd161f788",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cm.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 495,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 482.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 482.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 482.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "bb7ee8bfb2dc9f49c5040a6de077449e24db910ebef6dd227e65ac004c399254",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-night-v8/material_timepicker_button_stroke.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 496,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "68945209060a390b03f08ff36d8303de8dd839b2533b1d0cb43a52308268dfcb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-night-v8/material_timepicker_clockface.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 497,
        "ms": {
          "file": {
            "size": 340.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 45.0,
            "lines_over_200": 1.0,
            "avg_line_length": 434.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 149.0,
            "last_line_length": 434.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "android"
          ],
          [
            74,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            121,
            "item"
          ],
          [
            128,
            "selector"
          ]
        ],
        "sz": 340,
        "sha": "656d40243ea322cfa440688ffb59db49427250e7fa2dbe35a517787280610e84",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-night-v8/material_timepicker_modebutton_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 498,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 656.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 656.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 218.0,
            "last_line_length": 656.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "5a7f462ab9c1318cf4b465b296864554657eb89b2046e61d476f76dfb0a987fe",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_btn_colored_borderless_text_material.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 499,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.06,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 218.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "35f8dd73e67887c32be74aae11f9a67d779b33f72ea61312d4c439b8f73d5ca3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_btn_colored_text_material.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 500,
        "ms": {
          "file": {
            "size": 544.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 724.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 724.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 225.0,
            "last_line_length": 724.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 544,
        "sha": "8c90ac9c080a33e17e991e36d6ceda45b30c253e8b2b9613ee104d4a6fab4a8d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_color_highlight_material.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 501,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 840.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 840.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 269.0,
            "last_line_length": 840.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "8b99667ba1fc6c156b2896c92425d17bec6ec581c8ffe417cf363088e651b4db",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_tint_btn_checkable.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 502,
        "ms": {
          "file": {
            "size": 1120.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 15.0,
            "char_entropy": 3.64,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 104.27,
            "high_byte_ratio": 0.44,
            "max_line_length": 452.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 468.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 99.92,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            84,
            "state_focused"
          ],
          [
            100,
            "state_enabled"
          ],
          [
            116,
            "state_checked"
          ],
          [
            134,
            "state_selected"
          ],
          [
            149,
            "state_pressed"
          ],
          [
            167,
            "color"
          ],
          [
            175,
            "state_activated"
          ],
          [
            193,
            "alpha"
          ],
          [
            201,
            "android"
          ],
          [
            209,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            256,
            "item"
          ],
          [
            263,
            "selector"
          ]
        ],
        "sz": 1120,
        "sha": "cd2f3a2c12e744e743a2a8d7bf62eab3a4bba57863645bec03d842590cd87e19",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_tint_default.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 503,
        "ms": {
          "file": {
            "size": 668.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 888.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 888.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 290.0,
            "last_line_length": 888.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            104,
            "state_pressed"
          ],
          [
            122,
            "color"
          ],
          [
            130,
            "alpha"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 668,
        "sha": "304904749e25e6e26f36123b47c7ae38a31f2a0ed8a439c9e061cd8af11388f3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_tint_edittext.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 504,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 218.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "9e4f73fcd1d1907fb9b6a6a36e182e7bc443598ca94331e14ee3f86d5763ed44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_tint_seek_thumb.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 505,
        "ms": {
          "file": {
            "size": 668.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 888.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 888.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 290.0,
            "last_line_length": 888.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            104,
            "state_pressed"
          ],
          [
            122,
            "color"
          ],
          [
            130,
            "alpha"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 668,
        "sha": "304904749e25e6e26f36123b47c7ae38a31f2a0ed8a439c9e061cd8af11388f3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_tint_spinner.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 506,
        "ms": {
          "file": {
            "size": 664.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 912.0,
            "high_byte_ratio": 0.41,
            "max_line_length": 912.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 284.0,
            "last_line_length": 912.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 664,
        "sha": "ef777139f9ff90f7b221c31acd3f80cc6f9e62eb906e19400ceb930b4ec05215",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v23/abc_tint_switch_track.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 507,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "0ae949de41a6d109728ba2a87566eee6cdd8ff01376e56659623a0cfc0c116fc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_dark_default_color_primary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 508,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "13558d975904ace1b4db6f11379dc8e26cb946614209ee31c43aba112290b12d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_dark_default_color_secondary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 509,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "0b54edd049e76c1f1442f3d00abf813a7c1510eca0fbb3a0edb54e4aa58dd83b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_dark_highlighted_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 510,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.77,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 754.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 232.0,
            "last_line_length": 754.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "f5005dd3b61e438efe4cce6047d9367eb4b047f833170a4c32732e8391357620",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_dark_hint_foreground.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 511,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "432158785b87e9f737ce423b09bbfde23ca54bfe7404156d564a21aa493783ac",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_dark_primary_text_disable_only.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 512,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "f5c3e4960f4ef3d14612a484d0c554433b0a6d83a13ee015efc024417617631f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_default_color_primary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 513,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "b43b95ea27b811edb9e68644ecdbde64b936ad66ce426f6d9bd75fd45549c624",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_default_color_secondary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 514,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "c269a1a9717fd262d41f35b6dda449a27479a6557b8506f4b2d1d6c376b95454",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_highlighted_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 515,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.77,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 754.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 232.0,
            "last_line_length": 754.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "8463241f2d9ad91cc559712c2c4c8b834d1f0c86ac96eb9a3a72acfbc055243c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_hint_foreground.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 516,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "6bafeee5d923f1d172ae4058135b443b505c51d3a6e481de4dc9ffe2919f6682",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_dynamic_primary_text_disable_only.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 517,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.77,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "3daf67d77100f5ddd7b175e6e05053edb05b8d6b9fc389ac7f63eee1f5111e01",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral12.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 518,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "a2215fbf0454f6dfa0994b7e1d0c324f9a48f43e846e588f955d464c372b66a3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral17.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 519,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "8f76c0102049f206f068eeb190293cfd753b5740d71c2721ff28eec671aef1b9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral22.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 520,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "2cac2bc205898868354a8cf2913fcb9dc36f5cda267e469791c1b3545736207e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral24.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 521,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "558c0630af3bd1b24775b40a4df0d86f00bfc6c59c0f537e96553f035d16d092",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral4.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 522,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "8e60a6dfba31f4d014571e811052ded51c420c90a65d7237461f83e1b1011745",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 523,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "a7865798773441c6f2974b556ed7886caffaf0bb811f49f15e5aa5833b2ff689",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral87.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 524,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "3857d017c69d0bc4ffe3f6fe24d11bcc5a1ab8add401f5482339831cea089d87",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral92.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 525,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "e9368f4cb432922254228906c532032b37800ac0f7bea29d33c10317c03c9607",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral94.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 526,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "00c7d4e96a9851d7f2946b24bea03897addf39427de6fd2cad94d5799084ba18",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral96.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 527,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 164.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "3ba4b52deb1887d1192556ac4f5c7492b3fa8c1ce998d69924364d9ee03c89a5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color-v31/m3_ref_palette_dynamic_neutral98.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 528,
        "ms": {
          "file": {
            "size": 468.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 612.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 612.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 205.0,
            "last_line_length": 612.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "state_accelerated"
          ],
          [
            90,
            "android"
          ],
          [
            98,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            145,
            "item"
          ],
          [
            152,
            "selector"
          ]
        ],
        "sz": 468,
        "sha": "c70dc819c31ce5224e34e185442a7393444474f3220b458ace3a612fdd1ba6e2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_background_cache_hint_selector_material_dark.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 529,
        "ms": {
          "file": {
            "size": 468.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 612.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 612.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 205.0,
            "last_line_length": 612.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "state_accelerated"
          ],
          [
            90,
            "android"
          ],
          [
            98,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            145,
            "item"
          ],
          [
            152,
            "selector"
          ]
        ],
        "sz": 468,
        "sha": "b0dc1cea0d01a6e92276b6fa597c38663020ad2a24255c5e68194ccb095b0577",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_background_cache_hint_selector_material_light.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 530,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 754.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 236.0,
            "last_line_length": 754.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "8c98a3306b56b7054bfc1b691a3dc5d90232202c43cf26cc5bea76a8d709e0e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_hint_foreground_material_dark.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 531,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 754.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 236.0,
            "last_line_length": 754.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "52418205582dbcf51b18752cf1b6eefa4cf553403a49b109eb34779551334304",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_hint_foreground_material_light.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 532,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 610.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 610.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 205.0,
            "last_line_length": 610.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "184534988afc6d83ff2f171e4924daefd62d55cd82910038216e12cf0d3f0af5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_primary_text_disable_only_material_dark.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 533,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 610.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 610.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 205.0,
            "last_line_length": 610.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "857189186848030de218eb9fe55c9ba37cadf054becb20d9daa957c84bbe4505",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_primary_text_disable_only_material_light.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 534,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 614.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 203.0,
            "last_line_length": 614.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "d9f652badd691710a96148bdec643b222b1ce94b4c44ac95131749eee9cf8769",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_primary_text_material_dark.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 535,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 614.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 203.0,
            "last_line_length": 614.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "06bc1fa7d8ec868af3ba9b1eb75e7da4e7642dd1b77b83c6414053f07128397b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_primary_text_material_light.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 536,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.67,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 798.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 798.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 251.0,
            "last_line_length": 798.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "state_selected"
          ],
          [
            81,
            "state_pressed"
          ],
          [
            99,
            "color"
          ],
          [
            107,
            "android"
          ],
          [
            115,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            162,
            "item"
          ],
          [
            169,
            "selector"
          ]
        ],
        "sz": 588,
        "sha": "180aebed8823b2594d22b10149a1412a64e5059c355668ff47febbcecc8a4405",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_search_url_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 537,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 614.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 203.0,
            "last_line_length": 614.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "515ae6011814c121848b48a442b8150e870cad5fac8c0dbc479d5bc85f5129ad",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_secondary_text_material_dark.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 538,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 614.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 203.0,
            "last_line_length": 614.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "bfc0b1970a563400bf78ab38c6485024eb93a9f45e1a2e56af49015414023261",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/abc_secondary_text_material_light.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 539,
        "ms": {
          "file": {
            "size": 712.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 980.0,
            "high_byte_ratio": 0.41,
            "max_line_length": 980.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 302.0,
            "last_line_length": 980.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_focused"
          ],
          [
            84,
            "state_enabled"
          ],
          [
            102,
            "color"
          ],
          [
            108,
            "state_hovered"
          ],
          [
            126,
            "android"
          ],
          [
            134,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            181,
            "item"
          ],
          [
            188,
            "selector"
          ]
        ],
        "sz": 712,
        "sha": "af582b98478977823b44bc9257de980e0634a0a1fd4ed13baff6a1e1d8326472",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/design_box_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 540,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.67,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 612.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 612.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 204.0,
            "last_line_length": 612.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "8b4a4cc654369ea32ac531e7bd8b9625cec7fc8af94bade573f0b06ecfbaa521",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/design_error.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 541,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 2.0,
            "char_entropy": 3.82,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 238.5,
            "high_byte_ratio": 0.32,
            "max_line_length": 364.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 162.0,
            "last_line_length": 113.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "line_length_stddev": 125.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "c0996c3ed11e7934d3df65df6881e0046f14c18861f92a9fcf61b3872db55543",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/design_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 542,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 3.81,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 239.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 364.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 115.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "line_length_stddev": 124.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "dccb8ee8b94bad9f5fd968692b8a7759309d54bf47b44ef632d083fe3d701caf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_appbar_overlay_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 543,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "dc1561d3e02ae894d63820e1c8391f84e6c14a60ccd121cab0f54fc9ed3e29b2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_assist_chip_icon_tint_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 544,
        "ms": {
          "file": {
            "size": 872.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 3.67,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 600.5,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1183.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 366.0,
            "last_line_length": 1183.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 582.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            92,
            "state_enabled"
          ],
          [
            108,
            "state_checked"
          ],
          [
            126,
            "state_selected"
          ],
          [
            143,
            "color"
          ],
          [
            151,
            "alpha"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 872,
        "sha": "21fe1c3cdd053fadaafec274e99d04d8d07fa4fa239bb0e1619300b2a01fa50e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_assist_chip_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 545,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 664.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 664.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 212.0,
            "last_line_length": 664.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "6a30e6809ae4d9d51cd9879f94f44cdc8046f245cade9c769d6e49ed98530c3f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_button_background_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 546,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 662.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 662.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 662.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "f006290b6fd07635b008eea18489f8e11991a372f221aa81af64733c15071d7d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_button_foreground_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 547,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 660.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 660.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 660.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "00d216ca7008bcbbba7579a1fb89bc1f3523635c6a128683a4da79251c703b30",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_button_outline_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 548,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1114.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1114.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1114.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "35d0f0b27d706175f8183f74764f4e1805a7ae2fb387ff3fb6113013bfc2813b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_button_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 549,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1114.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1114.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1114.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "2431cb3067bcd9b761f183753668083b624762fd8bfdd0575d5ec6a15586ab5a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_button_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 550,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 482.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 482.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 482.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "accfcc3b3807b05eff1cf1367dc53df76b3e373fa4a745c5f1b83200a8d211a7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_calendar_item_disabled_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 551,
        "ms": {
          "file": {
            "size": 712.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.67,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 980.0,
            "high_byte_ratio": 0.41,
            "max_line_length": 980.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 298.0,
            "last_line_length": 980.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_focused"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            109,
            "state_hovered"
          ],
          [
            127,
            "android"
          ],
          [
            135,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            182,
            "item"
          ],
          [
            189,
            "selector"
          ]
        ],
        "sz": 712,
        "sha": "9deee2077ed349b7eb9e095e331675b8850ecf1fc6b96126e81241283207342f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_calendar_item_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 552,
        "ms": {
          "file": {
            "size": 768.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.85,
            "unique_chars": 64.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 254.75,
            "high_byte_ratio": 0.37,
            "max_line_length": 521.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 318.0,
            "last_line_length": 331.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 189.69,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            94,
            "color"
          ],
          [
            102,
            "alpha"
          ],
          [
            108,
            "state_dragged"
          ],
          [
            126,
            "android"
          ],
          [
            140,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            182,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            229,
            "item"
          ],
          [
            236,
            "selector"
          ]
        ],
        "sz": 768,
        "sha": "29b7d6248b0bfe79ee740317c5f670f74c9880afdbb4f9d91dadd9e534e77e9a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_card_foreground_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 553,
        "ms": {
          "file": {
            "size": 1556.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.03,
            "total_lines": 3.0,
            "char_entropy": 3.49,
            "unique_chars": 65.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 751.33,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1845.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 652.0,
            "last_line_length": 35.0,
            "long_token_count": 10.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 785.63,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            98,
            "state_checkable"
          ],
          [
            114,
            "state_checked"
          ],
          [
            130,
            "state_pressed"
          ],
          [
            148,
            "color"
          ],
          [
            156,
            "alpha"
          ],
          [
            162,
            "state_hovered"
          ],
          [
            180,
            "android"
          ],
          [
            188,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            235,
            "item"
          ],
          [
            242,
            "selector"
          ]
        ],
        "sz": 1556,
        "sha": "45145f2570c9a4b831a7d04dd4ce3e77f6350ce2016bfd447e7cd2c94ff1bd94",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_card_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 554,
        "ms": {
          "file": {
            "size": 1224.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 4.0,
            "char_entropy": 3.8,
            "unique_chars": 73.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 420.75,
            "high_byte_ratio": 0.41,
            "max_line_length": 935.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 497.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 331.28,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            92,
            "state_focused"
          ],
          [
            108,
            "state_enabled"
          ],
          [
            124,
            "state_checked"
          ],
          [
            140,
            "state_pressed"
          ],
          [
            158,
            "color"
          ],
          [
            166,
            "alpha"
          ],
          [
            172,
            "state_hovered"
          ],
          [
            188,
            "state_dragged"
          ],
          [
            206,
            "android"
          ],
          [
            220,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            262,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            309,
            "item"
          ],
          [
            316,
            "selector"
          ]
        ],
        "sz": 1224,
        "sha": "691942488078c1cd3ee5c7b944c0e7fba15f55a1448cbdf30643f1f3a294a320",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_card_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 555,
        "ms": {
          "file": {
            "size": 964.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 3.77,
            "unique_chars": 58.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 435.33,
            "high_byte_ratio": 0.39,
            "max_line_length": 815.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 397.0,
            "last_line_length": 67.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 305.47,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_enabled"
          ],
          [
            96,
            "state_checked"
          ],
          [
            114,
            "color"
          ],
          [
            122,
            "state_error"
          ],
          [
            136,
            "state_indeterminate"
          ],
          [
            158,
            "android"
          ],
          [
            172,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            214,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            261,
            "item"
          ],
          [
            268,
            "selector"
          ]
        ],
        "sz": 964,
        "sha": "0f2ce4abe1098c46356b5840c3f13b5a27b6e85d77f604dd4509c9c87f53a445",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_checkbox_button_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 556,
        "ms": {
          "file": {
            "size": 1000.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 11.0,
            "char_entropy": 3.81,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "avg_line_length": 122.18,
            "high_byte_ratio": 0.39,
            "max_line_length": 492.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 410.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 122.55,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            84,
            "state_enabled"
          ],
          [
            100,
            "state_checked"
          ],
          [
            118,
            "color"
          ],
          [
            126,
            "alpha"
          ],
          [
            134,
            "state_error"
          ],
          [
            148,
            "state_indeterminate"
          ],
          [
            170,
            "android"
          ],
          [
            184,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            226,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            273,
            "item"
          ],
          [
            280,
            "selector"
          ]
        ],
        "sz": 1000,
        "sha": "e7a42a21c0fc5cccf2ba5bdc796a5c525863961e7ae3b3e5aea4d6e1eaaaa85d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_checkbox_button_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 557,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "6cbd872553ebcabacccffc5c026b0695c2dee3f768efa60d9cf3c9c95c83d945",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_chip_assist_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 558,
        "ms": {
          "file": {
            "size": 712.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 3.0,
            "total_lines": 1.0,
            "char_entropy": 3.65,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 974.0,
            "high_byte_ratio": 0.4,
            "max_line_length": 974.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 303.0,
            "last_line_length": 974.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "state_selected"
          ],
          [
            119,
            "color"
          ],
          [
            127,
            "android"
          ],
          [
            135,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            182,
            "item"
          ],
          [
            189,
            "selector"
          ]
        ],
        "sz": 712,
        "sha": "172050de291d97c887cfe6e895e7abec61fb632a2338284a0ac5236c4979502d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_chip_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 559,
        "ms": {
          "file": {
            "size": 1556.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.46,
            "unique_chars": 65.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 756.67,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1861.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 651.0,
            "last_line_length": 35.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 793.05,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            98,
            "state_checkable"
          ],
          [
            116,
            "state_selected"
          ],
          [
            131,
            "state_pressed"
          ],
          [
            149,
            "color"
          ],
          [
            157,
            "alpha"
          ],
          [
            163,
            "state_hovered"
          ],
          [
            181,
            "android"
          ],
          [
            189,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            236,
            "item"
          ],
          [
            243,
            "selector"
          ]
        ],
        "sz": 1556,
        "sha": "0fa855640a2322eba7e4d77e690384e5678d51882f52afe48aac02aa6c967bd3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_chip_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 560,
        "ms": {
          "file": {
            "size": 872.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 3.67,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 600.5,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1183.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 366.0,
            "last_line_length": 1183.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 582.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            92,
            "state_enabled"
          ],
          [
            108,
            "state_checked"
          ],
          [
            126,
            "state_selected"
          ],
          [
            143,
            "color"
          ],
          [
            151,
            "alpha"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 872,
        "sha": "70acf61d61b12a8f4ffa62644b08165b55477a2b7638ffadfbdad3f41bdbcab1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_chip_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 561,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 264.0,
            "last_line_length": 834.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            111,
            "alpha"
          ],
          [
            119,
            "android"
          ],
          [
            127,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            174,
            "item"
          ],
          [
            181,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "30e191d9aaf964c965764521e38cfdb420094e6d34167b0ee901325f04cd7650",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_chip_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 562,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "5cae7d250aee89abf655c9d12db024d989f33bac25221c4a80566eb09f5cbb31",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_dark_default_color_primary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 563,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "fcefaee08cfdc8a2e9a69c94f375958c07581d67bfd9cdbb4203c32cbf8e4cbc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_dark_default_color_secondary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 564,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "5c64810f411c97196097841e198a21855f55480602db385e7bbfce56d8b31442",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_dark_highlighted_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 565,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 750.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 750.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 232.0,
            "last_line_length": 750.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "5269c9480a7970730c7fb29fcf736ae2edd3354907b381a91f0612790a43b4d1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_dark_hint_foreground.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 566,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "a679d4928b497ae9af226fb37c1c027ba0535020eb08834f2cdbe11c4120b4ba",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_dark_primary_text_disable_only.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 567,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "e2839ee0f1c4c57f5f22b2fb70679b2f3c7ea33b1bc37a99cb7fd0a24a1b3133",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_default_color_primary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 568,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "330683d44b77b112152a155c0db2efb5ddb173d6f86167c0c600a29e41dbc96c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_default_color_secondary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 569,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1108.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1108.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1108.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "2cda4a7e28f243c93902c38c875be7f04db5aa3203cc393553b888ae7f04e6b8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_efab_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 570,
        "ms": {
          "file": {
            "size": 748.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "space_count": 3.0,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1018.0,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1018.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 314.0,
            "last_line_length": 1018.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            88,
            "state_checked"
          ],
          [
            106,
            "state_selected"
          ],
          [
            123,
            "color"
          ],
          [
            131,
            "alpha"
          ],
          [
            139,
            "android"
          ],
          [
            147,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            194,
            "item"
          ],
          [
            201,
            "selector"
          ]
        ],
        "sz": 748,
        "sha": "c1e248e156aa3e704bd7963dfa6574d53c65d39f9e3ac0abef96c03d3fc2fc03",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_elevated_chip_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 571,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 664.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 664.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 212.0,
            "last_line_length": 664.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "6a30e6809ae4d9d51cd9879f94f44cdc8046f245cade9c769d6e49ed98530c3f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_fab_efab_background_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 572,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 662.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 662.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 662.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "f006290b6fd07635b008eea18489f8e11991a372f221aa81af64733c15071d7d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_fab_efab_foreground_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 573,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1108.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1108.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1108.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "64f5e743678d4dd26c067603bf312203225e8b1f93822624c9ce540fec612465",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_fab_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 574,
        "ms": {
          "file": {
            "size": 668.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 894.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 894.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 281.0,
            "last_line_length": 894.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            90,
            "state_checkable"
          ],
          [
            106,
            "state_checked"
          ],
          [
            124,
            "color"
          ],
          [
            132,
            "alpha"
          ],
          [
            140,
            "android"
          ],
          [
            148,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            195,
            "item"
          ],
          [
            202,
            "selector"
          ]
        ],
        "sz": 668,
        "sha": "ea5de290b2a0ab14912292620a39a728eb61e527d1a560571758fd5a163f135d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_filled_icon_button_container_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 575,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "5de2e18c668fbefce7680f78cfe609183bd1a4d8576cac37e6c46f57b1cc9994",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_highlighted_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 576,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.77,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 754.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 232.0,
            "last_line_length": 754.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "c1276b1fcff092285e2479c61a43aaa9e987a68d83fe4181dc6abc8eeaa0e9aa",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_hint_foreground.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 577,
        "ms": {
          "file": {
            "size": 668.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 892.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 892.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 280.0,
            "last_line_length": 892.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            90,
            "state_checkable"
          ],
          [
            106,
            "state_checked"
          ],
          [
            124,
            "color"
          ],
          [
            132,
            "alpha"
          ],
          [
            140,
            "android"
          ],
          [
            148,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            195,
            "item"
          ],
          [
            202,
            "selector"
          ]
        ],
        "sz": 668,
        "sha": "aa33b376531c52b9d4b5eecb990c65c2ea95a3aac56e658453f95ce14e1b1fa2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_icon_button_icon_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 578,
        "ms": {
          "file": {
            "size": 1196.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "space_count": 3.0,
            "total_lines": 1.0,
            "char_entropy": 3.48,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1740.0,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1740.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 508.0,
            "last_line_length": 1740.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_checked"
          ],
          [
            104,
            "state_pressed"
          ],
          [
            122,
            "color"
          ],
          [
            128,
            "state_hovered"
          ],
          [
            146,
            "android"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            201,
            "item"
          ],
          [
            208,
            "selector"
          ]
        ],
        "sz": 1196,
        "sha": "33c479a260af6ad64f1a931571786fdc5d41a382ece8de2821d83b4f73be6664",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_bar_item_with_indicator_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 579,
        "ms": {
          "file": {
            "size": 1196.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "space_count": 3.0,
            "total_lines": 1.0,
            "char_entropy": 3.48,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1740.0,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1740.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 508.0,
            "last_line_length": 1740.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_checked"
          ],
          [
            104,
            "state_pressed"
          ],
          [
            122,
            "color"
          ],
          [
            128,
            "state_hovered"
          ],
          [
            146,
            "android"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            201,
            "item"
          ],
          [
            208,
            "selector"
          ]
        ],
        "sz": 1196,
        "sha": "892c3f51d6dbd183561b3868cc299e7bf847da8e2b183d0e391b1858503cd923",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_bar_item_with_indicator_label_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 580,
        "ms": {
          "file": {
            "size": 1232.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.06,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.53,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 884.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1749.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 515.0,
            "last_line_length": 1749.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 864.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1232,
        "sha": "b3b651d2450b377f01aedf2e13a7f67081b2b560c0c6b3167ad1ff0963f9bd2c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_bar_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 581,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 798.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 798.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 247.0,
            "last_line_length": 798.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_checked"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "state_activated"
          ],
          [
            108,
            "android"
          ],
          [
            116,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            163,
            "item"
          ],
          [
            170,
            "selector"
          ]
        ],
        "sz": 588,
        "sha": "c2936ad3a5a0bce5e76836826e882c9cd6f318718add887601de697cebc45f2d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_item_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 582,
        "ms": {
          "file": {
            "size": 1356.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.51,
            "unique_chars": 66.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 652.0,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1547.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 574.0,
            "last_line_length": 35.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 647.82,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            96,
            "state_enabled"
          ],
          [
            112,
            "state_checked"
          ],
          [
            128,
            "state_pressed"
          ],
          [
            146,
            "color"
          ],
          [
            154,
            "alpha"
          ],
          [
            160,
            "state_hovered"
          ],
          [
            178,
            "android"
          ],
          [
            186,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            233,
            "item"
          ],
          [
            240,
            "selector"
          ]
        ],
        "sz": 1356,
        "sha": "fb5e94bbcd67bc21ba3ba498168d25320e7aa26caaa2c59abe52ef8a95f6b551",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_item_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 583,
        "ms": {
          "file": {
            "size": 1372.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 2.0,
            "char_entropy": 3.5,
            "unique_chars": 69.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 991.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1965.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 575.0,
            "last_line_length": 1965.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 973.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1372,
        "sha": "f5166486d6701105e25fc1cc32c33e1cd9ac2bdc086fa1b5368d1ae5bc9d27f8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_item_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 584,
        "ms": {
          "file": {
            "size": 1356.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 3.51,
            "unique_chars": 65.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 652.0,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1547.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 574.0,
            "last_line_length": 35.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 647.82,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            96,
            "state_enabled"
          ],
          [
            112,
            "state_checked"
          ],
          [
            128,
            "state_pressed"
          ],
          [
            146,
            "color"
          ],
          [
            154,
            "alpha"
          ],
          [
            160,
            "state_hovered"
          ],
          [
            178,
            "android"
          ],
          [
            186,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            233,
            "item"
          ],
          [
            240,
            "selector"
          ]
        ],
        "sz": 1356,
        "sha": "e5e827a86e1ab0da8cef2db7a310c10bd980db3c06c534c67393b9e0fbcb2d61",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_item_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 585,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 199.0,
            "last_line_length": 618.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "61b69b8858a4b62607ab2df801e42703b8a2f20839927591bc1dcf0d6e6fd369",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_rail_item_with_indicator_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 586,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 199.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "11b36466da912ba1355f4feff30a25238d3f59d2b7a791ae4e95c6f1256fc4e3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_rail_item_with_indicator_label_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 587,
        "ms": {
          "file": {
            "size": 1232.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.5,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 890.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1761.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 515.0,
            "last_line_length": 1761.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 870.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1232,
        "sha": "6df7e50da775a0831186cdce6324da03151f82a81fdeebc4eea3b4502e995726",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_navigation_rail_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 588,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 3.82,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "avg_line_length": 239.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 364.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 115.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "line_length_stddev": 124.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "1938f56aafbc88c8384c21c0d019e459dc4eaea19ee529c64dda6dd06dd58ce0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_popupmenu_overlay_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 589,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "02a6f5072e0714347e88d7f83eb146ea69b57a2cd896f22ccdcb104bfdcd390a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_primary_text_disable_only.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 590,
        "ms": {
          "file": {
            "size": 1576.0
          },
          "text": {
            "tab_count": 20.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 3.44,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 768.0,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1895.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 675.0,
            "last_line_length": 35.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 808.84,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            96,
            "state_enabled"
          ],
          [
            112,
            "state_checked"
          ],
          [
            128,
            "state_pressed"
          ],
          [
            146,
            "color"
          ],
          [
            154,
            "alpha"
          ],
          [
            160,
            "state_hovered"
          ],
          [
            178,
            "android"
          ],
          [
            186,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            233,
            "item"
          ],
          [
            240,
            "selector"
          ]
        ],
        "sz": 1576,
        "sha": "f8aab2497d707429094aad3c8f8f47b79a7a819b2dabb5d779c4c23baa8c1336",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_radiobutton_button_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 591,
        "ms": {
          "file": {
            "size": 1372.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 3.49,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 991.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1965.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 576.0,
            "last_line_length": 1965.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 973.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            92,
            "state_checked"
          ],
          [
            108,
            "state_pressed"
          ],
          [
            126,
            "color"
          ],
          [
            134,
            "alpha"
          ],
          [
            140,
            "state_hovered"
          ],
          [
            158,
            "android"
          ],
          [
            166,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            213,
            "item"
          ],
          [
            220,
            "selector"
          ]
        ],
        "sz": 1372,
        "sha": "09f3132b3da9f6e2c9d32cae5092d2c8763c533affde53416f2ee8e8ae5c76ee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_radiobutton_ripple_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 592,
        "ms": {
          "file": {
            "size": 1372.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 3.47,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 997.5,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1977.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 576.0,
            "last_line_length": 1977.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 979.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            92,
            "state_checked"
          ],
          [
            108,
            "state_pressed"
          ],
          [
            126,
            "color"
          ],
          [
            134,
            "alpha"
          ],
          [
            140,
            "state_hovered"
          ],
          [
            158,
            "android"
          ],
          [
            166,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            213,
            "item"
          ],
          [
            220,
            "selector"
          ]
        ],
        "sz": 1372,
        "sha": "91dd24d177aedf600853f108f50de931ea51fdd72608202210bc6da4bee04381",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_selection_control_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 593,
        "ms": {
          "file": {
            "size": 748.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1022.0,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1022.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 312.0,
            "last_line_length": 1022.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "state_selected"
          ],
          [
            89,
            "state_pressed"
          ],
          [
            107,
            "color"
          ],
          [
            115,
            "alpha"
          ],
          [
            121,
            "state_hovered"
          ],
          [
            139,
            "android"
          ],
          [
            147,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            194,
            "item"
          ],
          [
            201,
            "selector"
          ]
        ],
        "sz": 748,
        "sha": "b0b3ab16ec4bd504ebba4e3e26c73f7a391447f6af95bd0810c6d629d5829a20",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_simple_item_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 594,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 662.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 662.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 662.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "04d049fe6f65133b38e03d6b8a0d96bfa52ca6ac4ba7d966eaa2254c9394ab6a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_slider_active_track_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 595,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 212.0,
            "last_line_length": 666.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "ce30cd7d673dc0b2d30f91e987bc57bc8bdd9da62442f12d79c2b83862b2236c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_slider_halo_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 596,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 662.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 662.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 662.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "357bf11e4f1558c1bdff0c6b91d09583a770e1a55bb52b61afc8645ba8acd201",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_slider_inactive_track_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 597,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "acdd5540ef8124c37a76bd7a0acfdf1e6394113d1200944fbdfa96750243bc71",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_slider_thumb_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 598,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 790.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 790.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 253.0,
            "last_line_length": 790.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            80,
            "state_checked"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "android"
          ],
          [
            114,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            161,
            "item"
          ],
          [
            168,
            "selector"
          ]
        ],
        "sz": 588,
        "sha": "34dbe6ebdb485a3f58f67801ecd8d2088a525903435c69b3ca2f0a16c957756c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_switch_thumb_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 599,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 265.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "41563ede020bb4bf6634127a175ea9af0a852d34a499173599634bb0e07ad31d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_switch_track_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 600,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 264.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            111,
            "alpha"
          ],
          [
            119,
            "android"
          ],
          [
            127,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            174,
            "item"
          ],
          [
            181,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "c2648508ba4f7f222048fb7a242fa1a764392e8d78f939dae477e9a20270429e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tabs_icon_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 601,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 264.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            111,
            "alpha"
          ],
          [
            119,
            "android"
          ],
          [
            127,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            174,
            "item"
          ],
          [
            181,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "09f4f696a5cf1de90b7c8663b5d2d05d529a1537af3a1d04ae61f1a6e5c37419",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tabs_icon_color_secondary.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 602,
        "ms": {
          "file": {
            "size": 1372.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.51,
            "unique_chars": 70.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 991.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1965.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 575.0,
            "last_line_length": 1965.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 973.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1372,
        "sha": "fd735d947b0884e6a9164c01df67696be75f7e55a6d39e45cecda120f291bc92",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tabs_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 603,
        "ms": {
          "file": {
            "size": 1372.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.5,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 991.5,
            "high_byte_ratio": 0.46,
            "lines_over_1000": 1.0,
            "max_line_length": 1965.0,
            "non_ascii_ratio": 0.46,
            "null_byte_count": 575.0,
            "last_line_length": 1965.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 973.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1372,
        "sha": "afcc657a4403399a67ade102efd8c0ef8da539500276ba27af862800a2c2d356",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tabs_ripple_color_secondary.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 604,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 264.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            111,
            "alpha"
          ],
          [
            119,
            "android"
          ],
          [
            127,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            174,
            "item"
          ],
          [
            181,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "c2648508ba4f7f222048fb7a242fa1a764392e8d78f939dae477e9a20270429e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tabs_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 605,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 264.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            111,
            "alpha"
          ],
          [
            119,
            "android"
          ],
          [
            127,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            174,
            "item"
          ],
          [
            181,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "09f4f696a5cf1de90b7c8663b5d2d05d529a1537af3a1d04ae61f1a6e5c37419",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tabs_text_color_secondary.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 606,
        "ms": {
          "file": {
            "size": 508.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 682.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 682.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 213.0,
            "last_line_length": 682.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            80,
            "state_checked"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "android"
          ],
          [
            114,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            161,
            "item"
          ],
          [
            168,
            "selector"
          ]
        ],
        "sz": 508,
        "sha": "ed50f28e11bd7dd270547beabd840f6a40679454bcdeddaee35a5bb64c75a993",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_text_button_background_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 607,
        "ms": {
          "file": {
            "size": 748.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1012.0,
            "high_byte_ratio": 0.39,
            "lines_over_1000": 1.0,
            "max_line_length": 1012.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 317.0,
            "last_line_length": 1012.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            90,
            "state_checkable"
          ],
          [
            106,
            "state_checked"
          ],
          [
            124,
            "color"
          ],
          [
            132,
            "alpha"
          ],
          [
            140,
            "android"
          ],
          [
            148,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            195,
            "item"
          ],
          [
            202,
            "selector"
          ]
        ],
        "sz": 748,
        "sha": "84bbb3d6f52044b643a11ebfc816392a7ac213cbed9c41aa6204a87def26b766",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_text_button_foreground_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 608,
        "ms": {
          "file": {
            "size": 1936.0
          },
          "text": {
            "tab_count": 24.0,
            "digit_ratio": 0.03,
            "total_lines": 3.0,
            "char_entropy": 3.39,
            "unique_chars": 69.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 947.33,
            "high_byte_ratio": 0.48,
            "lines_over_1000": 1.0,
            "max_line_length": 2431.0,
            "non_ascii_ratio": 0.48,
            "null_byte_count": 832.0,
            "last_line_length": 35.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 1058.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            98,
            "state_checkable"
          ],
          [
            114,
            "state_checked"
          ],
          [
            130,
            "state_pressed"
          ],
          [
            148,
            "color"
          ],
          [
            156,
            "alpha"
          ],
          [
            162,
            "state_hovered"
          ],
          [
            180,
            "android"
          ],
          [
            188,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            235,
            "item"
          ],
          [
            242,
            "selector"
          ]
        ],
        "sz": 1936,
        "sha": "ef6f49e2c3b39204d68fc71c192cde2c6880ccf1fbdfe6ff442015f148e6e019",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_text_button_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 609,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "77e4a022a597bb3f65fe0b4bcf5cdcdca103386d995a24fae137d8f7dfd839e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_textfield_filled_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 610,
        "ms": {
          "file": {
            "size": 872.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 3.71,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 599.5,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1181.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 361.0,
            "last_line_length": 1181.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 581.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            92,
            "state_enabled"
          ],
          [
            110,
            "color"
          ],
          [
            118,
            "state_activated"
          ],
          [
            136,
            "alpha"
          ],
          [
            142,
            "state_hovered"
          ],
          [
            160,
            "android"
          ],
          [
            168,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            215,
            "item"
          ],
          [
            222,
            "selector"
          ]
        ],
        "sz": 872,
        "sha": "d50c3c307081700a5abe847f66ed0e8c0266972a2422e532fd81516eae84388c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_textfield_indicator_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 611,
        "ms": {
          "file": {
            "size": 748.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1016.0,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1016.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 314.0,
            "last_line_length": 1016.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 748,
        "sha": "d82f074c6d78eed0b13240b22556b5fc1cfe45fa13291c6b8ecdab5ff13d4957",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_textfield_input_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 612,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.76,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 265.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_focused"
          ],
          [
            84,
            "state_enabled"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "6ab748ef1c6634dfdb28260954bd17899da5c41ecb1316c7cef6b8caa61d9b35",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_textfield_label_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 613,
        "ms": {
          "file": {
            "size": 748.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1016.0,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1016.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 314.0,
            "last_line_length": 1016.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 748,
        "sha": "8ea459be4b1908b81fbd21c8dd19e92eebe327702df5da2ae64c3f13949284b9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_textfield_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 614,
        "ms": {
          "file": {
            "size": 528.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 706.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 706.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 224.0,
            "last_line_length": 706.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            80,
            "state_checked"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "android"
          ],
          [
            114,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            161,
            "item"
          ],
          [
            168,
            "selector"
          ]
        ],
        "sz": 528,
        "sha": "b0e241cf313ca7c8a754fe09071ee9ad27da46f2bfb64a1742e9f4378baa3054",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_button_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 615,
        "ms": {
          "file": {
            "size": 1536.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.47,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 747.33,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1833.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 641.0,
            "last_line_length": 35.0,
            "long_token_count": 10.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 780.06,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_focused"
          ],
          [
            98,
            "state_checkable"
          ],
          [
            114,
            "state_checked"
          ],
          [
            130,
            "state_pressed"
          ],
          [
            148,
            "color"
          ],
          [
            156,
            "alpha"
          ],
          [
            162,
            "state_hovered"
          ],
          [
            180,
            "android"
          ],
          [
            188,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            235,
            "item"
          ],
          [
            242,
            "selector"
          ]
        ],
        "sz": 1536,
        "sha": "5206db96c44ffe5484633a3de6569075069e67afbee606951aad6c0912cd384e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_button_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 616,
        "ms": {
          "file": {
            "size": 768.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1038.0,
            "high_byte_ratio": 0.39,
            "lines_over_1000": 1.0,
            "max_line_length": 1038.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 326.0,
            "last_line_length": 1038.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            90,
            "state_checkable"
          ],
          [
            106,
            "state_checked"
          ],
          [
            124,
            "color"
          ],
          [
            132,
            "alpha"
          ],
          [
            140,
            "android"
          ],
          [
            148,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            195,
            "item"
          ],
          [
            202,
            "selector"
          ]
        ],
        "sz": 768,
        "sha": "973deb9bfc3254b428f1f84131f4f939593778aae91854a6faf4e648a18c95d6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_button_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 617,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 199.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "state_selected"
          ],
          [
            79,
            "color"
          ],
          [
            87,
            "android"
          ],
          [
            95,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            142,
            "item"
          ],
          [
            149,
            "selector"
          ],
          [
            387,
            "127.3.1.16:260"
          ]
        ],
        "sz": 464,
        "sha": "39909e67665074c75cfa087d477a4c088fef9b4ad237c1885d04afb85d6eb6ca",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_clock_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 618,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 198.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "state_selected"
          ],
          [
            79,
            "color"
          ],
          [
            87,
            "android"
          ],
          [
            95,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            142,
            "item"
          ],
          [
            149,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "d6fd6151433df7d292549dd0acb9ddcf9dad3b6f7b4c2958bb8863434273ff6b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_display_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 619,
        "ms": {
          "file": {
            "size": 1372.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 2.0,
            "char_entropy": 3.47,
            "unique_chars": 64.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 997.5,
            "high_byte_ratio": 0.47,
            "lines_over_1000": 1.0,
            "max_line_length": 1977.0,
            "non_ascii_ratio": 0.47,
            "null_byte_count": 575.0,
            "last_line_length": 1977.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 979.5,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1372,
        "sha": "fdf70b542030854730bdc50b7ddcf4de9e6ea59b7b09e6f023d199a244ecfb4e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_display_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 620,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 834.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 834.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 264.0,
            "last_line_length": 834.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "state_selected"
          ],
          [
            103,
            "color"
          ],
          [
            111,
            "alpha"
          ],
          [
            119,
            "android"
          ],
          [
            127,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            174,
            "item"
          ],
          [
            181,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "4c811f08c7d706900046806882b3d7de481a4dfbd51ea418a89e977de5be4f57",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_display_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 621,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1114.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1114.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1114.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "990f9cffa9267f0a37585c7c02626a315793c6fb5b80f943e7d8abc0135d69b4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_secondary_text_button_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 622,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "82f3ff3ac69e1d3ac094a06d49a9d050497174c2482db5a7116c7cca5b6e9108",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_secondary_text_button_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 623,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 199.0,
            "last_line_length": 618.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "state_selected"
          ],
          [
            79,
            "color"
          ],
          [
            87,
            "android"
          ],
          [
            95,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            142,
            "item"
          ],
          [
            149,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "ce8458c39852e921c518273282b6c1bfea4b91ec76dac5058a02236c0807187c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_timepicker_time_input_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 624,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1114.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1114.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1114.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "2431cb3067bcd9b761f183753668083b624762fd8bfdd0575d5ec6a15586ab5a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/m3_tonal_button_ripple_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 625,
        "ms": {
          "file": {
            "size": 340.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 44.0,
            "lines_over_200": 1.0,
            "avg_line_length": 434.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 150.0,
            "last_line_length": 434.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.35,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "android"
          ],
          [
            74,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            121,
            "item"
          ],
          [
            128,
            "selector"
          ]
        ],
        "sz": 340,
        "sha": "88d158ddd4e622cbb6cf7af56c455891ecc5708917915a74881a74cc41ff2c50",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_cursor_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 626,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "68945209060a390b03f08ff36d8303de8dd839b2533b1d0cb43a52308268dfcb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_divider_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 627,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 162.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "50e60c2aa2493ec0ac3b333f5f1d033f27d3eeb4234c410b893c475cf5adef09",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_background_disabled.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 628,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 162.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "692298874bd142e8fe71c05cd618ec1287c1e6d2915c61c2ba00064b482cf245",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_background_emphasis_high_type.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 629,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 162.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "cdf581e989032c58e66cd56ee4e42f71659832434a4e6f211880be91aaa39d4a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_background_emphasis_medium.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 630,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "c2da4ac9fa94d54e3e3006f9f888f0ab27817a8919883d360469bc010fedacf3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_primary_disabled.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 631,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "09ab3da7b550d0e0c084531eafea3be9c01881aa158c7460653ae161d526dee3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_primary_emphasis_high_type.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 632,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "7e8fa51eb0c1b49766aef41dce4657911b5ea996cccf6f0949f5c9959ef34803",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_primary_emphasis_medium.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 633,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.82,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "97881cb372ad5d1e35d0f87691c1b2e0897aef49b22fac1804fb9496b1149e8a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_surface_disabled.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 634,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.82,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "dcadc60d83eaf6527647ed4539b0828d7b417384163227cc7b4723b48215e339",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_surface_emphasis_high_type.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 635,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 478.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 478.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 478.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "15b4394798ce9707988dec04b81890649e82944b631728314a14ce30a15197da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_surface_emphasis_medium.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 636,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "6bc8f0069b54403c53e5bccac4148d21b9960e454fd6ecff9454ef91b7283dc6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_on_surface_stroke.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 637,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "288cf4b5bde879d8f317d0a8f43ff5dfee6a0d16e8e1e6bb53d023bce55fc6ba",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized__highlighted_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 638,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "avg_line_length": 480.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 480.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 161.0,
            "last_line_length": 480.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "8ab1009934d3b6cd00854c3725b0795c8d28756b40670393c4f0d3d5282889c7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized__highlighted_text_inverse.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 639,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "f97904d27222798c04308cac02484c2cad4401006a328f5c4b3f2d44180929fe",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_color_primary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 640,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "069fc21417b6f42e0f1620317beef4eb16e29c623412826318b4e2993816c16d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_color_primary_text_inverse.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 641,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "0b7073ad7865a38d358bd217b07ba0b6db35b40b4f7ddae14fb81b05c74171f1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_color_secondary_text.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 642,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "1f74c6dd01e52e33bc013a5fe80a4f4c6302e335e7b7586a292a40f5d79302d6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_color_secondary_text_inverse.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 643,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.8,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 750.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 750.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 232.0,
            "last_line_length": 750.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "377aafcfe4369e5123746f25b4b125e805f0944fbbebfde0a995b808e8e646a6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_hint_foreground.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 644,
        "ms": {
          "file": {
            "size": 564.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.77,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 754.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 232.0,
            "last_line_length": 754.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_pressed"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 564,
        "sha": "fe6304f772df6d3b61af42ce4408aaf2632c3bfb83ca1def96767c9ec5b9bda4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_hint_foreground_inverse.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 645,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "d8229356fb02ad4e4e41508f8f9aa4363ffb00f4c3d459cc6e3195c2828f55e3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_primary_inverse_text_disable_only.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 646,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 654.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 654.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 215.0,
            "last_line_length": 654.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "16e10e7467956128435c0441cfde1b2c89175eb9c3c582f25e6dc37360090b05",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_personalized_primary_text_disable_only.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 647,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.74,
            "unique_chars": 53.0,
            "lines_over_200": 2.0,
            "avg_line_length": 346.5,
            "high_byte_ratio": 0.38,
            "max_line_length": 426.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 219.0,
            "last_line_length": 267.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 79.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "98cc768cc4f768baa2af4bbfbaa39ed59c3ba945ed49121e084ddecde2be3da4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_slider_active_tick_marks_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 648,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.77,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 330.5,
            "high_byte_ratio": 0.37,
            "max_line_length": 546.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 115.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 215.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "2216d1139340b59146591405209edf445f58bf8524971c80311442bb62462020",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_slider_active_track_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 649,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 212.0,
            "last_line_length": 666.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "4d96214b7364ffebb82755b1c067240ab798d30af516a63eae78141e25325a83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_slider_halo_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 650,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.76,
            "unique_chars": 55.0,
            "lines_over_200": 2.0,
            "avg_line_length": 346.5,
            "high_byte_ratio": 0.38,
            "max_line_length": 426.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 219.0,
            "last_line_length": 267.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 79.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "d3cd93f3ffdde49bba67b11f63f9ae19681ba4fa69fb219d9566d2ca2340dd15",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_slider_inactive_tick_marks_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 651,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 698.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 698.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 219.0,
            "last_line_length": 698.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "8a3538d3ef1b6aba3934a4ff3d3fdcd2a81d130d09031b4ed5b92dcfab2358f4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_slider_inactive_track_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 652,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "4bb2e7f2315ca8794d3ff79e4ec6e723cfe2c21c73d2296ea960ad4dad714e0c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_slider_thumb_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 653,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 212.0,
            "last_line_length": 666.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_checked"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "99ad361fe3e56312a171e3f5e3420834a456bc0b2f447c9894f8d315ad0ad8eb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_timepicker_button_background.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 654,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "59022ca3cdf2e2c6e5c7d25532fa69a0b4d4706d2b1252f9796546fabbfa5ce6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_timepicker_button_stroke.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 655,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 198.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "state_selected"
          ],
          [
            79,
            "color"
          ],
          [
            87,
            "android"
          ],
          [
            95,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            142,
            "item"
          ],
          [
            149,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "433b78f90aff3ccbbf25f2e4fa108261dde70bdfda4fb03fc7422cf1175e3ba4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_timepicker_clock_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 656,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "713df73da1e849b404b2a9aaa8bb7b8d9f6bec4ea6b38dc461ebe240c375b432",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_timepicker_clockface.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 657,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.81,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 482.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 482.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 482.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "34c17ff5da9a75237ba279cf67acc2b52f90e85e50dea5ce6c7e0d72ece63743",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/material_timepicker_modebutton_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 658,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 668.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 668.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 211.0,
            "last_line_length": 668.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "4a6d1361e354a3402319d199fd80cbf48c1924ca4d6f1af0e8f7643e1031c4f8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_btn_bg_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 659,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.59,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1338.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1338.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 396.0,
            "last_line_length": 1338.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 948,
        "sha": "f48324813f92a6276b90c754472e254b2c273e246a7b0e89f626e3c33857c827",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_btn_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 660,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 694.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 694.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 224.0,
            "last_line_length": 694.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_checked"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "ea7e30ed0eaec7afee7827325445d4efbf840e2dc4d69f16ed856697d572ab52",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_btn_stroke_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 661,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.72,
            "unique_chars": 53.0,
            "lines_over_200": 2.0,
            "avg_line_length": 343.5,
            "high_byte_ratio": 0.37,
            "max_line_length": 424.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 225.0,
            "last_line_length": 263.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 80.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_checked"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "5ccc6568b3da15f50a39c642504b1cc69610e3f5d3918ef0ddaac8a479bfc4e8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_btn_text_btn_bg_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 662,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.59,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1338.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1338.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 396.0,
            "last_line_length": 1338.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 948,
        "sha": "5dd79308812f968f95863ac1520a38c219612d56e083984f9e216f26d728aa25",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_btn_text_btn_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 663,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "b0dc92f8fa5030c3cdaea41a2ea5c92a2908120a81410f92abb5d3bc8fba9d4b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_btn_text_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 664,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 3.71,
            "unique_chars": 65.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 558.5,
            "high_byte_ratio": 0.42,
            "max_line_length": 814.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 336.0,
            "last_line_length": 303.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 255.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            90,
            "state_selected"
          ],
          [
            107,
            "color"
          ],
          [
            115,
            "alpha"
          ],
          [
            121,
            "state_hovered"
          ],
          [
            139,
            "android"
          ],
          [
            147,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            194,
            "item"
          ],
          [
            201,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "54e404000f44954537d0bab8e97e61807955c2df0b09a2c286950c3e484ac8d6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_calendar_item_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 665,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "666c3a69f88630fcb5bd0d6be9198dec1281c4e6e0ea48b198c73c69f5aa242d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_calendar_selected_range.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 666,
        "ms": {
          "file": {
            "size": 788.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.83,
            "unique_chars": 62.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 261.25,
            "high_byte_ratio": 0.38,
            "max_line_length": 521.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 329.0,
            "last_line_length": 359.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 193.16,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            94,
            "color"
          ],
          [
            102,
            "alpha"
          ],
          [
            108,
            "state_dragged"
          ],
          [
            126,
            "android"
          ],
          [
            140,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            182,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            229,
            "item"
          ],
          [
            236,
            "selector"
          ]
        ],
        "sz": 788,
        "sha": "192d0d8de22738b78e3d708df97b064590d163ca8dc537c27f5ae9e128974235",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_card_view_foreground.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 667,
        "ms": {
          "file": {
            "size": 768.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.81,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 513.5,
            "high_byte_ratio": 0.38,
            "lines_over_1000": 1.0,
            "max_line_length": 1009.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 318.0,
            "last_line_length": 1009.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 495.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            94,
            "color"
          ],
          [
            102,
            "alpha"
          ],
          [
            108,
            "state_dragged"
          ],
          [
            126,
            "android"
          ],
          [
            140,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            182,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            229,
            "item"
          ],
          [
            236,
            "selector"
          ]
        ],
        "sz": 768,
        "sha": "fee5883295be79933f02f43c74f7fbd74067897f1a5988ed64bdfdd118284c9f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_card_view_ripple.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 668,
        "ms": {
          "file": {
            "size": 848.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.64,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1196.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1196.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 352.0,
            "last_line_length": 1196.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            88,
            "state_checked"
          ],
          [
            106,
            "state_selected"
          ],
          [
            123,
            "color"
          ],
          [
            131,
            "alpha"
          ],
          [
            139,
            "android"
          ],
          [
            147,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            194,
            "item"
          ],
          [
            201,
            "selector"
          ]
        ],
        "sz": 848,
        "sha": "eb3d0b6fd992f6fda4e227bb457336e9f53da2ac78b2bb959c258fca3f6cedf0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_chip_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 669,
        "ms": {
          "file": {
            "size": 1092.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 3.0,
            "char_entropy": 3.58,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 516.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1416.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 462.0,
            "last_line_length": 114.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 637.6,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            92,
            "state_enabled"
          ],
          [
            108,
            "state_pressed"
          ],
          [
            126,
            "color"
          ],
          [
            134,
            "alpha"
          ],
          [
            140,
            "state_hovered"
          ],
          [
            158,
            "android"
          ],
          [
            166,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            213,
            "item"
          ],
          [
            220,
            "selector"
          ]
        ],
        "sz": 1092,
        "sha": "09e8ea6cfceebbffa1b144fd06887897d4f46459b87b9fa0b725e3186064c944",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_chip_close_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 670,
        "ms": {
          "file": {
            "size": 340.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 434.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 149.0,
            "last_line_length": 434.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "android"
          ],
          [
            74,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            121,
            "item"
          ],
          [
            128,
            "selector"
          ]
        ],
        "sz": 340,
        "sha": "14181f975e0e2e51911feeb73b608b956042cbc7981c2891bfd1585a5936516f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_chip_surface_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 671,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 696.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 696.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 219.0,
            "last_line_length": 696.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "9a5551ba1ddad1e7e0d4a8ae9de8e3a8345b60dfaee8e98be7661782aa6f5b56",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_chip_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 672,
        "ms": {
          "file": {
            "size": 848.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.62,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1200.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1200.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 352.0,
            "last_line_length": 1200.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.29,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            88,
            "state_checked"
          ],
          [
            106,
            "state_selected"
          ],
          [
            123,
            "color"
          ],
          [
            131,
            "alpha"
          ],
          [
            139,
            "android"
          ],
          [
            147,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            194,
            "item"
          ],
          [
            201,
            "selector"
          ]
        ],
        "sz": 848,
        "sha": "304ed6a08d4cf9f9401a8148d648a206f970431583b3e9e19d847138348180ca",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_choice_chip_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 673,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.6,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1338.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1338.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 396.0,
            "last_line_length": 1338.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 948,
        "sha": "668c6b1cefde6da9f36521270f4a1012c476676e185526b17eb6d5b975005cb5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_choice_chip_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 674,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.66,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1132.0,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1132.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 336.0,
            "last_line_length": 1132.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            88,
            "state_checked"
          ],
          [
            106,
            "state_selected"
          ],
          [
            123,
            "color"
          ],
          [
            131,
            "alpha"
          ],
          [
            139,
            "android"
          ],
          [
            147,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            194,
            "item"
          ],
          [
            201,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "59dd0bc9139cd968f3cb2e94aa5fce63fd64db2a6979356b36999a393c15d4ca",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_choice_chip_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 675,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 612.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 612.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 204.0,
            "last_line_length": 612.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "6053092a69ba906579346ab28e16ed6ff51dc0f9ea1c76abce75a5b04fcbce27",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_error.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 676,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 668.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 668.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 211.0,
            "last_line_length": 668.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "a4f1622d12f0948c886628e88d4a8d54a505b2ee5d465239bb537a5b912d7249",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_fab_bg_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 677,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.74,
            "unique_chars": 52.0,
            "lines_over_200": 2.0,
            "avg_line_length": 332.5,
            "high_byte_ratio": 0.37,
            "max_line_length": 398.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 211.0,
            "last_line_length": 267.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 65.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "6e813629bd50bca8c4d1e5faae9e1f67aef27b069f22275aac2f43783361269d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_fab_icon_text_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 678,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 6.0,
            "char_entropy": 3.6,
            "unique_chars": 59.0,
            "lines_over_200": 2.0,
            "avg_line_length": 222.17,
            "high_byte_ratio": 0.44,
            "max_line_length": 448.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 396.0,
            "last_line_length": 145.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 104.14,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 948,
        "sha": "a1b717e2dfb85ab78ca052999b469b95b4714c501c573bd09a6bf6f72f655463",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_fab_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 679,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.72,
            "unique_chars": 64.0,
            "lines_over_200": 3.0,
            "avg_line_length": 370.67,
            "high_byte_ratio": 0.41,
            "max_line_length": 438.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 338.0,
            "last_line_length": 271.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 71.91,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "c0334d15c8dd746a8d4c97635d4f39c8702f1168b59472f52edf6334c4c7a984",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_filled_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 680,
        "ms": {
          "file": {
            "size": 644.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 3.75,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 433.5,
            "high_byte_ratio": 0.39,
            "max_line_length": 754.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 270.0,
            "last_line_length": 113.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "line_length_stddev": 320.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "color"
          ],
          [
            94,
            "state_activated"
          ],
          [
            112,
            "alpha"
          ],
          [
            120,
            "android"
          ],
          [
            128,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            175,
            "item"
          ],
          [
            182,
            "selector"
          ]
        ],
        "sz": 644,
        "sha": "824b014d061ac2271bf7834cc16eeddf6f8c3a21ff706295c9d048b2a2e1aeee",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_filled_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 681,
        "ms": {
          "file": {
            "size": 788.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 3.74,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 539.5,
            "high_byte_ratio": 0.41,
            "max_line_length": 963.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 330.0,
            "last_line_length": 116.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 423.5,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 788,
        "sha": "3f6cda1b61dcaabe57238fe8567a687ed63a32808ab3ed10cb4e9e3108d0866a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_filled_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 682,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 688.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 688.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 223.0,
            "last_line_length": 688.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "bf5f814c5419dc6771869b63ca09e29487f313b693a88e6ff818ff0781b0a404",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_indicator_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 683,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.71,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 694.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 694.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 221.0,
            "last_line_length": 694.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_checked"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "b60d395da25280032d9a258801e8b80e1212dae1c3bd31e7223f74044a3ed31b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_bar_colored_item_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 684,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.62,
            "unique_chars": 64.0,
            "lines_over_200": 3.0,
            "avg_line_length": 332.75,
            "high_byte_ratio": 0.44,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 400.0,
            "last_line_length": 299.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 106.01,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 948,
        "sha": "975dc92b3cd26afa7dab8c5ad8677142a05fd4c368ec2fdde06b4af7c9893b03",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_bar_colored_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 685,
        "ms": {
          "file": {
            "size": 520.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 694.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 694.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 221.0,
            "last_line_length": 694.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_checked"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 520,
        "sha": "090cb5bdd1390e1a2f343ac04efe6a161714bffdbac93b6e9b8edb5adf7d66bb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_bar_item_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 686,
        "ms": {
          "file": {
            "size": 1672.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 8.0,
            "char_entropy": 3.4,
            "unique_chars": 69.0,
            "lines_over_200": 6.0,
            "lines_over_500": 1.0,
            "avg_line_length": 309.13,
            "high_byte_ratio": 0.49,
            "max_line_length": 521.0,
            "non_ascii_ratio": 0.49,
            "null_byte_count": 715.0,
            "last_line_length": 301.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 151.97,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1672,
        "sha": "488b10ea3f48ec82567bd2891ebc85d71511b65511708bdffafd2d3a75e92181",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_bar_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 687,
        "ms": {
          "file": {
            "size": 644.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 884.0,
            "high_byte_ratio": 0.41,
            "max_line_length": 884.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 267.0,
            "last_line_length": 884.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_checked"
          ],
          [
            86,
            "color"
          ],
          [
            94,
            "state_activated"
          ],
          [
            112,
            "alpha"
          ],
          [
            120,
            "android"
          ],
          [
            128,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            175,
            "item"
          ],
          [
            182,
            "selector"
          ]
        ],
        "sz": 644,
        "sha": "fb8f408710455de4af8d1b6a561cef063c078b9b0838ed2691f95220af275520",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_item_background_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 688,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 838.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 838.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 265.0,
            "last_line_length": 838.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "3a2ab478d0b292b1d9290406db80c8e3a177f3a1a36603d84d2c17ce16b59e54",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_item_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 689,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 838.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 838.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 265.0,
            "last_line_length": 838.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "3a2ab478d0b292b1d9290406db80c8e3a177f3a1a36603d84d2c17ce16b59e54",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_navigation_item_text_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 690,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 215.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_enabled"
          ],
          [
            82,
            "color"
          ],
          [
            90,
            "alpha"
          ],
          [
            98,
            "android"
          ],
          [
            106,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            153,
            "item"
          ],
          [
            160,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "a534f3ffeed9a9d1c2783297c9d8e73ab64d3d9a7d748c1e46c5e0d2637f9f65",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_on_primary_text_btn_text_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 691,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.7,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1114.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1114.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 334.0,
            "last_line_length": 1114.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 808,
        "sha": "d821a2178b7ec7eb8ff822780511211ccdd45b583c1ed758276efd14f6ca790b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_on_surface_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 692,
        "ms": {
          "file": {
            "size": 644.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 872.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 872.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 270.0,
            "last_line_length": 872.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            86,
            "color"
          ],
          [
            94,
            "state_activated"
          ],
          [
            112,
            "alpha"
          ],
          [
            120,
            "android"
          ],
          [
            128,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            175,
            "item"
          ],
          [
            182,
            "selector"
          ]
        ],
        "sz": 644,
        "sha": "a43b9c5edda3984a138a01f89f0c279ca66bb0ef5b1bc59a87fb8b452b925298",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_outlined_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 693,
        "ms": {
          "file": {
            "size": 788.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1082.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1082.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 330.0,
            "last_line_length": 1082.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_enabled"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 788,
        "sha": "0c7b8060bf89fd3621284e14f9737387da20950775df7135038a4150d39add31",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_outlined_stroke_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 694,
        "ms": {
          "file": {
            "size": 376.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 484.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 484.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 161.0,
            "last_line_length": 484.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "color"
          ],
          [
            70,
            "alpha"
          ],
          [
            78,
            "android"
          ],
          [
            86,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            133,
            "item"
          ],
          [
            140,
            "selector"
          ]
        ],
        "sz": 376,
        "sha": "cb9bbb088e29baf07cdaf93178f5022e8a4d505527f4e795a6c361e5285ea232",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_popupmenu_overlay_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 695,
        "ms": {
          "file": {
            "size": 784.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.6,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1078.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1078.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 343.0,
            "last_line_length": 1078.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 784,
        "sha": "1d006b2023fd03f3328714ee28fc10500a9caab3aebf759c10eebbc8108a1e05",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_switch_thumb_icon_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 696,
        "ms": {
          "file": {
            "size": 1028.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.54,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1452.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1452.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 446.0,
            "last_line_length": 1452.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            88,
            "state_checked"
          ],
          [
            104,
            "state_pressed"
          ],
          [
            122,
            "color"
          ],
          [
            130,
            "alpha"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 1028,
        "sha": "da8e6848bfcbcaef4c05358708cfc7e1d5cf652b7450bbf82631cbb15eeac3ed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_switch_thumb_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 697,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.73,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 836.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 836.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 266.0,
            "last_line_length": 836.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 624,
        "sha": "23efda7a122fcbb7a451c285a79905da6eb6b74af9946111c79ec06dabee30b3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_switch_track_decoration_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 698,
        "ms": {
          "file": {
            "size": 784.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.59,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1078.0,
            "high_byte_ratio": 0.41,
            "lines_over_1000": 1.0,
            "max_line_length": 1078.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 343.0,
            "last_line_length": 1078.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_enabled"
          ],
          [
            84,
            "state_checked"
          ],
          [
            102,
            "color"
          ],
          [
            110,
            "alpha"
          ],
          [
            118,
            "android"
          ],
          [
            126,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            173,
            "item"
          ],
          [
            180,
            "selector"
          ]
        ],
        "sz": 784,
        "sha": "dfb869a961af66187b4522d0ae2647cf1c5b38083ed738404935469ae1a5a9f8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_switch_track_tint.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 699,
        "ms": {
          "file": {
            "size": 948.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.62,
            "unique_chars": 64.0,
            "lines_over_200": 3.0,
            "avg_line_length": 332.75,
            "high_byte_ratio": 0.44,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 400.0,
            "last_line_length": 299.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 106.01,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            88,
            "state_pressed"
          ],
          [
            106,
            "color"
          ],
          [
            114,
            "alpha"
          ],
          [
            120,
            "state_hovered"
          ],
          [
            138,
            "android"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            193,
            "item"
          ],
          [
            200,
            "selector"
          ]
        ],
        "sz": 948,
        "sha": "975dc92b3cd26afa7dab8c5ad8677142a05fd4c368ec2fdde06b4af7c9893b03",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_tabs_colored_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 700,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 210.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "state_selected"
          ],
          [
            83,
            "color"
          ],
          [
            91,
            "alpha"
          ],
          [
            99,
            "android"
          ],
          [
            107,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            154,
            "item"
          ],
          [
            161,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "315c2651353da4c84b5d2600547300597ddab13eb4b93e2ccfc091de0153fe2a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_tabs_icon_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 701,
        "ms": {
          "file": {
            "size": 500.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.74,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 666.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 210.0,
            "last_line_length": 666.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "state_selected"
          ],
          [
            83,
            "color"
          ],
          [
            91,
            "alpha"
          ],
          [
            99,
            "android"
          ],
          [
            107,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            154,
            "item"
          ],
          [
            161,
            "selector"
          ]
        ],
        "sz": 500,
        "sha": "c0f3113c6d379ead1deac108573e21368932e67e279b5e15da5b1394aa217f88",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_tabs_icon_color_selector_colored.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 702,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.05,
            "total_lines": 1.0,
            "char_entropy": 3.67,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 200.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            62,
            "state_selected"
          ],
          [
            79,
            "color"
          ],
          [
            87,
            "android"
          ],
          [
            95,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            142,
            "item"
          ],
          [
            149,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "38f276f25dd943008b8e246bf945f8cd7a768dbabc2cba448b94422c68fde226",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_tabs_legacy_text_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 703,
        "ms": {
          "file": {
            "size": 1672.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 8.0,
            "char_entropy": 3.4,
            "unique_chars": 69.0,
            "lines_over_200": 6.0,
            "lines_over_500": 1.0,
            "avg_line_length": 309.13,
            "high_byte_ratio": 0.49,
            "max_line_length": 521.0,
            "non_ascii_ratio": 0.49,
            "null_byte_count": 715.0,
            "last_line_length": 301.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.29,
            "line_length_stddev": 151.97,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_focused"
          ],
          [
            94,
            "state_selected"
          ],
          [
            109,
            "state_pressed"
          ],
          [
            127,
            "color"
          ],
          [
            135,
            "alpha"
          ],
          [
            141,
            "state_hovered"
          ],
          [
            159,
            "android"
          ],
          [
            167,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            214,
            "item"
          ],
          [
            221,
            "selector"
          ]
        ],
        "sz": 1672,
        "sha": "488b10ea3f48ec82567bd2891ebc85d71511b65511708bdffafd2d3a75e92181",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_tabs_ripple_color.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 704,
        "ms": {
          "file": {
            "size": 888.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.59,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1262.0,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1262.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 375.0,
            "last_line_length": 1262.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_enabled"
          ],
          [
            90,
            "state_checkable"
          ],
          [
            106,
            "state_checked"
          ],
          [
            124,
            "color"
          ],
          [
            132,
            "alpha"
          ],
          [
            140,
            "android"
          ],
          [
            148,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            195,
            "item"
          ],
          [
            202,
            "selector"
          ]
        ],
        "sz": 888,
        "sha": "e6ab5e97f6c81431ed54efebda3f34b826cef5c2bc8f23187f0b663ad4164054",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/mtrl_text_btn_text_color_selector.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 705,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 614.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 203.0,
            "last_line_length": 614.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "78c63ccfd13e206870d9ef51998706e781d5fc22e411e37c04ff634f4defc3df",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/switch_thumb_material_dark.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 706,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 614.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 203.0,
            "last_line_length": 614.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_enabled"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "android"
          ],
          [
            94,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            141,
            "item"
          ],
          [
            148,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "c8ab5aadd616d2d1eeae279303ca07687c2ca72fb8992b422db138704495f9e0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/color/switch_thumb_material_light.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 707,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 290.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.85,
            "pixel_entropy": 0.85,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 6.86
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATX"
          ],
          [
            282,
            "IEND"
          ]
        ],
        "sz": 290,
        "sha": "5d02a81102644428ca639aec3df626eeb4a839a9ddc76fc2b158b04461d7f00f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cp.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 708,
        "ms": {
          "file": {
            "size": 632.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 5.0,
            "char_entropy": 3.71,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 167.2,
            "high_byte_ratio": 0.37,
            "max_line_length": 671.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 279.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 671.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 255.61,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "gravity"
          ],
          [
            88,
            "height"
          ],
          [
            97,
            "color"
          ],
          [
            105,
            "android"
          ],
          [
            113,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            160,
            "item"
          ],
          [
            165,
            "layer-list"
          ],
          [
            180,
            "shape"
          ],
          [
            188,
            "size"
          ],
          [
            195,
            "solid"
          ]
        ],
        "sz": 632,
        "sha": "4e6d86570bfa2da05c8f5710d518f1d4029a6481a79559453f748955979e6ea0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cp.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 709,
        "ms": {
          "file": {
            "size": 472.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.87,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 208.67,
            "high_byte_ratio": 0.37,
            "max_line_length": 558.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 190.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 558.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.3,
            "line_length_stddev": 248.57,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            64,
            "background"
          ],
          [
            77,
            "layout_width"
          ],
          [
            92,
            "layout_height"
          ],
          [
            110,
            "FrameLayout"
          ],
          [
            124,
            "View"
          ],
          [
            131,
            "android"
          ],
          [
            139,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 472,
        "sha": "51a8eebbcb537cfe6a7b6cd7e6ea0498d401e1257d57fc4c838da860bd5d5e03",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cs.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 710,
        "ms": {
          "file": {
            "size": 600.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.22,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 4.32,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "avg_line_length": 243.33,
            "high_byte_ratio": 0.27,
            "max_line_length": 388.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 226.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 150.98,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            153,
            "22M12,2L9.19,8.63L2,9.24l5.46,4.73L5.82,21L12,17.27z"
          ],
          [
            208,
            "android"
          ],
          [
            216,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            263,
            "path"
          ],
          [
            270,
            "vector"
          ]
        ],
        "sz": 600,
        "sha": "05b5baedcd58fd995fb013f2067c87dbb5f9489d7935723829a8df803d507609",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/cw.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 711,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.28,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 208.0
          },
          "image": {
            "width": 9.0,
            "height": 9.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 3.97
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            200,
            "IEND"
          ]
        ],
        "sz": 208,
        "sha": "a7523ccf037f7c31cf87a186feecb9139ef92d87e0702cabb08a31914b2b503e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/d1.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 712,
        "ms": {
          "file": {
            "size": 880.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.0,
            "total_lines": 6.0,
            "char_entropy": 4.04,
            "unique_chars": 71.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 194.17,
            "high_byte_ratio": 0.37,
            "max_line_length": 715.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 318.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 7.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.27,
            "line_length_stddev": 248.32,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            98,
            "gravity"
          ],
          [
            108,
            "orientation"
          ],
          [
            127,
            "paddingLeft"
          ],
          [
            139,
            "paddingRight"
          ],
          [
            154,
            "layout_width"
          ],
          [
            169,
            "layout_height"
          ],
          [
            185,
            "paddingStart"
          ],
          [
            200,
            "paddingEnd"
          ],
          [
            213,
            "LinearLayout"
          ],
          [
            230,
            "android"
          ],
          [
            238,
            "++androidx.fragment.app.FragmentContainerView"
          ],
          [
            284,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            331,
            "include"
          ],
          [
            341,
            "layout"
          ]
        ],
        "sz": 880,
        "sha": "4b967d8101e74d7d7615a936634c3571697684daf9c3fea525d36ab1a2e25141",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/d2.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 713,
        "ms": {
          "png": {
            "bit_depth": 4.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.12
          },
          "file": {
            "size": 1185.0
          },
          "image": {
            "width": 212.0,
            "height": 45.0,
            "channels": 1.0,
            "r_entropy": 2.25,
            "edge_density": 0.19,
            "pixel_entropy": 2.25,
            "histogram_flatness": 0.28
          },
          "binary": {
            "overall_entropy": 7.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            124,
            "IDATX"
          ],
          [
            1177,
            "IEND"
          ]
        ],
        "sz": 1185,
        "sha": "b59d6a07d3a6a0e42b74b08e939dd843ccf671054fe708193c462b5b2a883f3b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/d8.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 714,
        "ms": {
          "file": {
            "size": 1224.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 2.0,
            "char_entropy": 4.27,
            "unique_chars": 81.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 792.5,
            "high_byte_ratio": 0.34,
            "lines_over_1000": 1.0,
            "max_line_length": 1362.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 416.0,
            "last_line_length": 223.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 569.5,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            121,
            "focusable"
          ],
          [
            135,
            "focusableInTouchMode"
          ],
          [
            156,
            "clipChildren"
          ],
          [
            171,
            "layout_width"
          ],
          [
            186,
            "layout_height"
          ],
          [
            204,
            "layout_marginBottom"
          ],
          [
            230,
            "scaleType"
          ],
          [
            244,
            "indeterminateTint"
          ],
          [
            301,
            "layout_constraintEnd_toEndOf"
          ],
          [
            330,
            "layout_constraintStart_toStartOf"
          ],
          [
            365,
            "ImageView"
          ],
          [
            379,
            "ProgressBar"
          ],
          [
            393,
            "android"
          ],
          [
            401,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            459,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            501,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1224,
        "sha": "fce7bda804dad5b8c26b750db2918a1ee3608691162c6de3c9369bca1f31863b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dD.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 715,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.86,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 221.0
          },
          "image": {
            "width": 16.0,
            "height": 16.0,
            "channels": 1.0,
            "r_entropy": 0.74,
            "pixel_entropy": 0.74,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 4.12
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            168,
            "IDAT"
          ],
          [
            213,
            "IEND"
          ]
        ],
        "sz": 221,
        "sha": "3e09afa21c45372c035598c017c8fb405a6d678e6cb84dc857581cb3b40e482d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dH.9.png",
        "type": "png"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 716,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 2.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 10603.0
          },
          "image": {
            "width": 800.0,
            "height": 800.0,
            "channels": 1.0,
            "r_entropy": 0.76,
            "edge_density": 0.01,
            "pixel_entropy": 0.76,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.62
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            2271,
            "8V0G"
          ],
          [
            3349,
            "62ZS"
          ],
          [
            4693,
            "d.sk"
          ],
          [
            9276,
            "IDAT"
          ],
          [
            10595,
            "IEND"
          ]
        ],
        "sz": 10603,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.01"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "53d017a24efd673a365f9545c327d17c1705a2b00caa0e884ec8d6a3c7d9ae3c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dL.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 717,
        "ms": {
          "file": {
            "size": 816.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 4.0,
            "char_entropy": 3.73,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.25,
            "high_byte_ratio": 0.4,
            "max_line_length": 896.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 338.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 896.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 365.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            99,
            "drawable"
          ],
          [
            126,
            "android"
          ],
          [
            136,
            "animated-selector"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            201,
            "item"
          ],
          [
            206,
            "transition"
          ]
        ],
        "sz": 816,
        "sha": "9c7d75b1eec4f54531f7a4b6ced4c24b2015d85a2d1d8cefe49dc4dafbcd93fc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dV.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 718,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.26
          },
          "file": {
            "size": 1371.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 1.0,
            "r_entropy": 2.28,
            "edge_density": 0.04,
            "pixel_entropy": 2.28,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 7.31
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            435,
            "IDATX"
          ],
          [
            966,
            "XAMX"
          ],
          [
            1363,
            "IEND"
          ]
        ],
        "sz": 1371,
        "sha": "94c16e1ba4ebb440565432aaac8a2548ec236d5c1fbc71f097771f9acec08242",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/da.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 719,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.02,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 502.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 502.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 150.0,
            "last_line_length": 502.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "be3886ef2d030bcc3f43596eede30b13c06c56421d039233b2aae9c05361756c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dj.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 720,
        "ms": {
          "file": {
            "size": 644.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.21,
            "total_lines": 3.0,
            "char_entropy": 4.34,
            "unique_chars": 74.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 263.33,
            "high_byte_ratio": 0.28,
            "max_line_length": 614.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 238.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 248.19,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            164,
            "==M12,16.41l-6.71,-6.7l1.42,-1.42l5.29,5.3l5.29,-5.3l1.42,1.42z"
          ],
          [
            230,
            "android"
          ],
          [
            238,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            285,
            "path"
          ],
          [
            292,
            "vector"
          ]
        ],
        "sz": 644,
        "sha": "7be3ef82378a7afd0a533923ab8000a50ac27a60b395339854c5457a4b726d34",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dk.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 721,
        "ms": {
          "file": {
            "size": 1128.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.65,
            "unique_chars": 74.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 301.2,
            "high_byte_ratio": 0.38,
            "max_line_length": 564.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 513.0,
            "last_line_length": 343.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 182.43,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "propertyName"
          ],
          [
            153,
            "ordering"
          ],
          [
            164,
            "alpha"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "objectAnimator"
          ]
        ],
        "sz": 1128,
        "sha": "2bedcbdf6c14a5911200ced4bcce50323c2484263cb203f3793dfa5ccc7f6ad9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dp.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 722,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.1,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 210.0
          },
          "image": {
            "width": 30.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.85,
            "edge_density": 0.03,
            "pixel_entropy": 0.85,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 3.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            202,
            "IEND"
          ]
        ],
        "sz": 210,
        "sha": "7656f2f19a84cefc2bf9fafc00760216775d333fc0b08eb85ff1e0006b46fc20",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/dv.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 723,
        "ms": {
          "file": {
            "size": 3472.0
          },
          "text": {
            "tab_count": 31.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 15.0,
            "char_entropy": 3.8,
            "unique_chars": 101.0,
            "lines_over_200": 6.0,
            "lines_over_500": 2.0,
            "avg_line_length": 327.07,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 2.0,
            "max_line_length": 1847.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 1355.0,
            "empty_line_ratio": 0.27,
            "last_line_length": 353.0,
            "long_token_count": 15.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 495.86,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            190,
            "textAppearance"
          ],
          [
            205,
            "textColor"
          ],
          [
            217,
            "ellipsize"
          ],
          [
            231,
            "gravity"
          ],
          [
            241,
            "layout_gravity"
          ],
          [
            258,
            "orientation"
          ],
          [
            275,
            "background"
          ],
          [
            290,
            "paddingLeft"
          ],
          [
            302,
            "paddingRight"
          ],
          [
            317,
            "focusable"
          ],
          [
            329,
            "visibility"
          ],
          [
            342,
            "layout_width"
          ],
          [
            357,
            "layout_height"
          ],
          [
            375,
            "layout_marginLeft"
          ],
          [
            395,
            "layout_marginRight"
          ],
          [
            416,
            "layout_marginBottom"
          ],
          [
            436,
            "scaleType"
          ],
          [
            448,
            "singleLine"
          ],
          [
            463,
            "drawablePadding"
          ],
          [
            479,
            "layout_weight"
          ],
          [
            495,
            "inputType"
          ],
          [
            509,
            "dropDownAnchor"
          ],
          [
            524,
            "imeOptions"
          ],
          [
            539,
            "contentDescription"
          ],
          [
            560,
            "dropDownHeight"
          ],
          [
            577,
            "dropDownHorizontalOffset"
          ],
          [
            604,
            "dropDownVerticalOffset"
          ],
          [
            629,
            "layoutDirection"
          ],
          [
            645,
            "ImageView"
          ],
          [
            657,
            "LinearLayout"
          ],
          [
            674,
            "TextView"
          ],
          [
            685,
            "android"
          ],
          [
            693,
            "77androidx.appcompat.widget.SearchView$SearchAutoComplete"
          ],
          [
            759,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            814,
            "view"
          ]
        ],
        "sz": 3472,
        "sha": "f657aa278fdef7f18df40c73ad80d7fa17a6382f9ef8b5a2039cd05ccc2f3fe1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/e1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 724,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.36,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 196.0
          },
          "image": {
            "width": 15.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 0.61,
            "edge_density": 0.06,
            "pixel_entropy": 0.61,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 3.66
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            188,
            "IEND"
          ]
        ],
        "sz": 196,
        "sha": "c86d934a5809f32599e42143e306ed6e066b224fe1fa3f32ade1603074e5b136",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/e4.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 725,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "de2a9556b7d58bb36af3f7e7dd6a2101203e99d39c70ee620e230b12f18d84c0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/e5.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 726,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.09,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1544.0
          },
          "image": {
            "width": 128.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 3.04,
            "edge_density": 0.03,
            "pixel_entropy": 3.04,
            "histogram_flatness": 0.38
          },
          "binary": {
            "overall_entropy": 7.54
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            196,
            "/IDATx"
          ],
          [
            1536,
            "IEND"
          ]
        ],
        "sz": 1544,
        "sha": "1f7dd8b3521353af473f41850887e9385cf61c390c6e34e4e2bd991921ccfdf8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eB.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 727,
        "ms": {
          "file": {
            "size": 752.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.31,
            "space_count": 36.0,
            "total_lines": 11.0,
            "char_entropy": 4.5,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "avg_line_length": 80.55,
            "high_byte_ratio": 0.24,
            "max_line_length": 460.0,
            "non_ascii_ratio": 0.24,
            "null_byte_count": 259.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.07,
            "most_common_ratio": 0.29,
            "line_length_stddev": 125.21,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "name"
          ],
          [
            97,
            "height"
          ],
          [
            112,
            "viewportWidth"
          ],
          [
            130,
            "viewportHeight"
          ],
          [
            145,
            "fillColor"
          ],
          [
            159,
            "pathData"
          ],
          [
            170,
            "strokeWidth"
          ],
          [
            182,
            "}}M 19 6.41 L 17.59 5 L 12 10.59 L 6.41 5 L 5 6.41 L 10.59 12 L 5 17.59 L 6.41 19 L 12 13.41 L 17.59 19 L 19 17.59 L 13.41 12 Z"
          ],
          [
            312,
            "android"
          ],
          [
            320,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            367,
            "path"
          ],
          [
            374,
            "vector"
          ]
        ],
        "sz": 752,
        "sha": "f739e5568bea1abf27dcc22657b8e39b85f22b4a98a500bfe8b29b11701cfa55",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eI.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 2,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 728,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.16,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 223.0
          },
          "image": {
            "width": 8.0,
            "height": 8.0,
            "channels": 3.0,
            "b_entropy": 0.64,
            "g_entropy": 0.64,
            "r_entropy": 0.64,
            "pixel_entropy": 2.23,
            "histogram_flatness": 0.28
          },
          "binary": {
            "overall_entropy": 4.27
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            215,
            "IEND"
          ]
        ],
        "sz": 223,
        "sha": "e17761ed280edd93d7141bd504b70f9e9e15a8652288d9e6333bf4ce964ef844",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eK.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 729,
        "ms": {
          "file": {
            "size": 628.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.03,
            "total_lines": 2.0,
            "char_entropy": 3.67,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 417.5,
            "high_byte_ratio": 0.37,
            "max_line_length": 817.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 280.0,
            "last_line_length": 817.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 399.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "height"
          ],
          [
            87,
            "shape"
          ],
          [
            95,
            "color"
          ],
          [
            103,
            "android"
          ],
          [
            111,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            158,
            "item"
          ],
          [
            165,
            "selector"
          ],
          [
            184,
            "size"
          ],
          [
            191,
            "solid"
          ]
        ],
        "sz": 628,
        "sha": "4d681e064532838bfd653870840ed850d9a65e8d66c7d20f5d1d60943f218ea2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eN.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 730,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.19,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 178.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 228.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.69,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "eec36f52cd57abc59b147d444582dea8bc413258d732c59556e13836e2a2101e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eQ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 731,
        "ms": {
          "file": {
            "size": 508.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.89,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "avg_line_length": 214.67,
            "high_byte_ratio": 0.32,
            "max_line_length": 446.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 208.0,
            "last_line_length": 171.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 173.82,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "interpolator"
          ],
          [
            89,
            "duration"
          ],
          [
            100,
            "shareInterpolator"
          ],
          [
            118,
            "fromAlpha"
          ],
          [
            132,
            "toAlpha"
          ],
          [
            142,
            "alpha"
          ],
          [
            150,
            "android"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 508,
        "sha": "d76cc885f63283e9f0e1d0835fc4ef3bc39db5a83f5df681133f701c2d360aa7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eU.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 732,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.31
          },
          "file": {
            "size": 199.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.36,
            "pixel_entropy": 1.36,
            "histogram_flatness": 0.17
          },
          "binary": {
            "overall_entropy": 6.58
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            116,
            "157.57.59.133:20174"
          ],
          [
            159,
            "kpid6x"
          ],
          [
            191,
            "IEND"
          ]
        ],
        "sz": 199,
        "sha": "66356f564f051a568e25071f60da312c418309f9129773aceb2246773458681c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/eX.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 733,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 214.0
          },
          "image": {
            "width": 32.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 1.18,
            "pixel_entropy": 1.18,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 6.74
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            206,
            "IEND"
          ]
        ],
        "sz": 214,
        "sha": "055d5f87b1bbb6677096bc7eb7eace57e40216cb97f2b2b926d26c1263f9abce",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ee.png",
        "type": "png"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 734,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 167.0,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 167.0
          },
          "image": {
            "width": 1.0,
            "height": 1.0,
            "channels": 1.0
          },
          "binary": {
            "overall_entropy": 3.42
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            137,
            "IDAT"
          ],
          [
            159,
            "IEND"
          ]
        ],
        "sz": 167,
        "sha": "378694706fb7256dd2248e2af854efd71ec7e8885f61da2e16a2bd32fcf3d0a9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ei.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 735,
        "ms": {
          "file": {
            "size": 328.0
          },
          "text": {
            "digit_ratio": 0.27,
            "space_count": 5.0,
            "total_lines": 1.0,
            "char_entropy": 4.2,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "avg_line_length": 380.0,
            "high_byte_ratio": 0.21,
            "max_line_length": 380.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 124.0,
            "last_line_length": 380.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 328,
        "sha": "0ab3bc82b3b9fd8499202cafe3d494a9f66fba248d01e90b90e932c8849947cc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ej.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 736,
        "ms": {
          "file": {
            "size": 1580.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 9.0,
            "char_entropy": 3.87,
            "unique_chars": 78.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 243.33,
            "high_byte_ratio": 0.42,
            "lines_over_1000": 1.0,
            "max_line_length": 1031.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 607.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 243.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 335.49,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "orientation"
          ],
          [
            133,
            "paddingLeft"
          ],
          [
            145,
            "paddingTop"
          ],
          [
            158,
            "paddingRight"
          ],
          [
            173,
            "paddingBottom"
          ],
          [
            189,
            "layout_width"
          ],
          [
            204,
            "layout_height"
          ],
          [
            227,
            "layout_weight"
          ],
          [
            243,
            "inputType"
          ],
          [
            255,
            "imeOptions"
          ],
          [
            268,
            "LinearLayout"
          ],
          [
            283,
            "ScrollView"
          ],
          [
            298,
            "Space"
          ],
          [
            306,
            "android"
          ],
          [
            314,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            372,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            428,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1580,
        "sha": "11febe18933fb688019ed98f94274a77354de48b14066573aa85ef0bf84e31f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/em.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 737,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.19,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 178.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 228.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.69,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "bc48e45fd3b036434134b7b0203f0b4e4c6e3b15dd4062f20872e1f4f0621c4b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/et.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 738,
        "ms": {
          "file": {
            "size": 1748.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.03,
            "total_lines": 7.0,
            "char_entropy": 3.99,
            "unique_chars": 91.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 338.29,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1124.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 665.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 263.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 351.89,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            130,
            "gravity"
          ],
          [
            140,
            "layout_gravity"
          ],
          [
            157,
            "orientation"
          ],
          [
            174,
            "paddingTop"
          ],
          [
            187,
            "paddingBottom"
          ],
          [
            203,
            "layout_width"
          ],
          [
            218,
            "layout_height"
          ],
          [
            234,
            "layout_weight"
          ],
          [
            252,
            "insetTop"
          ],
          [
            263,
            "insetBottom"
          ],
          [
            277,
            "contentDescription"
          ],
          [
            298,
            "icon"
          ],
          [
            305,
            "iconGravity"
          ],
          [
            319,
            "iconPadding"
          ],
          [
            333,
            "FrameLayout"
          ],
          [
            345,
            "LinearLayout"
          ],
          [
            362,
            "android"
          ],
          [
            376,
            "11com.google.android.material.button.MaterialButton"
          ],
          [
            428,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            470,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1748,
        "sha": "65d9497bfe9cdd8f4946192bc9cc4c2a8d8ac7e0e7fd66681672cfc9ed7009f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ew.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 739,
        "ms": {
          "file": {
            "size": 484.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 2.0,
            "char_entropy": 3.71,
            "unique_chars": 48.0,
            "lines_over_200": 2.0,
            "avg_line_length": 315.5,
            "high_byte_ratio": 0.35,
            "max_line_length": 396.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 208.0,
            "last_line_length": 235.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "line_length_stddev": 80.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            70,
            "shape"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "radius"
          ],
          [
            95,
            "android"
          ],
          [
            105,
            "corners"
          ],
          [
            113,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            168,
            "solid"
          ]
        ],
        "sz": 484,
        "sha": "0ef8e342bdeb5ac15a1b64c4e9b378b04e2910c9505551a3acfdf3092336ba04",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/f1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 740,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.1
          },
          "file": {
            "size": 785.0
          },
          "image": {
            "width": 64.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 1.32,
            "pixel_entropy": 1.32,
            "histogram_flatness": 0.17
          },
          "binary": {
            "overall_entropy": 7.7
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            777,
            "IEND"
          ]
        ],
        "sz": 785,
        "sha": "02ad0ea6ff5a560e947452c7d64f679afa2056b44f86ea3b707a1cb175c2ceb0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/f9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 741,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.2,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 217.0
          },
          "image": {
            "width": 13.0,
            "height": 41.0,
            "channels": 2.0,
            "r_entropy": 1.2,
            "pixel_entropy": 1.2,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 3.72
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT8"
          ],
          [
            209,
            "IEND"
          ]
        ],
        "sz": 217,
        "sha": "7c45e46e405f5b4a3d0c62a22e67010c3327022dd1c1f4bbccea1279a4d1ad74",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fD.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 742,
        "ms": {
          "file": {
            "size": 1352.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.84,
            "unique_chars": 80.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 374.4,
            "high_byte_ratio": 0.42,
            "lines_over_1000": 1.0,
            "max_line_length": 1056.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 522.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 645.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 411.99,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            110,
            "gravity"
          ],
          [
            120,
            "layout_gravity"
          ],
          [
            137,
            "orientation"
          ],
          [
            154,
            "visibility"
          ],
          [
            167,
            "layout_width"
          ],
          [
            182,
            "layout_height"
          ],
          [
            200,
            "layout_marginTop"
          ],
          [
            219,
            "adjustViewBounds"
          ],
          [
            238,
            "maxWidth"
          ],
          [
            247,
            "maxHeight"
          ],
          [
            259,
            "ImageView"
          ],
          [
            271,
            "LinearLayout"
          ],
          [
            288,
            "android"
          ],
          [
            298,
            "android.widget.Space"
          ],
          [
            319,
            "%%androidx.appcompat.widget.DialogTitle"
          ],
          [
            359,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1352,
        "sha": "4247087deaa3172f8323eaac86728e64d8fd403751476fd1a605f34287330fe8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fL.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 743,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 628.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.62,
            "pixel_entropy": 0.62,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 7.55
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            45,
            "MKTQ"
          ],
          [
            620,
            "IEND"
          ]
        ],
        "sz": 628,
        "sha": "87adad32e0ec19c4e920420bf3a06c9f94f6128ed0d866a1891628aeab2cef06",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fM.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 744,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.02,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 237.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.25,
            "pixel_entropy": 0.25,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.81
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            229,
            "IEND"
          ]
        ],
        "sz": 237,
        "sha": "d68d03967fb222f7e35772a2e0637f73b4dd0d6cbb9ee3f2b4432d2f90c257db",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fZ.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 745,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.52,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 267.0
          },
          "image": {
            "width": 16.0,
            "height": 16.0,
            "channels": 2.0,
            "r_entropy": 0.63,
            "pixel_entropy": 0.63,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 3.78
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            259,
            "IEND"
          ]
        ],
        "sz": 267,
        "sha": "f94e2129180c0ba6924430374402456035dcd6b6fff7d05f6de7e24196a3af35",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fr.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 746,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.33,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 212.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 4.0
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            187,
            "UD_E"
          ],
          [
            204,
            "IEND"
          ]
        ],
        "sz": 212,
        "sha": "a77aaa207fd579f64383323b93f048ee9434e345ca8bb641743a77901b4383c2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fv.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 747,
        "ms": {
          "file": {
            "size": 484.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 634.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 634.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 210.0,
            "last_line_length": 634.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            70,
            "shape"
          ],
          [
            78,
            "color"
          ],
          [
            86,
            "radius"
          ],
          [
            95,
            "android"
          ],
          [
            105,
            "corners"
          ],
          [
            113,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            168,
            "solid"
          ]
        ],
        "sz": 484,
        "sha": "90fe4f26a30e6c47b662003817ccc091e232a459369a92d9b0aff2620240908e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fv.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 748,
        "ms": {
          "png": {
            "a_entropy": 1.19,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 335.0
          },
          "image": {
            "width": 88.0,
            "height": 44.0,
            "channels": 4.0,
            "b_entropy": 0.99,
            "g_entropy": 0.99,
            "r_entropy": 0.99,
            "edge_density": 0.02,
            "pixel_entropy": 1.92,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 7.04
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            327,
            "IEND"
          ]
        ],
        "sz": 335,
        "sha": "83a46279e2f65d852c9452c86e38326ef9f3def6f5bec2ef1416c72815a5fbfa",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/fx.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 749,
        "ms": {
          "file": {
            "size": 816.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "space_count": 3.0,
            "total_lines": 4.0,
            "char_entropy": 3.74,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.25,
            "high_byte_ratio": 0.4,
            "max_line_length": 896.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 341.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 896.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 365.5,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            99,
            "drawable"
          ],
          [
            126,
            "android"
          ],
          [
            136,
            "animated-selector"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            201,
            "item"
          ],
          [
            206,
            "transition"
          ]
        ],
        "sz": 816,
        "sha": "a0014d0ac2fb45a64224323659757d29334406cd8dc9733be0fb82fafa6e64dc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gA.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 750,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.37,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 214.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 4.0,
            "pixel_entropy": 1.5,
            "histogram_flatness": 0.19
          },
          "binary": {
            "overall_entropy": 3.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            206,
            "IEND"
          ]
        ],
        "sz": 214,
        "sha": "727d78fec3f903a271c0476a50e8c064d28b32f7829b016ae0a07da53b83b281",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gG.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 751,
        "ms": {
          "png": {
            "a_entropy": 0.21,
            "bit_depth": 8.0,
            "chunks_idat": 2.0,
            "chunks_total": 4.0,
            "compression_ratio": 0.14
          },
          "file": {
            "size": 11463.0
          },
          "image": {
            "width": 144.0,
            "height": 144.0,
            "channels": 4.0,
            "b_entropy": 2.78,
            "g_entropy": 2.98,
            "r_entropy": 2.54,
            "edge_density": 0.06,
            "pixel_entropy": 2.31,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 7.98
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            6458,
            "KUWH"
          ],
          [
            8241,
            "IDATST"
          ],
          [
            11455,
            "IEND"
          ]
        ],
        "sz": 11463,
        "sha": "72cff1bbe1520477dfc7b8ffabfd413ba5c3ea059df9185d92c2d941e2545e25",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gI.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 752,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.08,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 199.0
          },
          "image": {
            "width": 38.0,
            "height": 33.0,
            "channels": 2.0,
            "r_entropy": 0.44,
            "pixel_entropy": 0.44,
            "histogram_flatness": 0.05
          },
          "binary": {
            "overall_entropy": 4.08
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            191,
            "IEND"
          ]
        ],
        "sz": 199,
        "sha": "682c466d3e4f39e31f114abc1632d85e734557bd39814e3ba7d7c61eae2d069b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gL.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 753,
        "ms": {
          "file": {
            "size": 704.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.23,
            "total_lines": 11.0,
            "char_entropy": 4.4,
            "unique_chars": 75.0,
            "lines_over_200": 1.0,
            "avg_line_length": 77.27,
            "high_byte_ratio": 0.27,
            "max_line_length": 416.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 254.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 112.8,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "height"
          ],
          [
            105,
            "viewportWidth"
          ],
          [
            123,
            "viewportHeight"
          ],
          [
            138,
            "fillColor"
          ],
          [
            152,
            "pathData"
          ],
          [
            163,
            "strokeColor"
          ],
          [
            177,
            "strokeWidth"
          ],
          [
            189,
            "HHM9.189,15.939l-3.127,-3.128l-1.061,1.061l4.189,4.189l9,-9l-1.061,-1.061z"
          ],
          [
            266,
            "android"
          ],
          [
            274,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            321,
            "path"
          ],
          [
            328,
            "vector"
          ]
        ],
        "sz": 704,
        "sha": "404cd2839d7d0aaba478d38e3298fd1b5fec8d14dd616abdf0da81cf86d913da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gP.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 754,
        "ms": {
          "file": {
            "size": 2056.0
          },
          "text": {
            "tab_count": 17.0,
            "digit_ratio": 0.02,
            "total_lines": 15.0,
            "char_entropy": 3.87,
            "unique_chars": 90.0,
            "lines_over_200": 7.0,
            "lines_over_500": 1.0,
            "avg_line_length": 190.13,
            "high_byte_ratio": 0.42,
            "max_line_length": 522.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 770.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 171.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 147.72,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            158,
            "textAppearance"
          ],
          [
            173,
            "textColor"
          ],
          [
            187,
            "gravity"
          ],
          [
            197,
            "orientation"
          ],
          [
            216,
            "paddingLeft"
          ],
          [
            228,
            "paddingTop"
          ],
          [
            241,
            "paddingRight"
          ],
          [
            256,
            "paddingBottom"
          ],
          [
            272,
            "layout_width"
          ],
          [
            287,
            "layout_height"
          ],
          [
            305,
            "layout_marginRight"
          ],
          [
            326,
            "minWidth"
          ],
          [
            335,
            "minHeight"
          ],
          [
            349,
            "maxLines"
          ],
          [
            358,
            "singleLine"
          ],
          [
            371,
            "layout_weight"
          ],
          [
            387,
            "layout_below"
          ],
          [
            404,
            "layout_alignLeft"
          ],
          [
            421,
            "paddingStart"
          ],
          [
            436,
            "paddingEnd"
          ],
          [
            451,
            "layout_marginEnd"
          ],
          [
            470,
            "layout_alignStart"
          ],
          [
            488,
            "ImageView"
          ],
          [
            500,
            "LinearLayout"
          ],
          [
            517,
            "RelativeLayout"
          ],
          [
            534,
            "TextView"
          ],
          [
            545,
            "android"
          ],
          [
            553,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2056,
        "sha": "007444550981bc724c610fc7eb965483fde005ea827e0616dbe507cdd7660e01",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gT.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 755,
        "ms": {
          "file": {
            "size": 388.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 2.0,
            "char_entropy": 3.93,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 240.5,
            "high_byte_ratio": 0.29,
            "max_line_length": 322.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 157.0,
            "last_line_length": 159.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 81.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromAlpha"
          ],
          [
            104,
            "toAlpha"
          ],
          [
            114,
            "alpha"
          ],
          [
            122,
            "android"
          ],
          [
            130,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 388,
        "sha": "bbb0848d98a57a7d05ccddd0311383eef9842d3b1a8c361c429fa060de6f05b2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gT1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 756,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.12,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1098.0
          },
          "image": {
            "width": 96.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 2.95,
            "edge_density": 0.05,
            "pixel_entropy": 2.95,
            "histogram_flatness": 0.37
          },
          "binary": {
            "overall_entropy": 7.41
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            1090,
            "IEND"
          ]
        ],
        "sz": 1098,
        "sha": "00a1ac74d8164cb5c4749a0b2e77e2c6da4a90abe873d8604f29841c19357c66",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gV.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 757,
        "ms": {
          "file": {
            "size": 688.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 3.85,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 439.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 859.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 298.0,
            "last_line_length": 859.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 419.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "name"
          ],
          [
            85,
            "drawable"
          ],
          [
            94,
            "animation"
          ],
          [
            108,
            "android"
          ],
          [
            118,
            "animated-vector"
          ],
          [
            136,
            "box_inner_merged"
          ],
          [
            155,
            "box_outer_merged"
          ],
          [
            172,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            217,
            "icon_null"
          ],
          [
            231,
            "target"
          ]
        ],
        "sz": 688,
        "sha": "25540b6b153568e17266efa09f18035315686c25d6bd06bf40894d5e64ed202a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gZ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 758,
        "ms": {
          "file": {
            "size": 1216.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "total_lines": 7.0,
            "char_entropy": 3.8,
            "unique_chars": 74.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 231.71,
            "high_byte_ratio": 0.38,
            "max_line_length": 517.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 522.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 186.87,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "state_enabled"
          ],
          [
            114,
            "duration"
          ],
          [
            125,
            "valueTo"
          ],
          [
            133,
            "valueType"
          ],
          [
            145,
            "propertyName"
          ],
          [
            162,
            "state_liftable"
          ],
          [
            177,
            "state_lifted"
          ],
          [
            194,
            "android"
          ],
          [
            208,
            "elevation"
          ],
          [
            220,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            262,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            309,
            "item"
          ],
          [
            316,
            "objectAnimator"
          ],
          [
            333,
            "selector"
          ]
        ],
        "sz": 1216,
        "sha": "338d6b8ec0e4811a7876edb3aca36e8312e631c8530f5d4df9b34ec7cc71715d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/g_.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 759,
        "ms": {
          "file": {
            "size": 1260.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 4.0,
            "char_entropy": 4.1,
            "unique_chars": 84.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 421.25,
            "high_byte_ratio": 0.38,
            "max_line_length": 989.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 457.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 509.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 374.95,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "textSize"
          ],
          [
            123,
            "textStyle"
          ],
          [
            135,
            "textColor"
          ],
          [
            149,
            "layout_gravity"
          ],
          [
            169,
            "background"
          ],
          [
            182,
            "focusable"
          ],
          [
            194,
            "layout_width"
          ],
          [
            209,
            "layout_height"
          ],
          [
            227,
            "layout_marginBottom"
          ],
          [
            247,
            "scaleType"
          ],
          [
            261,
            "FrameLayout"
          ],
          [
            275,
            "android"
          ],
          [
            283,
            "androidx.camera.view.PreviewView"
          ],
          [
            318,
            "''androidx.core.remo.utils.StrokeTextView"
          ],
          [
            366,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            408,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            453,
            "!!pl.droidsonroids.gif.GifImageView"
          ]
        ],
        "sz": 1260,
        "sha": "30acb463bb717343e50167722560cc13746a71b81546aec95d75660d3ab59ee2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gc.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 760,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.15,
            "space_count": 8.0,
            "total_lines": 3.0,
            "char_entropy": 4.21,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 241.33,
            "high_byte_ratio": 0.29,
            "max_line_length": 374.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 224.0,
            "last_line_length": 35.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 147.87,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            197,
            "android"
          ],
          [
            205,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            252,
            "path"
          ],
          [
            259,
            "vector"
          ]
        ],
        "sz": 588,
        "sha": "fd40ed885e33b7380e22b11a8ea976b517e486bc157aa7e0a71ea31499f689c2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ge.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 761,
        "ms": {
          "file": {
            "size": 680.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 3.82,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 217.25,
            "high_byte_ratio": 0.33,
            "max_line_length": 671.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 297.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 671.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 270.89,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "name"
          ],
          [
            85,
            "drawable"
          ],
          [
            94,
            "animation"
          ],
          [
            108,
            "android"
          ],
          [
            118,
            "animated-vector"
          ],
          [
            134,
            "dot_group"
          ],
          [
            146,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            191,
            "ring_outer"
          ],
          [
            206,
            "ring_outer_path"
          ],
          [
            224,
            "target"
          ]
        ],
        "sz": 680,
        "sha": "dba56369f5c4c1ffd92c7c2f2ecb9a726f960bc143a8154fdb9119507ab20d51",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/gl.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 762,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.29,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 190.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 0.68,
            "edge_density": 0.06,
            "pixel_entropy": 0.68,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 3.92
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            182,
            "IEND"
          ]
        ],
        "sz": 190,
        "sha": "aa61229cd70239278109c5ebe725e72484d0252efa4902a17192366942749289",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/h0.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 763,
        "ms": {
          "file": {
            "size": 1332.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.02,
            "space_count": 4.0,
            "total_lines": 25.0,
            "char_entropy": 3.7,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 72.56,
            "high_byte_ratio": 0.41,
            "max_line_length": 294.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 558.0,
            "empty_line_ratio": 0.04,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 68.2,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "state_checked"
          ],
          [
            111,
            "drawable"
          ],
          [
            138,
            "state_indeterminate"
          ],
          [
            160,
            "android"
          ],
          [
            170,
            "animated-selector"
          ],
          [
            194,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            236,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            283,
            "item"
          ],
          [
            288,
            "transition"
          ]
        ],
        "sz": 1332,
        "sha": "dd210b35a30471ef11dda0d10e276a8b55bf8c671c87149eb1544c31e4cb27e4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/hE.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 764,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 4.22,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 572.0,
            "high_byte_ratio": 0.28,
            "max_line_length": 572.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 163.0,
            "last_line_length": 572.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.28,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            64,
            "layout_width"
          ],
          [
            79,
            "layout_height"
          ],
          [
            97,
            "android"
          ],
          [
            105,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            163,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            205,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 464,
        "sha": "3db01fea95915b6404ceb2bc6fb9b9e62e306425bdc22945adf6f27bdab76584",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/hh.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 765,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 3.36,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 215.0
          },
          "image": {
            "width": 8.0,
            "height": 8.0,
            "channels": 1.0,
            "r_entropy": 0.64,
            "pixel_entropy": 0.64,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 3.85
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            207,
            "IEND"
          ]
        ],
        "sz": 215,
        "sha": "a8676a1793ac8310ffb12986232df66df092d29c242aeedc2b73556c010d38dc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/hj.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 766,
        "ms": {
          "file": {
            "size": 692.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.2,
            "total_lines": 11.0,
            "char_entropy": 4.38,
            "unique_chars": 78.0,
            "lines_over_200": 1.0,
            "avg_line_length": 77.09,
            "high_byte_ratio": 0.29,
            "max_line_length": 406.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 250.0,
            "last_line_length": 3.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 108.92,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            97,
            "height"
          ],
          [
            112,
            "autoMirrored"
          ],
          [
            127,
            "viewportWidth"
          ],
          [
            145,
            "viewportHeight"
          ],
          [
            160,
            "fillColor"
          ],
          [
            174,
            "pathData"
          ],
          [
            183,
            "AAM20,11L7.8,11l5.6,-5.6L12,4l-8,8l8,8l1.4,-1.4L7.8,13L20,13L20,11z"
          ],
          [
            253,
            "android"
          ],
          [
            261,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            308,
            "path"
          ],
          [
            315,
            "vector"
          ]
        ],
        "sz": 692,
        "sha": "e03ea5254c19d5f0b55de5a5235311648a7d245cb39fb783d86eb2c7f3294c33",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/hu.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 767,
        "ms": {
          "file": {
            "size": 696.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.34,
            "space_count": 9.0,
            "total_lines": 3.0,
            "char_entropy": 4.56,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "avg_line_length": 278.67,
            "high_byte_ratio": 0.25,
            "max_line_length": 492.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 226.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 187.8,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M20,3h-1L19,1h-2v2L7,3L7,1L5,1v2L4,3c-1.1,0 -2,0.9 -2,2v16c0,1.1 0.9,2 2,2h16c1.1,0 2,-0.9 2,-2L22,5c0,-1.1 -0.9,-2 -2,-2zM20,21"
          ],
          [
            304,
            "android"
          ],
          [
            312,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            359,
            "path"
          ],
          [
            366,
            "vector"
          ]
        ],
        "sz": 696,
        "sha": "1ae3408e3c2df83732e59913f5ff206b910344050c6801c1ab27919faf72e774",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/hv.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 768,
        "ms": {
          "file": {
            "size": 440.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 3.0,
            "char_entropy": 4.09,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "avg_line_length": 188.67,
            "high_byte_ratio": 0.34,
            "max_line_length": 441.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 165.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 441.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 185.58,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            70,
            "textAppearance"
          ],
          [
            90,
            "layout_width"
          ],
          [
            105,
            "layout_height"
          ],
          [
            121,
            "singleLine"
          ],
          [
            136,
            "Chronometer"
          ],
          [
            150,
            "android"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 440,
        "sha": "aeab486556250aca948a0cef49c115b09f4ddbd925adf840492f81db49409ac3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/iL.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 769,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.19,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 178.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 228.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.69,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "1409c3a65d50154add1773d773d37af3b7c4a90594cd7f35ac7001970a437c4f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/iV.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 770,
        "ms": {
          "file": {
            "size": 1176.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 2.0,
            "char_entropy": 4.04,
            "unique_chars": 80.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 749.5,
            "high_byte_ratio": 0.32,
            "max_line_length": 928.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 481.0,
            "last_line_length": 571.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 178.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            126,
            "name"
          ],
          [
            133,
            "height"
          ],
          [
            148,
            "viewportWidth"
          ],
          [
            166,
            "viewportHeight"
          ],
          [
            181,
            "fillColor"
          ],
          [
            195,
            "pathData"
          ],
          [
            206,
            "strokeColor"
          ],
          [
            220,
            "strokeWidth"
          ],
          [
            234,
            "trimPathEnd"
          ],
          [
            246,
            "strokeLineCap"
          ],
          [
            264,
            "aapt"
          ],
          [
            271,
            "android"
          ],
          [
            279,
            "clip-path"
          ],
          [
            299,
            "eye_mask"
          ],
          [
            310,
            "group"
          ],
          [
            318,
            "http://schemas.android.com/aapt"
          ],
          [
            350,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            397,
            "path"
          ],
          [
            404,
            "strike_through"
          ],
          [
            421,
            "vector"
          ]
        ],
        "sz": 1176,
        "sha": "c9a46361f87cdb2f5f512023d7158677cb0e328420669f07ff0762c4f11b7c6f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ib.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 771,
        "ms": {
          "file": {
            "size": 1012.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.46,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1450.0,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 1450.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 448.0,
            "last_line_length": 1450.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_focused"
          ],
          [
            84,
            "state_enabled"
          ],
          [
            100,
            "state_pressed"
          ],
          [
            118,
            "drawable"
          ],
          [
            129,
            "android"
          ],
          [
            137,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            184,
            "item"
          ],
          [
            191,
            "selector"
          ]
        ],
        "sz": 1012,
        "sha": "f50f311505b2d2b9f50b93623d2846671f86471173614e0b9b284984b116214e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ih.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 772,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.67,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 178.0
          },
          "image": {
            "width": 12.0,
            "height": 11.0,
            "channels": 2.0,
            "r_entropy": 0.27,
            "pixel_entropy": 0.27,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.68
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            170,
            "IEND"
          ]
        ],
        "sz": 178,
        "sha": "9fd37c82f87df00464554344ddddea55e480d09c33b505ac13252036d4d6276e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ii.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 773,
        "ms": {
          "file": {
            "size": 624.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 9.0,
            "char_entropy": 4.24,
            "unique_chars": 66.0,
            "lines_over_200": 2.0,
            "avg_line_length": 87.33,
            "high_byte_ratio": 0.32,
            "max_line_length": 333.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 222.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 103.18,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            86,
            "gravity"
          ],
          [
            96,
            "layout_gravity"
          ],
          [
            116,
            "layout_width"
          ],
          [
            131,
            "layout_height"
          ],
          [
            149,
            "firstBaselineToTopHeight"
          ],
          [
            176,
            "TextView"
          ],
          [
            187,
            "android"
          ],
          [
            201,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            243,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 624,
        "sha": "a9c50a07f100545495881717958e068c9a7e88c905c96698468e0c0e5dcbd36c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/iw.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 774,
        "ms": {
          "file": {
            "size": 796.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.46,
            "space_count": 20.0,
            "total_lines": 3.0,
            "char_entropy": 4.73,
            "unique_chars": 75.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 313.33,
            "high_byte_ratio": 0.23,
            "max_line_length": 590.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 219.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.23,
            "line_length_stddev": 226.58,
            "non_printable_ratio": 0.36,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M19,2h-4.18C14.4,0.84 13.3,0 12,0c-1.3,0 -2.4,0.84 -2.82,2L5,2c-1.1,0 -2,0.9 -2,2v16c0,1.1 0.9,2 2,2h14c1.1,0 2,-0.9 2,-2L21,4c0"
          ],
          [
            406,
            "android"
          ],
          [
            414,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            461,
            "path"
          ],
          [
            468,
            "vector"
          ]
        ],
        "sz": 796,
        "sha": "a3dbfe4e5cb06788f6d57bde7b908ec285643261bd21abf1ae7318d2aca1bc39",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/iw1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 775,
        "ms": {
          "file": {
            "size": 1120.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.54,
            "space_count": 16.0,
            "total_lines": 3.0,
            "char_entropy": 4.53,
            "unique_chars": 81.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 458.67,
            "high_byte_ratio": 0.28,
            "max_line_length": 938.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 354.0,
            "last_line_length": 431.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.26,
            "line_length_stddev": 380.58,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "height"
          ],
          [
            113,
            "viewportWidth"
          ],
          [
            131,
            "viewportHeight"
          ],
          [
            146,
            "fillColor"
          ],
          [
            160,
            "pathData"
          ],
          [
            171,
            "strokeColor"
          ],
          [
            185,
            "strokeWidth"
          ],
          [
            199,
            "fillType"
          ],
          [
            212,
            "M67.4,37C67.4,53.7895 53.7895,67.4 37,67.4C20.2105,67.4 6.6,53.7895 6.6,37C6.6,20.2105 20.2105,6.6 37,6.6C53.7895,6.6 67.4,20.21"
          ],
          [
            355,
            "M73.1,37C73.1,17.0637 56.9373,0.9 37,0.9C17.0627,0.9 0.9,17.0637 0.9,37C0.9,56.9373 17.0627,73.1 37,73.1C56.9373,73.1 73.1,56.93"
          ],
          [
            496,
            "android"
          ],
          [
            504,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            551,
            "path"
          ],
          [
            558,
            "vector"
          ]
        ],
        "sz": 1120,
        "sha": "d4b27253e659a05b5545dfed5b00f2d9a271b33a0a976841723b82005101a2c4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/iz.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 776,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.64,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 184.0
          },
          "image": {
            "width": 24.0,
            "height": 6.0,
            "channels": 2.0,
            "r_entropy": 1.19,
            "edge_density": 0.09,
            "pixel_entropy": 1.19,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 3.75
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            176,
            "IEND"
          ]
        ],
        "sz": 184,
        "sha": "5ae9594240ada5e53500e2524215b3e2b3c91e6dd95b05e0acdd27d9d8c57e72",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/j-.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 777,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.81,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 194.0
          },
          "image": {
            "width": 10.0,
            "height": 12.0,
            "channels": 2.0,
            "r_entropy": 0.82,
            "edge_density": 0.09,
            "pixel_entropy": 0.82,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 3.64
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            153,
            "IDAT"
          ],
          [
            186,
            "IEND"
          ]
        ],
        "sz": 194,
        "sha": "9a9c940ea133f7e0ac8db6f06e13e852508633c21f8c71f297483165a06d92eb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/j9.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 778,
        "ms": {
          "file": {
            "size": 2800.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.03,
            "space_count": 2.0,
            "total_lines": 11.0,
            "char_entropy": 3.92,
            "unique_chars": 103.0,
            "lines_over_200": 4.0,
            "lines_over_500": 3.0,
            "avg_line_length": 356.73,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1525.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 1039.0,
            "empty_line_ratio": 0.27,
            "last_line_length": 921.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 504.44,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            182,
            "gravity"
          ],
          [
            192,
            "layout_gravity"
          ],
          [
            209,
            "orientation"
          ],
          [
            228,
            "padding"
          ],
          [
            238,
            "paddingLeft"
          ],
          [
            250,
            "paddingTop"
          ],
          [
            263,
            "paddingRight"
          ],
          [
            278,
            "paddingBottom"
          ],
          [
            294,
            "focusable"
          ],
          [
            308,
            "focusableInTouchMode"
          ],
          [
            329,
            "layout_width"
          ],
          [
            344,
            "layout_height"
          ],
          [
            362,
            "text"
          ],
          [
            367,
            "layout_weight"
          ],
          [
            385,
            "insetTop"
          ],
          [
            396,
            "insetBottom"
          ],
          [
            410,
            "contentDescription"
          ],
          [
            429,
            "paddingStart"
          ],
          [
            444,
            "paddingEnd"
          ],
          [
            459,
            "firstBaselineToTopHeight"
          ],
          [
            486,
            "icon"
          ],
          [
            491,
            "lineHeight"
          ],
          [
            506,
            "FrameLayout"
          ],
          [
            518,
            "LinearLayout"
          ],
          [
            535,
            "TextView"
          ],
          [
            546,
            "View"
          ],
          [
            553,
            "android"
          ],
          [
            567,
            "11com.google.android.material.button.MaterialButton"
          ],
          [
            619,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            661,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            708,
            "include"
          ],
          [
            718,
            "layout"
          ],
          [
            727,
            "merge"
          ]
        ],
        "sz": 2800,
        "sha": "02514391c7fd07e35e3dd6e0ca9544e48d6386bc89d8dfd2c55e8069adc63f40",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/j9.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 779,
        "ms": {
          "file": {
            "size": 1232.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.0,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.09,
            "unique_chars": 75.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 408.25,
            "high_byte_ratio": 0.37,
            "max_line_length": 775.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 444.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 775.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 339.52,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            114,
            "orientation"
          ],
          [
            131,
            "visibility"
          ],
          [
            144,
            "layout_width"
          ],
          [
            159,
            "layout_height"
          ],
          [
            177,
            "text"
          ],
          [
            182,
            "layout_weight"
          ],
          [
            200,
            "insetTop"
          ],
          [
            211,
            "insetBottom"
          ],
          [
            223,
            "checkedButton"
          ],
          [
            241,
            "selectionRequired"
          ],
          [
            261,
            "singleSelection"
          ],
          [
            279,
            "Button"
          ],
          [
            288,
            "android"
          ],
          [
            302,
            "\u003c\u003ccom.google.android.material.button.MaterialButtonToggleGroup"
          ],
          [
            365,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            407,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1232,
        "sha": "2d03ec48c3972d595045b14dccb07987048ce7466dd8e0d25eacdc6349f3eb4a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 780,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.17,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 196.67,
            "high_byte_ratio": 0.32,
            "max_line_length": 508.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 166.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 508.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.28,
            "line_length_stddev": 222.68,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            70,
            "theme"
          ],
          [
            76,
            "visibility"
          ],
          [
            89,
            "layout_width"
          ],
          [
            104,
            "layout_height"
          ],
          [
            122,
            "android"
          ],
          [
            130,
            "..androidx.appcompat.widget.ActionBarContextView"
          ],
          [
            179,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 464,
        "sha": "724b7a639217631ff1092c9fcb0aee82488d40734765a494d1605d309578f62b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jI.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 781,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 1.47,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 212.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 1.0,
            "r_entropy": 0.47,
            "pixel_entropy": 0.47,
            "histogram_flatness": 0.06
          },
          "binary": {
            "overall_entropy": 3.88
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            204,
            "IEND"
          ]
        ],
        "sz": 212,
        "sha": "0c6328c7b2420570a7ec38b3beb3bac9a29d895ac1ab7239315aba7266418593",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jK.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 782,
        "ms": {
          "file": {
            "size": 396.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 4.0,
            "char_entropy": 3.97,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "avg_line_length": 121.75,
            "high_byte_ratio": 0.29,
            "max_line_length": 234.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 159.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 159.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 86.0,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromYDelta"
          ],
          [
            105,
            "toYDelta"
          ],
          [
            116,
            "android"
          ],
          [
            124,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "translate"
          ]
        ],
        "sz": 396,
        "sha": "0a61ab9fb3d5a2256eb81bd9e63340da925695b00ed53030abfb31d35bd384df",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jR.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 783,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "total_lines": 3.0,
            "char_entropy": 3.6,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 324.67,
            "high_byte_ratio": 0.39,
            "max_line_length": 710.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 319.0,
            "last_line_length": 155.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 273.12,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "color"
          ],
          [
            98,
            "radius"
          ],
          [
            107,
            "android"
          ],
          [
            117,
            "corners"
          ],
          [
            125,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            172,
            "item"
          ],
          [
            179,
            "selector"
          ],
          [
            190,
            "shape"
          ],
          [
            198,
            "solid"
          ],
          [
            206,
            "stroke"
          ]
        ],
        "sz": 724,
        "sha": "ca9836ac848b619ff185f4f782358059212e081ff372afd6905d2ba8235c0fbc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jb.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 784,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.21,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 618.0
          },
          "image": {
            "width": 47.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 1.71,
            "edge_density": 0.1,
            "pixel_entropy": 1.71,
            "histogram_flatness": 0.21
          },
          "binary": {
            "overall_entropy": 6.81
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            177,
            "IDATH"
          ],
          [
            610,
            "IEND"
          ]
        ],
        "sz": 618,
        "sha": "468607601140955b21c6091897bfc65f609d386fa68d56c199201895e03b3fbc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jh.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 785,
        "ms": {
          "file": {
            "size": 1456.0
          },
          "text": {
            "tab_count": 13.0,
            "digit_ratio": 0.73,
            "space_count": 43.0,
            "total_lines": 5.0,
            "char_entropy": 4.84,
            "unique_chars": 73.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 328.4,
            "high_byte_ratio": 0.17,
            "lines_over_1000": 1.0,
            "max_line_length": 1326.0,
            "non_ascii_ratio": 0.17,
            "null_byte_count": 274.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.17,
            "line_length_stddev": 499.32,
            "non_printable_ratio": 0.25,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "viewportWidth"
          ],
          [
            119,
            "viewportHeight"
          ],
          [
            134,
            "fillColor"
          ],
          [
            148,
            "pathData"
          ],
          [
            160,
            "iM684.8,403.2c-12.8,-12.8 -32,-12.8 -44.8,0l-64,64 -61.9,-61.9c-12.8,-12.8 -32,-12.8 -44.8,0 -12.8,12.8 -12.8,32 0,44.8l61.9,61."
          ],
          [
            527,
            "M874.7,202.7L360.5,202.7c-21.3,0 -40.5,8.5 -55.5,23.5l-217.6,234.7c-25.6,27.7 -25.6,72.5 0,100.3l217.6,234.7c14.9,14.9 34.1,23.5"
          ],
          [
            965,
            "android"
          ],
          [
            973,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1020,
            "path"
          ],
          [
            1027,
            "vector"
          ]
        ],
        "sz": 1456,
        "sha": "7aeb3ccf5ef67e8db28afe831d825ab1c38920254af00bdad1ba5abe8442b19f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jk.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 786,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 628.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.62,
            "pixel_entropy": 0.62,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 7.55
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            45,
            "MKTQ"
          ],
          [
            620,
            "IEND"
          ]
        ],
        "sz": 628,
        "sha": "87adad32e0ec19c4e920420bf3a06c9f94f6128ed0d866a1891628aeab2cef06",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jw.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 787,
        "ms": {
          "file": {
            "size": 832.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "space_count": 2.0,
            "total_lines": 15.0,
            "char_entropy": 4.13,
            "unique_chars": 76.0,
            "lines_over_200": 2.0,
            "avg_line_length": 72.93,
            "high_byte_ratio": 0.37,
            "max_line_length": 290.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 295.0,
            "empty_line_ratio": 0.07,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 88.31,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "orientation"
          ],
          [
            109,
            "fitsSystemWindows"
          ],
          [
            129,
            "layout"
          ],
          [
            136,
            "inflatedId"
          ],
          [
            149,
            "layout_width"
          ],
          [
            164,
            "layout_height"
          ],
          [
            182,
            "android"
          ],
          [
            190,
            "00androidx.appcompat.widget.FitWindowsLinearLayout"
          ],
          [
            241,
            "((androidx.appcompat.widget.ViewStubCompat"
          ],
          [
            284,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            331,
            "include"
          ]
        ],
        "sz": 832,
        "sha": "21bd0a4507b840e6f6cfc6eb238cc8aea04ed1e33cd0ce48fc83b4fd3c2ae96f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/jw.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 788,
        "ms": {
          "file": {
            "size": 2896.0
          },
          "text": {
            "tab_count": 18.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 13.0,
            "char_entropy": 3.99,
            "unique_chars": 104.0,
            "lines_over_200": 5.0,
            "lines_over_500": 2.0,
            "avg_line_length": 301.54,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 2.0,
            "max_line_length": 1549.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 1097.0,
            "empty_line_ratio": 0.38,
            "last_line_length": 335.0,
            "long_token_count": 13.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 510.49,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            206,
            "textAppearance"
          ],
          [
            221,
            "textColor"
          ],
          [
            233,
            "ellipsize"
          ],
          [
            247,
            "gravity"
          ],
          [
            257,
            "layout_gravity"
          ],
          [
            277,
            "background"
          ],
          [
            292,
            "paddingLeft"
          ],
          [
            304,
            "paddingRight"
          ],
          [
            319,
            "focusable"
          ],
          [
            331,
            "fadingEdge"
          ],
          [
            344,
            "clickable"
          ],
          [
            356,
            "clipChildren"
          ],
          [
            371,
            "clipToPadding"
          ],
          [
            387,
            "layout_width"
          ],
          [
            402,
            "layout_height"
          ],
          [
            420,
            "layout_marginLeft"
          ],
          [
            440,
            "layout_marginTop"
          ],
          [
            459,
            "layout_marginRight"
          ],
          [
            480,
            "layout_marginBottom"
          ],
          [
            502,
            "minWidth"
          ],
          [
            511,
            "minHeight"
          ],
          [
            525,
            "maxLines"
          ],
          [
            534,
            "singleLine"
          ],
          [
            547,
            "layout_weight"
          ],
          [
            563,
            "layout_below"
          ],
          [
            580,
            "layout_alignLeft"
          ],
          [
            597,
            "fontFamily"
          ],
          [
            610,
            "paddingStart"
          ],
          [
            625,
            "paddingEnd"
          ],
          [
            640,
            "layout_marginStart"
          ],
          [
            661,
            "layout_marginEnd"
          ],
          [
            680,
            "layout_alignStart"
          ],
          [
            698,
            "ImageView"
          ],
          [
            710,
            "LinearLayout"
          ],
          [
            727,
            "RelativeLayout"
          ],
          [
            744,
            "SeekBar"
          ],
          [
            754,
            "TextView"
          ],
          [
            765,
            "android"
          ],
          [
            773,
            "++androidx.preference.UnPressableLinearLayout"
          ],
          [
            819,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            866,
            "sans-serif-condensed"
          ]
        ],
        "sz": 2896,
        "sha": "b1c30e3427daf227c1b04984b407fb1f23f21c5eb87d7700c8d1e632f3f7e5c1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/kB.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 789,
        "ms": {
          "file": {
            "size": 1560.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "total_lines": 4.0,
            "char_entropy": 4.21,
            "unique_chars": 90.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 529.75,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1419.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 506.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 531.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.24,
            "line_length_stddev": 548.07,
            "non_printable_ratio": 0.37,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            126,
            "theme"
          ],
          [
            134,
            "gravity"
          ],
          [
            147,
            "visibility"
          ],
          [
            162,
            "fitsSystemWindows"
          ],
          [
            180,
            "layout_width"
          ],
          [
            195,
            "layout_height"
          ],
          [
            213,
            "layout_alignParentTop"
          ],
          [
            237,
            "touchscreenBlocksFocus"
          ],
          [
            262,
            "keyboardNavigationCluster"
          ],
          [
            290,
            "navigationContentDescription"
          ],
          [
            321,
            "android"
          ],
          [
            329,
            ",,androidx.appcompat.widget.ActionBarContainer"
          ],
          [
            376,
            "..androidx.appcompat.widget.ActionBarContextView"
          ],
          [
            425,
            "00androidx.appcompat.widget.ActionBarOverlayLayout"
          ],
          [
            476,
            "!!androidx.appcompat.widget.Toolbar"
          ],
          [
            518,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            560,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            607,
            "include"
          ],
          [
            617,
            "layout"
          ]
        ],
        "sz": 1560,
        "sha": "23010190f748ea17cfcd8db0bf0e519f4a1ab64b9b1cb803aa1775698e36afa5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/kB1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 790,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 2.47,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 178.0
          },
          "image": {
            "width": 12.0,
            "height": 3.0,
            "channels": 2.0,
            "r_entropy": 1.25,
            "edge_density": 0.21,
            "pixel_entropy": 1.25,
            "histogram_flatness": 0.16
          },
          "binary": {
            "overall_entropy": 3.75
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            141,
            "IDAT"
          ],
          [
            170,
            "IEND"
          ]
        ],
        "sz": 178,
        "sha": "b800fac7d2f0a75b17fad7009707ea49134919e48984e89815a9d24c0fa704d8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/kK.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 791,
        "ms": {
          "file": {
            "size": 712.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 7.0,
            "char_entropy": 3.96,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 135.14,
            "high_byte_ratio": 0.38,
            "max_line_length": 583.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 273.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 185.64,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            89,
            "visibility"
          ],
          [
            102,
            "layout_width"
          ],
          [
            117,
            "layout_height"
          ],
          [
            135,
            "layout_marginLeft"
          ],
          [
            155,
            "layout_marginStart"
          ],
          [
            176,
            "FrameLayout"
          ],
          [
            190,
            "Spinner"
          ],
          [
            200,
            "android"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "include"
          ],
          [
            265,
            "layout"
          ]
        ],
        "sz": 712,
        "sha": "f868ea05be59dccbd6280bae5623f4f694593a6cfa0dc41dda31f30d8a8d2e7b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/kL.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 792,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.16
          },
          "file": {
            "size": 403.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 1.8,
            "pixel_entropy": 1.8,
            "histogram_flatness": 0.22
          },
          "binary": {
            "overall_entropy": 7.32
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            395,
            "IEND"
          ]
        ],
        "sz": 403,
        "sha": "63fad0a19cb9e416586049d40b62161b0cc4c2513d83931d3852e2f5a72e6d13",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/k_.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 793,
        "ms": {
          "file": {
            "size": 1120.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.73,
            "space_count": 43.0,
            "total_lines": 3.0,
            "char_entropy": 4.89,
            "unique_chars": 73.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 418.67,
            "high_byte_ratio": 0.16,
            "max_line_length": 914.0,
            "non_ascii_ratio": 0.16,
            "null_byte_count": 218.0,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.17,
            "line_length_stddev": 367.43,
            "non_printable_ratio": 0.27,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            731,
            "android"
          ],
          [
            739,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            786,
            "path"
          ],
          [
            793,
            "vector"
          ]
        ],
        "sz": 1120,
        "sha": "aada5c24b7ffe0e687595e86d5c2132ede3f20bc8ee7ad9e157179802f6db839",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/km.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 794,
        "ms": {
          "file": {
            "size": 264.0
          },
          "text": {
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.83,
            "unique_chars": 40.0,
            "lines_over_200": 1.0,
            "avg_line_length": 324.0,
            "high_byte_ratio": 0.28,
            "max_line_length": 324.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 112.0,
            "last_line_length": 324.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.35,
            "non_printable_ratio": 0.52,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            54,
            "color"
          ],
          [
            62,
            "android"
          ],
          [
            70,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            117,
            "ripple"
          ]
        ],
        "sz": 264,
        "sha": "5c4046ca717bff82a55d3d4d3e5ee8635fbadfe64ac358aa396fd4664085ea60",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/l2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 795,
        "ms": {
          "file": {
            "size": 784.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.91,
            "unique_chars": 63.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 342.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 504.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 315.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 170.1,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "name"
          ],
          [
            91,
            "interpolator"
          ],
          [
            108,
            "drawable"
          ],
          [
            119,
            "shareInterpolator"
          ],
          [
            137,
            "animation"
          ],
          [
            151,
            "aapt"
          ],
          [
            158,
            "android"
          ],
          [
            168,
            "animated-vector"
          ],
          [
            186,
            "http://schemas.android.com/aapt"
          ],
          [
            218,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            271,
            "target"
          ]
        ],
        "sz": 784,
        "sha": "b62786742ae0166e14d52af0ac22599a53fe31df1929e53ea0a746c31b8c2749",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/lA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 796,
        "ms": {
          "file": {
            "size": 516.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 668.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 668.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 222.0,
            "last_line_length": 668.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "height"
          ],
          [
            91,
            "shape"
          ],
          [
            99,
            "color"
          ],
          [
            107,
            "android"
          ],
          [
            115,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            170,
            "size"
          ],
          [
            177,
            "solid"
          ]
        ],
        "sz": 516,
        "sha": "a78d464791e1239a3f9d578d35d94a76d19cd1f8a6cb8a9a341adc8b9d29835d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/lR.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 797,
        "ms": {
          "file": {
            "size": 336.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 45.0,
            "lines_over_200": 1.0,
            "avg_line_length": 430.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 430.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 148.0,
            "last_line_length": 430.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "android"
          ],
          [
            74,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            121,
            "shape"
          ],
          [
            129,
            "solid"
          ]
        ],
        "sz": 336,
        "sha": "1d6d789501f02c91bc839ae4397789fa88b2570d6a3250ac48ce3d7b6669b5eb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/lW.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 798,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.18,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 345.0
          },
          "image": {
            "width": 27.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.68,
            "edge_density": 0.06,
            "pixel_entropy": 0.68,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 5.63
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            165,
            "IDAT8"
          ],
          [
            337,
            "IEND"
          ]
        ],
        "sz": 345,
        "sha": "d4d2b0dbb039f1c6395183abe945b39470ad9a8a7b680a40fa790df6c645bb43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ld.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 799,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 6.0,
            "char_entropy": 3.89,
            "unique_chars": 62.0,
            "lines_over_200": 2.0,
            "avg_line_length": 132.5,
            "high_byte_ratio": 0.34,
            "max_line_length": 310.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 253.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 106.16,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromYDelta"
          ],
          [
            121,
            "toYDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "b32022eac0f9c72710afafc4879c971029908d79eb6bca50da4fd12bc9a05c2f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/lf.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 800,
        "ms": {
          "file": {
            "size": 1064.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.52,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1514.0,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 1514.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 466.0,
            "last_line_length": 1514.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            72,
            "state_focused"
          ],
          [
            90,
            "state_window_focused"
          ],
          [
            111,
            "state_enabled"
          ],
          [
            127,
            "state_pressed"
          ],
          [
            145,
            "drawable"
          ],
          [
            156,
            "android"
          ],
          [
            164,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            211,
            "item"
          ],
          [
            218,
            "selector"
          ]
        ],
        "sz": 1064,
        "sha": "9a3f2f061ca8330ce233d03009e87d5eec58cb3dc7fa250cec8cfdbde65c298c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ll.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 801,
        "ms": {
          "file": {
            "size": 480.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.66,
            "unique_chars": 47.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 630.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 630.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 210.0,
            "last_line_length": 630.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            78,
            "shape"
          ],
          [
            86,
            "color"
          ],
          [
            94,
            "android"
          ],
          [
            102,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            157,
            "size"
          ],
          [
            164,
            "solid"
          ]
        ],
        "sz": 480,
        "sha": "ef36b6945691d5cb22d0a64a2647791377a6e5b503293aa419f4ea2d95796320",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ln.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 802,
        "ms": {
          "file": {
            "size": 1216.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.04,
            "total_lines": 5.0,
            "char_entropy": 3.52,
            "unique_chars": 63.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 339.2,
            "high_byte_ratio": 0.43,
            "max_line_length": 516.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 541.0,
            "last_line_length": 115.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 167.5,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            94,
            "state_selected"
          ],
          [
            111,
            "height"
          ],
          [
            128,
            "color"
          ],
          [
            136,
            "radius"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "corners"
          ],
          [
            163,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            210,
            "item"
          ],
          [
            217,
            "selector"
          ],
          [
            228,
            "shape"
          ],
          [
            236,
            "size"
          ],
          [
            243,
            "solid"
          ],
          [
            251,
            "stroke"
          ]
        ],
        "sz": 1216,
        "sha": "c13615d767f881ad30965f0f51fef3f322ea4c48264dd63a0c56f0b03aef77ff",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/lr.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 803,
        "ms": {
          "file": {
            "size": 1180.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.0,
            "unique_chars": 76.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 538.0,
            "high_byte_ratio": 0.4,
            "lines_over_1000": 1.0,
            "max_line_length": 1087.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 431.0,
            "last_line_length": 7.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "line_length_stddev": 441.09,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            105,
            "focusable"
          ],
          [
            119,
            "fitsSystemWindows"
          ],
          [
            137,
            "layout_width"
          ],
          [
            152,
            "layout_height"
          ],
          [
            170,
            "soundEffectsEnabled"
          ],
          [
            192,
            "importantForAccessibility"
          ],
          [
            220,
            "layout_behavior"
          ],
          [
            238,
            "FrameLayout"
          ],
          [
            252,
            "View"
          ],
          [
            259,
            "android"
          ],
          [
            267,
            "33androidx.coordinatorlayout.widget.CoordinatorLayout"
          ],
          [
            327,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            369,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1180,
        "sha": "50270031b786d15715362d7ed1301559482743f48384fe876588c8b3b4f224c0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/m3.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 804,
        "ms": {
          "file": {
            "size": 2648.0
          },
          "text": {
            "tab_count": 25.0,
            "digit_ratio": 0.03,
            "total_lines": 20.0,
            "char_entropy": 3.74,
            "unique_chars": 94.0,
            "lines_over_200": 9.0,
            "lines_over_500": 1.0,
            "avg_line_length": 189.05,
            "high_byte_ratio": 0.45,
            "max_line_length": 706.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 1048.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 211.0,
            "long_token_count": 11.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 153.89,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            146,
            "gravity"
          ],
          [
            156,
            "layout_gravity"
          ],
          [
            173,
            "orientation"
          ],
          [
            190,
            "background"
          ],
          [
            205,
            "paddingLeft"
          ],
          [
            217,
            "paddingRight"
          ],
          [
            232,
            "visibility"
          ],
          [
            245,
            "clipToPadding"
          ],
          [
            261,
            "layout_width"
          ],
          [
            276,
            "layout_height"
          ],
          [
            292,
            "minHeight"
          ],
          [
            306,
            "backgroundTint"
          ],
          [
            323,
            "FrameLayout"
          ],
          [
            335,
            "ImageView"
          ],
          [
            347,
            "LinearLayout"
          ],
          [
            364,
            "TextView"
          ],
          [
            375,
            "android"
          ],
          [
            385,
            "android.widget.Space"
          ],
          [
            406,
            "++androidx.appcompat.widget.AlertDialogLayout"
          ],
          [
            452,
            "%%androidx.core.widget.NestedScrollView"
          ],
          [
            498,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            540,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            587,
            "include"
          ],
          [
            597,
            "layout"
          ]
        ],
        "sz": 2648,
        "sha": "1904bc5ebf0b2d00182e444ab9e0b7a234132fee2a8a2963930415838f8ab35e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/m6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 805,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.79,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 954.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 954.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 307.0,
            "last_line_length": 954.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 724,
        "sha": "a199695bc76a9ce1106ff9442dc5d1c7fe18e32f11514dc7c84f4308f3273fba",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/m8.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 806,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.38,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 205.0
          },
          "image": {
            "width": 15.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.13,
            "edge_density": 0.06,
            "pixel_entropy": 1.13,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 3.94
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            197,
            "IEND"
          ]
        ],
        "sz": 205,
        "sha": "9a1a48038a8d1dc041035b49cc732db23e008d126c8b2e680749dd29616a37b3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/m9.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 807,
        "ms": {
          "file": {
            "size": 436.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.99,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 556.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 556.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 175.0,
            "last_line_length": 556.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            68,
            "ellipsize"
          ],
          [
            82,
            "gravity"
          ],
          [
            90,
            "layout_width"
          ],
          [
            105,
            "layout_height"
          ],
          [
            123,
            "maxLines"
          ],
          [
            134,
            "TextView"
          ],
          [
            145,
            "android"
          ],
          [
            153,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 436,
        "sha": "ddd8236fca596f63eee64c1b90e4f151be1d901d43452071eb9684124959eb90",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/mN.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 808,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.3
          },
          "file": {
            "size": 196.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 2.07,
            "pixel_entropy": 2.07,
            "histogram_flatness": 0.26
          },
          "binary": {
            "overall_entropy": 6.55
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            188,
            "IEND"
          ]
        ],
        "sz": 196,
        "sha": "c131ab0e2eb9879bd063e736ab81313c5a4f47eaa2f4a0ec9eca93a1a150ed79",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/mU.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 809,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 954.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 954.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 307.0,
            "last_line_length": 954.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 724,
        "sha": "e83b6935385758b65b813f8942057b1b8c06c35968d227a8c4678c91b9713567",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/mX.xml",
        "type": "xml"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 810,
        "ms": {
          "file": {
            "size": 3700.0
          },
          "text": {
            "tab_count": 32.0,
            "digit_ratio": 0.11,
            "space_count": 6.0,
            "total_lines": 11.0,
            "char_entropy": 4.16,
            "unique_chars": 108.0,
            "lines_over_200": 5.0,
            "lines_over_500": 3.0,
            "avg_line_length": 450.91,
            "high_byte_ratio": 0.38,
            "lines_over_1000": 2.0,
            "max_line_length": 2309.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 1316.0,
            "empty_line_ratio": 0.36,
            "last_line_length": 2309.0,
            "long_token_count": 15.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 698.69,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            242,
            "theme"
          ],
          [
            250,
            "textSize"
          ],
          [
            259,
            "textColor"
          ],
          [
            273,
            "gravity"
          ],
          [
            286,
            "background"
          ],
          [
            301,
            "paddingLeft"
          ],
          [
            313,
            "paddingRight"
          ],
          [
            328,
            "focusable"
          ],
          [
            342,
            "focusableInTouchMode"
          ],
          [
            363,
            "clipChildren"
          ],
          [
            378,
            "layout_width"
          ],
          [
            393,
            "layout_height"
          ],
          [
            411,
            "layout_marginLeft"
          ],
          [
            431,
            "layout_marginTop"
          ],
          [
            450,
            "layout_marginRight"
          ],
          [
            471,
            "layout_marginBottom"
          ],
          [
            491,
            "foreground"
          ],
          [
            510,
            "scaleType"
          ],
          [
            524,
            "text"
          ],
          [
            529,
            "singleLine"
          ],
          [
            542,
            "inputType"
          ],
          [
            554,
            "imeOptions"
          ],
          [
            569,
            "alpha"
          ],
          [
            577,
            "textCursorDrawable"
          ],
          [
            596,
            "paddingStart"
          ],
          [
            611,
            "elevation"
          ],
          [
            625,
            "layout_marginHorizontal"
          ],
          [
            651,
            "paddingHorizontal"
          ],
          [
            671,
            "endIconMode"
          ],
          [
            685,
            "hintEnabled"
          ],
          [
            736,
            "layout_constraintBottom_toTopOf"
          ],
          [
            770,
            "layout_constraintLeft_toLeftOf"
          ],
          [
            801,
            "layout_constraintRight_toRightOf"
          ],
          [
            838,
            "layout_constraintTop_toBottomOf"
          ],
          [
            872,
            "layout_constraintTop_toTopOf"
          ],
          [
            903,
            "Emergency call"
          ],
          [
            920,
            "Enter password"
          ],
          [
            935,
            "ImageView"
          ],
          [
            949,
            "TextView"
          ],
          [
            960,
            "View"
          ],
          [
            967,
            "android"
          ],
          [
            975,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            1033,
            "77com.google.android.material.textfield.TextInputEditText"
          ],
          [
            1091,
            "55com.google.android.material.textfield.TextInputLayout"
          ],
          [
            1147,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            1189,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 3700,
        "ts": [
          {
            "c": 0.800000011920929,
            "d": "Regex component marker",
            "e": [
              "cursor"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-url-navigation-action--rx-19",
            "l": 1
          }
        ],
        "sha": "b6bc4dd76b40a999ee40e4fa5559708d63896cd57ae152a4ef2434d9eebc46a8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/mg.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 811,
        "ms": {
          "file": {
            "size": 448.0
          },
          "text": {
            "digit_ratio": 0.05,
            "total_lines": 1.0,
            "char_entropy": 3.68,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 586.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 586.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 195.0,
            "last_line_length": 586.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            66,
            "color"
          ],
          [
            74,
            "radius"
          ],
          [
            83,
            "android"
          ],
          [
            93,
            "corners"
          ],
          [
            101,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            148,
            "shape"
          ],
          [
            156,
            "solid"
          ]
        ],
        "sz": 448,
        "sha": "d012bf51055bbd29173bed43196ee8c448b289821a7f96dedbab457017be832f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/mj.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 812,
        "ms": {
          "file": {
            "size": 2720.0
          },
          "text": {
            "tab_count": 15.0,
            "digit_ratio": 0.02,
            "space_count": 6.0,
            "total_lines": 14.0,
            "char_entropy": 3.81,
            "unique_chars": 102.0,
            "lines_over_200": 5.0,
            "lines_over_500": 3.0,
            "avg_line_length": 271.21,
            "high_byte_ratio": 0.43,
            "lines_over_1000": 1.0,
            "max_line_length": 1456.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 1086.0,
            "empty_line_ratio": 0.21,
            "last_line_length": 1456.0,
            "long_token_count": 15.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 374.92,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            174,
            "textSize"
          ],
          [
            183,
            "textStyle"
          ],
          [
            195,
            "textColor"
          ],
          [
            209,
            "gravity"
          ],
          [
            219,
            "layout_gravity"
          ],
          [
            236,
            "orientation"
          ],
          [
            253,
            "background"
          ],
          [
            268,
            "padding"
          ],
          [
            276,
            "paddingTop"
          ],
          [
            289,
            "clipChildren"
          ],
          [
            304,
            "layout_width"
          ],
          [
            319,
            "layout_height"
          ],
          [
            337,
            "layout_marginTop"
          ],
          [
            356,
            "layout_marginBottom"
          ],
          [
            384,
            "text"
          ],
          [
            398,
            "lines"
          ],
          [
            404,
            "layout_weight"
          ],
          [
            420,
            "inputType"
          ],
          [
            432,
            "paddingStart"
          ],
          [
            447,
            "paddingEnd"
          ],
          [
            462,
            "layout_marginEnd"
          ],
          [
            481,
            "importantForAutofill"
          ],
          [
            504,
            "textFontWeight"
          ],
          [
            521,
            "EditText"
          ],
          [
            532,
            "FrameLayout"
          ],
          [
            544,
            "LinearLayout"
          ],
          [
            561,
            "TextView"
          ],
          [
            572,
            "View"
          ],
          [
            579,
            "android"
          ],
          [
            587,
            ",,androidx.appcompat.widget.AppCompatImageView"
          ],
          [
            634,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2720,
        "sha": "665fcbb058d0cb8272b6d14a8b284820d1dbcfb02ac9904f738845907bb198e3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/mq.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 813,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.15
          },
          "file": {
            "size": 391.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 1.75,
            "pixel_entropy": 1.75,
            "histogram_flatness": 0.22
          },
          "binary": {
            "overall_entropy": 7.3
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            383,
            "IEND"
          ]
        ],
        "sz": 391,
        "sha": "29953bd8019dd96b7701329b9a203cff63460519549b9cca9a5eb74f9b1b0930",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/n0.png",
        "type": "png"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 814,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 3.0,
            "chunks_total": 7.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 22532.0
          },
          "image": {
            "width": 1600.0,
            "height": 1600.0,
            "channels": 1.0,
            "r_entropy": 0.94,
            "edge_density": 0.0,
            "pixel_entropy": 0.94,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 7.65
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            9284,
            "IDAT"
          ],
          [
            11750,
            "b6s75"
          ],
          [
            13079,
            "Gsuy"
          ],
          [
            22524,
            "IEND"
          ]
        ],
        "sz": 22532,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "b4b36960bced690a9f56a7f4f43af35e7e6f60e8f27f8ae88f07360689d58494",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/n1.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 815,
        "ms": {
          "file": {
            "size": 120.0
          },
          "text": {
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 2.94,
            "unique_chars": 24.0,
            "avg_line_length": 154.0,
            "high_byte_ratio": 0.33,
            "max_line_length": 154.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 69.0,
            "last_line_length": 154.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.45,
            "non_printable_ratio": 0.59,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            42,
            "selector"
          ]
        ],
        "sz": 120,
        "sha": "f6828625db23f10e2bda1101738cdc5e18c92b08f84c24a01a3813895bf071fb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/n6.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 816,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.26,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 187.0
          },
          "image": {
            "width": 36.0,
            "height": 10.0,
            "channels": 2.0,
            "r_entropy": 0.88,
            "edge_density": 0.05,
            "pixel_entropy": 0.88,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 3.91
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            179,
            "IEND"
          ]
        ],
        "sz": 187,
        "sha": "c8d13e5687a34d5b85018ff7a9f0f22870a297b261ff140b3ed041ce7e7f4b81",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/n9.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 817,
        "ms": {
          "file": {
            "size": 2868.0
          },
          "text": {
            "tab_count": 19.0,
            "digit_ratio": 0.01,
            "space_count": 53.0,
            "total_lines": 6.0,
            "char_entropy": 4.15,
            "unique_chars": 110.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 634.83,
            "high_byte_ratio": 0.37,
            "lines_over_1000": 2.0,
            "max_line_length": 1875.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 1042.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 1875.0,
            "long_token_count": 12.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 809.99,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            174,
            "textSize"
          ],
          [
            183,
            "textColor"
          ],
          [
            197,
            "gravity"
          ],
          [
            207,
            "orientation"
          ],
          [
            224,
            "background"
          ],
          [
            237,
            "paddingTop"
          ],
          [
            250,
            "paddingBottom"
          ],
          [
            266,
            "layout_width"
          ],
          [
            281,
            "layout_height"
          ],
          [
            299,
            "layout_marginTop"
          ],
          [
            318,
            "text"
          ],
          [
            325,
            "layout_marginStart"
          ],
          [
            346,
            "backgroundTintMode"
          ],
          [
            367,
            "paddingVertical"
          ],
          [
            383,
            "layoutManager"
          ],
          [
            438,
            "layout_constraintEnd_toEndOf"
          ],
          [
            467,
            "layout_constraintStart_toStartOf"
          ],
          [
            504,
            "layout_constraintTop_toBottomOf"
          ],
          [
            538,
            "layout_constraintTop_toTopOf"
          ],
          [
            569,
            "layout_constraintVertical_bias"
          ],
          [
            600,
            "spanCount"
          ],
          [
            612,
            "LinearLayout"
          ],
          [
            629,
            "TextView"
          ],
          [
            640,
            "View"
          ],
          [
            647,
            "android"
          ],
          [
            655,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            707,
            "..androidx.recyclerview.widget.GridLayoutManager"
          ],
          [
            756,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            806,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            848,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2868,
        "sha": "865d4a8f70fc5b8838b2e2c36e1ddf9a61d269d39fc3a1e19ffd66c6a3bcc001",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nB.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 818,
        "ms": {
          "file": {
            "size": 1228.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 7.0,
            "char_entropy": 3.65,
            "unique_chars": 68.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 240.57,
            "high_byte_ratio": 0.41,
            "max_line_length": 617.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 532.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 75.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 214.13,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            98,
            "color"
          ],
          [
            104,
            "topLeftRadius"
          ],
          [
            122,
            "topRightRadius"
          ],
          [
            139,
            "bottomLeftRadius"
          ],
          [
            158,
            "bottomRightRadius"
          ],
          [
            184,
            "bottom"
          ],
          [
            193,
            "android"
          ],
          [
            203,
            "corners"
          ],
          [
            211,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            258,
            "item"
          ],
          [
            263,
            "layer-list"
          ],
          [
            278,
            "padding"
          ],
          [
            288,
            "shape"
          ],
          [
            296,
            "solid"
          ]
        ],
        "sz": 1228,
        "sha": "9cff90faa6e5216ea5568e696ce23e8969fb08e3ffb2698c2915b7c149dde995",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nD.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 819,
        "ms": {
          "file": {
            "size": 2668.0
          },
          "text": {
            "tab_count": 23.0,
            "digit_ratio": 0.02,
            "space_count": 54.0,
            "total_lines": 14.0,
            "char_entropy": 4.02,
            "unique_chars": 99.0,
            "lines_over_200": 10.0,
            "lines_over_500": 2.0,
            "avg_line_length": 256.36,
            "high_byte_ratio": 0.39,
            "max_line_length": 897.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 1021.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 265.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 232.37,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            170,
            "textSize"
          ],
          [
            179,
            "textColor"
          ],
          [
            193,
            "gravity"
          ],
          [
            203,
            "orientation"
          ],
          [
            220,
            "background"
          ],
          [
            235,
            "paddingLeft"
          ],
          [
            247,
            "paddingTop"
          ],
          [
            260,
            "paddingRight"
          ],
          [
            275,
            "layout_width"
          ],
          [
            290,
            "layout_height"
          ],
          [
            308,
            "layout_marginLeft"
          ],
          [
            328,
            "layout_marginTop"
          ],
          [
            347,
            "layout_marginRight"
          ],
          [
            366,
            "minHeight"
          ],
          [
            380,
            "text"
          ],
          [
            387,
            "lines"
          ],
          [
            393,
            "layout_weight"
          ],
          [
            411,
            "layout_marginHorizontal"
          ],
          [
            437,
            "paddingHorizontal"
          ],
          [
            457,
            "layout_constraintEnd_toEndOf"
          ],
          [
            486,
            "layout_constraintStart_toStartOf"
          ],
          [
            523,
            "layout_constraintTop_toBottomOf"
          ],
          [
            557,
            "layout_constraintTop_toTopOf"
          ],
          [
            588,
            "EditText"
          ],
          [
            597,
            "LinearLayout"
          ],
          [
            614,
            "TextView"
          ],
          [
            625,
            "View"
          ],
          [
            632,
            "android"
          ],
          [
            640,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            698,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            740,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2668,
        "sha": "baabe177d93718439ad554f6f4e4cea16d047887167ea1db5dbc21e4f59979ac",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nJ.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 820,
        "ms": {
          "png": {
            "a_entropy": 1.96,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.23
          },
          "file": {
            "size": 524.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 4.0,
            "b_entropy": 2.31,
            "g_entropy": 2.31,
            "r_entropy": 2.31,
            "edge_density": 0.2,
            "pixel_entropy": 3.16,
            "histogram_flatness": 0.39
          },
          "binary": {
            "overall_entropy": 7.39
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            44,
            "V1KBQ"
          ],
          [
            50,
            "vpphpphtpp|?"
          ],
          [
            516,
            "IEND"
          ]
        ],
        "sz": 524,
        "sha": "e3e822f5a92f27266d4e88bee03320413de2521b55f7407dfcda7c2a95c20a83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nP.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 821,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.16
          },
          "file": {
            "size": 324.0
          },
          "image": {
            "width": 32.0,
            "height": 32.0,
            "channels": 2.0,
            "r_entropy": 1.26,
            "pixel_entropy": 1.26,
            "histogram_flatness": 0.16
          },
          "binary": {
            "overall_entropy": 7.1
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            316,
            "IEND"
          ]
        ],
        "sz": 324,
        "sha": "a547431febf108ccfa9588ab89b1078e387bb351eb54d772394332187f770b74",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/n_.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 822,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.42
          },
          "file": {
            "size": 270.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.46,
            "pixel_entropy": 1.46,
            "histogram_flatness": 0.18
          },
          "binary": {
            "overall_entropy": 6.95
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            262,
            "IEND"
          ]
        ],
        "sz": 270,
        "sha": "6d34a8bb29be26e343781603588506f33bd1b93732a1c1bc9fd84678aa36b178",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nb.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 823,
        "ms": {
          "png": {
            "a_entropy": 1.99,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.08
          },
          "file": {
            "size": 585.0
          },
          "image": {
            "width": 40.0,
            "height": 48.0,
            "channels": 4.0,
            "b_entropy": 0.84,
            "g_entropy": 0.84,
            "r_entropy": 0.84,
            "edge_density": 0.03,
            "pixel_entropy": 2.59,
            "histogram_flatness": 0.32
          },
          "binary": {
            "overall_entropy": 7.46
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            577,
            "IEND"
          ]
        ],
        "sz": 585,
        "sha": "3dbbad926d540586d6bd1230f3293108774c95e73f6604f0bbf88c3a11530223",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nd.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 824,
        "ms": {
          "file": {
            "size": 516.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.05,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 55.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 668.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 668.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 221.0,
            "last_line_length": 668.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "height"
          ],
          [
            91,
            "shape"
          ],
          [
            99,
            "color"
          ],
          [
            107,
            "android"
          ],
          [
            115,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            170,
            "size"
          ],
          [
            177,
            "solid"
          ]
        ],
        "sz": 516,
        "sha": "b9fc808a70303801fb3c0ca24a9c1e7b759934e9086676589e6b871374a43380",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nl.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 825,
        "ms": {
          "png": {
            "a_entropy": 1.94,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 396.0
          },
          "image": {
            "width": 30.0,
            "height": 36.0,
            "channels": 4.0,
            "b_entropy": 0.84,
            "g_entropy": 0.84,
            "r_entropy": 0.84,
            "edge_density": 0.05,
            "pixel_entropy": 2.57,
            "histogram_flatness": 0.32
          },
          "binary": {
            "overall_entropy": 7.24
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            388,
            "IEND"
          ]
        ],
        "sz": 396,
        "sha": "a475594ae7c771092a3a2718981e2710c737844f44a4401f72d3953753649a7a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ns.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 826,
        "ms": {
          "file": {
            "size": 1264.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.64,
            "space_count": 34.0,
            "total_lines": 3.0,
            "char_entropy": 4.89,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 482.0,
            "high_byte_ratio": 0.19,
            "lines_over_1000": 1.0,
            "max_line_length": 1204.0,
            "non_ascii_ratio": 0.19,
            "null_byte_count": 280.0,
            "last_line_length": 235.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.19,
            "line_length_stddev": 518.95,
            "non_printable_ratio": 0.3,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "height"
          ],
          [
            113,
            "viewportWidth"
          ],
          [
            131,
            "viewportHeight"
          ],
          [
            146,
            "fillColor"
          ],
          [
            160,
            "pathData"
          ],
          [
            171,
            "strokeColor"
          ],
          [
            185,
            "strokeWidth"
          ],
          [
            197,
            "strokeLineCap"
          ],
          [
            215,
            "strokeLineJoin"
          ],
          [
            234,
            "M13.269,16.269L15,18M13,3H8.2C7.08,3 6.52,3 6.092,3.218C5.716,3.41 5.41,3.716 5.218,4.092C5,4.52 5,5.08 5,6.2V17.8C5,18.92 5,19."
          ],
          [
            776,
            "android"
          ],
          [
            784,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            831,
            "path"
          ],
          [
            838,
            "vector"
          ]
        ],
        "sz": 1264,
        "sha": "89a42e9b8e680175a5cf4d6594d4e044b1396a27735daeb4c150027b741d01f5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ns.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 827,
        "ms": {
          "file": {
            "size": 588.0
          },
          "text": {
            "digit_ratio": 0.05,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 798.0,
            "high_byte_ratio": 0.39,
            "max_line_length": 798.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 249.0,
            "last_line_length": 798.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            64,
            "state_focused"
          ],
          [
            80,
            "state_pressed"
          ],
          [
            98,
            "drawable"
          ],
          [
            109,
            "android"
          ],
          [
            117,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            164,
            "item"
          ],
          [
            171,
            "selector"
          ]
        ],
        "sz": 588,
        "sha": "a268b07ebd3afc5044274dd70d027c4c83d4353e34543959a8bf96fd0df811ad",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/nz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 828,
        "ms": {
          "file": {
            "size": 1916.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 9.0,
            "char_entropy": 3.79,
            "unique_chars": 88.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 304.0,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 2281.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 727.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 209.0,
            "long_token_count": 10.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.26,
            "line_length_stddev": 701.91,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            122,
            "textAppearance"
          ],
          [
            139,
            "gravity"
          ],
          [
            152,
            "background"
          ],
          [
            165,
            "paddingBottom"
          ],
          [
            181,
            "visibility"
          ],
          [
            194,
            "layout_width"
          ],
          [
            209,
            "layout_height"
          ],
          [
            225,
            "scaleType"
          ],
          [
            237,
            "singleLine"
          ],
          [
            250,
            "layout_above"
          ],
          [
            267,
            "layout_alignParentTop"
          ],
          [
            291,
            "layout_alignParentBottom"
          ],
          [
            318,
            "layout_centerVertical"
          ],
          [
            342,
            "layout_alignWithParentIfMissing"
          ],
          [
            374,
            "ImageView"
          ],
          [
            388,
            "RelativeLayout"
          ],
          [
            405,
            "TextView"
          ],
          [
            416,
            "android"
          ],
          [
            424,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1916,
        "sha": "ab26c09b37f5adeb65d8993cb4176353e6c2811cbf69f60cef77ae229d567cec",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/o-.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 829,
        "ms": {
          "file": {
            "size": 796.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.76,
            "unique_chars": 64.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 342.67,
            "high_byte_ratio": 0.34,
            "max_line_length": 641.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 358.0,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 247.49,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            108,
            "startOffset"
          ],
          [
            120,
            "propertyName"
          ],
          [
            137,
            "android"
          ],
          [
            145,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            190,
            "iconScale"
          ],
          [
            204,
            "objectAnimator"
          ],
          [
            221,
            "opacity"
          ],
          [
            231,
            "scale"
          ]
        ],
        "sz": 796,
        "sha": "a59f1e3c205942f3185e7d02411167913c4ac1105329fdd50742ded8673ed7f2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/o1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 830,
        "ms": {
          "file": {
            "size": 3688.0
          },
          "text": {
            "tab_count": 25.0,
            "digit_ratio": 0.1,
            "space_count": 11.0,
            "total_lines": 14.0,
            "char_entropy": 4.22,
            "unique_chars": 114.0,
            "lines_over_200": 6.0,
            "lines_over_500": 3.0,
            "avg_line_length": 348.5,
            "high_byte_ratio": 0.37,
            "lines_over_1000": 2.0,
            "max_line_length": 1463.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 1314.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 1382.0,
            "long_token_count": 14.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.27,
            "line_length_stddev": 482.06,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            238,
            "textSize"
          ],
          [
            247,
            "textColor"
          ],
          [
            264,
            "background"
          ],
          [
            277,
            "clipChildren"
          ],
          [
            292,
            "layout_width"
          ],
          [
            307,
            "layout_height"
          ],
          [
            325,
            "layout_marginLeft"
          ],
          [
            345,
            "layout_marginTop"
          ],
          [
            364,
            "layout_marginRight"
          ],
          [
            383,
            "foreground"
          ],
          [
            402,
            "scaleType"
          ],
          [
            416,
            "text"
          ],
          [
            423,
            "overScrollMode"
          ],
          [
            440,
            "alpha"
          ],
          [
            446,
            "elevation"
          ],
          [
            460,
            "layout_marginHorizontal"
          ],
          [
            486,
            "count"
          ],
          [
            494,
            "indicatorColor"
          ],
          [
            511,
            "indicatorHeight"
          ],
          [
            529,
            "indicatorRadius"
          ],
          [
            547,
            "indicatorSelectedColor"
          ],
          [
            572,
            "indicatorSelectedHeight"
          ],
          [
            598,
            "indicatorSelectedRadius"
          ],
          [
            624,
            "indicatorSelectedWidth"
          ],
          [
            649,
            "indicatorSpace"
          ],
          [
            666,
            "indicatorWidth"
          ],
          [
            683,
            "indicator_mode"
          ],
          [
            698,
            "layoutManager"
          ],
          [
            753,
            "layout_constraintLeft_toLeftOf"
          ],
          [
            784,
            "layout_constraintRight_toRightOf"
          ],
          [
            821,
            "layout_constraintTop_toBottomOf"
          ],
          [
            855,
            "layout_constraintTop_toTopOf"
          ],
          [
            886,
            "layout_constraintVertical_bias"
          ],
          [
            917,
            "spanCount"
          ],
          [
            931,
            "Emergency call"
          ],
          [
            948,
            "Enter password"
          ],
          [
            963,
            "ImageView"
          ],
          [
            977,
            "TextView"
          ],
          [
            988,
            "View"
          ],
          [
            995,
            "android"
          ],
          [
            1003,
            "11androidx.constraintlayout.widget.ConstraintLayout"
          ],
          [
            1055,
            "androidx.core.remo.win.Indicator"
          ],
          [
            1090,
            "..androidx.recyclerview.widget.GridLayoutManager"
          ],
          [
            1139,
            "))androidx.recyclerview.widget.RecyclerView"
          ],
          [
            1189,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            1231,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 3688,
        "sha": "d3feb79458d311728887ec215a86cf292c7e00ef87dcc2cfcf2566ed02ff2d2b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/o2.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 831,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.52,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 754.0
          },
          "image": {
            "width": 27.0,
            "height": 27.0,
            "channels": 2.0,
            "r_entropy": 3.23,
            "edge_density": 0.24,
            "pixel_entropy": 3.23,
            "histogram_flatness": 0.4
          },
          "binary": {
            "overall_entropy": 6.81
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            212,
            "IDAT8"
          ],
          [
            746,
            "IEND"
          ]
        ],
        "sz": 754,
        "sha": "562cba1ad1b9abd502da9c03f4c10bb2bd728022c546f18059319f2ad293280e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/oR.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 832,
        "ms": {
          "file": {
            "size": 1584.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.02,
            "total_lines": 9.0,
            "char_entropy": 3.84,
            "unique_chars": 81.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 248.44,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1469.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 591.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 1469.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 449.63,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            122,
            "gravity"
          ],
          [
            132,
            "orientation"
          ],
          [
            151,
            "paddingLeft"
          ],
          [
            163,
            "paddingTop"
          ],
          [
            176,
            "paddingRight"
          ],
          [
            191,
            "paddingBottom"
          ],
          [
            207,
            "visibility"
          ],
          [
            220,
            "layout_width"
          ],
          [
            235,
            "layout_height"
          ],
          [
            251,
            "fillViewport"
          ],
          [
            266,
            "layout_weight"
          ],
          [
            284,
            "layoutDirection"
          ],
          [
            302,
            "scrollIndicators"
          ],
          [
            321,
            "Button"
          ],
          [
            328,
            "ScrollView"
          ],
          [
            343,
            "android"
          ],
          [
            353,
            "android.widget.Space"
          ],
          [
            374,
            "))androidx.appcompat.widget.ButtonBarLayout"
          ],
          [
            418,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1584,
        "sha": "fc505b870e692ca4b70a6d9b415f5c3bd52b5e6e51ad0e512f8fda6b83300b3a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/oT.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 833,
        "ms": {
          "file": {
            "size": 2780.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.84,
            "space_count": 130.0,
            "total_lines": 6.0,
            "char_entropy": 4.61,
            "unique_chars": 88.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 531.5,
            "high_byte_ratio": 0.2,
            "lines_over_1000": 1.0,
            "max_line_length": 2794.0,
            "non_ascii_ratio": 0.2,
            "null_byte_count": 600.0,
            "last_line_length": 155.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.06,
            "most_common_ratio": 0.19,
            "line_length_stddev": 1015.19,
            "non_printable_ratio": 0.27,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "interpolator"
          ],
          [
            113,
            "duration"
          ],
          [
            122,
            "valueFrom"
          ],
          [
            136,
            "valueTo"
          ],
          [
            144,
            "valueType"
          ],
          [
            156,
            "propertyName"
          ],
          [
            173,
            "ordering"
          ],
          [
            186,
            "M 7.0,-9.0 c 0.0,0.0 -14.0,0.0 -14.0,0.0 c -1.1044921875,0.0 -2.0,0.8955078125 -2.0,2.0 c 0.0,0.0 0.0,14.0 0.0,14.0 c 0.0,1.1044"
          ],
          [
            964,
            "M 7.0,-9.0 c 0.0,0.0 -14.0,0.0 -14.0,0.0 c -1.1044921875,0.0 -2.0,0.8955078125 -2.0,2.0 c 0.0,0.0 0.0,14.0 0.0,14.0 c 0.0,1.1044"
          ],
          [
            1696,
            "android"
          ],
          [
            1704,
            "fillAlpha"
          ],
          [
            1716,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1763,
            "objectAnimator"
          ],
          [
            1780,
            "pathData"
          ]
        ],
        "sz": 2780,
        "sha": "738f20a3f83d5a90f5a6a49e916657e65b5bb857d7260bfe4a9a5d0f3e627581",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/on.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 834,
        "ms": {
          "file": {
            "size": 772.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.31,
            "space_count": 20.0,
            "total_lines": 11.0,
            "char_entropy": 4.54,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "avg_line_length": 84.73,
            "high_byte_ratio": 0.27,
            "max_line_length": 490.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 250.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.27,
            "line_length_stddev": 132.18,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 2.0,
            "max_inline_whitespace_run": 13.0
          }
        },
        "ss": [
          [
            97,
            "height"
          ],
          [
            112,
            "autoMirrored"
          ],
          [
            127,
            "viewportWidth"
          ],
          [
            145,
            "viewportHeight"
          ],
          [
            160,
            "fillColor"
          ],
          [
            174,
            "pathData"
          ],
          [
            187,
            "M15,8v8H5V8h10m1,-2H4c-0.55,0 -1,0.45 -1,1v10c0,0.55 0.45,1 1,1h12c0.55,0             1,-0.45 1,-1v-3.5l4,4v-11l-4,4V7c0,-0.55 -"
          ],
          [
            332,
            "android"
          ],
          [
            340,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            387,
            "path"
          ],
          [
            394,
            "vector"
          ]
        ],
        "sz": 772,
        "sha": "5d4cdaae5838ad9442c085f951b766b2808bff13b8c85a14e0bcf8571514492c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/oz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 835,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.72,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 198.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "drawable"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            144,
            "item"
          ],
          [
            151,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "9d146e891e74ccb9339219af874ce15ff251cae43715fa5609f63e6f93105831",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/oz1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 836,
        "ms": {
          "file": {
            "size": 792.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.42,
            "space_count": 18.0,
            "total_lines": 3.0,
            "char_entropy": 4.65,
            "unique_chars": 78.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 311.33,
            "high_byte_ratio": 0.23,
            "max_line_length": 760.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 235.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.25,
            "line_length_stddev": 317.41,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            168,
            "M12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2c-1.1,0 -2,0.9 -2,2S10.9,8 12,8zM12,10c-1.1,0 -2,0.9 -2,2s0.9,2 2,2c1.1,0 2,-0.9 2,-2S13.1,"
          ],
          [
            376,
            "android"
          ],
          [
            384,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            431,
            "path"
          ],
          [
            438,
            "vector"
          ]
        ],
        "sz": 792,
        "sha": "be4d0fced8ecb2691a4fa0143fa6ad03b89184aa34bbb0fbb8b952a1d29251ce",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/p7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 837,
        "ms": {
          "file": {
            "size": 660.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 5.0,
            "char_entropy": 3.95,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "avg_line_length": 164.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 476.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 278.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 157.9,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "name"
          ],
          [
            89,
            "drawable"
          ],
          [
            98,
            "animation"
          ],
          [
            112,
            "aapt"
          ],
          [
            119,
            "android"
          ],
          [
            129,
            "animated-vector"
          ],
          [
            147,
            "eye_mask"
          ],
          [
            158,
            "http://schemas.android.com/aapt"
          ],
          [
            190,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            237,
            "strike_through"
          ],
          [
            254,
            "target"
          ]
        ],
        "sz": 660,
        "sha": "71d93b8537edd2057720a957464b461eadcca076b6ef509939c09734cfd34a8b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/p8.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 838,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.51,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 395.0
          },
          "image": {
            "width": 24.0,
            "height": 16.0,
            "channels": 2.0,
            "r_entropy": 2.13,
            "edge_density": 0.19,
            "pixel_entropy": 2.13,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 5.82
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            387,
            "IEND"
          ]
        ],
        "sz": 395,
        "sha": "62477adc74d4e6836e3c0e4b5337c37d748cb3f94033f42c629938ef18d38b41",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/pF.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 839,
        "ms": {
          "file": {
            "size": 464.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 618.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 618.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 196.0,
            "last_line_length": 618.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            60,
            "state_checked"
          ],
          [
            78,
            "drawable"
          ],
          [
            89,
            "android"
          ],
          [
            97,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            144,
            "item"
          ],
          [
            151,
            "selector"
          ]
        ],
        "sz": 464,
        "sha": "5c8f218605a02f2e9cd43b02f51efacaf7f2d3aa232dc4e7679f07b95fc426f9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/pU.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 840,
        "ms": {
          "file": {
            "size": 3424.0
          },
          "text": {
            "tab_count": 21.0,
            "digit_ratio": 0.01,
            "space_count": 3.0,
            "total_lines": 22.0,
            "char_entropy": 3.85,
            "unique_chars": 102.0,
            "lines_over_200": 11.0,
            "lines_over_500": 1.0,
            "avg_line_length": 220.95,
            "high_byte_ratio": 0.45,
            "max_line_length": 875.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 1278.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 291.0,
            "long_token_count": 18.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 184.63,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            186,
            "gravity"
          ],
          [
            196,
            "layout_gravity"
          ],
          [
            213,
            "orientation"
          ],
          [
            230,
            "background"
          ],
          [
            245,
            "padding"
          ],
          [
            253,
            "focusable"
          ],
          [
            267,
            "focusableInTouchMode"
          ],
          [
            288,
            "visibility"
          ],
          [
            301,
            "clipChildren"
          ],
          [
            316,
            "layout_width"
          ],
          [
            331,
            "layout_height"
          ],
          [
            347,
            "layout_weight"
          ],
          [
            363,
            "inputType"
          ],
          [
            375,
            "imeOptions"
          ],
          [
            390,
            "contentDescription"
          ],
          [
            411,
            "alpha"
          ],
          [
            417,
            "textDirection"
          ],
          [
            435,
            "importantForAutofill"
          ],
          [
            458,
            "navigationContentDescription"
          ],
          [
            489,
            "navigationIcon"
          ],
          [
            504,
            "srcCompat"
          ],
          [
            518,
            "EditText"
          ],
          [
            529,
            "FrameLayout"
          ],
          [
            543,
            "ImageButton"
          ],
          [
            555,
            "LinearLayout"
          ],
          [
            572,
            "TextView"
          ],
          [
            583,
            "View"
          ],
          [
            590,
            "android"
          ],
          [
            604,
            "22com.google.android.material.appbar.MaterialToolbar"
          ],
          [
            657,
            "AAcom.google.android.material.internal.ClippableRoundedCornerLayout"
          ],
          [
            725,
            "==com.google.android.material.internal.TouchObserverFrameLayout"
          ],
          [
            789,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            831,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            878,
            "merge"
          ]
        ],
        "sz": 3424,
        "sha": "5ac07d7fccd97218b288f3efed4700c76d6e9f1eaf35dc4f295732518b5b6aa8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/pq.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 841,
        "ms": {
          "file": {
            "size": 736.0
          },
          "text": {
            "tab_count": 13.0,
            "digit_ratio": 0.27,
            "space_count": 16.0,
            "total_lines": 5.0,
            "char_entropy": 4.19,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 184.4,
            "high_byte_ratio": 0.31,
            "max_line_length": 596.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 277.0,
            "last_line_length": 75.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.3,
            "line_length_stddev": 207.28,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "viewportWidth"
          ],
          [
            119,
            "viewportHeight"
          ],
          [
            134,
            "fillColor"
          ],
          [
            148,
            "pathData"
          ],
          [
            247,
            "android"
          ],
          [
            255,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            302,
            "path"
          ],
          [
            309,
            "vector"
          ]
        ],
        "sz": 736,
        "sha": "1c5f1c971e36ed3604d8b7c3f0c05d1f4edfd25548e1e6b5208b29c5c301d2c4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/py.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 842,
        "ms": {
          "file": {
            "size": 1072.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.03,
            "space_count": 4.0,
            "total_lines": 5.0,
            "char_entropy": 3.63,
            "unique_chars": 65.0,
            "lines_over_200": 4.0,
            "avg_line_length": 290.4,
            "high_byte_ratio": 0.4,
            "max_line_length": 481.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 481.0,
            "last_line_length": 35.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 154.19,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "state_enabled"
          ],
          [
            100,
            "state_pressed"
          ],
          [
            118,
            "duration"
          ],
          [
            129,
            "valueTo"
          ],
          [
            137,
            "valueType"
          ],
          [
            149,
            "propertyName"
          ],
          [
            166,
            "android"
          ],
          [
            174,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "item"
          ],
          [
            228,
            "objectAnimator"
          ],
          [
            245,
            "selector"
          ],
          [
            254,
            "translationZ"
          ]
        ],
        "sz": 1072,
        "sha": "3c1991f75b649eee44df5a4598b658fbe137db72dd99a2094c49df1adf46602c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/q0.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 843,
        "ms": {
          "file": {
            "size": 2124.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.76,
            "space_count": 132.0,
            "total_lines": 5.0,
            "char_entropy": 4.54,
            "unique_chars": 83.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 488.4,
            "high_byte_ratio": 0.2,
            "lines_over_1000": 1.0,
            "max_line_length": 2054.0,
            "non_ascii_ratio": 0.2,
            "null_byte_count": 456.0,
            "last_line_length": 155.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.07,
            "most_common_ratio": 0.19,
            "line_length_stddev": 787.19,
            "non_printable_ratio": 0.27,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            96,
            "interpolator"
          ],
          [
            113,
            "duration"
          ],
          [
            122,
            "valueFrom"
          ],
          [
            136,
            "valueTo"
          ],
          [
            144,
            "valueType"
          ],
          [
            156,
            "propertyName"
          ],
          [
            173,
            "ordering"
          ],
          [
            186,
            "M -7.0,-7.0 l 14.0,0.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l 0.0,14.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l -14.0,0.0 c 0.0,0.0 0.0,0.0 0.0,0.0 l 0."
          ],
          [
            694,
            "XM 0.0,-0.05 l 0.0,0.0 c 0.02761423749,0.0 0.05,0.02238576251 0.05,0.05 l 0.0,0.0 c 0.0,0.02761423749 -0.02238576251,0.05 -0.05,"
          ],
          [
            1298,
            "android"
          ],
          [
            1306,
            "fillAlpha"
          ],
          [
            1318,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1365,
            "objectAnimator"
          ],
          [
            1382,
            "pathData"
          ]
        ],
        "sz": 2124,
        "sha": "3560c5c09907859e6570eea27bcbc7f557bd89ffbd16af45f6913cc046c628d1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/q1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 844,
        "ms": {
          "file": {
            "size": 1180.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.04,
            "space_count": 2.0,
            "total_lines": 4.0,
            "char_entropy": 3.79,
            "unique_chars": 74.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 394.75,
            "high_byte_ratio": 0.38,
            "max_line_length": 799.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 495.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 799.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 310.46,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            127,
            "shape"
          ],
          [
            135,
            "color"
          ],
          [
            143,
            "radius"
          ],
          [
            173,
            "bottom"
          ],
          [
            180,
            "insetLeft"
          ],
          [
            192,
            "insetRight"
          ],
          [
            207,
            "insetTop"
          ],
          [
            218,
            "insetBottom"
          ],
          [
            232,
            "android"
          ],
          [
            242,
            "corners"
          ],
          [
            250,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            297,
            "inset"
          ],
          [
            305,
            "item"
          ],
          [
            312,
            "padding"
          ],
          [
            322,
            "ripple"
          ],
          [
            339,
            "solid"
          ]
        ],
        "sz": 1180,
        "sha": "b0d241742ff6c09c7b5791c27f8d7e95b39cb98b9be2618a9f24f9064637e241",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/q6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 845,
        "ms": {
          "file": {
            "size": 2688.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.74,
            "space_count": 132.0,
            "total_lines": 9.0,
            "char_entropy": 4.76,
            "unique_chars": 95.0,
            "lines_over_200": 4.0,
            "lines_over_500": 3.0,
            "avg_line_length": 341.11,
            "high_byte_ratio": 0.19,
            "lines_over_1000": 1.0,
            "max_line_length": 1359.0,
            "non_ascii_ratio": 0.19,
            "null_byte_count": 588.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 833.0,
            "long_token_count": 7.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.19,
            "line_length_stddev": 463.05,
            "non_printable_ratio": 0.28,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            138,
            "name"
          ],
          [
            145,
            "height"
          ],
          [
            178,
            "viewportWidth"
          ],
          [
            196,
            "viewportHeight"
          ],
          [
            211,
            "fillColor"
          ],
          [
            225,
            "pathData"
          ],
          [
            234,
            "translateX"
          ],
          [
            247,
            "translateY"
          ],
          [
            260,
            "fillAlpha"
          ],
          [
            275,
            "CM 0.0,-1.0 l 0.0,0.0 c 0.5522847498,0.0 1.0,0.4477152502 1.0,1.0 l 0.0,0.0 c 0.0,0.5522847498 -0.4477152502,1.0 -1.0,1.0 l 0.0,"
          ],
          [
            860,
            "M 7.0,-9.0 c 0.0,0.0 -14.0,0.0 -14.0,0.0 c -1.1044921875,0.0 -2.0,0.8955078125 -2.0,2.0 c 0.0,0.0 0.0,14.0 0.0,14.0 c 0.0,1.1044"
          ],
          [
            1592,
            "android"
          ],
          [
            1600,
            "box_dilate"
          ],
          [
            1615,
            "box_inner_merged"
          ],
          [
            1634,
            "btn_checkbox_checked"
          ],
          [
            1665,
            "check_path_merged"
          ],
          [
            1685,
            "group"
          ],
          [
            1691,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            1736,
            "icon_null"
          ],
          [
            1750,
            "path"
          ],
          [
            1757,
            "vector"
          ]
        ],
        "sz": 2688,
        "sha": "c2d4585b382ece8a545149e2677f041f1131e6739dc7545088aa030723693ead",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/q61.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 846,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c283813f9b000c696dc87d14fb4e48ddc39798ef384462c93b0d1b576b0cf666",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qA.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 847,
        "ms": {
          "file": {
            "size": 480.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.04,
            "total_lines": 1.0,
            "char_entropy": 3.63,
            "unique_chars": 46.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 634.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 634.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 210.0,
            "last_line_length": 634.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            78,
            "shape"
          ],
          [
            86,
            "color"
          ],
          [
            94,
            "android"
          ],
          [
            102,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            157,
            "size"
          ],
          [
            164,
            "solid"
          ]
        ],
        "sz": 480,
        "sha": "4ce488fcdf8e9e39a9f62831948a5e6d249aff2a35702dcf5ecd79a848e3721a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qE.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 848,
        "ms": {
          "file": {
            "size": 364.0
          },
          "text": {
            "digit_ratio": 0.37,
            "space_count": 15.0,
            "total_lines": 1.0,
            "char_entropy": 4.43,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "avg_line_length": 418.0,
            "high_byte_ratio": 0.19,
            "max_line_length": 418.0,
            "non_ascii_ratio": 0.19,
            "null_byte_count": 124.0,
            "last_line_length": 418.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            67,
            "NNM 0,0 C 0.05, 0, 0.133333, 0.06, 0.166666, 0.4 C 0.208333, 0.82, 0.25, 1, 1, 1"
          ],
          [
            150,
            "android"
          ],
          [
            158,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            205,
            "pathInterpolator"
          ]
        ],
        "sz": 364,
        "sha": "650c54c5eff734092ee09354ffa1d833931b7706f2797e801f825604c47c2dd3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qK.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 849,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.87,
            "unique_chars": 60.0,
            "lines_over_200": 2.0,
            "avg_line_length": 159.6,
            "high_byte_ratio": 0.35,
            "max_line_length": 350.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 255.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 118.85,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromYDelta"
          ],
          [
            121,
            "toYDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "e2f84fad7c099f3cfa128a6d27ef6a136a16caabd0de81e98733be40bb80674e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qL.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 850,
        "ms": {
          "file": {
            "size": 396.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 4.0,
            "char_entropy": 3.97,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "avg_line_length": 121.75,
            "high_byte_ratio": 0.29,
            "max_line_length": 234.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 159.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 159.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 86.0,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromYDelta"
          ],
          [
            105,
            "toYDelta"
          ],
          [
            116,
            "android"
          ],
          [
            124,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "translate"
          ]
        ],
        "sz": 396,
        "sha": "d60b273289d358f2b3eea13fa097b1cf2198eb37517f7dc9c312ed3e2b465256",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qQ.xml",
        "type": "xml"
      },
      {
        "f": "O(As)",
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 851,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 5.0,
            "chunks_total": 9.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 37162.0
          },
          "image": {
            "width": 2400.0,
            "height": 2400.0,
            "channels": 1.0,
            "r_entropy": 0.91,
            "edge_density": 0.0,
            "pixel_entropy": 0.91,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 7.7
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            2337,
            "Yg.vo"
          ],
          [
            2426,
            "23.157.124.146:35592"
          ],
          [
            12463,
            "96.33.176.12:31575"
          ],
          [
            17492,
            "IDAT"
          ],
          [
            22671,
            "hopa"
          ],
          [
            26302,
            "maaa"
          ],
          [
            28729,
            "`]j`a`"
          ],
          [
            30591,
            "/tJH"
          ],
          [
            32421,
            "/cVA"
          ],
          [
            35283,
            "NGNT"
          ],
          [
            37154,
            "IEND"
          ]
        ],
        "sz": 37162,
        "ts": [
          {
            "a": "T1027.003",
            "c": 0.6499999761581421,
            "d": "Image lacks visual structure",
            "e": [
              "image.edge_density = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/steganography/image::low-edge-density",
            "l": 1,
            "m": "B0032.001"
          }
        ],
        "sha": "0b0268aa1c421a604590e4a5046f9f7a377e692cc2e80c11b650e19bcdc30fb2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qV.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 852,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.07,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 813.0
          },
          "image": {
            "width": 94.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 1.2,
            "edge_density": 0.02,
            "pixel_entropy": 1.2,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 7.16
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            805,
            "IEND"
          ]
        ],
        "sz": 813,
        "sha": "100cc6ae3870dd769a252e44608a81956522e867674f854619ba7c68d314cad7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/qr.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 853,
        "ms": {
          "file": {
            "size": 440.0
          },
          "text": {
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.01,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "avg_line_length": 139.25,
            "high_byte_ratio": 0.32,
            "max_line_length": 466.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 175.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 466.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 189.56,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            70,
            "enabled"
          ],
          [
            80,
            "gravity"
          ],
          [
            88,
            "background"
          ],
          [
            101,
            "layout_width"
          ],
          [
            116,
            "layout_height"
          ],
          [
            132,
            "LinearLayout"
          ],
          [
            149,
            "android"
          ],
          [
            157,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 440,
        "sha": "92711ee5524fdb65d11e04766f69301892c78b6705094815ce0077dac7132c3c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/r-.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 854,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 3.99,
            "unique_chars": 50.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 506.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 506.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 156.0,
            "last_line_length": 506.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "8237d47bafc3bab9098bd9344b12dc6c87fdd879a4e1f01c856400c595f298f0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/r0.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 855,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "de2a9556b7d58bb36af3f7e7dd6a2101203e99d39c70ee620e230b12f18d84c0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/r7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 856,
        "ms": {
          "file": {
            "size": 816.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.74,
            "unique_chars": 63.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.25,
            "high_byte_ratio": 0.4,
            "max_line_length": 896.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 338.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 896.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 365.5,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            76,
            "state_checked"
          ],
          [
            99,
            "drawable"
          ],
          [
            126,
            "android"
          ],
          [
            136,
            "animated-selector"
          ],
          [
            154,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            201,
            "item"
          ],
          [
            206,
            "transition"
          ]
        ],
        "sz": 816,
        "sha": "d730d502bb8e46535fb0b4d1ddfa1cde92c9968c2a507a24d394464a5119083c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rE.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 857,
        "ms": {
          "file": {
            "size": 688.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 3.85,
            "unique_chars": 58.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 439.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 859.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 297.0,
            "last_line_length": 859.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 419.5,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "name"
          ],
          [
            85,
            "drawable"
          ],
          [
            94,
            "animation"
          ],
          [
            108,
            "android"
          ],
          [
            118,
            "animated-vector"
          ],
          [
            136,
            "box_inner_merged"
          ],
          [
            155,
            "check_path_merged"
          ],
          [
            173,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "icon_null"
          ],
          [
            232,
            "target"
          ]
        ],
        "sz": 688,
        "sha": "20f7e8f7199632db186b9931eeef5448c5bd004ba9bc947713d4f89c6f8f1f43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rE1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 858,
        "ms": {
          "file": {
            "size": 2664.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 19.0,
            "char_entropy": 3.44,
            "unique_chars": 86.0,
            "lines_over_200": 9.0,
            "lines_over_500": 2.0,
            "avg_line_length": 196.21,
            "high_byte_ratio": 0.43,
            "max_line_length": 567.0,
            "non_ascii_ratio": 0.43,
            "null_byte_count": 1258.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 195.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.34,
            "line_length_stddev": 179.88,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            104,
            "state_focused"
          ],
          [
            120,
            "state_enabled"
          ],
          [
            136,
            "state_pressed"
          ],
          [
            154,
            "duration"
          ],
          [
            165,
            "valueTo"
          ],
          [
            173,
            "valueType"
          ],
          [
            185,
            "propertyName"
          ],
          [
            200,
            "state_hovered"
          ],
          [
            216,
            "startDelay"
          ],
          [
            231,
            "android"
          ],
          [
            239,
            "elevation"
          ],
          [
            251,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            298,
            "item"
          ],
          [
            305,
            "objectAnimator"
          ],
          [
            322,
            "selector"
          ],
          [
            337,
            "translationZ"
          ]
        ],
        "sz": 2664,
        "sha": "a4af1046c3a639ec5403f767d9a50eccda4186454912b0ebc53301ee6db9a921",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rJ.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 859,
        "ms": {
          "file": {
            "size": 808.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.45,
            "space_count": 20.0,
            "total_lines": 3.0,
            "char_entropy": 4.72,
            "unique_chars": 82.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 316.67,
            "high_byte_ratio": 0.23,
            "max_line_length": 744.0,
            "non_ascii_ratio": 0.23,
            "null_byte_count": 237.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.25,
            "line_length_stddev": 303.03,
            "non_printable_ratio": 0.38,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "height"
          ],
          [
            101,
            "viewportWidth"
          ],
          [
            119,
            "viewportHeight"
          ],
          [
            134,
            "fillColor"
          ],
          [
            148,
            "pathData"
          ],
          [
            159,
            "strokeWidth"
          ],
          [
            175,
            "M13,11.87 L11.87,13 L9,10.13 L6.13,13 L5,11.87 L7.87,9 L5,6.13 L6.13,5 L9,7.87 L11.87,5 L13,6.13 L10.13,9 L13,11.87 Z M9,1 C4.58"
          ],
          [
            393,
            "android"
          ],
          [
            401,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            448,
            "path"
          ],
          [
            455,
            "vector"
          ]
        ],
        "sz": 808,
        "sha": "42034529870640063c39efc5b1902e2fd74934ad0ffde295a3507b0c1a8c7e18",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rM.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 860,
        "ms": {
          "file": {
            "size": 728.0
          },
          "text": {
            "tab_count": 13.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.91,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 198.0,
            "high_byte_ratio": 0.4,
            "max_line_length": 707.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 281.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.28,
            "line_length_stddev": 254.96,
            "non_printable_ratio": 0.42,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "gravity"
          ],
          [
            100,
            "orientation"
          ],
          [
            117,
            "focusable"
          ],
          [
            129,
            "layout_width"
          ],
          [
            144,
            "layout_height"
          ],
          [
            160,
            "LinearLayout"
          ],
          [
            177,
            "TextView"
          ],
          [
            188,
            "android"
          ],
          [
            196,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            243,
            "include"
          ],
          [
            253,
            "layout"
          ]
        ],
        "sz": 728,
        "sha": "b459de8a00b4fc7f8851944dcbf8582e4f4b876cb8f5535bdad3f7eb6a6f26d6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rX.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 861,
        "ms": {
          "file": {
            "size": 1136.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.02,
            "total_lines": 3.0,
            "char_entropy": 4.03,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "avg_line_length": 482.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 873.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 467.0,
            "last_line_length": 39.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 342.46,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            122,
            "name"
          ],
          [
            129,
            "height"
          ],
          [
            144,
            "viewportWidth"
          ],
          [
            162,
            "viewportHeight"
          ],
          [
            177,
            "fillColor"
          ],
          [
            191,
            "pathData"
          ],
          [
            202,
            "strokeColor"
          ],
          [
            216,
            "strokeWidth"
          ],
          [
            228,
            "strokeLineCap"
          ],
          [
            246,
            "aapt"
          ],
          [
            253,
            "android"
          ],
          [
            261,
            "clip-path"
          ],
          [
            281,
            "eye_mask"
          ],
          [
            292,
            "group"
          ],
          [
            300,
            "http://schemas.android.com/aapt"
          ],
          [
            332,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            379,
            "path"
          ],
          [
            386,
            "strike_through"
          ],
          [
            403,
            "vector"
          ]
        ],
        "sz": 1136,
        "sha": "c5d0b0919ea7410ed9342c073e13b9c1f3ab85cadd9b25339f0164eaa787bc9c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rZ.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 862,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.07,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 525.0
          },
          "image": {
            "width": 54.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.64,
            "edge_density": 0.03,
            "pixel_entropy": 0.64,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 6.47
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            164,
            "TIDATX"
          ],
          [
            517,
            "IEND"
          ]
        ],
        "sz": 525,
        "sha": "007dbf5fa2dc466a4940b0a6a73dab48cb721f64d358f71ff35aaadb9630b5ec",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rb.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 863,
        "ms": {
          "file": {
            "size": 628.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.04,
            "space_count": 1.0,
            "total_lines": 3.0,
            "char_entropy": 3.73,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 276.0,
            "high_byte_ratio": 0.37,
            "max_line_length": 666.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 271.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 275.82,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            99,
            "shape"
          ],
          [
            107,
            "color"
          ],
          [
            115,
            "radius"
          ],
          [
            124,
            "android"
          ],
          [
            134,
            "corners"
          ],
          [
            142,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            197,
            "size"
          ],
          [
            204,
            "solid"
          ]
        ],
        "sz": 628,
        "sha": "7e04790c1035f7d753123ac2379edc0cead4207d90bbaf2e88dd676e78d1e437",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rb.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 864,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.5
          },
          "file": {
            "size": 145.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 2.0,
            "r_entropy": 2.23,
            "pixel_entropy": 2.23,
            "histogram_flatness": 0.28
          },
          "binary": {
            "overall_entropy": 6.18
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            137,
            "IEND"
          ]
        ],
        "sz": 145,
        "sha": "9f856dd00a4f281d1198e6679ac8611fc67d301f28c07aea97504244ba16cb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rn.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 865,
        "ms": {
          "file": {
            "size": 2544.0
          },
          "text": {
            "tab_count": 14.0,
            "digit_ratio": 0.02,
            "space_count": 4.0,
            "total_lines": 19.0,
            "char_entropy": 4.04,
            "unique_chars": 103.0,
            "lines_over_200": 9.0,
            "lines_over_500": 1.0,
            "avg_line_length": 181.26,
            "high_byte_ratio": 0.4,
            "max_line_length": 687.0,
            "non_ascii_ratio": 0.4,
            "null_byte_count": 932.0,
            "empty_line_ratio": 0.26,
            "last_line_length": 211.0,
            "long_token_count": 12.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 184.66,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            190,
            "textAppearance"
          ],
          [
            205,
            "textColor"
          ],
          [
            217,
            "ellipsize"
          ],
          [
            231,
            "gravity"
          ],
          [
            241,
            "orientation"
          ],
          [
            258,
            "background"
          ],
          [
            271,
            "paddingRight"
          ],
          [
            286,
            "visibility"
          ],
          [
            299,
            "fadingEdge"
          ],
          [
            312,
            "layout_width"
          ],
          [
            327,
            "layout_height"
          ],
          [
            345,
            "layout_marginLeft"
          ],
          [
            365,
            "layout_marginTop"
          ],
          [
            384,
            "layout_marginRight"
          ],
          [
            405,
            "layout_marginBottom"
          ],
          [
            425,
            "minHeight"
          ],
          [
            439,
            "maxLines"
          ],
          [
            448,
            "singleLine"
          ],
          [
            461,
            "layout_weight"
          ],
          [
            477,
            "layout_below"
          ],
          [
            494,
            "layout_alignLeft"
          ],
          [
            511,
            "paddingEnd"
          ],
          [
            526,
            "layout_marginStart"
          ],
          [
            547,
            "layout_marginEnd"
          ],
          [
            566,
            "layout_alignStart"
          ],
          [
            584,
            "maxHeight"
          ],
          [
            598,
            "maxWidth"
          ],
          [
            609,
            "FrameLayout"
          ],
          [
            621,
            "LinearLayout"
          ],
          [
            638,
            "RelativeLayout"
          ],
          [
            655,
            "Spinner"
          ],
          [
            665,
            "TextView"
          ],
          [
            676,
            "android"
          ],
          [
            684,
            "00androidx.preference.internal.PreferenceImageView"
          ],
          [
            741,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            783,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 2544,
        "sha": "2ae537ce0cd188c5fa5d4e4aaa5399fa4594ac38f9ef9298ae735b0aec869bec",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ro.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 866,
        "ms": {
          "file": {
            "size": 636.0
          },
          "text": {
            "tab_count": 7.0,
            "digit_ratio": 0.0,
            "total_lines": 13.0,
            "char_entropy": 4.36,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 60.62,
            "high_byte_ratio": 0.31,
            "max_line_length": 254.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 207.0,
            "empty_line_ratio": 0.08,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.26,
            "line_length_stddev": 68.52,
            "non_printable_ratio": 0.38,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "paddingLeft"
          ],
          [
            94,
            "paddingRight"
          ],
          [
            109,
            "focusable"
          ],
          [
            121,
            "layout_width"
          ],
          [
            136,
            "layout_height"
          ],
          [
            152,
            "foreground"
          ],
          [
            165,
            "minHeight"
          ],
          [
            179,
            "defaultFocusHighlightEnabled"
          ],
          [
            210,
            "android"
          ],
          [
            218,
            ";;com.google.android.material.internal.NavigationMenuItemView"
          ],
          [
            280,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 636,
        "sha": "fe7518a810433f4ded987024ad4c39e65c5db173013d4773770bad6abdb097bf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rt.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 867,
        "ms": {
          "file": {
            "size": 304.0
          },
          "text": {
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.83,
            "unique_chars": 43.0,
            "lines_over_200": 1.0,
            "avg_line_length": 376.0,
            "high_byte_ratio": 0.29,
            "max_line_length": 376.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 129.0,
            "last_line_length": 376.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.52,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "color"
          ],
          [
            66,
            "radius"
          ],
          [
            75,
            "android"
          ],
          [
            83,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            130,
            "ripple"
          ]
        ],
        "sz": 304,
        "sha": "8ef959a8e2487e317b9a92f5ac3fb7e6fc3ec87323d0184a1469f50cfe9e9a9c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/rx.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 868,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.2,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 217.0
          },
          "image": {
            "width": 13.0,
            "height": 41.0,
            "channels": 2.0,
            "r_entropy": 1.2,
            "pixel_entropy": 1.2,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 3.72
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT8"
          ],
          [
            209,
            "IEND"
          ]
        ],
        "sz": 217,
        "sha": "a15171ead4b1cd9b80c58b93c0efb453b0cf889b714cc859ee2c9b937f4b37d0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/s2.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 869,
        "ms": {
          "file": {
            "size": 1128.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.63,
            "unique_chars": 75.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 301.2,
            "high_byte_ratio": 0.38,
            "max_line_length": 564.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 517.0,
            "last_line_length": 345.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 182.98,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "propertyName"
          ],
          [
            153,
            "ordering"
          ],
          [
            164,
            "alpha"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "objectAnimator"
          ]
        ],
        "sz": 1128,
        "sha": "b22791e81e31bccd2ced13472b9de188538653c2e67b6561e6afd6e08b49bd00",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/s6.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 870,
        "ms": {
          "file": {
            "size": 616.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.87,
            "unique_chars": 60.0,
            "lines_over_200": 2.0,
            "avg_line_length": 158.8,
            "high_byte_ratio": 0.34,
            "max_line_length": 350.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 257.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 225.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 119.19,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "fromXDelta"
          ],
          [
            121,
            "toXDelta"
          ],
          [
            130,
            "fromAlpha"
          ],
          [
            144,
            "toAlpha"
          ],
          [
            154,
            "alpha"
          ],
          [
            162,
            "android"
          ],
          [
            170,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            221,
            "translate"
          ]
        ],
        "sz": 616,
        "sha": "38e4a39138d2c2ba98a045f1635cd40ac9788551a17fb9218be8b516894face1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/s61.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 871,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.37,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 318.0
          },
          "image": {
            "width": 18.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 1.14,
            "edge_density": 0.12,
            "pixel_entropy": 1.14,
            "histogram_flatness": 0.14
          },
          "binary": {
            "overall_entropy": 5.48
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            310,
            "IEND"
          ]
        ],
        "sz": 318,
        "sha": "80502979302dee7353f475f558c497ae6697f77181a51f7cc80b40d72c2e0c4c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/sL.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 872,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.23
          },
          "file": {
            "size": 264.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 0.94,
            "pixel_entropy": 0.94,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 6.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDAT8"
          ],
          [
            256,
            "IEND"
          ]
        ],
        "sz": 264,
        "sha": "7e87b3e0229126dc3c2bdaddcd8f330f3bb5f7613a05024c3cd6445dd161f788",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/sX.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 873,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.13,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 448.0
          },
          "image": {
            "width": 36.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.99,
            "edge_density": 0.04,
            "pixel_entropy": 0.99,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 6.28
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            165,
            "IDATH"
          ],
          [
            440,
            "IEND"
          ]
        ],
        "sz": 448,
        "sha": "c63a94e7136ceeef43b0ade8b49e8e1ef4d1060d584f6cb9ab58b7d6eaa16312",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/st.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 874,
        "ms": {
          "file": {
            "size": 900.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.39,
            "space_count": 10.0,
            "total_lines": 3.0,
            "char_entropy": 4.65,
            "unique_chars": 78.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 360.0,
            "high_byte_ratio": 0.25,
            "max_line_length": 838.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 280.0,
            "last_line_length": 235.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.26,
            "line_length_stddev": 350.58,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            98,
            "height"
          ],
          [
            113,
            "viewportWidth"
          ],
          [
            131,
            "viewportHeight"
          ],
          [
            146,
            "fillColor"
          ],
          [
            160,
            "pathData"
          ],
          [
            171,
            "strokeColor"
          ],
          [
            185,
            "strokeWidth"
          ],
          [
            197,
            "strokeLineCap"
          ],
          [
            215,
            "strokeLineJoin"
          ],
          [
            234,
            "M18.525,9.46C18.832,10.247 19,11.104 19,12C19,15.866 15.866,19 12,19H9M5.475,14.54C5.168,13.753 5,12.896 5,12C5,8.134 8.134,5 12"
          ],
          [
            412,
            "android"
          ],
          [
            420,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            467,
            "path"
          ],
          [
            474,
            "vector"
          ]
        ],
        "sz": 900,
        "sha": "049dbf1f84598f30a4535909bd625873bbf71902e0d22fd76a6d51a360ef7041",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/sz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 875,
        "ms": {
          "file": {
            "size": 1088.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.03,
            "total_lines": 7.0,
            "char_entropy": 4.18,
            "unique_chars": 78.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 198.86,
            "high_byte_ratio": 0.33,
            "max_line_length": 714.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 394.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 405.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 246.69,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            118,
            "gravity"
          ],
          [
            128,
            "orientation"
          ],
          [
            147,
            "paddingLeft"
          ],
          [
            159,
            "paddingTop"
          ],
          [
            172,
            "paddingRight"
          ],
          [
            187,
            "paddingBottom"
          ],
          [
            203,
            "layout_width"
          ],
          [
            218,
            "layout_height"
          ],
          [
            236,
            "minWidth"
          ],
          [
            245,
            "paddingStart"
          ],
          [
            260,
            "paddingEnd"
          ],
          [
            273,
            "maxHeight"
          ],
          [
            287,
            "maxWidth"
          ],
          [
            296,
            "LinearLayout"
          ],
          [
            313,
            "android"
          ],
          [
            321,
            "00androidx.preference.internal.PreferenceImageView"
          ],
          [
            378,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            420,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1088,
        "sha": "7c557f132ba46699fcfc743f7b447890ec9d20d4af203cec645cec0aaac1b33a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/t7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 876,
        "ms": {
          "file": {
            "size": 656.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 7.0,
            "char_entropy": 4.34,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "avg_line_length": 116.86,
            "high_byte_ratio": 0.31,
            "max_line_length": 333.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 220.0,
            "empty_line_ratio": 0.29,
            "last_line_length": 35.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.27,
            "line_length_stddev": 139.45,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "layout_gravity"
          ],
          [
            106,
            "background"
          ],
          [
            119,
            "visibility"
          ],
          [
            132,
            "layout_width"
          ],
          [
            147,
            "layout_height"
          ],
          [
            165,
            "minWidth"
          ],
          [
            174,
            "minHeight"
          ],
          [
            188,
            "layout_marginStart"
          ],
          [
            209,
            "android"
          ],
          [
            217,
            "99com.google.android.material.internal.CheckableImageButton"
          ],
          [
            277,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 656,
        "sha": "b74d1d4c5232f358fbff1a27e929807dd7150a4204df18bab4780e70cc87f262",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/t9.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 877,
        "ms": {
          "file": {
            "size": 636.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 4.14,
            "unique_chars": 66.0,
            "lines_over_200": 2.0,
            "avg_line_length": 156.4,
            "high_byte_ratio": 0.29,
            "max_line_length": 486.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 248.0,
            "last_line_length": 201.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 178.21,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "name"
          ],
          [
            97,
            "height"
          ],
          [
            112,
            "viewportWidth"
          ],
          [
            130,
            "viewportHeight"
          ],
          [
            147,
            "pathData"
          ],
          [
            158,
            "strokeColor"
          ],
          [
            172,
            "strokeWidth"
          ],
          [
            186,
            "android"
          ],
          [
            194,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            241,
            "outline"
          ],
          [
            251,
            "path"
          ],
          [
            258,
            "vector"
          ]
        ],
        "sz": 636,
        "sha": "fd0f659088c2816f9f37314f6b794524edd1d5989b53e15a0cbc7844859ca065",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tI.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 878,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.65,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 212.0
          },
          "image": {
            "width": 9.0,
            "height": 9.0,
            "channels": 4.0,
            "pixel_entropy": 1.5,
            "histogram_flatness": 0.19
          },
          "binary": {
            "overall_entropy": 3.9
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            204,
            "IEND"
          ]
        ],
        "sz": 212,
        "sha": "d5c644b00ee79bd4f1fcb789ebbf89e79c0c6fea878dfbc4a8c64c3be34b5b03",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tM.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 879,
        "ms": {
          "file": {
            "size": 452.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 2.0,
            "char_entropy": 4.08,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "avg_line_length": 275.5,
            "high_byte_ratio": 0.27,
            "max_line_length": 370.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 181.0,
            "last_line_length": 181.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 94.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "interpolator"
          ],
          [
            89,
            "duration"
          ],
          [
            98,
            "valueFrom"
          ],
          [
            112,
            "valueTo"
          ],
          [
            120,
            "propertyName"
          ],
          [
            137,
            "alpha"
          ],
          [
            145,
            "android"
          ],
          [
            153,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            200,
            "objectAnimator"
          ]
        ],
        "sz": 452,
        "sha": "440c234ca8a09188ec558b13771cb29c2da228956bfb58bdade5c1770384acbe",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tb.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 880,
        "ms": {
          "file": {
            "size": 904.0
          },
          "text": {
            "tab_count": 4.0,
            "space_count": 4.0,
            "total_lines": 5.0,
            "char_entropy": 3.86,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 237.6,
            "high_byte_ratio": 0.36,
            "max_line_length": 560.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 381.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 188.31,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            134,
            "viewportWidth"
          ],
          [
            152,
            "viewportHeight"
          ],
          [
            167,
            "fillColor"
          ],
          [
            181,
            "pathData"
          ],
          [
            192,
            "android"
          ],
          [
            202,
            "group"
          ],
          [
            208,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            255,
            "path"
          ],
          [
            262,
            "vector"
          ]
        ],
        "sz": 904,
        "sha": "6920bf718bab0031cf096f153abd57cfe430160e7404f55351857f4362a2ffab",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/th.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 881,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.11,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 2505.0
          },
          "image": {
            "width": 108.0,
            "height": 108.0,
            "channels": 2.0,
            "r_entropy": 2.38,
            "edge_density": 0.02,
            "pixel_entropy": 2.38,
            "histogram_flatness": 0.3
          },
          "binary": {
            "overall_entropy": 7.76
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            1139,
            "R1WL"
          ],
          [
            2497,
            "IEND"
          ]
        ],
        "sz": 2505,
        "sha": "c367b73a33a933429e1d57d33fcfbf243f0274e7cdba221a0b983ee15b5baca9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tj.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 882,
        "ms": {
          "file": {
            "size": 488.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "space_count": 2.0,
            "total_lines": 1.0,
            "char_entropy": 4.04,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 620.0,
            "high_byte_ratio": 0.32,
            "max_line_length": 620.0,
            "non_ascii_ratio": 0.32,
            "null_byte_count": 187.0,
            "last_line_length": 620.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            72,
            "ellipsize"
          ],
          [
            89,
            "layout_width"
          ],
          [
            104,
            "layout_height"
          ],
          [
            122,
            "maxLines"
          ],
          [
            133,
            "importantForAccessibility"
          ],
          [
            161,
            "TextView"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 488,
        "sha": "2adea5c83a47c4ae48bfd11002268da9c1efc21dce19b58ed79c406041e4ba48",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tm.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 883,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.18
          },
          "file": {
            "size": 472.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 1.04,
            "pixel_entropy": 1.04,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 7.44
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDATH"
          ],
          [
            464,
            "IEND"
          ]
        ],
        "sz": 472,
        "sha": "5c80d88a7b82ef5833255bf70ff1c26c3efb2a92ae90cac222f3200f59e0b1ea",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tq.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 2,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 884,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.33,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 252.0
          },
          "image": {
            "width": 16.0,
            "height": 16.0,
            "channels": 3.0,
            "b_entropy": 0.77,
            "g_entropy": 0.8,
            "r_entropy": 0.8,
            "pixel_entropy": 2.38,
            "histogram_flatness": 0.3
          },
          "binary": {
            "overall_entropy": 4.82
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            244,
            "IEND"
          ]
        ],
        "sz": 252,
        "sha": "20343222f9f79dd565c3a2248494d452e70820ac1c437173c38badd45f962afd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tr.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 885,
        "ms": {
          "file": {
            "size": 712.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.22,
            "space_count": 21.0,
            "total_lines": 11.0,
            "char_entropy": 4.39,
            "unique_chars": 76.0,
            "lines_over_200": 1.0,
            "avg_line_length": 77.45,
            "high_byte_ratio": 0.26,
            "max_line_length": 426.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 262.0,
            "last_line_length": 3.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.3,
            "line_length_stddev": 115.88,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "name"
          ],
          [
            101,
            "height"
          ],
          [
            116,
            "viewportWidth"
          ],
          [
            134,
            "viewportHeight"
          ],
          [
            149,
            "fillColor"
          ],
          [
            163,
            "pathData"
          ],
          [
            174,
            "strokeWidth"
          ],
          [
            186,
            "KKM 15.41 16.59 L 10.83 12 L 15.41 7.41 L 14 6 L 8 12 L 14 18 L 15.41 16.59 Z"
          ],
          [
            266,
            "android"
          ],
          [
            274,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            321,
            "path"
          ],
          [
            328,
            "path_1"
          ],
          [
            337,
            "vector"
          ]
        ],
        "sz": 712,
        "sha": "c506af5792306683f6517401e9ce8dc5751bd63df2e52a3eb361acb233534e89",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/tv.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 886,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 10.0,
            "char_entropy": 4.2,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 70.7,
            "high_byte_ratio": 0.26,
            "max_line_length": 360.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 231.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 102.65,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            176,
            "fillAlpha"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            222,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            269,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "362fba7777da45d9149b94c79047ff40975269fee1331e11f263eb1b834c0fe5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/u0.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 887,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c74dd8d138e9741b72ac037065fd7c9cea24c6e1354daa1d7c2d4210add40dc1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/u01.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 888,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 67.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c283813f9b000c696dc87d14fb4e48ddc39798ef384462c93b0d1b576b0cf666",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/u02.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 889,
        "ms": {
          "file": {
            "size": 1208.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 9.0,
            "char_entropy": 3.86,
            "unique_chars": 78.0,
            "lines_over_200": 3.0,
            "avg_line_length": 178.89,
            "high_byte_ratio": 0.38,
            "max_line_length": 369.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 502.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 114.75,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            104,
            "state_enabled"
          ],
          [
            120,
            "interpolator"
          ],
          [
            137,
            "duration"
          ],
          [
            148,
            "valueTo"
          ],
          [
            156,
            "valueType"
          ],
          [
            168,
            "propertyName"
          ],
          [
            183,
            "startDelay"
          ],
          [
            196,
            "state_dragged"
          ],
          [
            214,
            "android"
          ],
          [
            228,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            270,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            317,
            "item"
          ],
          [
            324,
            "objectAnimator"
          ],
          [
            341,
            "selector"
          ],
          [
            356,
            "translationZ"
          ]
        ],
        "sz": 1208,
        "sha": "6eeeaf8e8ec9577c96c2303a81e16161a5fb9b788076368b9acb5b47a485ea74",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/u3.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 890,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.2,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 179.25,
            "high_byte_ratio": 0.27,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 230.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.58,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "c68273c2d11300f756a7bf8e7f13e9cc1b3af9cd91ccf0338a4c5d44ebdae0ea",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/u5.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 891,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 954.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 954.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 307.0,
            "last_line_length": 954.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 724,
        "sha": "54e82c899530e76cb179a5b39f158854e7309adf0151632bcbfb49d38e2038fe",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/u9.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 892,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.08,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 966.0
          },
          "image": {
            "width": 128.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 2.31,
            "edge_density": 0.01,
            "pixel_entropy": 2.31,
            "histogram_flatness": 0.29
          },
          "binary": {
            "overall_entropy": 7.16
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            958,
            "IEND"
          ]
        ],
        "sz": 966,
        "sha": "006f2dc25bacc39e736bc720e26a6545df7427b6c103b2dd77c1eb872c3f3306",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uB.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 893,
        "ms": {
          "file": {
            "size": 1176.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.69,
            "space_count": 45.0,
            "total_lines": 3.0,
            "char_entropy": 4.87,
            "unique_chars": 74.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 442.0,
            "high_byte_ratio": 0.17,
            "lines_over_1000": 1.0,
            "max_line_length": 1152.0,
            "non_ascii_ratio": 0.17,
            "null_byte_count": 234.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.18,
            "line_length_stddev": 502.14,
            "non_printable_ratio": 0.27,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            93,
            "height"
          ],
          [
            108,
            "viewportWidth"
          ],
          [
            126,
            "viewportHeight"
          ],
          [
            141,
            "fillColor"
          ],
          [
            155,
            "pathData"
          ],
          [
            167,
            "PM12,7c2.76,0 5,2.24 5,5 0,0.65 -0.13,1.26 -0.36,1.83l2.92,2.92c1.51,-1.26 2.7,-2.89 3.43,-4.75 -1.73,-4.39 -6,-7.5 -11,-7.5 -1."
          ],
          [
            763,
            "android"
          ],
          [
            771,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            818,
            "path"
          ],
          [
            825,
            "vector"
          ]
        ],
        "sz": 1176,
        "sha": "ced7f390bef77efe569e9195f2b605ec17e342c367bcfba27eea23f83613f044",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uG.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 894,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 4.01,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 504.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 504.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 156.0,
            "last_line_length": 504.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "0ec4e1f5bf1a664593d4c6bebf9caced6e7f38e1911c4c39b74897b1dfad9b6e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uO.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 895,
        "ms": {
          "file": {
            "size": 716.0
          },
          "text": {
            "tab_count": 11.0,
            "digit_ratio": 0.03,
            "total_lines": 5.0,
            "char_entropy": 3.85,
            "unique_chars": 62.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 188.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 525.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 291.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 188.88,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            90,
            "shape"
          ],
          [
            98,
            "color"
          ],
          [
            106,
            "radius"
          ],
          [
            113,
            "insetLeft"
          ],
          [
            125,
            "insetRight"
          ],
          [
            140,
            "insetTop"
          ],
          [
            151,
            "insetBottom"
          ],
          [
            165,
            "android"
          ],
          [
            175,
            "corners"
          ],
          [
            183,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            230,
            "inset"
          ],
          [
            246,
            "solid"
          ]
        ],
        "sz": 716,
        "sha": "1dee3510ae996a0181283dda925abd27f2cf20b904c05b2638b8bd6ce35b16f3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uP.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 896,
        "ms": {
          "file": {
            "size": 540.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 2.0,
            "char_entropy": 4.01,
            "unique_chars": 60.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 340.5,
            "high_byte_ratio": 0.31,
            "max_line_length": 663.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 215.0,
            "last_line_length": 663.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "line_length_stddev": 322.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            78,
            "height"
          ],
          [
            93,
            "viewportWidth"
          ],
          [
            111,
            "viewportHeight"
          ],
          [
            126,
            "fillColor"
          ],
          [
            140,
            "pathData"
          ],
          [
            151,
            "android"
          ],
          [
            159,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            206,
            "path"
          ],
          [
            213,
            "vector"
          ]
        ],
        "sz": 540,
        "sha": "2dad8b0ba38838ef4dd733104d6e81f852fc44030f39966c3e81d6dcbd49abe8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ue.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 897,
        "ms": {
          "file": {
            "size": 316.0
          },
          "text": {
            "digit_ratio": 0.18,
            "space_count": 5.0,
            "total_lines": 1.0,
            "char_entropy": 4.14,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 368.0,
            "high_byte_ratio": 0.21,
            "max_line_length": 368.0,
            "non_ascii_ratio": 0.21,
            "null_byte_count": 125.0,
            "last_line_length": 368.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            58,
            "pathData"
          ],
          [
            69,
            "M 0.0,0.0 l 1.0,0.0 l 0.0,1.0"
          ],
          [
            101,
            "android"
          ],
          [
            109,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            156,
            "pathInterpolator"
          ]
        ],
        "sz": 316,
        "sha": "68b7fc0e819c526c7e31c1413b1821bc0ccfcf4ab550c356a7f740a9d84917dc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/ug.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 898,
        "ms": {
          "file": {
            "size": 1012.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 1.0,
            "char_entropy": 3.46,
            "unique_chars": 61.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 1450.0,
            "high_byte_ratio": 0.45,
            "lines_over_1000": 1.0,
            "max_line_length": 1450.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 448.0,
            "last_line_length": 1450.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            68,
            "state_focused"
          ],
          [
            84,
            "state_enabled"
          ],
          [
            100,
            "state_pressed"
          ],
          [
            118,
            "drawable"
          ],
          [
            129,
            "android"
          ],
          [
            137,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            184,
            "item"
          ],
          [
            191,
            "selector"
          ]
        ],
        "sz": 1012,
        "sha": "7e70ff9f1d239ab3201a30cbb4549978df877f76474edb46e2622d7239eed527",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uo.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 899,
        "ms": {
          "png": {
            "a_entropy": 1.19,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.02
          },
          "file": {
            "size": 318.0
          },
          "image": {
            "width": 88.0,
            "height": 44.0,
            "channels": 4.0,
            "b_entropy": 0.99,
            "g_entropy": 0.99,
            "r_entropy": 0.99,
            "edge_density": 0.02,
            "pixel_entropy": 1.92,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 6.89
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            310,
            "IEND"
          ]
        ],
        "sz": 318,
        "sha": "6b45aef8bf43767c2c1c83dee2bd9ceb9017994fbef6613891e6bc215e2a5ee3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uu.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 900,
        "ms": {
          "file": {
            "size": 612.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.22,
            "space_count": 3.0,
            "total_lines": 3.0,
            "char_entropy": 4.36,
            "unique_chars": 72.0,
            "lines_over_200": 2.0,
            "avg_line_length": 248.67,
            "high_byte_ratio": 0.27,
            "max_line_length": 402.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 228.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.3,
            "line_length_stddev": 155.78,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            220,
            "android"
          ],
          [
            228,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            275,
            "path"
          ],
          [
            282,
            "vector"
          ]
        ],
        "sz": 612,
        "sha": "8618b748f4614d4c97d0eb53953eb547db5f76f873c7db56ab3f7c09938ffbab",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/uv.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 901,
        "ms": {
          "file": {
            "size": 852.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.02,
            "total_lines": 10.0,
            "char_entropy": 3.95,
            "unique_chars": 66.0,
            "lines_over_200": 2.0,
            "avg_line_length": 109.9,
            "high_byte_ratio": 0.35,
            "max_line_length": 388.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 339.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 135.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.31,
            "line_length_stddev": 128.88,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            100,
            "interpolator"
          ],
          [
            117,
            "duration"
          ],
          [
            146,
            "shareInterpolator"
          ],
          [
            164,
            "fromXScale"
          ],
          [
            179,
            "toXScale"
          ],
          [
            188,
            "fromYScale"
          ],
          [
            203,
            "toYScale"
          ],
          [
            212,
            "fromAlpha"
          ],
          [
            226,
            "toAlpha"
          ],
          [
            236,
            "alpha"
          ],
          [
            244,
            "android"
          ],
          [
            252,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            299,
            "scale"
          ]
        ],
        "sz": 852,
        "sha": "d630e86116cf5f5ae6838ef7736238c49168703d8f36499c14ab505e2d69426f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/v2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 902,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 4.22,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 177.75,
            "high_byte_ratio": 0.26,
            "max_line_length": 434.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 227.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 150.92,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            178,
            "http://schemas.android.com/aapt"
          ],
          [
            210,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            257,
            "objectAnimator"
          ],
          [
            274,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "ae534c79adfd1c8bac722cd9c2bceeb6a9de86b956a925c3680e44815cac746f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/v3.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 903,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.17,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 194.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 0.62,
            "edge_density": 0.04,
            "pixel_entropy": 0.62,
            "histogram_flatness": 0.08
          },
          "binary": {
            "overall_entropy": 3.92
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            186,
            "IEND"
          ]
        ],
        "sz": 194,
        "sha": "b8b26708d71b4c7a5cf5311abcdfa741fee39c9f5e1383d49ca0c677fcdb03cd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/v6.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 904,
        "ms": {
          "file": {
            "size": 396.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 4.0,
            "char_entropy": 3.98,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "avg_line_length": 121.25,
            "high_byte_ratio": 0.28,
            "max_line_length": 234.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 159.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 157.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 85.78,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromYDelta"
          ],
          [
            105,
            "toYDelta"
          ],
          [
            116,
            "android"
          ],
          [
            124,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "translate"
          ]
        ],
        "sz": 396,
        "sha": "e0259df82b318cd7d095daae2cb3d4ee6565adefd6def8c11675649f63717ee5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/v8.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 905,
        "ms": {
          "file": {
            "size": 1584.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.02,
            "total_lines": 9.0,
            "char_entropy": 3.83,
            "unique_chars": 81.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 247.33,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 1459.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 600.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 1459.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 446.61,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            122,
            "gravity"
          ],
          [
            132,
            "orientation"
          ],
          [
            151,
            "paddingLeft"
          ],
          [
            163,
            "paddingTop"
          ],
          [
            176,
            "paddingRight"
          ],
          [
            191,
            "paddingBottom"
          ],
          [
            207,
            "visibility"
          ],
          [
            220,
            "layout_width"
          ],
          [
            235,
            "layout_height"
          ],
          [
            251,
            "fillViewport"
          ],
          [
            266,
            "layout_weight"
          ],
          [
            284,
            "layoutDirection"
          ],
          [
            302,
            "scrollIndicators"
          ],
          [
            321,
            "Button"
          ],
          [
            328,
            "ScrollView"
          ],
          [
            343,
            "android"
          ],
          [
            353,
            "android.widget.Space"
          ],
          [
            374,
            "))androidx.appcompat.widget.ButtonBarLayout"
          ],
          [
            418,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1584,
        "sha": "f1fe7a7da202af0f45ea9e9d748eb6b545c5924561bf6ca78e0d070c1b9b9004",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vD.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 906,
        "ms": {
          "file": {
            "size": 1684.0
          },
          "text": {
            "tab_count": 16.0,
            "digit_ratio": 0.01,
            "space_count": 4.0,
            "total_lines": 10.0,
            "char_entropy": 3.84,
            "unique_chars": 86.0,
            "lines_over_200": 4.0,
            "lines_over_500": 2.0,
            "avg_line_length": 233.3,
            "high_byte_ratio": 0.42,
            "max_line_length": 571.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 665.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 239.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.28,
            "line_length_stddev": 203.88,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            122,
            "layout_gravity"
          ],
          [
            142,
            "background"
          ],
          [
            157,
            "paddingLeft"
          ],
          [
            169,
            "paddingTop"
          ],
          [
            182,
            "paddingRight"
          ],
          [
            197,
            "paddingBottom"
          ],
          [
            213,
            "focusable"
          ],
          [
            227,
            "addStatesFromChildren"
          ],
          [
            249,
            "layout_width"
          ],
          [
            264,
            "layout_height"
          ],
          [
            280,
            "scaleType"
          ],
          [
            294,
            "adjustViewBounds"
          ],
          [
            313,
            "FrameLayout"
          ],
          [
            325,
            "ImageView"
          ],
          [
            339,
            "android"
          ],
          [
            347,
            "99androidx.appcompat.widget.ActivityChooserView$InnerLayout"
          ],
          [
            415,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            470,
            "view"
          ]
        ],
        "sz": 1684,
        "sha": "2297354281335c7dcdfad0778da66c6676966b364ca0a5155ea8fb4c7f94c2a7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 907,
        "ms": {
          "file": {
            "size": 1764.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.01,
            "total_lines": 11.0,
            "char_entropy": 3.92,
            "unique_chars": 88.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 222.0,
            "high_byte_ratio": 0.42,
            "lines_over_1000": 1.0,
            "max_line_length": 1571.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 649.0,
            "empty_line_ratio": 0.36,
            "last_line_length": 1571.0,
            "long_token_count": 8.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 444.16,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            138,
            "gravity"
          ],
          [
            148,
            "orientation"
          ],
          [
            167,
            "paddingLeft"
          ],
          [
            179,
            "paddingTop"
          ],
          [
            192,
            "paddingRight"
          ],
          [
            207,
            "paddingBottom"
          ],
          [
            223,
            "visibility"
          ],
          [
            236,
            "layout_width"
          ],
          [
            251,
            "layout_height"
          ],
          [
            267,
            "fillViewport"
          ],
          [
            282,
            "layout_weight"
          ],
          [
            300,
            "layoutDirection"
          ],
          [
            316,
            "paddingStart"
          ],
          [
            331,
            "paddingEnd"
          ],
          [
            346,
            "scrollIndicators"
          ],
          [
            365,
            "paddingHorizontal"
          ],
          [
            385,
            "paddingVertical"
          ],
          [
            403,
            "Button"
          ],
          [
            410,
            "ScrollView"
          ],
          [
            425,
            "android"
          ],
          [
            435,
            "android.widget.Space"
          ],
          [
            456,
            "))androidx.appcompat.widget.ButtonBarLayout"
          ],
          [
            500,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 1764,
        "sha": "3c45f6de71790e74da25cf8ffb2c6e38d6953d82a28a9c9a06715e0c11c36791",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vM.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 908,
        "ms": {
          "file": {
            "size": 1180.0
          },
          "text": {
            "tab_count": 22.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 10.0,
            "char_entropy": 3.7,
            "unique_chars": 69.0,
            "lines_over_200": 3.0,
            "avg_line_length": 160.9,
            "high_byte_ratio": 0.41,
            "max_line_length": 498.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 508.0,
            "last_line_length": 75.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.31,
            "line_length_stddev": 125.97,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            92,
            "state_enabled"
          ],
          [
            108,
            "state_checked"
          ],
          [
            126,
            "state_selected"
          ],
          [
            143,
            "duration"
          ],
          [
            154,
            "valueTo"
          ],
          [
            162,
            "valueType"
          ],
          [
            174,
            "propertyName"
          ],
          [
            189,
            "state_hovered"
          ],
          [
            207,
            "android"
          ],
          [
            215,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            262,
            "item"
          ],
          [
            269,
            "objectAnimator"
          ],
          [
            286,
            "selector"
          ],
          [
            295,
            "translationZ"
          ]
        ],
        "sz": 1180,
        "sha": "ea718a0a0da1132f8b04143e903fe835a21e998f68b62a79f77ebd45d561f592",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vO.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 909,
        "ms": {
          "file": {
            "size": 940.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.0,
            "total_lines": 4.0,
            "char_entropy": 4.33,
            "unique_chars": 78.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 295.25,
            "high_byte_ratio": 0.31,
            "max_line_length": 688.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 323.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 213.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.27,
            "line_length_stddev": 249.21,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            112,
            "ellipsize"
          ],
          [
            126,
            "gravity"
          ],
          [
            141,
            "paddingLeft"
          ],
          [
            153,
            "paddingRight"
          ],
          [
            168,
            "layout_width"
          ],
          [
            183,
            "layout_height"
          ],
          [
            199,
            "minHeight"
          ],
          [
            213,
            "drawablePadding"
          ],
          [
            229,
            "textAlignment"
          ],
          [
            245,
            "paddingStart"
          ],
          [
            260,
            "paddingEnd"
          ],
          [
            275,
            "drawableLeftCompat"
          ],
          [
            296,
            "drawableStartCompat"
          ],
          [
            318,
            "CheckedTextView"
          ],
          [
            336,
            "android"
          ],
          [
            350,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            392,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 940,
        "sha": "40f8ee61010dd31664890302603b6e966a3ba6c17c24d26c9abf05d99af80716",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vP.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 910,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.05
          },
          "file": {
            "size": 322.0
          },
          "image": {
            "width": 36.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.92,
            "edge_density": 0.03,
            "pixel_entropy": 0.92,
            "histogram_flatness": 0.12
          },
          "binary": {
            "overall_entropy": 7.1
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            314,
            "IEND"
          ]
        ],
        "sz": 322,
        "sha": "136d08fab0fe416fc7e0eca9c498e63c68357b2caa4241f444bbc3f26f9a74c9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/va.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 911,
        "ms": {
          "file": {
            "size": 956.0
          },
          "text": {
            "tab_count": 8.0,
            "space_count": 1.0,
            "total_lines": 16.0,
            "char_entropy": 3.9,
            "unique_chars": 71.0,
            "lines_over_200": 1.0,
            "avg_line_length": 81.31,
            "high_byte_ratio": 0.41,
            "max_line_length": 263.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 360.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 3.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 73.57,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "orientation"
          ],
          [
            103,
            "visibility"
          ],
          [
            116,
            "layout_width"
          ],
          [
            131,
            "layout_height"
          ],
          [
            147,
            "ImageView"
          ],
          [
            159,
            "LinearLayout"
          ],
          [
            176,
            "android"
          ],
          [
            186,
            "android.widget.Space"
          ],
          [
            207,
            "%%androidx.appcompat.widget.DialogTitle"
          ],
          [
            247,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 956,
        "sha": "486616b75a59510962aae1efc510d8d7652e2d2e42018e941de6068b5cc1cd4a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/va.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 912,
        "ms": {
          "file": {
            "size": 848.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "total_lines": 6.0,
            "char_entropy": 4.06,
            "unique_chars": 73.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 184.83,
            "high_byte_ratio": 0.36,
            "max_line_length": 693.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 319.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 171.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.29,
            "line_length_stddev": 239.51,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            102,
            "textAppearance"
          ],
          [
            117,
            "ellipsize"
          ],
          [
            131,
            "layout_gravity"
          ],
          [
            153,
            "paddingLeft"
          ],
          [
            165,
            "paddingRight"
          ],
          [
            180,
            "fadingEdge"
          ],
          [
            193,
            "layout_width"
          ],
          [
            208,
            "layout_height"
          ],
          [
            226,
            "minWidth"
          ],
          [
            235,
            "singleLine"
          ],
          [
            248,
            "textAlignment"
          ],
          [
            266,
            "FrameLayout"
          ],
          [
            280,
            "TextView"
          ],
          [
            291,
            "android"
          ],
          [
            299,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 848,
        "sha": "6ab9d449e40e5cad02f1416ea941f72b5a986d1d2e3efee12f3a7d1d86ac0cd9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vc.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 913,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.23
          },
          "file": {
            "size": 267.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 1.94,
            "pixel_entropy": 1.94,
            "histogram_flatness": 0.24
          },
          "binary": {
            "overall_entropy": 6.95
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            259,
            "IEND"
          ]
        ],
        "sz": 267,
        "sha": "4133830f43f9baa0b0ed3cc80d798b20071da9f51fe12ef6b0bd09abc8d5d33a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vd.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 914,
        "ms": {
          "file": {
            "size": 608.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.01,
            "unique_chars": 65.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 252.67,
            "high_byte_ratio": 0.3,
            "max_line_length": 636.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 249.0,
            "last_line_length": 115.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 274.62,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            112,
            "startOffset"
          ],
          [
            124,
            "valueFrom"
          ],
          [
            138,
            "valueTo"
          ],
          [
            146,
            "valueType"
          ],
          [
            158,
            "propertyName"
          ],
          [
            175,
            "android"
          ],
          [
            183,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            230,
            "objectAnimator"
          ],
          [
            247,
            "opacity"
          ]
        ],
        "sz": 608,
        "sha": "f17a88f7902800cfa8fae94880e5d4cbf9bbff6b6ca74b3dc9cdc152c5febaa9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vl.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 915,
        "ms": {
          "file": {
            "size": 388.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 2.0,
            "char_entropy": 3.93,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "avg_line_length": 240.5,
            "high_byte_ratio": 0.29,
            "max_line_length": 322.0,
            "non_ascii_ratio": 0.29,
            "null_byte_count": 157.0,
            "last_line_length": 159.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 81.5,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromAlpha"
          ],
          [
            104,
            "toAlpha"
          ],
          [
            114,
            "alpha"
          ],
          [
            122,
            "android"
          ],
          [
            130,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 388,
        "sha": "3067b94eebe8ac9e3a45599822f99d807d712f424494e9fc9cdd28cfb6bdae6a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vp.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 916,
        "ms": {
          "png": {
            "a_entropy": 2.27,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.32
          },
          "file": {
            "size": 416.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 4.0,
            "b_entropy": 2.6,
            "g_entropy": 2.57,
            "r_entropy": 2.57,
            "edge_density": 0.12,
            "pixel_entropy": 3.46,
            "histogram_flatness": 0.43
          },
          "binary": {
            "overall_entropy": 7.33
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            408,
            "IEND"
          ]
        ],
        "sz": 416,
        "sha": "8b915c967a411eb6a5137825f26b04eccc8cfd27f7f924b1588ef429619bf9c3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vu.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 917,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.09,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 226.0
          },
          "image": {
            "width": 36.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.25,
            "pixel_entropy": 0.25,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 3.81
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            218,
            "IEND"
          ]
        ],
        "sz": 226,
        "sha": "67e701476927078d89ab0bbb39fff12d69702592a7a428237a21168a21ec1038",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vy.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 918,
        "ms": {
          "file": {
            "size": 856.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 4.01,
            "unique_chars": 80.0,
            "lines_over_200": 3.0,
            "avg_line_length": 226.8,
            "high_byte_ratio": 0.37,
            "max_line_length": 367.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 332.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 329.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.29,
            "line_length_stddev": 135.67,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            98,
            "textAppearance"
          ],
          [
            115,
            "gravity"
          ],
          [
            130,
            "layout"
          ],
          [
            137,
            "inflatedId"
          ],
          [
            150,
            "layout_width"
          ],
          [
            165,
            "layout_height"
          ],
          [
            183,
            "maxLines"
          ],
          [
            194,
            "drawablePadding"
          ],
          [
            210,
            "layout_weight"
          ],
          [
            228,
            "CheckedTextView"
          ],
          [
            246,
            "ViewStub"
          ],
          [
            257,
            "android"
          ],
          [
            265,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            312,
            "merge"
          ]
        ],
        "sz": 856,
        "sha": "47c70043a37661d1de201b547207e07de0f97a6c2de5082142b5b222caf3a711",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/vz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 919,
        "ms": {
          "file": {
            "size": 724.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.78,
            "unique_chars": 59.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 954.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 954.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 307.0,
            "last_line_length": 954.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 724,
        "sha": "ef7b0ce097e54c64fa321bcc689838e2fae01197a28a2149cfd56066173b097d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/w2.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 920,
        "ms": {
          "file": {
            "size": 1356.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.74,
            "space_count": 116.0,
            "total_lines": 11.0,
            "char_entropy": 4.86,
            "unique_chars": 82.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 137.09,
            "high_byte_ratio": 0.16,
            "lines_over_1000": 1.0,
            "max_line_length": 1066.0,
            "non_ascii_ratio": 0.16,
            "null_byte_count": 248.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.09,
            "most_common_ratio": 0.16,
            "line_length_stddev": 295.52,
            "non_printable_ratio": 0.25,
            "repeated_char_sequences": 9.0,
            "max_inline_whitespace_run": 13.0
          }
        },
        "ss": [
          [
            97,
            "height"
          ],
          [
            112,
            "autoMirrored"
          ],
          [
            127,
            "viewportWidth"
          ],
          [
            145,
            "viewportHeight"
          ],
          [
            160,
            "fillColor"
          ],
          [
            174,
            "pathData"
          ],
          [
            187,
            "M6.0168,3.3333L6.5751,5.575L4.6668,7.4916C3.8751,5.7166 3.6001,4.1916             3.4834,3.3333H6.0168ZM14.4251,13.375L16.6668,1"
          ],
          [
            916,
            "android"
          ],
          [
            924,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            971,
            "path"
          ],
          [
            978,
            "vector"
          ]
        ],
        "sz": 1356,
        "sha": "5f6376dfe199d8a6e40033d3e623989d052c9b2f974d00c824fbb8b76fc6fde8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/w7.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 921,
        "ms": {
          "file": {
            "size": 796.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.72,
            "unique_chars": 61.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 343.33,
            "high_byte_ratio": 0.34,
            "max_line_length": 643.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 362.0,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 248.29,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            108,
            "startOffset"
          ],
          [
            120,
            "propertyName"
          ],
          [
            137,
            "android"
          ],
          [
            145,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            190,
            "iconScale"
          ],
          [
            204,
            "objectAnimator"
          ],
          [
            221,
            "opacity"
          ],
          [
            231,
            "scale"
          ]
        ],
        "sz": 796,
        "sha": "10eb3cd3dda56fe6aad29e9479d8f0bc630c7ac2d8dad31921f4f577285c800c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wG.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 922,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.73,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 209.0
          },
          "image": {
            "width": 12.0,
            "height": 12.0,
            "channels": 2.0,
            "r_entropy": 1.0,
            "pixel_entropy": 1.0,
            "histogram_flatness": 0.13
          },
          "binary": {
            "overall_entropy": 3.93
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            169,
            "IDAT"
          ],
          [
            201,
            "IEND"
          ]
        ],
        "sz": 209,
        "sha": "07bf5ce5ff8937257afd146062c9bf5ca1f4115a1643529d81845d0202c7ddef",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wK.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 923,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.32,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 192.0
          },
          "image": {
            "width": 19.0,
            "height": 16.0,
            "channels": 2.0,
            "r_entropy": 0.34,
            "pixel_entropy": 0.34,
            "histogram_flatness": 0.04
          },
          "binary": {
            "overall_entropy": 3.79
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            184,
            "IEND"
          ]
        ],
        "sz": 192,
        "sha": "94fe9824714ad94c002fe6219e723c0d80c7cbe3a6130d7aa493730b67e294d1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wL.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 924,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.01
          },
          "file": {
            "size": 224.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.28,
            "edge_density": 0.01,
            "pixel_entropy": 0.28,
            "histogram_flatness": 0.03
          },
          "binary": {
            "overall_entropy": 6.44
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            216,
            "IEND"
          ]
        ],
        "sz": 224,
        "sha": "f5f349c1e949f0e66374f83b667fc0d0f477379614f36912ade22a299f2194d5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wN.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 925,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.09
          },
          "file": {
            "size": 267.0
          },
          "image": {
            "width": 24.0,
            "height": 64.0,
            "channels": 2.0,
            "r_entropy": 1.19,
            "edge_density": 0.04,
            "pixel_entropy": 1.19,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 6.88
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            259,
            "IEND"
          ]
        ],
        "sz": 267,
        "sha": "777a1cf53820aa467267d1f64e5f923656f93047038ea6375bcce257b517930e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wT.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 926,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.28
          },
          "file": {
            "size": 317.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 1.18,
            "pixel_entropy": 1.18,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 7.15
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDAT8"
          ],
          [
            309,
            "IEND"
          ]
        ],
        "sz": 317,
        "sha": "f2ff62f473d8a5e00a8b6c81c15be9a0536471c3d5a81e37d04bc3356ea81ca0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wW.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 927,
        "ms": {
          "file": {
            "size": 740.0
          },
          "text": {
            "tab_count": 9.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.9,
            "unique_chars": 57.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 320.67,
            "high_byte_ratio": 0.35,
            "max_line_length": 780.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 297.0,
            "last_line_length": 75.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "line_length_stddev": 325.06,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            90,
            "color"
          ],
          [
            96,
            "topLeftRadius"
          ],
          [
            114,
            "topRightRadius"
          ],
          [
            131,
            "bottomLeftRadius"
          ],
          [
            150,
            "bottomRightRadius"
          ],
          [
            176,
            "bottom"
          ],
          [
            185,
            "android"
          ],
          [
            195,
            "corners"
          ],
          [
            203,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            250,
            "padding"
          ],
          [
            260,
            "shape"
          ],
          [
            268,
            "solid"
          ]
        ],
        "sz": 740,
        "sha": "82a17f3cd8656f9d308227a2065c6caa1001bcbefafa194e10e8d8cc630e8e46",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wY.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 928,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.3,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1731.0
          },
          "image": {
            "width": 54.0,
            "height": 54.0,
            "channels": 2.0,
            "r_entropy": 3.32,
            "edge_density": 0.09,
            "pixel_entropy": 3.32,
            "histogram_flatness": 0.41
          },
          "binary": {
            "overall_entropy": 7.59
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            213,
            "IDATX"
          ],
          [
            1723,
            "IEND"
          ]
        ],
        "sz": 1731,
        "sha": "4d2fe45a8169f368052c921230a268ba9f53ea5fedbcb09ff35107473551e50c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wi.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npLb",
          "png.unknown_chunks[2]": "npTc"
        },
        "dp": 1,
        "id": 929,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 6.0,
            "compression_ratio": 0.37,
            "unknown_chunks_count": 3.0
          },
          "file": {
            "size": 1243.0
          },
          "image": {
            "width": 41.0,
            "height": 41.0,
            "channels": 2.0,
            "r_entropy": 3.43,
            "edge_density": 0.12,
            "pixel_entropy": 3.43,
            "histogram_flatness": 0.43
          },
          "binary": {
            "overall_entropy": 7.44
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            213,
            "IDATH"
          ],
          [
            1235,
            "IEND"
          ]
        ],
        "sz": 1243,
        "sha": "ab94afcb2bb325544c0c1103bf5109b827bf070f441faef909f856ae295a1cf0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wi1.9.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 930,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.19
          },
          "file": {
            "size": 1749.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 1.0,
            "r_entropy": 2.12,
            "edge_density": 0.04,
            "pixel_entropy": 2.12,
            "histogram_flatness": 0.27
          },
          "binary": {
            "overall_entropy": 7.44
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "YPLTE"
          ],
          [
            1741,
            "IEND"
          ]
        ],
        "sz": 1749,
        "sha": "6bce6597afcce75fd592970a1159d66fe4102a060a961f20da42c190ce14cc22",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wl.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 931,
        "ms": {
          "file": {
            "size": 956.0
          },
          "text": {
            "tab_count": 8.0,
            "space_count": 1.0,
            "total_lines": 16.0,
            "char_entropy": 3.9,
            "unique_chars": 71.0,
            "lines_over_200": 1.0,
            "avg_line_length": 81.44,
            "high_byte_ratio": 0.41,
            "max_line_length": 263.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 360.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 3.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 73.66,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "orientation"
          ],
          [
            103,
            "visibility"
          ],
          [
            116,
            "layout_width"
          ],
          [
            131,
            "layout_height"
          ],
          [
            147,
            "ImageView"
          ],
          [
            159,
            "LinearLayout"
          ],
          [
            176,
            "android"
          ],
          [
            186,
            "android.widget.Space"
          ],
          [
            207,
            "%%androidx.appcompat.widget.DialogTitle"
          ],
          [
            247,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 956,
        "sha": "256298069ccb17cdbf873150a2ff054639ad56bffadddd16add5d2656b0f4c7c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wn.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 932,
        "ms": {
          "file": {
            "size": 796.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 3.72,
            "unique_chars": 60.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 344.0,
            "high_byte_ratio": 0.35,
            "max_line_length": 645.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 360.0,
            "last_line_length": 35.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.35,
            "line_length_stddev": 249.1,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            108,
            "startOffset"
          ],
          [
            120,
            "propertyName"
          ],
          [
            137,
            "android"
          ],
          [
            145,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            190,
            "iconScale"
          ],
          [
            204,
            "objectAnimator"
          ],
          [
            221,
            "opacity"
          ],
          [
            231,
            "scale"
          ]
        ],
        "sz": 796,
        "sha": "a4e2875c1a9e039a7a9f82894dc278ed1e28674111d770d6e63b9b6d42f7f499",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wo.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 933,
        "ms": {
          "png": {
            "a_entropy": 2.27,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.33
          },
          "file": {
            "size": 430.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 4.0,
            "b_entropy": 2.62,
            "g_entropy": 2.64,
            "r_entropy": 2.64,
            "edge_density": 0.23,
            "pixel_entropy": 3.56,
            "histogram_flatness": 0.44
          },
          "binary": {
            "overall_entropy": 7.32
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            422,
            "IEND"
          ]
        ],
        "sz": 430,
        "sha": "a0f1b06174dc7702a2e07a1c8761013b15ecc4885ad246ba709a70b84841fa94",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wv.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 934,
        "ms": {
          "file": {
            "size": 716.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.42,
            "space_count": 7.0,
            "total_lines": 3.0,
            "char_entropy": 4.62,
            "unique_chars": 74.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 286.0,
            "high_byte_ratio": 0.25,
            "max_line_length": 514.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 224.0,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 196.23,
            "non_printable_ratio": 0.39,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "height"
          ],
          [
            97,
            "viewportWidth"
          ],
          [
            115,
            "viewportHeight"
          ],
          [
            130,
            "fillColor"
          ],
          [
            144,
            "pathData"
          ],
          [
            157,
            "M3,17.25V21h3.75L17.81,9.94l-3.75,-3.75L3,17.25zM20.71,7.04c0.39,-0.39 0.39,-1.02 0,-1.41l-2.34,-2.34c-0.39,-0.39 -1.02,-0.39 -1"
          ],
          [
            326,
            "android"
          ],
          [
            334,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            381,
            "path"
          ],
          [
            388,
            "vector"
          ]
        ],
        "sz": 716,
        "sha": "32695bc5a16f6b9528751b628946bab98ce2458cdb5d644736b6c8af5cb85a1e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/wz.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 935,
        "ms": {
          "file": {
            "size": 516.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.75,
            "unique_chars": 54.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 668.0,
            "high_byte_ratio": 0.34,
            "max_line_length": 668.0,
            "non_ascii_ratio": 0.34,
            "null_byte_count": 224.0,
            "last_line_length": 668.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.34,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "height"
          ],
          [
            91,
            "shape"
          ],
          [
            99,
            "color"
          ],
          [
            107,
            "android"
          ],
          [
            115,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            170,
            "size"
          ],
          [
            177,
            "solid"
          ]
        ],
        "sz": 516,
        "sha": "e49a3d6549f8ffce9ef6716a1dce006f64797eaae60bc091b16c560e20ee59bd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/x1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 936,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.18,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 345.0
          },
          "image": {
            "width": 27.0,
            "height": 36.0,
            "channels": 2.0,
            "r_entropy": 0.68,
            "edge_density": 0.06,
            "pixel_entropy": 0.68,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 5.62
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            165,
            "IDAT8"
          ],
          [
            337,
            "IEND"
          ]
        ],
        "sz": 345,
        "sha": "b0b2dc2cae7811c124ae528d714318bb1043b59d82a640f22c47ace64c283fec",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/x5.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 937,
        "ms": {
          "file": {
            "size": 576.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.02,
            "total_lines": 1.0,
            "char_entropy": 3.69,
            "unique_chars": 52.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 760.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 760.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 249.0,
            "last_line_length": 760.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            82,
            "color"
          ],
          [
            90,
            "radius"
          ],
          [
            99,
            "android"
          ],
          [
            109,
            "corners"
          ],
          [
            117,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            164,
            "shape"
          ],
          [
            172,
            "solid"
          ],
          [
            180,
            "stroke"
          ]
        ],
        "sz": 576,
        "sha": "85be9dac78f003cb560e36429557b1680d8dec34eb02d67a1226fd7d4aaad8f2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xB.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 938,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.14
          },
          "file": {
            "size": 623.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 2.0,
            "r_entropy": 0.9,
            "pixel_entropy": 0.9,
            "histogram_flatness": 0.11
          },
          "binary": {
            "overall_entropy": 7.56
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            36,
            "6IDATX"
          ],
          [
            230,
            "140.231.79.164:12550"
          ],
          [
            615,
            "IEND"
          ]
        ],
        "sz": 623,
        "sha": "e64c2e57627e24ec1ed37e67344c2bf31d1d6bdd2d8d715840c1edf0bd1425b6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xD.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 939,
        "ms": {
          "file": {
            "size": 556.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 3.0,
            "char_entropy": 4.18,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 222.0,
            "high_byte_ratio": 0.25,
            "max_line_length": 552.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 217.0,
            "last_line_length": 107.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 236.89,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "valueFrom"
          ],
          [
            120,
            "valueTo"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "aapt"
          ],
          [
            152,
            "android"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            194,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            241,
            "objectAnimator"
          ],
          [
            258,
            "trimPathEnd"
          ]
        ],
        "sz": 556,
        "sha": "6bf941412c53badd89aa143de3f8345b1e5a67cb04f699c05c93bdea5c2be118",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xF.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 940,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 823.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.57,
            "pixel_entropy": 0.57,
            "histogram_flatness": 0.07
          },
          "binary": {
            "overall_entropy": 7.65
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            45,
            "KHTQ"
          ],
          [
            815,
            "IEND"
          ]
        ],
        "sz": 823,
        "sha": "ab73b729bb95878120a3bdc8dc915f3aaa1d7070fc644a0de64d40941ad507ed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xR.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 941,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.04
          },
          "file": {
            "size": 384.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 2.0,
            "r_entropy": 0.77,
            "pixel_entropy": 0.77,
            "histogram_flatness": 0.1
          },
          "binary": {
            "overall_entropy": 7.28
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            376,
            "IEND"
          ]
        ],
        "sz": 384,
        "sha": "ca48f604262f2b4ef8b100c73130efe2ad33ef8c2a2c1b3516f24f51b7b04665",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xW.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 942,
        "ms": {
          "file": {
            "size": 800.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.19,
            "space_count": 19.0,
            "total_lines": 3.0,
            "char_entropy": 4.31,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 332.0,
            "high_byte_ratio": 0.3,
            "max_line_length": 561.0,
            "non_ascii_ratio": 0.3,
            "null_byte_count": 297.0,
            "last_line_length": 7.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.05,
            "most_common_ratio": 0.3,
            "line_length_stddev": 236.14,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            94,
            "height"
          ],
          [
            109,
            "viewportWidth"
          ],
          [
            127,
            "viewportHeight"
          ],
          [
            142,
            "fillColor"
          ],
          [
            156,
            "pathData"
          ],
          [
            167,
            "strokeColor"
          ],
          [
            181,
            "strokeWidth"
          ],
          [
            250,
            "M7,8 v-2 a5,5 0 1 1 10,0 v2"
          ],
          [
            280,
            "android"
          ],
          [
            288,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            335,
            "path"
          ],
          [
            342,
            "vector"
          ]
        ],
        "sz": 800,
        "sha": "4a3dcc9eba892ec59caeb8233efabb421c57caf2ce4c67013af0d52c6df379c5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xW.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 3
        },
        "dp": 1,
        "id": 943,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.2
          },
          "file": {
            "size": 1048.0
          },
          "image": {
            "width": 72.0,
            "height": 72.0,
            "channels": 1.0,
            "r_entropy": 0.72,
            "edge_density": 0.04,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 6.87
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "PLTE"
          ],
          [
            608,
            "IDATX"
          ],
          [
            1040,
            "IEND"
          ]
        ],
        "sz": 1048,
        "sha": "3f760c9591e5f2b666241a2361cea557dffd1af780ed8c970a0f1825d2bdda06",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/x_.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 944,
        "ms": {
          "file": {
            "size": 2004.0
          },
          "text": {
            "tab_count": 22.0,
            "digit_ratio": 0.03,
            "space_count": 3.0,
            "total_lines": 5.0,
            "char_entropy": 3.63,
            "unique_chars": 79.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 566.4,
            "high_byte_ratio": 0.44,
            "lines_over_1000": 1.0,
            "max_line_length": 2257.0,
            "non_ascii_ratio": 0.44,
            "null_byte_count": 840.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 67.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.3,
            "line_length_stddev": 853.07,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            100,
            "state_checked"
          ],
          [
            116,
            "state_pressed"
          ],
          [
            139,
            "height"
          ],
          [
            156,
            "drawable"
          ],
          [
            183,
            "state_with_icon"
          ],
          [
            201,
            "android"
          ],
          [
            211,
            "animated-selector"
          ],
          [
            235,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            277,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            324,
            "item"
          ],
          [
            329,
            "transition"
          ]
        ],
        "sz": 2004,
        "sha": "231cbbcee00b4dcef72f2d348def96b422f1f24e7283d268859aff8b040cf318",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xc.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 945,
        "ms": {
          "file": {
            "size": 524.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.01,
            "total_lines": 1.0,
            "char_entropy": 3.98,
            "unique_chars": 56.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 658.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 658.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 211.0,
            "last_line_length": 658.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.32,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            74,
            "name"
          ],
          [
            81,
            "drawable"
          ],
          [
            90,
            "animation"
          ],
          [
            104,
            "aapt"
          ],
          [
            111,
            "android"
          ],
          [
            121,
            "animated-vector"
          ],
          [
            139,
            "http://schemas.android.com/aapt"
          ],
          [
            171,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            218,
            "target"
          ]
        ],
        "sz": 524,
        "sha": "b64410e56a286e9e80b0ee6a9958ab5e8bdf17f35ce99aa8c3f16e312e262b5f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xd.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 946,
        "ms": {
          "file": {
            "size": 1128.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.03,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 3.62,
            "unique_chars": 72.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 302.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 564.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 517.0,
            "last_line_length": 347.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.34,
            "line_length_stddev": 183.22,
            "non_printable_ratio": 0.5,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            114,
            "valueFrom"
          ],
          [
            128,
            "valueTo"
          ],
          [
            136,
            "propertyName"
          ],
          [
            153,
            "ordering"
          ],
          [
            164,
            "alpha"
          ],
          [
            172,
            "android"
          ],
          [
            180,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            227,
            "objectAnimator"
          ]
        ],
        "sz": 1128,
        "sha": "8d6a7673040021a813a31ec2d3de9a05acb90560ec686a58297bc57b0c4f55b8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xs.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 947,
        "ms": {
          "file": {
            "size": 1116.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 3.74,
            "unique_chars": 69.0,
            "lines_over_200": 3.0,
            "lines_over_500": 2.0,
            "avg_line_length": 291.6,
            "high_byte_ratio": 0.35,
            "max_line_length": 695.0,
            "non_ascii_ratio": 0.35,
            "null_byte_count": 498.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 507.0,
            "long_token_count": 5.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 274.58,
            "non_printable_ratio": 0.51,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            88,
            "interpolator"
          ],
          [
            105,
            "duration"
          ],
          [
            116,
            "startOffset"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "android"
          ],
          [
            155,
            "height"
          ],
          [
            162,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            207,
            "labelOpacity"
          ],
          [
            224,
            "objectAnimator"
          ],
          [
            239,
            "paddingEnd"
          ],
          [
            252,
            "paddingStart"
          ]
        ],
        "sz": 1116,
        "sha": "ead73387b545508870a1cfafbffc60ecfd2f0f9ff1eefb014fd89714215d6472",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xw.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 948,
        "ms": {
          "file": {
            "size": 1888.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 23.0,
            "char_entropy": 3.59,
            "unique_chars": 81.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 107.74,
            "high_byte_ratio": 0.37,
            "max_line_length": 604.0,
            "non_ascii_ratio": 0.37,
            "null_byte_count": 890.0,
            "last_line_length": 75.0,
            "long_token_count": 9.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.36,
            "line_length_stddev": 114.05,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            110,
            "duration"
          ],
          [
            121,
            "startOffset"
          ],
          [
            133,
            "propertyName"
          ],
          [
            150,
            "android"
          ],
          [
            160,
            "color"
          ],
          [
            168,
            "contentFade"
          ],
          [
            180,
            "elevation"
          ],
          [
            192,
            "expansion"
          ],
          [
            204,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            251,
            "iconFade"
          ],
          [
            262,
            "objectAnimator"
          ],
          [
            285,
            "translationXCurveDownwards"
          ],
          [
            314,
            "translationXCurveUpwards"
          ],
          [
            341,
            "translationXLinear"
          ],
          [
            362,
            "translationYCurveDownwards"
          ],
          [
            391,
            "translationYCurveUpwards"
          ],
          [
            418,
            "translationYLinear"
          ]
        ],
        "sz": 1888,
        "sha": "69f94c4561fa0bc52f09e3f37bd2337001586dfeffd2513d40a73cdff6e1dbdf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/xy.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6,
          "png.unknown_chunks[0]": "npOl",
          "png.unknown_chunks[1]": "npTc"
        },
        "dp": 1,
        "id": 949,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 5.0,
            "compression_ratio": 0.17,
            "unknown_chunks_count": 2.0
          },
          "file": {
            "size": 221.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 4.0,
            "pixel_entropy": 1.5,
            "histogram_flatness": 0.19
          },
          "binary": {
            "overall_entropy": 4.1
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            168,
            "IDAT8"
          ],
          [
            213,
            "IEND"
          ]
        ],
        "sz": 221,
        "sha": "44c29766b2d88b78a71393b3e3a771ca7eef5f552630c6074f33d6291241d0b9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yO.9.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 950,
        "ms": {
          "file": {
            "size": 1716.0
          },
          "text": {
            "tab_count": 3.0,
            "digit_ratio": 0.06,
            "space_count": 1.0,
            "total_lines": 4.0,
            "char_entropy": 3.62,
            "unique_chars": 81.0,
            "lines_over_200": 3.0,
            "lines_over_500": 1.0,
            "avg_line_length": 595.75,
            "high_byte_ratio": 0.42,
            "lines_over_1000": 1.0,
            "max_line_length": 1767.0,
            "non_ascii_ratio": 0.42,
            "null_byte_count": 743.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 1767.0,
            "long_token_count": 4.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 690.19,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            124,
            "state_enabled"
          ],
          [
            142,
            "shape"
          ],
          [
            150,
            "color"
          ],
          [
            158,
            "radius"
          ],
          [
            188,
            "bottom"
          ],
          [
            195,
            "insetLeft"
          ],
          [
            207,
            "insetRight"
          ],
          [
            222,
            "insetTop"
          ],
          [
            233,
            "insetBottom"
          ],
          [
            247,
            "android"
          ],
          [
            257,
            "corners"
          ],
          [
            265,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            312,
            "inset"
          ],
          [
            320,
            "item"
          ],
          [
            327,
            "padding"
          ],
          [
            337,
            "ripple"
          ],
          [
            346,
            "selector"
          ],
          [
            365,
            "solid"
          ]
        ],
        "sz": 1716,
        "sha": "684cfa65adef2613e4f4486ca274536671e271b74090b5cef41964893222ca2b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yP.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 951,
        "ms": {
          "png": {
            "a_entropy": 1.46,
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.11
          },
          "file": {
            "size": 1023.0
          },
          "image": {
            "width": 48.0,
            "height": 48.0,
            "channels": 4.0,
            "b_entropy": 2.02,
            "g_entropy": 2.02,
            "r_entropy": 2.02,
            "edge_density": 0.1,
            "pixel_entropy": 2.78,
            "histogram_flatness": 0.35
          },
          "binary": {
            "overall_entropy": 7.78
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            85,
            "q1a4"
          ],
          [
            777,
            "R9U9U"
          ],
          [
            1015,
            "IEND"
          ]
        ],
        "sz": 1023,
        "sha": "bb3dae975c8775febb63fb10cfd690083474fd0509321ccb6945857301ac663a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yU.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 952,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 1.0,
            "digit_ratio": 0.03,
            "total_lines": 1.0,
            "char_entropy": 3.61,
            "unique_chars": 48.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 792.0,
            "high_byte_ratio": 0.38,
            "max_line_length": 792.0,
            "non_ascii_ratio": 0.38,
            "null_byte_count": 262.0,
            "last_line_length": 792.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.33,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            74,
            "color"
          ],
          [
            82,
            "radius"
          ],
          [
            91,
            "android"
          ],
          [
            101,
            "corners"
          ],
          [
            109,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            156,
            "item"
          ],
          [
            163,
            "selector"
          ],
          [
            174,
            "shape"
          ],
          [
            182,
            "solid"
          ]
        ],
        "sz": 592,
        "sha": "70cba53214bc4959b4d0b7857ef7f7dec8c5772d7624e5d47f0b9639984db099",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yW.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 953,
        "ms": {
          "file": {
            "size": 556.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.14,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "avg_line_length": 166.25,
            "high_byte_ratio": 0.25,
            "max_line_length": 486.0,
            "non_ascii_ratio": 0.25,
            "null_byte_count": 219.0,
            "last_line_length": 107.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.33,
            "line_length_stddev": 187.99,
            "non_printable_ratio": 0.48,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            80,
            "interpolator"
          ],
          [
            97,
            "duration"
          ],
          [
            106,
            "valueFrom"
          ],
          [
            120,
            "valueTo"
          ],
          [
            128,
            "propertyName"
          ],
          [
            145,
            "aapt"
          ],
          [
            152,
            "android"
          ],
          [
            162,
            "http://schemas.android.com/aapt"
          ],
          [
            194,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            241,
            "objectAnimator"
          ],
          [
            258,
            "trimPathEnd"
          ]
        ],
        "sz": 556,
        "sha": "f4b4aaf2668da2bde9f0bb500ef19e09383b7ef6a9dd06324b0d05c1818ec4fc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yf.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 954,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.06
          },
          "file": {
            "size": 1171.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.72,
            "pixel_entropy": 0.72,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.76
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            602,
            "fl71"
          ],
          [
            1163,
            "IEND"
          ]
        ],
        "sz": 1171,
        "sha": "ec698a3217bce74d8bc4a44bb008f2dbd3d1aebff1af1e9641805143dbf9fa87",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yq.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 955,
        "ms": {
          "file": {
            "size": 1172.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "total_lines": 8.0,
            "char_entropy": 3.91,
            "unique_chars": 74.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 200.37,
            "high_byte_ratio": 0.41,
            "max_line_length": 727.0,
            "non_ascii_ratio": 0.41,
            "null_byte_count": 439.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 35.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 225.38,
            "non_printable_ratio": 0.41,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            102,
            "orientation"
          ],
          [
            121,
            "paddingLeft"
          ],
          [
            133,
            "paddingRight"
          ],
          [
            148,
            "paddingBottom"
          ],
          [
            164,
            "layout_width"
          ],
          [
            179,
            "layout_height"
          ],
          [
            195,
            "layout_weight"
          ],
          [
            211,
            "paddingStart"
          ],
          [
            226,
            "paddingEnd"
          ],
          [
            239,
            "LinearLayout"
          ],
          [
            256,
            "android"
          ],
          [
            264,
            "++androidx.fragment.app.FragmentContainerView"
          ],
          [
            310,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            357,
            "include"
          ],
          [
            367,
            "layout"
          ]
        ],
        "sz": 1172,
        "sha": "fa4ae1dd107ccaf8a67383a7822c8625a19042c62900266959d3b7cfeba0bc04",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/yx.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 956,
        "ms": {
          "file": {
            "size": 424.0
          },
          "text": {
            "digit_ratio": 0.04,
            "total_lines": 3.0,
            "char_entropy": 3.67,
            "unique_chars": 51.0,
            "lines_over_200": 1.0,
            "avg_line_length": 186.0,
            "high_byte_ratio": 0.36,
            "max_line_length": 425.0,
            "non_ascii_ratio": 0.36,
            "null_byte_count": 188.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 425.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.34,
            "line_length_stddev": 177.51,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0
          }
        },
        "ss": [
          [
            58,
            "drawable"
          ],
          [
            69,
            "android"
          ],
          [
            77,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            124,
            "item"
          ],
          [
            129,
            "transition"
          ]
        ],
        "sz": 424,
        "sha": "5562bcf111bc348050fe14f81d150765d4c38b6a4ee83119174c8f1b8134096f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/z1.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 957,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 12.0,
            "digit_ratio": 0.01,
            "space_count": 1.0,
            "total_lines": 5.0,
            "char_entropy": 4.19,
            "unique_chars": 68.0,
            "lines_over_200": 1.0,
            "avg_line_length": 143.2,
            "high_byte_ratio": 0.27,
            "max_line_length": 436.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 229.0,
            "last_line_length": 67.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 151.98,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "duration"
          ],
          [
            97,
            "startOffset"
          ],
          [
            109,
            "valueFrom"
          ],
          [
            123,
            "valueTo"
          ],
          [
            131,
            "valueType"
          ],
          [
            143,
            "propertyName"
          ],
          [
            160,
            "aapt"
          ],
          [
            167,
            "android"
          ],
          [
            177,
            "http://schemas.android.com/aapt"
          ],
          [
            209,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            256,
            "objectAnimator"
          ],
          [
            273,
            "pathData"
          ]
        ],
        "sz": 592,
        "sha": "96ae4bbf0bf8b80f50c1ff2a3d42feeefdc4550485ee0fefdbae26850b800795",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/z11.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 958,
        "ms": {
          "file": {
            "size": 548.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.01,
            "total_lines": 4.0,
            "char_entropy": 4.14,
            "unique_chars": 62.0,
            "lines_over_200": 1.0,
            "avg_line_length": 165.75,
            "high_byte_ratio": 0.27,
            "max_line_length": 452.0,
            "non_ascii_ratio": 0.27,
            "null_byte_count": 215.0,
            "last_line_length": 107.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.32,
            "line_length_stddev": 169.79,
            "non_printable_ratio": 0.47,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            82,
            "duration"
          ],
          [
            91,
            "valueFrom"
          ],
          [
            105,
            "valueTo"
          ],
          [
            113,
            "valueType"
          ],
          [
            125,
            "propertyName"
          ],
          [
            142,
            "aapt"
          ],
          [
            149,
            "android"
          ],
          [
            159,
            "http://schemas.android.com/aapt"
          ],
          [
            191,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            238,
            "objectAnimator"
          ],
          [
            255,
            "pathData"
          ]
        ],
        "sz": 548,
        "sha": "cbfc2183175b51c78fb591af6ff57887645ade6a7f713113b28f289a77eda274",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/z12.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 959,
        "ms": {
          "file": {
            "size": 396.0
          },
          "text": {
            "tab_count": 2.0,
            "digit_ratio": 0.03,
            "total_lines": 4.0,
            "char_entropy": 3.99,
            "unique_chars": 53.0,
            "lines_over_200": 1.0,
            "avg_line_length": 121.25,
            "high_byte_ratio": 0.28,
            "max_line_length": 234.0,
            "non_ascii_ratio": 0.28,
            "null_byte_count": 159.0,
            "empty_line_ratio": 0.25,
            "last_line_length": 157.0,
            "long_token_count": 2.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.33,
            "line_length_stddev": 85.78,
            "non_printable_ratio": 0.49,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            64,
            "interpolator"
          ],
          [
            81,
            "duration"
          ],
          [
            90,
            "fromYDelta"
          ],
          [
            105,
            "toYDelta"
          ],
          [
            116,
            "android"
          ],
          [
            124,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "translate"
          ]
        ],
        "sz": 396,
        "sha": "486ad705ae37ff41dfabc952fe5f288e5c7bad1d8ddccd37ab09f26d355415a1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/z3.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 960,
        "ms": {
          "file": {
            "size": 612.0
          },
          "text": {
            "tab_count": 5.0,
            "digit_ratio": 0.01,
            "total_lines": 5.0,
            "char_entropy": 4.13,
            "unique_chars": 67.0,
            "lines_over_200": 2.0,
            "avg_line_length": 154.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 395.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 230.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 7.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.04,
            "most_common_ratio": 0.3,
            "line_length_stddev": 148.6,
            "non_printable_ratio": 0.44,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            86,
            "textAppearance"
          ],
          [
            101,
            "ellipsize"
          ],
          [
            115,
            "paddingLeft"
          ],
          [
            127,
            "paddingTop"
          ],
          [
            140,
            "paddingRight"
          ],
          [
            155,
            "paddingBottom"
          ],
          [
            171,
            "layout_width"
          ],
          [
            186,
            "layout_height"
          ],
          [
            204,
            "maxLines"
          ],
          [
            215,
            "TextView"
          ],
          [
            226,
            "android"
          ],
          [
            234,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 612,
        "sha": "04a23dbd51204067379bc537511d5888be42f65a6b9eba232bc08aa40e531a90",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zB.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 961,
        "ms": {
          "file": {
            "size": 1116.0
          },
          "text": {
            "tab_count": 6.0,
            "digit_ratio": 0.02,
            "total_lines": 6.0,
            "char_entropy": 4.07,
            "unique_chars": 82.0,
            "lines_over_200": 2.0,
            "lines_over_500": 1.0,
            "avg_line_length": 250.5,
            "high_byte_ratio": 0.39,
            "max_line_length": 797.0,
            "non_ascii_ratio": 0.39,
            "null_byte_count": 393.0,
            "empty_line_ratio": 0.33,
            "last_line_length": 437.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.26,
            "line_length_stddev": 286.49,
            "non_printable_ratio": 0.4,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            116,
            "ellipsize"
          ],
          [
            130,
            "layout_gravity"
          ],
          [
            147,
            "orientation"
          ],
          [
            166,
            "paddingLeft"
          ],
          [
            178,
            "paddingTop"
          ],
          [
            191,
            "paddingRight"
          ],
          [
            208,
            "fitsSystemWindows"
          ],
          [
            226,
            "layout_width"
          ],
          [
            241,
            "layout_height"
          ],
          [
            257,
            "singleLine"
          ],
          [
            270,
            "layout_weight"
          ],
          [
            286,
            "textAlignment"
          ],
          [
            304,
            "TextView"
          ],
          [
            315,
            "android"
          ],
          [
            323,
            "00androidx.appcompat.widget.FitWindowsLinearLayout"
          ],
          [
            374,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            421,
            "include"
          ],
          [
            431,
            "layout"
          ]
        ],
        "sz": 1116,
        "sha": "dce939b15f495ed84eb4908c834bf6d653df782e2fa65012d4d163172fa0ddfe",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zH.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 962,
        "ms": {
          "file": {
            "size": 592.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.02,
            "space_count": 1.0,
            "total_lines": 10.0,
            "char_entropy": 4.2,
            "unique_chars": 66.0,
            "lines_over_200": 1.0,
            "avg_line_length": 70.7,
            "high_byte_ratio": 0.26,
            "max_line_length": 360.0,
            "non_ascii_ratio": 0.26,
            "null_byte_count": 231.0,
            "last_line_length": 3.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.32,
            "line_length_stddev": 102.65,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            84,
            "interpolator"
          ],
          [
            101,
            "duration"
          ],
          [
            110,
            "valueFrom"
          ],
          [
            124,
            "valueTo"
          ],
          [
            132,
            "valueType"
          ],
          [
            144,
            "propertyName"
          ],
          [
            161,
            "aapt"
          ],
          [
            168,
            "android"
          ],
          [
            176,
            "fillAlpha"
          ],
          [
            190,
            "http://schemas.android.com/aapt"
          ],
          [
            222,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            269,
            "objectAnimator"
          ]
        ],
        "sz": 592,
        "sha": "d0be186781c215b87e81a653408ee26ec54e8f548f1650eb79f5b0518ed23003",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zN.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 963,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.28
          },
          "file": {
            "size": 317.0
          },
          "image": {
            "width": 24.0,
            "height": 24.0,
            "channels": 2.0,
            "r_entropy": 1.18,
            "pixel_entropy": 1.18,
            "histogram_flatness": 0.15
          },
          "binary": {
            "overall_entropy": 7.15
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            37,
            "IDAT8"
          ],
          [
            309,
            "IEND"
          ]
        ],
        "sz": 317,
        "sha": "f2ff62f473d8a5e00a8b6c81c15be9a0536471c3d5a81e37d04bc3356ea81ca0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zZ.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 964,
        "ms": {
          "file": {
            "size": 1300.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.07,
            "space_count": 1.0,
            "total_lines": 9.0,
            "char_entropy": 3.4,
            "unique_chars": 57.0,
            "lines_over_200": 4.0,
            "lines_over_500": 1.0,
            "avg_line_length": 205.78,
            "high_byte_ratio": 0.45,
            "max_line_length": 556.0,
            "non_ascii_ratio": 0.45,
            "null_byte_count": 585.0,
            "last_line_length": 275.0,
            "long_token_count": 6.0,
            "most_common_char": "",
            "whitespace_ratio": 0.01,
            "most_common_ratio": 0.31,
            "line_length_stddev": 154.61,
            "non_printable_ratio": 0.46,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 1.0
          }
        },
        "ss": [
          [
            80,
            "state_enabled"
          ],
          [
            96,
            "state_pressed"
          ],
          [
            114,
            "color"
          ],
          [
            122,
            "radius"
          ],
          [
            131,
            "android"
          ],
          [
            141,
            "corners"
          ],
          [
            149,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            196,
            "item"
          ],
          [
            203,
            "selector"
          ],
          [
            214,
            "shape"
          ],
          [
            222,
            "solid"
          ]
        ],
        "sz": 1300,
        "sha": "bb2470d510733b13f390f27962202004369305716bd5cf88f71cc470cc6170e9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/z_.xml",
        "type": "xml"
      },
      {
        "dp": 1,
        "id": 965,
        "ms": {
          "file": {
            "size": 400.0
          },
          "text": {
            "tab_count": 8.0,
            "digit_ratio": 0.06,
            "total_lines": 1.0,
            "char_entropy": 3.97,
            "unique_chars": 49.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 504.0,
            "high_byte_ratio": 0.31,
            "max_line_length": 504.0,
            "non_ascii_ratio": 0.31,
            "null_byte_count": 158.0,
            "last_line_length": 504.0,
            "long_token_count": 1.0,
            "most_common_char": "",
            "whitespace_ratio": 0.02,
            "most_common_ratio": 0.31,
            "non_printable_ratio": 0.45,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            114,
            "android"
          ],
          [
            122,
            "**http://schemas.android.com/apk/res/android"
          ],
          [
            169,
            "pathInterpolator"
          ]
        ],
        "sz": 400,
        "sha": "24a2f83e941d1d903f64aab8d069c4e0a5102397baeced1fcb35947a69346093",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/z_1.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 6
        },
        "dp": 1,
        "id": 966,
        "ms": {
          "png": {
            "a_entropy": 0.2,
            "bit_depth": 8.0,
            "chunks_idat": 2.0,
            "chunks_total": 4.0,
            "compression_ratio": 0.15
          },
          "file": {
            "size": 12514.0
          },
          "image": {
            "width": 144.0,
            "height": 144.0,
            "channels": 4.0,
            "b_entropy": 2.95,
            "g_entropy": 3.32,
            "r_entropy": 3.27,
            "edge_density": 0.05,
            "pixel_entropy": 2.87,
            "histogram_flatness": 0.36
          },
          "binary": {
            "overall_entropy": 7.98
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            4504,
            "215.2.183.243:42069"
          ],
          [
            5331,
            "Fvzd"
          ],
          [
            5483,
            "S5XSD"
          ],
          [
            6079,
            "U_A5"
          ],
          [
            7284,
            "77ge"
          ],
          [
            8241,
            "IDAT"
          ],
          [
            8396,
            "Lkor"
          ],
          [
            8945,
            "Lipdb"
          ],
          [
            11799,
            "ure1"
          ],
          [
            12506,
            "IEND"
          ]
        ],
        "sz": 12514,
        "sha": "9e962a7f21536ee6c1c98e081cef9df5c26bf576d0706cd690e5ed887341df56",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/za.png",
        "type": "png"
      },
      {
        "dp": 1,
        "id": 967,
        "ms": {
          "file": {
            "size": 840.0
          },
          "text": {
            "tab_count": 10.0,
            "digit_ratio": 0.0,
            "total_lines": 2.0,
            "char_entropy": 4.26,
            "unique_chars": 72.0,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "avg_line_length": 537.5,
            "high_byte_ratio": 0.33,
            "max_line_length": 912.0,
            "non_ascii_ratio": 0.33,
            "null_byte_count": 293.0,
            "last_line_length": 163.0,
            "long_token_count": 3.0,
            "most_common_char": "",
            "whitespace_ratio": 0.03,
            "most_common_ratio": 0.27,
            "line_length_stddev": 374.5,
            "non_printable_ratio": 0.43,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 2.0
          }
        },
        "ss": [
          [
            111,
            "paddingLeft"
          ],
          [
            123,
            "focusable"
          ],
          [
            135,
            "clickable"
          ],
          [
            147,
            "layout_width"
          ],
          [
            162,
            "layout_height"
          ],
          [
            180,
            "layout_marginRight"
          ],
          [
            201,
            "contentDescription"
          ],
          [
            220,
            "paddingStart"
          ],
          [
            237,
            "layout_marginEnd"
          ],
          [
            254,
            "srcCompat"
          ],
          [
            266,
            "ImageView"
          ],
          [
            280,
            "android"
          ],
          [
            294,
            "''http://schemas.android.com/apk/res-auto"
          ],
          [
            336,
            "**http://schemas.android.com/apk/res/android"
          ]
        ],
        "sz": 840,
        "sha": "55c6b501a6253fc3a2149a74a82876c470a664afe671e2a1310f742fb5285156",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zq.xml",
        "type": "xml"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 968,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.03
          },
          "file": {
            "size": 465.0
          },
          "image": {
            "width": 96.0,
            "height": 96.0,
            "channels": 2.0,
            "r_entropy": 0.74,
            "pixel_entropy": 0.74,
            "histogram_flatness": 0.09
          },
          "binary": {
            "overall_entropy": 7.38
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            457,
            "IEND"
          ]
        ],
        "sz": 465,
        "sha": "4c717ce1ffb551c765981add65d1956132d8f522337de2866b045f0a60485426",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zw.png",
        "type": "png"
      },
      {
        "k": {
          "png.color_type": 4
        },
        "dp": 1,
        "id": 969,
        "ms": {
          "png": {
            "bit_depth": 8.0,
            "chunks_idat": 1.0,
            "chunks_total": 3.0,
            "compression_ratio": 0.31
          },
          "file": {
            "size": 199.0
          },
          "image": {
            "width": 18.0,
            "height": 18.0,
            "channels": 2.0,
            "r_entropy": 1.36,
            "pixel_entropy": 1.36,
            "histogram_flatness": 0.17
          },
          "binary": {
            "overall_entropy": 6.58
          }
        },
        "ss": [
          [
            11,
            "IHDR"
          ],
          [
            116,
            "157.57.59.133:20174"
          ],
          [
            159,
            "kpid6x"
          ],
          [
            191,
            "IEND"
          ]
        ],
        "sz": 199,
        "sha": "66356f564f051a568e25071f60da312c418309f9129773aceb2246773458681c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!res/zy.png",
        "type": "png"
      },
      {
        "k": {
          "class.this_class": "kotlin/coroutines/jvm/internal/DebugProbesKt",
          "class.source_file": "DebugProbes.kt",
          "class.super_class": "java/lang/Object",
          "class.access_flags": 49,
          "class.major_version": 52,
          "class.constant_pool_size": 63
        },
        "dp": 1,
        "id": 970,
        "ms": {
          "file": {
            "size": 1738.0
          }
        },
        "sz": 1738,
        "sha": "ae8a082dd609313835ba93c3ef479a3af9903977d7bdc81df45bbd209ec7d0da",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!DebugProbesKt.bin",
        "type": "java_class"
      },
      {
        "dp": 1,
        "id": 971,
        "ms": {
          "file": {
            "size": 37730.0
          }
        },
        "sz": 37730,
        "sha": "a1ef3d0e4ec2cbce14c1884ab0f3a4fef46e258de83530dc562ebb805bdb12fd",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!O0O0OO/OOOO.gz",
        "type": "gz"
      },
      {
        "f": "O₂(C₂Dy)H(Db₂)",
        "x": 2,
        "dp": 1,
        "id": 972,
        "ms": {
          "file": {
            "size": 201713.0
          },
          "text": {
            "digit_ratio": 0.07,
            "space_count": 11820.0,
            "total_lines": 12365.0,
            "char_entropy": 5.26,
            "unique_chars": 182.0,
            "avg_line_length": 15.31,
            "high_byte_ratio": 0.01,
            "max_line_length": 146.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.14,
            "last_line_length": 28.0,
            "most_common_char": "a",
            "whitespace_ratio": 0.12,
            "most_common_ratio": 0.06,
            "line_length_stddev": 16.42,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 1.0
          }
        },
        "ss": [
          [
            0,
            "// This Source Code Form is subject to the terms of the Mozilla Public"
          ],
          [
            71,
            "// License, v. 2.0. If a copy of the MPL was not distributed with this"
          ],
          [
            142,
            "// file, You can obtain one at https://mozilla.org/MPL/2.0/."
          ],
          [
            204,
            "// Please pull this list from, and only from https://publicsuffix.org/list/public_suffix_list.dat,"
          ],
          [
            303,
            "// rather than any other VCS sites. Pulling from any other URL is not guaranteed to be supported."
          ],
          [
            402,
            "// Instructions on pulling and using this list can be found at https://publicsuffix.org/list/."
          ],
          [
            498,
            "// ===BEGIN ICANN DOMAINS==="
          ],
          [
            528,
            "// ac : https://en.wikipedia.org/wiki/.ac"
          ],
          [
            573,
            "com.ac"
          ],
          [
            580,
            "edu.ac"
          ],
          [
            587,
            "gov.ac"
          ],
          [
            594,
            "net.ac"
          ],
          [
            601,
            "mil.ac"
          ],
          [
            608,
            "org.ac"
          ],
          [
            616,
            "// ad : https://en.wikipedia.org/wiki/.ad"
          ],
          [
            661,
            "nom.ad"
          ],
          [
            669,
            "// ae : https://en.wikipedia.org/wiki/.ae"
          ],
          [
            711,
            "// see also: \"Domain Name Eligibility Policy\" at http://www.aeda.ae/eng/aepolicy.php"
          ],
          [
            799,
            "co.ae"
          ],
          [
            805,
            "net.ae"
          ],
          [
            812,
            "org.ae"
          ],
          [
            819,
            "sch.ae"
          ],
          [
            826,
            "ac.ae"
          ],
          [
            832,
            "gov.ae"
          ],
          [
            839,
            "mil.ae"
          ],
          [
            847,
            "// aero : see https://www.information.aero/index.php?id=66"
          ],
          [
            906,
            "aero"
          ],
          [
            911,
            "accident-investigation.aero"
          ],
          [
            939,
            "accident-prevention.aero"
          ],
          [
            964,
            "aerobatic.aero"
          ],
          [
            979,
            "aeroclub.aero"
          ],
          [
            993,
            "aerodrome.aero"
          ],
          [
            1008,
            "agents.aero"
          ],
          [
            1020,
            "aircraft.aero"
          ],
          [
            1034,
            "airline.aero"
          ],
          [
            1047,
            "airport.aero"
          ],
          [
            1060,
            "air-surveillance.aero"
          ],
          [
            1082,
            "airtraffic.aero"
          ],
          [
            1098,
            "air-traffic-control.aero"
          ],
          [
            1123,
            "ambulance.aero"
          ],
          [
            1138,
            "amusement.aero"
          ],
          [
            1153,
            "association.aero"
          ],
          [
            1170,
            "author.aero"
          ],
          [
            1182,
            "ballooning.aero"
          ],
          [
            1198,
            "broker.aero"
          ],
          [
            1210,
            "caa.aero"
          ],
          [
            1219,
            "cargo.aero"
          ],
          [
            1230,
            "catering.aero"
          ],
          [
            1244,
            "certification.aero"
          ],
          [
            1263,
            "championship.aero"
          ],
          [
            1281,
            "charter.aero"
          ],
          [
            1294,
            "civilaviation.aero"
          ],
          [
            1313,
            "club.aero"
          ],
          [
            1323,
            "conference.aero"
          ],
          [
            1339,
            "consultant.aero"
          ],
          [
            1355,
            "consulting.aero"
          ],
          [
            1371,
            "control.aero"
          ],
          [
            1384,
            "council.aero"
          ],
          [
            1397,
            "crew.aero"
          ],
          [
            1407,
            "design.aero"
          ],
          [
            1419,
            "dgca.aero"
          ],
          [
            1429,
            "educator.aero"
          ],
          [
            1443,
            "emergency.aero"
          ],
          [
            1458,
            "engine.aero"
          ],
          [
            1470,
            "engineer.aero"
          ],
          [
            1484,
            "entertainment.aero"
          ],
          [
            1503,
            "equipment.aero"
          ],
          [
            1518,
            "exchange.aero"
          ],
          [
            1532,
            "express.aero"
          ],
          [
            1545,
            "federation.aero"
          ],
          [
            1561,
            "flight.aero"
          ],
          [
            1573,
            "freight.aero"
          ],
          [
            1586,
            "fuel.aero"
          ],
          [
            1596,
            "gliding.aero"
          ],
          [
            1609,
            "government.aero"
          ],
          [
            1625,
            "groundhandling.aero"
          ],
          [
            1645,
            "group.aero"
          ],
          [
            1656,
            "hanggliding.aero"
          ],
          [
            1673,
            "homebuilt.aero"
          ],
          [
            1688,
            "insurance.aero"
          ],
          [
            1703,
            "journal.aero"
          ],
          [
            1716,
            "journalist.aero"
          ],
          [
            1732,
            "leasing.aero"
          ],
          [
            1745,
            "logistics.aero"
          ],
          [
            1760,
            "magazine.aero"
          ],
          [
            1774,
            "maintenance.aero"
          ],
          [
            1791,
            "media.aero"
          ],
          [
            1802,
            "microlight.aero"
          ],
          [
            1818,
            "modelling.aero"
          ],
          [
            1833,
            "navigation.aero"
          ],
          [
            1849,
            "parachuting.aero"
          ],
          [
            1866,
            "paragliding.aero"
          ],
          [
            1883,
            "passenger-association.aero"
          ],
          [
            1910,
            "pilot.aero"
          ],
          [
            1921,
            "press.aero"
          ],
          [
            1932,
            "production.aero"
          ],
          [
            1948,
            "recreation.aero"
          ],
          [
            1964,
            "repbody.aero"
          ],
          [
            1977,
            "res.aero"
          ],
          [
            1986,
            "research.aero"
          ],
          [
            2000,
            "rotorcraft.aero"
          ],
          [
            2016,
            "safety.aero"
          ],
          [
            2028,
            "scientist.aero"
          ],
          [
            2043,
            "services.aero"
          ],
          [
            2057,
            "show.aero"
          ],
          [
            2067,
            "skydiving.aero"
          ],
          [
            2082,
            "software.aero"
          ],
          [
            2096,
            "student.aero"
          ],
          [
            2109,
            "trader.aero"
          ],
          [
            2121,
            "trading.aero"
          ],
          [
            2134,
            "trainer.aero"
          ],
          [
            2147,
            "union.aero"
          ],
          [
            2158,
            "workinggroup.aero"
          ],
          [
            2176,
            "works.aero"
          ],
          [
            2188,
            "// af : http://www.nic.af/help.jsp"
          ],
          [
            2226,
            "gov.af"
          ],
          [
            2233,
            "com.af"
          ],
          [
            2240,
            "org.af"
          ],
          [
            2247,
            "net.af"
          ],
          [
            2254,
            "edu.af"
          ],
          [
            2262,
            "// ag : http://www.nic.ag/prices.htm"
          ],
          [
            2302,
            "com.ag"
          ],
          [
            2309,
            "org.ag"
          ],
          [
            2316,
            "net.ag"
          ],
          [
            2323,
            "co.ag"
          ],
          [
            2329,
            "nom.ag"
          ],
          [
            2337,
            "// ai : http://nic.com.ai/"
          ],
          [
            2367,
            "off.ai"
          ],
          [
            2374,
            "com.ai"
          ],
          [
            2381,
            "net.ai"
          ],
          [
            2388,
            "org.ai"
          ],
          [
            2396,
            "// al : http://www.ert.gov.al/ert_alb/faq_det.html?Id=31"
          ],
          [
            2456,
            "com.al"
          ],
          [
            2463,
            "edu.al"
          ],
          [
            2470,
            "gov.al"
          ],
          [
            2477,
            "mil.al"
          ],
          [
            2484,
            "net.al"
          ],
          [
            2491,
            "org.al"
          ],
          [
            2499,
            "// am : https://en.wikipedia.org/wiki/.am"
          ],
          [
            2545,
            "// ao : https://en.wikipedia.org/wiki/.ao"
          ],
          [
            2587,
            "// http://www.dns.ao/REGISTR.DOC"
          ],
          [
            2623,
            "ed.ao"
          ],
          [
            2629,
            "gv.ao"
          ],
          [
            2635,
            "og.ao"
          ],
          [
            2641,
            "co.ao"
          ],
          [
            2647,
            "pb.ao"
          ],
          [
            2653,
            "it.ao"
          ],
          [
            2660,
            "// aq : https://en.wikipedia.org/wiki/.aq"
          ],
          [
            2706,
            "// ar : https://nic.ar/nic-argentina/normativa-vigente"
          ],
          [
            2764,
            "com.ar"
          ],
          [
            2771,
            "edu.ar"
          ],
          [
            2778,
            "gob.ar"
          ],
          [
            2785,
            "gov.ar"
          ],
          [
            2792,
            "int.ar"
          ],
          [
            2799,
            "mil.ar"
          ],
          [
            2806,
            "musica.ar"
          ],
          [
            2816,
            "net.ar"
          ],
          [
            2823,
            "org.ar"
          ],
          [
            2830,
            "tur.ar"
          ],
          [
            2838,
            "// arpa : https://en.wikipedia.org/wiki/.arpa"
          ],
          [
            2884,
            "// Confirmed by registry \u003ciana-questions@icann.org\u003e 2008-06-18"
          ],
          [
            2947,
            "arpa"
          ],
          [
            2952,
            "e164.arpa"
          ],
          [
            2962,
            "in-addr.arpa"
          ],
          [
            2975,
            "ip6.arpa"
          ],
          [
            2984,
            "iris.arpa"
          ],
          [
            2994,
            "uri.arpa"
          ],
          [
            3003,
            "urn.arpa"
          ],
          [
            3013,
            "// as : https://en.wikipedia.org/wiki/.as"
          ],
          [
            3058,
            "gov.as"
          ],
          [
            3066,
            "// asia : https://en.wikipedia.org/wiki/.asia"
          ],
          [
            3112,
            "asia"
          ],
          [
            3118,
            "// at : https://en.wikipedia.org/wiki/.at"
          ],
          [
            3160,
            "// Confirmed by registry \u003cit@nic.at\u003e 2008-06-17"
          ],
          [
            3211,
            "ac.at"
          ],
          [
            3217,
            "co.at"
          ],
          [
            3223,
            "gv.at"
          ],
          [
            3229,
            "or.at"
          ],
          [
            3236,
            "// au : https://en.wikipedia.org/wiki/.au"
          ],
          [
            3278,
            "// http://www.auda.org.au/"
          ],
          [
            3308,
            "// 2LDs"
          ],
          [
            3316,
            "com.au"
          ],
          [
            3323,
            "net.au"
          ],
          [
            3330,
            "org.au"
          ],
          [
            3337,
            "edu.au"
          ],
          [
            3344,
            "gov.au"
          ],
          [
            3351,
            "asn.au"
          ],
          [
            3358,
            "id.au"
          ],
          [
            3364,
            "// Historic 2LDs (closed to new registration, but sites still exist)"
          ],
          [
            3433,
            "info.au"
          ],
          [
            3441,
            "conf.au"
          ],
          [
            3449,
            "oz.au"
          ],
          [
            3455,
            "// CGDNs - http://www.cgdn.org.au/"
          ],
          [
            3490,
            "act.au"
          ],
          [
            3497,
            "nsw.au"
          ],
          [
            3504,
            "nt.au"
          ],
          [
            3510,
            "qld.au"
          ],
          [
            3517,
            "sa.au"
          ],
          [
            3523,
            "tas.au"
          ],
          [
            3530,
            "vic.au"
          ],
          [
            3537,
            "wa.au"
          ],
          [
            3543,
            "// 3LDs"
          ],
          [
            3551,
            "act.edu.au"
          ],
          [
            3562,
            "nsw.edu.au"
          ],
          [
            3573,
            "nt.edu.au"
          ],
          [
            3583,
            "qld.edu.au"
          ],
          [
            3594,
            "sa.edu.au"
          ],
          [
            3604,
            "tas.edu.au"
          ],
          [
            3615,
            "vic.edu.au"
          ],
          [
            3626,
            "wa.edu.au"
          ],
          [
            3636,
            "// act.gov.au  Bug 984824 - Removed at request of Greg Tankard"
          ],
          [
            3699,
            "// nsw.gov.au  Bug 547985 - Removed at request of \u003cShae.Donelan@services.nsw.gov.au\u003e"
          ],
          [
            3784,
            "// nt.gov.au  Bug 940478 - Removed at request of Greg Connors \u003cGreg.Connors@nt.gov.au\u003e"
          ],
          [
            3871,
            "qld.gov.au"
          ],
          [
            3882,
            "sa.gov.au"
          ],
          [
            3892,
            "tas.gov.au"
          ],
          [
            3903,
            "vic.gov.au"
          ],
          [
            3914,
            "wa.gov.au"
          ],
          [
            3925,
            "// aw : https://en.wikipedia.org/wiki/.aw"
          ],
          [
            3970,
            "com.aw"
          ],
          [
            3978,
            "// ax : https://en.wikipedia.org/wiki/.ax"
          ],
          [
            4024,
            "// az : https://en.wikipedia.org/wiki/.az"
          ],
          [
            4069,
            "com.az"
          ],
          [
            4076,
            "net.az"
          ],
          [
            4083,
            "int.az"
          ],
          [
            4090,
            "gov.az"
          ],
          [
            4097,
            "org.az"
          ],
          [
            4104,
            "edu.az"
          ],
          [
            4111,
            "info.az"
          ],
          [
            4119,
            "pp.az"
          ],
          [
            4125,
            "mil.az"
          ],
          [
            4132,
            "name.az"
          ],
          [
            4140,
            "pro.az"
          ],
          [
            4147,
            "biz.az"
          ],
          [
            4155,
            "// ba : http://nic.ba/users_data/files/pravilnik_o_registraciji.pdf"
          ],
          [
            4226,
            "com.ba"
          ],
          [
            4233,
            "edu.ba"
          ],
          [
            4240,
            "gov.ba"
          ],
          [
            4247,
            "mil.ba"
          ],
          [
            4254,
            "net.ba"
          ],
          [
            4261,
            "org.ba"
          ],
          [
            4269,
            "// bb : https://en.wikipedia.org/wiki/.bb"
          ],
          [
            4314,
            "biz.bb"
          ],
          [
            4321,
            "co.bb"
          ],
          [
            4327,
            "com.bb"
          ],
          [
            4334,
            "edu.bb"
          ],
          [
            4341,
            "gov.bb"
          ],
          [
            4348,
            "info.bb"
          ],
          [
            4356,
            "net.bb"
          ],
          [
            4363,
            "org.bb"
          ],
          [
            4370,
            "store.bb"
          ],
          [
            4379,
            "tv.bb"
          ],
          [
            4386,
            "// bd : https://en.wikipedia.org/wiki/.bd"
          ],
          [
            4434,
            "// be : https://en.wikipedia.org/wiki/.be"
          ],
          [
            4476,
            "// Confirmed by registry \u003ctech@dns.be\u003e 2008-06-08"
          ],
          [
            4529,
            "ac.be"
          ]
        ],
        "sz": 201713,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "store"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11769",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.75,
            "d": "URL with .xyz TLD",
            "e": [
              "https://featherhead.xyz/"
            ],
            "i": "objectives/command-and-control/infrastructure/domain/tld::tld-xyz",
            "l": 3
          },
          {
            "c": 0.8199999928474426,
            "d": "Hostname profile field",
            "e": [
              "hostname"
            ],
            "i": "objectives/discovery/system/profile::host-profile-hostname-field",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          },
          {
            "a": "T1105",
            "c": 0.8600000143051147,
            "d": "Regex component marker",
            "e": [
              "amazonaws.com"
            ],
            "i": "objectives/command-and-control/dropper/delivery/http::suspicious-cloud-image-object--rx-3",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "directory"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-21",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "RAR member contains WSH script",
            "e": [
              ".js"
            ],
            "i": "micro-behaviors/data/archive/rar::wsh-script-member-extension",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "please"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-27",
            "l": 1
          },
          {
            "a": "T1071",
            "c": 0.8500000238418579,
            "d": ".su URL",
            "e": [
              "https://en.wikipedia.org/wiki/.su\n"
            ],
            "i": "objectives/command-and-control/infrastructure/domain/tld::tld-su",
            "l": 3
          },
          {
            "a": "T1071",
            "c": 0.6000000238418579,
            "d": "URL with .php endpoint",
            "e": [
              "http://www.aeda.ae/eng/aepolicy.php"
            ],
            "i": "objectives/command-and-control/infrastructure/domain/tld::php-endpoint-url",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "Right string trimming",
            "e": [
              "right"
            ],
            "i": "micro-behaviors/process/create/shell/lang::right-string-call",
            "l": 2
          }
        ],
        "sha": "d1b90535a1362d80266eebe04a570bf19b6b1203d730ab9486967c6fd2634144",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!mozilla/public-suffix-list.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 973,
        "ms": {
          "file": {
            "size": 4708.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 825.0,
            "total_lines": 155.0,
            "char_entropy": 4.73,
            "unique_chars": 79.0,
            "avg_line_length": 29.37,
            "high_byte_ratio": 0.0,
            "max_line_length": 128.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.15,
            "last_line_length": 28.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.19,
            "line_length_stddev": 24.14,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 20.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// ASHKENAZIC"
          ],
          [
            819,
            "// A, E, I, O, P, U should create variants, but a, e, i, o, u should not create any new variant"
          ],
          [
            939,
            "// H = initial \"H\" in German/English"
          ],
          [
            977,
            "// CONSONANTS"
          ],
          [
            1102,
            "// VOWELS"
          ],
          [
            1112,
            "// \"ALL\" DIPHTHONGS are interchangeable BETWEEN THEM and with monophthongs of which they are composed (\"D\" means \"diphthong\")"
          ],
          [
            1238,
            "//  {a,o} are totally interchangeable if non-stressed; in German \"a/o\" can actually be from \""
          ],
          [
            1336,
            "\" (that are equivalent to \"e\")"
          ],
          [
            1367,
            "//  {i,e} are interchangeable if non-stressed, while in German \"u\" can actually be from \""
          ],
          [
            1458,
            "\" (that is equivalent to \"i\")"
          ],
          [
            3177,
            "\"lE\" \"[bdfgkmnprsStvzZ]\" \"$\" \"(li|il[english])\"  // Apple \u003c Appel"
          ]
        ],
        "sz": 4708,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "ad6c75e0e50b51f807d73a3d3ef46a6f666a891cb4953cc357a5d305e61e30ab",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 974,
        "ms": {
          "file": {
            "size": 4971.0
          },
          "text": {
            "tab_count": 387.0,
            "digit_ratio": 0.0,
            "space_count": 573.0,
            "total_lines": 225.0,
            "char_entropy": 4.57,
            "unique_chars": 80.0,
            "avg_line_length": 21.1,
            "high_byte_ratio": 0.0,
            "max_line_length": 118.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.16,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.26,
            "line_length_stddev": 18.99,
            "repeated_char_sequences": 6.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 43.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_approx_common"
          ],
          [
            838,
            "// REGRESSIVE ASSIMILATION OF CONSONANTS"
          ],
          [
            899,
            "// PECULIARITY OF \"h\""
          ],
          [
            955,
            "// POLISH OGONEK IMPOSSIBLE"
          ],
          [
            1092,
            "// \"e\" and \"i\" ARE TO BE OMITTED BEFORE (SYLLABIC) n \u0026 l: Halperin=Halpern; Frankel = Frankl, Finkelstein = Finklstein"
          ],
          [
            2062,
            "// SIMPLIFICATION: (TRIPHTHONGS \u0026 DIPHTHONGS) -\u003e ONE GENERIC DIPHTHONG \"D\""
          ],
          [
            4298,
            "// lander = lender = l"
          ],
          [
            4563,
            "// burg = berg"
          ],
          [
            4691,
            "// CONSONANTS {z \u0026 Z; s \u0026 S} are approximately interchangeable"
          ]
        ],
        "sz": 4971,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "da5b7febc70f860f91bcccca37c29a619a23442cc80b9cd98ad884e16d6c9854",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 975,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.22,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 27.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.88,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_approx_russian"
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "a29917ea4c00bdd216db31d36205ef3829d0fb76926d189fcd8260d3700d4c57",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_cyrillic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 976,
        "ms": {
          "file": {
            "size": 1489.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 251.0,
            "total_lines": 47.0,
            "char_entropy": 4.82,
            "unique_chars": 68.0,
            "avg_line_length": 30.68,
            "max_line_length": 87.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 17.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.13,
            "line_length_stddev": 25.72,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// VOWELS"
          ]
        ],
        "sz": 1489,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "53739bd27868292338606ef7a1fd209b6253d35e94d7a4afb031769498d60d64",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_english.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 977,
        "ms": {
          "file": {
            "size": 1224.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 207.0,
            "total_lines": 40.0,
            "char_entropy": 4.75,
            "unique_chars": 63.0,
            "avg_line_length": 29.63,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 17.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.13,
            "line_length_stddev": 24.94,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 5.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 1224,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "19650e4ab69678bb849028900e4c2e867f75229c4447a0fcbf5a5bd6b3bd69c3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 978,
        "ms": {
          "file": {
            "size": 1852.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 312.0,
            "total_lines": 72.0,
            "char_entropy": 4.55,
            "unique_chars": 63.0,
            "avg_line_length": 24.72,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 18.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.21,
            "line_length_stddev": 19.89,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 13.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 1852,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "cfc7c1ef41209af89b676ba46a183060b93dedcab1e7d730f6253f48f5af0ea9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_german.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 979,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 980,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "6bd249910726949afa4e5a9623ec3999151c3ef43843714a90003cfb11350309",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_hungarian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 981,
        "ms": {
          "file": {
            "size": 2228.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 364.0,
            "total_lines": 83.0,
            "char_entropy": 4.62,
            "unique_chars": 65.0,
            "avg_line_length": 25.84,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 18.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.2,
            "line_length_stddev": 18.77,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 24.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 2228,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "5f56627d50d4ef0e3c8c76225d3e72fd95c8c90ae629d65d32f202f792d5912a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_polish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 982,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_approx_polish"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "900bcb8b852ce9738f85efacda91bbcaf0192d662f2fa996ebbe34e115801736",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_romanian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 983,
        "ms": {
          "file": {
            "size": 1427.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 254.0,
            "total_lines": 47.0,
            "char_entropy": 4.71,
            "unique_chars": 64.0,
            "avg_line_length": 29.36,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.11,
            "last_line_length": 18.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.15,
            "line_length_stddev": 23.02,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 13.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 1427,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "b908b81325099091067ecbaab232db0215b61ebd6899d0f7d989a013363a7cb3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_russian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 984,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "6bd249910726949afa4e5a9623ec3999151c3ef43843714a90003cfb11350309",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_approx_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "x": 1,
        "dp": 1,
        "id": 985,
        "ms": {
          "file": {
            "size": 1952.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 346.0,
            "total_lines": 52.0,
            "char_entropy": 4.63,
            "unique_chars": 67.0,
            "avg_line_length": 36.54,
            "high_byte_ratio": 0.0,
            "max_line_length": 118.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.15,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.09,
            "line_length_stddev": 32.64,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// These rules are applied after the word has been transliterated into the phonetic alphabet"
          ],
          [
            897,
            "// These rules are substitution rules within the phonetic character space rather than mapping rules"
          ],
          [
            998,
            "// format of each entry rule in the table"
          ],
          [
            1040,
            "//   (pattern, left context, right context, phonetic)"
          ],
          [
            1094,
            "// where"
          ],
          [
            1103,
            "//   pattern is a sequence of characters that might appear after a word has been transliterated into phonetic alphabet"
          ],
          [
            1222,
            "//   left context is the context that precedes the pattern"
          ],
          [
            1281,
            "//   right context is the context that follows the pattern"
          ],
          [
            1340,
            "//   phonetic is the result that this rule generates"
          ],
          [
            1396,
            "// note that both left context and right context can be regular expressions"
          ],
          [
            1472,
            "// ex: left context of ^ would mean start of word"
          ],
          [
            1522,
            "//     right context of $ means end of word"
          ],
          [
            1569,
            "// match occurs if all of the following are true:"
          ],
          [
            1619,
            "//   portion of word matches the pattern"
          ],
          [
            1660,
            "//   that portion satisfies the context"
          ],
          [
            1701,
            "// A, E, I, O, P, U should create variants, but a, e, i, o, u should not create any new variant"
          ]
        ],
        "sz": 1952,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "Right string trimming",
            "e": [
              "right"
            ],
            "i": "micro-behaviors/process/create/shell/lang::right-string-call",
            "l": 2
          }
        ],
        "sha": "bc6b6b423e6af997ce45348e17f3a0d6a18617cfe67b50bdb501cc97258c3d35",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 986,
        "ms": {
          "file": {
            "size": 1736.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 331.0,
            "total_lines": 82.0,
            "char_entropy": 4.49,
            "unique_chars": 68.0,
            "avg_line_length": 20.18,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.22,
            "line_length_stddev": 20.16,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 11.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Ashkenazic"
          ],
          [
            837,
            "// VOICED - UNVOICED CONSONANTS"
          ],
          [
            1362,
            "// SIMPLIFICATION OF CONSONANT CLUSTERS"
          ],
          [
            1421,
            "// DOUBLE --\u003e SINGLE"
          ]
        ],
        "sz": 1736,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "a1f947e071423aa5c24360484f85b7139f7a3ffe77d2089e367ca152743d1a19",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_approx_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 987,
        "ms": {
          "file": {
            "size": 1095.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 174.0,
            "total_lines": 33.0,
            "char_entropy": 4.96,
            "unique_chars": 66.0,
            "avg_line_length": 32.18,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.15,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.08,
            "line_length_stddev": 27.27,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 2.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_approx_common"
          ],
          [
            854,
            "// VOICED - UNVOICED CONSONANTS"
          ]
        ],
        "sz": 1095,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "fc3558377839a10375bb40146d9d12ec9b37487223023cc0769946aed24f352f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 988,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "265d93b530f2f0b3b2b602afda6e912370c0b01c06df4a2987119f6320bffb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_cyrillic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 989,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "265d93b530f2f0b3b2b602afda6e912370c0b01c06df4a2987119f6320bffb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_english.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 990,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "265d93b530f2f0b3b2b602afda6e912370c0b01c06df4a2987119f6320bffb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 991,
        "ms": {
          "file": {
            "size": 826.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 44.94,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 22.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.07,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_any"
          ]
        ],
        "sz": 826,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "32674f342f7c8b73fe831f46b0537df0a2b9d43c45fcded7617ddf28495c0e2a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_german.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 992,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 993,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "265d93b530f2f0b3b2b602afda6e912370c0b01c06df4a2987119f6320bffb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_hungarian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 994,
        "ms": {
          "file": {
            "size": 875.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 149.0,
            "total_lines": 23.0,
            "char_entropy": 4.77,
            "unique_chars": 58.0,
            "avg_line_length": 37.04,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.09,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.09,
            "line_length_stddev": 30.53,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 875,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d04d6e8ea4ed593f478fe1ff150a1f57ac30557c13f9f019fcf2b1658b6ff49e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_polish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 995,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "265d93b530f2f0b3b2b602afda6e912370c0b01c06df4a2987119f6320bffb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_romanian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 996,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 140.0,
            "total_lines": 19.0,
            "char_entropy": 4.78,
            "unique_chars": 57.0,
            "avg_line_length": 42.79,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.53,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "34bfa509511f7517a628330cca7c5e51464ab4eef953834054f684d02e11ffc7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_russian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 997,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "265d93b530f2f0b3b2b602afda6e912370c0b01c06df4a2987119f6320bffb44",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_exact_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 998,
        "ms": {
          "file": {
            "size": 2983.0
          },
          "text": {
            "digit_ratio": 0.03,
            "space_count": 601.0,
            "total_lines": 123.0,
            "char_entropy": 4.37,
            "unique_chars": 75.0,
            "avg_line_length": 23.25,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 12.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.24,
            "line_length_stddev": 19.55,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 23.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include ash_exact_approx_common"
          ]
        ],
        "sz": 2983,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "ad11a0f537e90b0893e8624e0c997dd8e2ece13dfe8b90b366d3a773f829bee5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_hebrew_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 999,
        "ms": {
          "file": {
            "size": 5080.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 608.0,
            "total_lines": 206.0,
            "char_entropy": 4.83,
            "unique_chars": 119.0,
            "avg_line_length": 22.66,
            "high_byte_ratio": 0.03,
            "max_line_length": 108.0,
            "non_ascii_ratio": 0.03,
            "empty_line_ratio": 0.05,
            "last_line_length": 16.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.09,
            "line_length_stddev": 16.22,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 41.0
          }
        },
        "ss": [
          [
            4,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            75,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            149,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            221,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            297,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            370,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            432,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            488,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            560,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            630,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            707,
            "* See the License for the specific language governing permissions and"
          ],
          [
            779,
            "* limitations under the License."
          ],
          [
            821,
            "// ASHKENAZIC"
          ],
          [
            838,
            "// 1. following are rules to accept the language"
          ],
          [
            888,
            "// 1.1 Special letter combinations"
          ],
          [
            924,
            "zh polish+russian+german+english true"
          ],
          [
            963,
            "eau french true"
          ],
          [
            992,
            "]h german true"
          ],
          [
            1008,
            "^vogel german, true"
          ],
          [
            1029,
            "vogel$ german true"
          ],
          [
            1049,
            "witz german true"
          ],
          [
            1067,
            "tz$ german+russian+english true"
          ],
          [
            1100,
            "^tz russian+english true"
          ],
          [
            1129,
            "e spanish true"
          ],
          [
            1148,
            "i spanish true"
          ],
          [
            1164,
            "ghe romanian true"
          ],
          [
            1183,
            "ghi romanian true"
          ],
          [
            1202,
            "vici$ romanian true"
          ],
          [
            1223,
            "schi$ romanian true"
          ],
          [
            1244,
            "chsch german true"
          ],
          [
            1263,
            "tsch german true"
          ],
          [
            1281,
            "ssch german true"
          ],
          [
            1299,
            "sch$ german+russian true"
          ],
          [
            1325,
            "^sch german+russian true"
          ],
          [
            1351,
            "^rz polish true"
          ],
          [
            1368,
            "rz$ polish+german true"
          ],
          [
            1405,
            "]rz polish true"
          ],
          [
            1437,
            "] polish true"
          ],
          [
            1452,
            "cki$ polish true"
          ],
          [
            1470,
            "ska$ polish true"
          ],
          [
            1488,
            "cka$ polish true"
          ],
          [
            1506,
            "ue german+russian true"
          ],
          [
            1530,
            "ae german+russian+english true"
          ],
          [
            1562,
            "oe german+french+russian+english true"
          ],
          [
            1601,
            "th$ german true"
          ],
          [
            1618,
            "^th german true"
          ],
          [
            1635,
            "th[^aoeiu] german true"
          ],
          [
            1659,
            "mann german true"
          ],
          [
            1677,
            "cz polish true"
          ],
          [
            1693,
            "cy polish true"
          ],
          [
            1709,
            "niew polish true"
          ],
          [
            1727,
            "stein german true"
          ],
          [
            1746,
            "heim$ german true"
          ],
          [
            1765,
            "heimer$ german true"
          ],
          [
            1786,
            "ii$ russian true"
          ],
          [
            1804,
            "iy$ russian true"
          ],
          [
            1822,
            "yy$ russian true"
          ],
          [
            1840,
            "yi$ russian true"
          ],
          [
            1858,
            "yj$ russian true"
          ],
          [
            1876,
            "ij$ russian true"
          ],
          [
            1894,
            "gaus$ russian true"
          ],
          [
            1914,
            "gauz$ russian true"
          ],
          [
            1954,
            "goltz$ russian true"
          ],
          [
            1975,
            "gol'tz$ russian true"
          ],
          [
            1998,
            "golts$ russian true"
          ],
          [
            2020,
            "gol'ts$ russian true"
          ],
          [
            2043,
            "^goltz russian true"
          ],
          [
            2064,
            "^gol'tz russian true"
          ],
          [
            2087,
            "^golts russian true"
          ],
          [
            2109,
            "^gol'ts russian true"
          ],
          [
            2132,
            "gendler$ russian true"
          ],
          [
            2156,
            "gejmer$ russian true"
          ],
          [
            2179,
            "gejm$ russian true"
          ],
          [
            2200,
            "geimer$ russian true"
          ],
          [
            2223,
            "geim$ russian true"
          ],
          [
            2244,
            "geymer russian true"
          ],
          [
            2266,
            "geym$ russian true"
          ],
          [
            2287,
            "gof$ russian true"
          ],
          [
            2307,
            "thal german true"
          ],
          [
            2325,
            "zweig german true"
          ],
          [
            2344,
            "ck$ german+english true"
          ],
          [
            2369,
            "c$ polish+romanian+hungarian true"
          ],
          [
            2404,
            "sz polish+hungarian true"
          ],
          [
            2430,
            "gue spanish+french true"
          ],
          [
            2455,
            "gui spanish+french true"
          ],
          [
            2480,
            "guy french true"
          ],
          [
            2497,
            "cs$ hungarian true"
          ],
          [
            2517,
            "^cs hungarian true"
          ],
          [
            2537,
            "dzs hungarian true"
          ],
          [
            2557,
            "zs$ hungarian true"
          ],
          [
            2577,
            "^zs hungarian true"
          ],
          [
            2597,
            "^wl polish true"
          ],
          [
            2614,
            "^wr polish+english+german true"
          ],
          [
            2648,
            "gy$ hungarian true"
          ],
          [
            2668,
            "gy[aeou] hungarian true"
          ],
          [
            2693,
            "gy hungarian+russian true"
          ],
          [
            2720,
            "ly hungarian+russian+polish true"
          ],
          [
            2754,
            "ny hungarian+russian+polish true"
          ],
          [
            2788,
            "ty hungarian+russian+polish true"
          ],
          [
            2825,
            "// 1.2 special characters"
          ],
          [
            2858,
            "romanian+french true"
          ],
          [
            2883,
            "romanian true"
          ],
          [
            2901,
            "french true"
          ],
          [
            2917,
            "german true"
          ],
          [
            2933,
            "hungarian+spanish true"
          ],
          [
            2960,
            "polish true"
          ],
          [
            3024,
            "french+hungarian+spanish true"
          ],
          [
            3174,
            "spanish true"
          ],
          [
            3191,
            "polish+hungarian+spanish true"
          ],
          [
            3225,
            "german+hungarian true"
          ],
          [
            3251,
            "hungarian true"
          ],
          [
            3464,
            "// Every Cyrillic word has at least one Cyrillic vowel ("
          ],
          [
            3546,
            "cyrillic true"
          ],
          [
            3740,
            "// Hebrew"
          ],
          [
            3754,
            "hebrew true"
          ],
          [
            3786,
            "ebrew true"
          ],
          [
            4116,
            "// 2. following are rules to reject the language"
          ],
          [
            4166,
            "// Every Latin character word has at least one Latin vowel"
          ],
          [
            4228,
            "a cyrillic+hebrew false"
          ],
          [
            4254,
            "o cyrillic+hebrew false"
          ],
          [
            4280,
            "e cyrillic+hebrew false"
          ],
          [
            4306,
            "i cyrillic+hebrew false"
          ],
          [
            4332,
            "y cyrillic+hebrew+romanian false"
          ],
          [
            4367,
            "u cyrillic+hebrew false"
          ],
          [
            4411,
            "] german false // in german \"v\" can be found before a vowel only"
          ],
          [
            4477,
            "y[^aoeiu] german false  // in german \"y\" usually appears only in the last position; sometimes before a vowel"
          ],
          [
            4587,
            "c[^aohk] german false"
          ],
          [
            4610,
            "dzi german+english+french false"
          ],
          [
            4643,
            "ou german false"
          ],
          [
            4660,
            "aj german+english+french false"
          ],
          [
            4692,
            "ej german+english+french false"
          ],
          [
            4724,
            "oj german+english+french false"
          ],
          [
            4756,
            "uj german+english+french false"
          ],
          [
            4788,
            "k romanian false"
          ],
          [
            4806,
            "v polish false"
          ],
          [
            4822,
            "ky polish false"
          ],
          [
            4839,
            "eu russian+polish false"
          ],
          [
            4864,
            "w french+romanian+spanish+hungarian+russian false"
          ],
          [
            4915,
            "kie french+spanish false"
          ],
          [
            4941,
            "gie french+romanian+spanish false"
          ],
          [
            4976,
            "q hungarian+polish+russian+romanian false"
          ],
          [
            5019,
            "sch hungarian+polish+french+spanish false"
          ],
          [
            5062,
            "^h russian false"
          ]
        ],
        "sz": 5080,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          }
        ],
        "sha": "74950c1da02012bffced1707342fc5505fdda9e62b555c6798162240c42a4e81",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_lang.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1000,
        "ms": {
          "file": {
            "size": 888.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 134.0,
            "total_lines": 28.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 30.71,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.04,
            "last_line_length": 7.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.09,
            "line_length_stddev": 30.62,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            808,
            "cyrillic"
          ],
          [
            817,
            "english"
          ],
          [
            825,
            "french"
          ],
          [
            832,
            "german"
          ],
          [
            839,
            "hebrew"
          ],
          [
            846,
            "hungarian"
          ],
          [
            856,
            "polish"
          ],
          [
            863,
            "romanian"
          ],
          [
            872,
            "russian"
          ],
          [
            880,
            "spanish"
          ]
        ],
        "sz": 888,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "ee736888a0725497a11c74cca309ee21d520d5ad64b5541250e8f1da9138fe97",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_languages.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1001,
        "ms": {
          "file": {
            "size": 9451.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 1410.0,
            "total_lines": 332.0,
            "char_entropy": 4.6,
            "unique_chars": 103.0,
            "avg_line_length": 27.47,
            "high_byte_ratio": 0.02,
            "max_line_length": 80.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.16,
            "last_line_length": 26.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.22,
            "line_length_stddev": 17.58,
            "repeated_char_sequences": 6.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 101.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "//ASHKENAZIC"
          ],
          [
            818,
            "// CONVERTING FEMININE TO MASCULINE"
          ],
          [
            1616,
            "// CONSONANTS  (integrated: German, Polish, Russian, Romanian and English)"
          ],
          [
            2107,
            "// French \"ch\" is currently disabled"
          ],
          [
            2787,
            "]\" \"(tSB[polish]|tsB)\""
          ],
          [
            3014,
            "]\" \"(tSF[polish]|tsF)\""
          ],
          [
            3272,
            "]\" \"(tsF[polish]|tSe[polish+romanian]|se)\""
          ],
          [
            3683,
            "]\" \"(SB[polish]|sB[polish]|sja)\""
          ],
          [
            3910,
            "]\" \"(SF[polish]|sF|zi[german])\""
          ],
          [
            4104,
            "]\" \"(s|z[german])\""
          ],
          [
            5064,
            "]\" \"(gi|dj[hungarian])\""
          ],
          [
            5119,
            "\"g\" \"[jyaeiou]\" \"[aouyei]\" \"g\""
          ],
          [
            6129,
            "]\" \"(ZB[polish]|zB[polish]|zja)\""
          ],
          [
            6356,
            "]\" \"(ZF[polish]|zF[polish]|ze|tsi[german])\""
          ],
          [
            6730,
            "\"h\" \"[aeiouy"
          ],
          [
            6883,
            "// VOWELS"
          ],
          [
            6917,
            "//\"e\" \"\" \"$\" \"(e|)\"  // French \u0026 English rule disabled except for final -ine"
          ],
          [
            7606,
            "]\" \"(i[german]|e[polish]|ije[russian]|je)\""
          ],
          [
            7957,
            "// LANGUAGE SPECIFIC CHARACTERS"
          ],
          [
            8901,
            "]\" \"(A|B[polish])\""
          ],
          [
            8941,
            "]\" \"(E|F[polish])\""
          ],
          [
            8994,
            "]\" \"(O|P[polish])\""
          ],
          [
            9016,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 9451,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "bdb60c3901ab057f4c94b384b302a0bdd7a6012ac07cf4edb87bd37b9283d17b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1002,
        "ms": {
          "file": {
            "size": 2366.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 450.0,
            "total_lines": 100.0,
            "char_entropy": 4.47,
            "unique_chars": 98.0,
            "avg_line_length": 22.66,
            "high_byte_ratio": 0.15,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.15,
            "empty_line_ratio": 0.09,
            "last_line_length": 15.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.26,
            "line_length_stddev": 17.96,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 39.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 2366,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "361bc87691da6bfda59ff416ce61c922aae811944669fd05f537ac629eefed84",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_cyrillic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1003,
        "ms": {
          "file": {
            "size": 2970.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 539.0,
            "total_lines": 107.0,
            "char_entropy": 4.42,
            "unique_chars": 72.0,
            "avg_line_length": 26.76,
            "max_line_length": 79.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.22,
            "line_length_stddev": 20.91,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 5.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// CONSONANTS"
          ],
          [
            1738,
            "// VOWELS"
          ],
          [
            1846,
            "\"ai\" \"\" \"\" \"(aj|e)\" // rain | said"
          ],
          [
            2761,
            "// TRIVIAL"
          ]
        ],
        "sz": 2970,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "7c28986e7dc911d8798ebe9f26b93d0487e632482fc5348363cd8ef94dac1a5e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_english.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1004,
        "ms": {
          "file": {
            "size": 2274.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 434.0,
            "total_lines": 91.0,
            "char_entropy": 4.39,
            "unique_chars": 73.0,
            "avg_line_length": 23.99,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.05,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.23,
            "line_length_stddev": 19.22,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 11.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Ashkenazic"
          ],
          [
            819,
            "// CONSONANTS"
          ],
          [
            1181,
            "\"s\" \"[aeiouy"
          ],
          [
            1199,
            "]\" \"[aeiouy"
          ],
          [
            1416,
            "// VOWELS"
          ],
          [
            1937,
            "// TRIVIAL"
          ]
        ],
        "sz": 2274,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "234f4b1eeacea6c814af4494c155799c21387f2b3ce61c47f0f5e90e9592802a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1005,
        "ms": {
          "file": {
            "size": 2787.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 500.0,
            "total_lines": 128.0,
            "char_entropy": 4.27,
            "unique_chars": 77.0,
            "avg_line_length": 20.77,
            "high_byte_ratio": 0.02,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.09,
            "last_line_length": 14.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.28,
            "line_length_stddev": 16.3,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 21.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Ashkenazic"
          ],
          [
            819,
            "// CONSONANTS"
          ],
          [
            1782,
            "aeiou]\" \"(t|th)\""
          ],
          [
            1830,
            "\"h\" \"[aeiouy"
          ],
          [
            1907,
            "aeiouy]\" \"(z|s)\""
          ],
          [
            1924,
            "\"s\" \"[aeiouy"
          ],
          [
            1942,
            "j]\" \"[aeiouy"
          ],
          [
            1993,
            "// VOWELS"
          ],
          [
            2290,
            "// FOREIGN LETTERs"
          ],
          [
            2394,
            "// ALPHABET"
          ]
        ],
        "sz": 2787,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "00b0a4baf27ff74f992f39ff875df7b694efe7218f228734695b4b0817575758",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_german.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1006,
        "ms": {
          "file": {
            "size": 1472.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 275.0,
            "total_lines": 62.0,
            "char_entropy": 4.56,
            "unique_chars": 92.0,
            "avg_line_length": 22.74,
            "high_byte_ratio": 0.07,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.07,
            "empty_line_ratio": 0.1,
            "last_line_length": 34.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.21,
            "line_length_stddev": 21.89,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 4.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Ashkenazic"
          ]
        ],
        "sz": 1472,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "1e36828bd90a0721b6513f6f687eac503dc8c1a37824ae6e6d8d496344620194",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1007,
        "ms": {
          "file": {
            "size": 1960.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 390.0,
            "total_lines": 84.0,
            "char_entropy": 4.48,
            "unique_chars": 78.0,
            "avg_line_length": 22.33,
            "high_byte_ratio": 0.04,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.04,
            "empty_line_ratio": 0.1,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.23,
            "line_length_stddev": 19.46,
            "repeated_char_sequences": 3.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 13.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// ASHKENAZIC"
          ],
          [
            819,
            "// CONSONANTS"
          ],
          [
            1396,
            "// VOWELS"
          ],
          [
            1566,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1960,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "a247af30ac47cbaa87cc9458fe33a9fa101424d77565c7ca012b4e8b923a369d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_hungarian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1008,
        "ms": {
          "file": {
            "size": 4167.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 704.0,
            "total_lines": 185.0,
            "char_entropy": 4.35,
            "unique_chars": 79.0,
            "avg_line_length": 21.52,
            "high_byte_ratio": 0.02,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.1,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.28,
            "line_length_stddev": 14.81,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 57.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Ashkenazic"
          ],
          [
            819,
            "// CONVERTING FEMININE TO MASCULINE"
          ],
          [
            1193,
            "// CONSONANTS"
          ],
          [
            3000,
            "// VOWELS"
          ],
          [
            3785,
            "// ALPHABET"
          ]
        ],
        "sz": 4167,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "047bf7630b038e180ac407dc6bedb45ebbc42c01a7c9be7b17845c4e9b15f250",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_polish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1009,
        "ms": {
          "file": {
            "size": 1526.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 303.0,
            "total_lines": 66.0,
            "char_entropy": 4.33,
            "unique_chars": 70.0,
            "avg_line_length": 22.12,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.11,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.23,
            "line_length_stddev": 21.41,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 11.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 1526,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "212f03c2a1c539a08d4664107b107bddced3a461b6d5362335c0c1039dd88d7c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_romanian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1010,
        "ms": {
          "file": {
            "size": 3980.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 794.0,
            "total_lines": 164.0,
            "char_entropy": 4.21,
            "unique_chars": 71.0,
            "avg_line_length": 23.27,
            "max_line_length": 77.0,
            "empty_line_ratio": 0.09,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.27,
            "line_length_stddev": 16.29,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 70.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            805,
            "// CONVERTING FEMININE TO MASCULINE"
          ],
          [
            1074,
            "//SPECIFIC CONSONANTS"
          ],
          [
            2411,
            "//SPECIFIC VOWELS"
          ],
          [
            3656,
            "// TRIVIAL"
          ]
        ],
        "sz": 3980,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "9d9904d23ec6031ff620967766cf72a06f5aa9ac958ebc9ab6c4956a19c2c76b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_russian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1011,
        "ms": {
          "file": {
            "size": 2073.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 458.0,
            "total_lines": 77.0,
            "char_entropy": 4.49,
            "unique_chars": 73.0,
            "avg_line_length": 25.92,
            "high_byte_ratio": 0.01,
            "max_line_length": 89.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.17,
            "last_line_length": 17.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.26,
            "most_common_ratio": 0.18,
            "line_length_stddev": 23.78,
            "repeated_char_sequences": 4.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 18.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Ashkenazic = Argentina"
          ],
          [
            831,
            "// CONSONANTS"
          ],
          [
            1656,
            "// VOWELS"
          ],
          [
            1773,
            "// TRIVIAL"
          ]
        ],
        "sz": 2073,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "c9e410a8a5c0965b39e39362a904bd107239bbfe0176348e003423e5e4812aa0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/ash_rules_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1012,
        "ms": {
          "file": {
            "size": 4043.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 617.0,
            "total_lines": 131.0,
            "char_entropy": 4.81,
            "unique_chars": 78.0,
            "avg_line_length": 29.86,
            "high_byte_ratio": 0.0,
            "max_line_length": 132.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.15,
            "last_line_length": 17.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.18,
            "line_length_stddev": 27.02,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 24.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERIC"
          ],
          [
            815,
            "// A, E, I, O, P, U should create variants, but a, e, i, o, u should not create any new variant"
          ],
          [
            935,
            "// EE = final \"e\" (english or french)"
          ],
          [
            974,
            "// VOWELS"
          ],
          [
            984,
            "// \"ALL\" DIPHTHONGS are interchangeable BETWEEN THEM and with monophthongs of which they are composed (\"D\" means \"diphthong\")"
          ],
          [
            1114,
            "//  {a,o} are totally interchangeable if non-stressed; in German \"a/o\" can actually be from \""
          ],
          [
            1216,
            "\" (that are equivalent to \"e\")"
          ],
          [
            1247,
            "//  {i,e} are interchangeable if non-stressed, while in German \"u\" can actually be from \""
          ],
          [
            1342,
            "\" (that is equivalent to \"i\")"
          ],
          [
            1687,
            "// French word-final and word-part-final letters"
          ],
          [
            1902,
            "\"t\" \"[aeiouAEIOU]\" \"[^aeiouAEIOU]\" \"(t|[french])\" // Petitjean"
          ],
          [
            1965,
            "\"s\" \"[aeiouAEIOU]\" \"[^aeiouAEIOU]\" \"(s|[french])\" // Groslot, Grosleau"
          ],
          [
            2036,
            "//array(\"p\" \"[aeiouAEIOU]\" \"[^aeiouAEIOU]\" \"(p|[french])\""
          ]
        ],
        "sz": 4043,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "a72bbd45de8a31aa3ceaaa06513896c4abb59bc76ef945811a3edc63b55451d4",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1013,
        "ms": {
          "file": {
            "size": 991.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 164.0,
            "total_lines": 26.0,
            "char_entropy": 4.85,
            "unique_chars": 61.0,
            "avg_line_length": 37.12,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.04,
            "last_line_length": 17.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.08,
            "line_length_stddev": 27.74,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 3.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 991,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "838a47e6f968189a4a882b82220654ca219450956d2cf0ae0336d342894c598f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_arabic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1014,
        "ms": {
          "file": {
            "size": 5120.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 1002.0,
            "total_lines": 233.0,
            "char_entropy": 4.37,
            "unique_chars": 80.0,
            "avg_line_length": 20.97,
            "high_byte_ratio": 0.0,
            "max_line_length": 118.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.17,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.26,
            "line_length_stddev": 18.76,
            "repeated_char_sequences": 7.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 50.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERIC"
          ],
          [
            816,
            "#include gen_exact_approx_common"
          ],
          [
            850,
            "// DUTCH"
          ],
          [
            911,
            "// REGRESSIVE ASSIMILATION OF CONSONANTS"
          ],
          [
            980,
            "// PECULIARITY OF \"h\""
          ],
          [
            1036,
            "// \"e\" and \"i\" ARE TO BE OMITTED BEFORE (SYLLABIC) n \u0026 l: Halperin=Halpern; Frankel = Frankl, Finkelstein = Finklstein"
          ],
          [
            1155,
            "// but Andersen \u0026 Anderson should match"
          ],
          [
            2096,
            "// SIMPLIFICATION: (TRIPHTHONGS \u0026 DIPHTHONGS) -\u003e ONE GENERIC DIPHTHONG \"D\""
          ],
          [
            4332,
            "// lander = lender = l"
          ],
          [
            4597,
            "// burg = berg"
          ],
          [
            4838,
            "// CONSONANTS {z \u0026 Z; s \u0026 S} are approximately interchangeable"
          ]
        ],
        "sz": 5120,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "edf03e4f49c343d45b63ea9c3d470b6baf95a3688c5723ad1e85bdfb860e3314",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1015,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.22,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 27.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.88,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_russian"
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "f9a750d48156d8e8e1d94c8ed34dbf596c24efe945123d6e808af069dee2599a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_cyrillic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1016,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e52b12a250fa593f99ca8a06e02b18a091518a1e6b66fd496e78a7db3888cc43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_czech.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1017,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e52b12a250fa593f99ca8a06e02b18a091518a1e6b66fd496e78a7db3888cc43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_dutch.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1018,
        "ms": {
          "file": {
            "size": 1489.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 251.0,
            "total_lines": 47.0,
            "char_entropy": 4.82,
            "unique_chars": 68.0,
            "avg_line_length": 30.68,
            "max_line_length": 87.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 17.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.13,
            "line_length_stddev": 25.72,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// VOWELS"
          ]
        ],
        "sz": 1489,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "53739bd27868292338606ef7a1fd209b6253d35e94d7a4afb031769498d60d64",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_english.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1019,
        "ms": {
          "file": {
            "size": 942.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 155.0,
            "total_lines": 25.0,
            "char_entropy": 4.82,
            "unique_chars": 58.0,
            "avg_line_length": 36.68,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.08,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.08,
            "line_length_stddev": 28.97,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 942,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "1d9d34f64e5d8d3009749d9d818c0583463ee89f08c0f7d2b0544a4316acad47",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1020,
        "ms": {
          "file": {
            "size": 1853.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 312.0,
            "total_lines": 73.0,
            "char_entropy": 4.55,
            "unique_chars": 63.0,
            "avg_line_length": 24.38,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.12,
            "last_line_length": 18.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.21,
            "line_length_stddev": 19.96,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 13.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 1853,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "4330f43e087759d3616b02eb362074aed94698cb4d4f848a6e58f2532c5b0aeb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_german.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1021,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e52b12a250fa593f99ca8a06e02b18a091518a1e6b66fd496e78a7db3888cc43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_greek.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1022,
        "ms": {
          "file": {
            "size": 845.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 138.0,
            "total_lines": 20.0,
            "char_entropy": 4.8,
            "unique_chars": 59.0,
            "avg_line_length": 41.25,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 12.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.78,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 845,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "dffa002d397f85134af0350cc2fa75f1eddfd75a2a18be5a5761e3c80781f12e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_greeklatin.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1023,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1024,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "f827f54af6560a4c6d615618433457e1c9dc06c78c7683dee6d4187cdbcd8c83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_hungarian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1025,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "f827f54af6560a4c6d615618433457e1c9dc06c78c7683dee6d4187cdbcd8c83",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_italian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1026,
        "ms": {
          "file": {
            "size": 2183.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 318.0,
            "total_lines": 84.0,
            "char_entropy": 4.66,
            "unique_chars": 65.0,
            "avg_line_length": 24.99,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 18.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.21,
            "line_length_stddev": 19.49,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 16.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 2183,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d062343f0330e121c684e3e6943f7775855c78e965b043a839a4dba87336d4d8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_polish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1027,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e52b12a250fa593f99ca8a06e02b18a091518a1e6b66fd496e78a7db3888cc43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_portuguese.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1028,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_polish"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "4e35dd86b22d8d011287b19aba8b1d4af9e8c63ebdf27d0899e8d9edf4d4b1ed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_romanian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1029,
        "ms": {
          "file": {
            "size": 1437.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 255.0,
            "total_lines": 48.0,
            "char_entropy": 4.73,
            "unique_chars": 64.0,
            "avg_line_length": 28.94,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 18.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.21,
            "most_common_ratio": 0.15,
            "line_length_stddev": 22.96,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 13.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// VOWELS"
          ]
        ],
        "sz": 1437,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "15e71e33faf7bb4558fd3f64ec9e38111bb04852343bc4a89b09ae127279caf0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_russian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1030,
        "ms": {
          "file": {
            "size": 868.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 141.0,
            "total_lines": 21.0,
            "char_entropy": 4.85,
            "unique_chars": 60.0,
            "avg_line_length": 40.33,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 17.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.09,
            "line_length_stddev": 30.28,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 868,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "ca9391f883011b749197fbbc79776777d957dd5f55749d9a600c1d229f80b8df",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1031,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e52b12a250fa593f99ca8a06e02b18a091518a1e6b66fd496e78a7db3888cc43",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_approx_turkish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1032,
        "ms": {
          "file": {
            "size": 1226.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 235.0,
            "total_lines": 40.0,
            "char_entropy": 4.73,
            "unique_chars": 64.0,
            "avg_line_length": 29.65,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.1,
            "line_length_stddev": 26.42,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 8.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ],
          [
            815,
            "// A, E, I, O, P, U should create variants,"
          ],
          [
            863,
            "// EE = final \"e\" (english \u0026 french)"
          ],
          [
            903,
            "// V, B from Spanish"
          ],
          [
            927,
            "// but a, e, i, o, u should not create any new variant"
          ]
        ],
        "sz": 1226,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "cf8da3ee51d478dce1ff6fa1ccef2f65411308d47703f920423cc1172266623e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1033,
        "ms": {
          "file": {
            "size": 1769.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 339.0,
            "total_lines": 79.0,
            "char_entropy": 4.51,
            "unique_chars": 68.0,
            "avg_line_length": 21.39,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.22,
            "line_length_stddev": 20.5,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 10.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ],
          [
            830,
            "// VOICED - UNVOICED CONSONANTS"
          ],
          [
            1398,
            "// SIMPLIFICATION OF CONSONANT CLUSTERS"
          ],
          [
            1456,
            "// DOUBLE --\u003e SINGLE"
          ]
        ],
        "sz": 1769,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "948f6d4355ac74011cccd7bd54ec3bce4a29ea26c5d4518f019cdc1dcef27285",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_approx_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1034,
        "ms": {
          "file": {
            "size": 816.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 137.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 58.0,
            "avg_line_length": 44.39,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 12.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.58,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 816,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "891a20110c50fd5dd6c34ba71c11207e2e11948c3cca5f1554b3c934644f5a05",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_arabic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1035,
        "ms": {
          "file": {
            "size": 1093.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 174.0,
            "total_lines": 32.0,
            "char_entropy": 4.96,
            "unique_chars": 66.0,
            "avg_line_length": 33.16,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.08,
            "line_length_stddev": 27.11,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 2.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_exact_approx_common"
          ],
          [
            853,
            "// VOICED - UNVOICED CONSONANTS"
          ]
        ],
        "sz": 1093,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "6a943ca8cf3f7bed1ff516de9a3ecf44f13c801d3dc967803b1b6a95ae45d372",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1036,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "fd5517e98eebfbe1f979ec21f9749e9d6cafd3e6798e5f31c173a0be08c025e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_cyrillic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1037,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "fd5517e98eebfbe1f979ec21f9749e9d6cafd3e6798e5f31c173a0be08c025e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_czech.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1038,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_dutch.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1039,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_exact_russian"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "fd5517e98eebfbe1f979ec21f9749e9d6cafd3e6798e5f31c173a0be08c025e5",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_english.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1040,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1041,
        "ms": {
          "file": {
            "size": 826.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 44.94,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 22.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.07,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_exact_any"
          ]
        ],
        "sz": 826,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "abe0c2b293dde37d051c84c0a60194b8c3038f399411b60f0706dcddfadb0bdf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_german.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1042,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_greek.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1043,
        "ms": {
          "file": {
            "size": 817.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 137.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.44,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.52,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 817,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "8784c2b1d8b8e206e3dfce6eda4f3dec800a1bc213dc4f4dc0cb09a8132a542c",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_greeklatin.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1044,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1045,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_hungarian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1046,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_italian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1047,
        "ms": {
          "file": {
            "size": 874.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 149.0,
            "total_lines": 23.0,
            "char_entropy": 4.77,
            "unique_chars": 58.0,
            "avg_line_length": 37.04,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.09,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.09,
            "line_length_stddev": 30.53,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 874,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "6d805f7fc3172f02f11240b9043fedc535d0729a105f218205ddbcee3245781a",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_polish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1048,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_portuguese.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1049,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_romanian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1050,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 140.0,
            "total_lines": 19.0,
            "char_entropy": 4.78,
            "unique_chars": 57.0,
            "avg_line_length": 42.79,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.53,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "34bfa509511f7517a628330cca7c5e51464ab4eef953834054f684d02e11ffc7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_russian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1051,
        "ms": {
          "file": {
            "size": 832.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 140.0,
            "total_lines": 19.0,
            "char_entropy": 4.79,
            "unique_chars": 57.0,
            "avg_line_length": 42.79,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.09,
            "line_length_stddev": 30.53,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 832,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "b3388ed5a9817dfa7172b1061cd2003068623c5b794b4d25a221225c893eddf2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1052,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_exact_turkish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1053,
        "ms": {
          "file": {
            "size": 2845.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 571.0,
            "total_lines": 113.0,
            "char_entropy": 4.42,
            "unique_chars": 74.0,
            "avg_line_length": 24.19,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 12.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.24,
            "most_common_ratio": 0.23,
            "line_length_stddev": 20.15,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 22.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include gen_exact_approx_common"
          ]
        ],
        "sz": 2845,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "4a989b869f2293590c21af2305da6588966aee6d3bde431b3e49123904b11bcf",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_hebrew_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1054,
        "ms": {
          "file": {
            "size": 7889.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 965.0,
            "total_lines": 295.0,
            "char_entropy": 4.87,
            "unique_chars": 139.0,
            "avg_line_length": 24.74,
            "high_byte_ratio": 0.03,
            "max_line_length": 109.0,
            "non_ascii_ratio": 0.03,
            "empty_line_ratio": 0.05,
            "last_line_length": 16.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.09,
            "line_length_stddev": 16.69,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 68.0
          }
        },
        "ss": [
          [
            4,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            75,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            149,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            221,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            297,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            370,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            432,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            488,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            560,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            630,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            707,
            "* See the License for the specific language governing permissions and"
          ],
          [
            779,
            "* limitations under the License."
          ],
          [
            821,
            "// GENERIC"
          ],
          [
            835,
            "// 1. following are rules to accept the language"
          ],
          [
            885,
            "// 1.1 Special letter combinations"
          ],
          [
            926,
            "english true"
          ],
          [
            941,
            "^o' english true"
          ],
          [
            959,
            "^mc english true"
          ],
          [
            977,
            "^fitz english true"
          ],
          [
            997,
            "ceau french+romanian true"
          ],
          [
            1024,
            "eau romanian true"
          ],
          [
            1043,
            "eau$ french true // mp: I've added this"
          ],
          [
            1084,
            "eaux$ french true // mp: I've added this"
          ],
          [
            1126,
            "ault$ french true"
          ],
          [
            1145,
            "oult$ french true"
          ],
          [
            1164,
            "eux$ french true"
          ],
          [
            1182,
            "eix$ french true"
          ],
          [
            1200,
            "glou$ greeklatin true"
          ],
          [
            1223,
            "uu dutch true"
          ],
          [
            1238,
            "tx spanish true"
          ],
          [
            1255,
            "witz german true"
          ],
          [
            1273,
            "tz$ german+russian+english true"
          ],
          [
            1306,
            "^tz russian+english true"
          ],
          [
            1332,
            "poulos$ greeklatin true"
          ],
          [
            1357,
            "pulos$ greeklatin true"
          ],
          [
            1381,
            "iou greeklatin true"
          ],
          [
            1402,
            "sj$ dutch true"
          ],
          [
            1418,
            "^sj dutch true"
          ],
          [
            1437,
            "e spanish true"
          ],
          [
            1456,
            "i spanish true"
          ],
          [
            1472,
            "ghe romanian+greeklatin true"
          ],
          [
            1502,
            "ghi romanian+greeklatin true"
          ],
          [
            1532,
            "escu$ romanian true"
          ],
          [
            1553,
            "esco$ romanian true"
          ],
          [
            1574,
            "vici$ romanian true"
          ],
          [
            1595,
            "schi$ romanian true"
          ],
          [
            1616,
            "ii$ russian true"
          ],
          [
            1634,
            "iy$ russian true"
          ],
          [
            1652,
            "yy$ russian true"
          ],
          [
            1670,
            "yi$ russian true"
          ],
          [
            1688,
            "^rz polish true"
          ],
          [
            1705,
            "rz$ polish+german true"
          ],
          [
            1729,
            "[bcdfgklmnpstwz]rz polish true"
          ],
          [
            1761,
            "rz[bcdfghklmnpstw] polish true"
          ],
          [
            1793,
            "cki$ polish true"
          ],
          [
            1811,
            "ska$ polish true"
          ],
          [
            1829,
            "cka$ polish true"
          ],
          [
            1847,
            "ae german+russian+english true"
          ],
          [
            1879,
            "oe german+french+russian+english+dutch true"
          ],
          [
            1924,
            "th$ german+english true"
          ],
          [
            1949,
            "^th german+english+greeklatin true"
          ],
          [
            1985,
            "mann german true"
          ],
          [
            2003,
            "cz polish true"
          ],
          [
            2019,
            "cy polish+greeklatin true"
          ],
          [
            2046,
            "niew polish true"
          ],
          [
            2064,
            "etti$ italian true"
          ],
          [
            2084,
            "eti$ italian true"
          ],
          [
            2103,
            "ati$ italian true"
          ],
          [
            2122,
            "ato$ italian true"
          ],
          [
            2141,
            "[aoei]no$ italian true"
          ],
          [
            2165,
            "[aoei]ni$ italian true"
          ],
          [
            2189,
            "esi$ italian true"
          ],
          [
            2208,
            "oli$ italian true"
          ],
          [
            2227,
            "field$ english true"
          ],
          [
            2248,
            "stein german true"
          ],
          [
            2267,
            "heim$ german true"
          ],
          [
            2286,
            "heimer$ german true"
          ],
          [
            2307,
            "thal german true"
          ],
          [
            2325,
            "zweig german true"
          ],
          [
            2344,
            "[aeou]h german true"
          ],
          [
            2367,
            "h german true"
          ],
          [
            2416,
            "[ln]h[ao]$ portuguese true"
          ],
          [
            2444,
            "[ln]h[aou] portuguese+french+german+dutch+czech+spanish+turkish true"
          ],
          [
            2514,
            "chsch german true"
          ],
          [
            2533,
            "tsch german true"
          ],
          [
            2551,
            "sch$ german+russian true"
          ],
          [
            2577,
            "^sch german+russian true"
          ],
          [
            2603,
            "ck$ german+english true"
          ],
          [
            2628,
            "c$ polish+romanian+hungarian+czech+turkish true"
          ],
          [
            2677,
            "sz polish+hungarian true"
          ],
          [
            2703,
            "cs$ hungarian true"
          ],
          [
            2723,
            "^cs hungarian true"
          ],
          [
            2743,
            "dzs hungarian true"
          ],
          [
            2763,
            "zs$ hungarian true"
          ],
          [
            2783,
            "^zs hungarian true"
          ],
          [
            2803,
            "^wl polish true"
          ],
          [
            2820,
            "^wr polish+english+german+dutch true"
          ],
          [
            2860,
            "gy$ hungarian true"
          ],
          [
            2880,
            "gy[aeou] hungarian true"
          ],
          [
            2905,
            "gy hungarian+russian+french+greeklatin true"
          ],
          [
            2950,
            "guy french true"
          ],
          [
            2967,
            "gu[ei] spanish+french+portuguese true"
          ],
          [
            3006,
            "gu[ao] spanish+portuguese true"
          ],
          [
            3038,
            "gi[aou] italian+greeklatin true"
          ],
          [
            3081,
            "ly hungarian+russian+polish+greeklatin true"
          ],
          [
            3126,
            "ny hungarian+russian+polish+spanish+greeklatin true"
          ],
          [
            3179,
            "ty hungarian+russian+polish+greeklatin true"
          ],
          [
            3227,
            "// 1.2 special characters"
          ],
          [
            3260,
            "polish true"
          ],
          [
            3276,
            "french+spanish+portuguese+turkish true"
          ],
          [
            3319,
            "czech true"
          ],
          [
            3349,
            "turkish true"
          ],
          [
            3398,
            "spanish true"
          ],
          [
            3461,
            "romanian+turkish true"
          ],
          [
            3502,
            "romanian true"
          ],
          [
            3577,
            "german true"
          ],
          [
            3611,
            "hungarian+spanish+portuguese+czech+greeklatin true"
          ],
          [
            3666,
            "romanian+french+portuguese true"
          ],
          [
            3736,
            "portuguese true"
          ],
          [
            3792,
            "french+hungarian+czech+greeklatin true"
          ],
          [
            3835,
            "french+spanish+italian true"
          ],
          [
            3867,
            "french true"
          ],
          [
            3898,
            "french+portuguese true"
          ],
          [
            3980,
            "romanian+french true"
          ],
          [
            4022,
            "polish+hungarian+spanish+italian+portuguese+czech+greeklatin true"
          ],
          [
            4092,
            "german+hungarian+turkish true"
          ],
          [
            4153,
            "portuguese+hungarian true"
          ],
          [
            4183,
            "italian+spanish true"
          ],
          [
            4208,
            "hungarian true"
          ],
          [
            4282,
            "german+hungarian+spanish+portuguese+turkish true"
          ],
          [
            4366,
            "czech+greeklatin true"
          ],
          [
            4395,
            "// Every Cyrillic word has at least one Cyrillic vowel ("
          ],
          [
            4477,
            "cyrillic true"
          ],
          [
            4668,
            "// Every Greek word has at least one Greek vowel"
          ],
          [
            4720,
            "greek true"
          ],
          [
            4832,
            "// Arabic (only initial)"
          ],
          [
            4860,
            "arabic true // alif (isol + init)"
          ],
          [
            4901,
            "arabic true // ba'"
          ],
          [
            4925,
            "arabic true // ta'"
          ],
          [
            4949,
            "arabic true // tha'"
          ],
          [
            4973,
            "arabic true // jim"
          ],
          [
            4996,
            "arabic true // h.a'"
          ],
          [
            5021,
            "' arabic true // kha'"
          ],
          [
            5047,
            "arabic true // dal (isol + init)"
          ],
          [
            5084,
            "arabic true // dhal (isol + init)"
          ],
          [
            5122,
            "arabic true // ra' (isol + init)"
          ],
          [
            5159,
            "arabic true // za' (isol + init)"
          ],
          [
            5196,
            "arabic true // sin"
          ],
          [
            5220,
            "arabic true // shin"
          ],
          [
            5245,
            "arabic true // s.ad"
          ],
          [
            5270,
            "arabic true // d.ad"
          ],
          [
            5295,
            "arabic true // t.a'"
          ],
          [
            5320,
            "arabic true // z.a'"
          ],
          [
            5345,
            "arabic true // 'ayn"
          ],
          [
            5369,
            "arabic true // ghayn"
          ],
          [
            5395,
            "arabic true // fa'"
          ],
          [
            5419,
            "arabic true // qaf"
          ],
          [
            5443,
            "arabic true // kaf"
          ],
          [
            5468,
            "arabic true // lam"
          ],
          [
            5492,
            "arabic true // mim"
          ],
          [
            5516,
            "arabic true // nun"
          ],
          [
            5540,
            "arabic true // ha'"
          ],
          [
            5564,
            "arabic true // waw (isol + init)"
          ],
          [
            5601,
            "arabic true // ya'"
          ],
          [
            5631,
            "arabic true // alif madda"
          ],
          [
            5663,
            "arabic true // alif + diacritic"
          ],
          [
            5701,
            "arabic true // alif + hamza"
          ],
          [
            5733,
            "arabic true //  waw + hamza"
          ],
          [
            5765,
            "arabic true //  ya' + hamza"
          ],
          [
            5799,
            "arabic true // ligature l+a"
          ],
          [
            5847,
            "// Hebrew"
          ],
          [
            5861,
            "hebrew true"
          ],
          [
            6220,
            "// 2. following are rules to reject the language"
          ],
          [
            6275,
            "// Every Latin character word has at least one Latin vowel"
          ],
          [
            6337,
            "a cyrillic+hebrew+greek+arabic false"
          ],
          [
            6376,
            "o cyrillic+hebrew+greek+arabic false"
          ],
          [
            6415,
            "e cyrillic+hebrew+greek+arabic false"
          ],
          [
            6454,
            "i cyrillic+hebrew+greek+arabic false"
          ],
          [
            6493,
            "y cyrillic+hebrew+greek+arabic+romanian+dutch false"
          ],
          [
            6547,
            "u cyrillic+hebrew+greek+arabic false"
          ],
          [
            6590,
            "j italian false"
          ],
          [
            6607,
            "j[^aoeiuy] french+spanish+portuguese+greeklatin false"
          ],
          [
            6663,
            "g czech false"
          ],
          [
            6678,
            "k romanian+spanish+portuguese+french+italian false"
          ],
          [
            6730,
            "q hungarian+polish+russian+romanian+czech+dutch+turkish+greeklatin false"
          ],
          [
            6804,
            "v polish false"
          ],
          [
            6820,
            "w french+romanian+spanish+hungarian+russian+czech+turkish+greeklatin false"
          ],
          [
            6896,
            "x czech+hungarian+dutch+turkish false // polish excluded from the list"
          ],
          [
            6974,
            "dj spanish+turkish false"
          ],
          [
            7000,
            "v[^aoeiu] german false // in german, \"v\" can be found before a vowel only"
          ],
          [
            7075,
            "y[^aoeiu] german false  // in german, \"y\" usually appears only in the last position; sometimes before a vowel"
          ],
          [
            7186,
            "c[^aohk] german false"
          ],
          [
            7209,
            "dzi german+english+french+turkish false"
          ],
          [
            7250,
            "ou german false"
          ],
          [
            7267,
            "a[eiou] turkish false // no diphthongs in Turkish"
          ],
          [
            7320,
            "[eaiou] turkish false"
          ],
          [
            7370,
            "e[aiou] turkish false"
          ],
          [
            7394,
            "i[aeou] turkish false"
          ],
          [
            7418,
            "o[aieu] turkish false"
          ],
          [
            7442,
            "u[aieo] turkish false"
          ],
          [
            7466,
            "aj german+english+french+dutch false"
          ],
          [
            7504,
            "ej german+english+french+dutch false"
          ],
          [
            7542,
            "oj german+english+french+dutch false"
          ],
          [
            7580,
            "uj german+english+french+dutch false"
          ],
          [
            7618,
            "eu russian+polish false"
          ],
          [
            7643,
            "ky polish false"
          ],
          [
            7660,
            "kie french+spanish+greeklatin false"
          ],
          [
            7697,
            "gie portuguese+romanian+spanish+greeklatin false"
          ],
          [
            7747,
            "ch[aou] italian false"
          ],
          [
            7770,
            "ch turkish false"
          ],
          [
            7788,
            "son$ german false"
          ],
          [
            7807,
            "sc[ei] french false"
          ],
          [
            7828,
            "sch hungarian+polish+french+spanish false"
          ],
          [
            7871,
            "^h russian false"
          ]
        ],
        "sz": 7889,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          }
        ],
        "sha": "cbc7a4cf7bf28a6bfc4a1804eaae511125f459f2a73da4c1c33b1ca9f58aabdb",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_lang.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1055,
        "ms": {
          "file": {
            "size": 951.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 134.0,
            "total_lines": 36.0,
            "char_entropy": 4.78,
            "unique_chars": 58.0,
            "avg_line_length": 25.42,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.03,
            "last_line_length": 7.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 28.78,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            808,
            "arabic"
          ],
          [
            815,
            "cyrillic"
          ],
          [
            836,
            "english"
          ],
          [
            844,
            "french"
          ],
          [
            851,
            "german"
          ],
          [
            858,
            "greek"
          ],
          [
            864,
            "greeklatin"
          ],
          [
            875,
            "hebrew"
          ],
          [
            882,
            "hungarian"
          ],
          [
            892,
            "italian"
          ],
          [
            900,
            "polish"
          ],
          [
            907,
            "portuguese"
          ],
          [
            918,
            "romanian"
          ],
          [
            927,
            "russian"
          ],
          [
            935,
            "spanish"
          ],
          [
            943,
            "turkish"
          ]
        ],
        "sz": 951,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "b3165adaa36026c29338dc8d8f351cebc7423731465e1d6422f27d6778494c7d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_languages.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "x": 1,
        "dp": 1,
        "id": 1056,
        "ms": {
          "file": {
            "size": 13059.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 1904.0,
            "total_lines": 367.0,
            "char_entropy": 4.74,
            "unique_chars": 112.0,
            "avg_line_length": 34.58,
            "high_byte_ratio": 0.02,
            "max_line_length": 117.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.13,
            "last_line_length": 94.0,
            "long_token_count": 2.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.17,
            "most_common_ratio": 0.17,
            "line_length_stddev": 23.91,
            "repeated_char_sequences": 4.0,
            "max_inline_whitespace_run": 9.0,
            "trailing_whitespace_lines": 184.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// format of each entry rule in the table"
          ],
          [
            848,
            "//   (pattern, left context, right context, phonetic)"
          ],
          [
            904,
            "// where"
          ],
          [
            915,
            "//   pattern is a sequence of characters that might appear in the word to be transliterated"
          ],
          [
            1009,
            "//   left context is the context that precedes the pattern"
          ],
          [
            1070,
            "//   right context is the context that follows the pattern"
          ],
          [
            1131,
            "//   phonetic is the result that this rule generates"
          ],
          [
            1191,
            "// note that both left context and right context can be regular expressions"
          ],
          [
            1269,
            "// ex: left context of ^ would mean start of word"
          ],
          [
            1321,
            "//     left context of [aeiouy] means following a vowel"
          ],
          [
            1379,
            "//     right context of [^aeiouy] means preceding a consonant"
          ],
          [
            1443,
            "//     right context of e$ means preceding a final e"
          ],
          [
            1499,
            "//GENERIC"
          ],
          [
            1510,
            "// CONVERTING FEMININE TO MASCULINE"
          ],
          [
            2473,
            "// CONSONANTS"
          ],
          [
            2785,
            "//array(\"ll\" \"\" \"\" \"(l|J[spanish])\"  // Disabled Argentinian rule"
          ],
          [
            2953,
            "y]\" \"(ez[portuguese]|eS[portuguese]|eks|egz)\""
          ],
          [
            3148,
            "//Processing of \"h\" in various combinations"
          ],
          [
            3569,
            "///\"des\" \"^\" \"[^aeiouy]\" \"(dEs|de[french])\""
          ],
          [
            3623,
            "\"sch\" \"[aeiouy]\" \"[ei]\" \"(S|StS[russian]|sk[romanian+italian])\""
          ],
          [
            4272,
            "aeiou]\" \"(t[english+german+greeklatin]|th)\""
          ],
          [
            4601,
            "\"h\" \"[aeiouy"
          ],
          [
            4751,
            "//Processing of \"ci\" \"ce\" \u0026 \"cy\""
          ],
          [
            5533,
            "//Processing of \"s\""
          ],
          [
            6523,
            "y]\" \"(s|z[portuguese+french+italian+german])\""
          ],
          [
            6589,
            "]\" \"(s|z[german])\""
          ],
          [
            6608,
            "\"s\" \"[aeiouy]\" \"[dglmnrv]\" \"(s|z|Z[portuguese]|[french])\" // Groslot"
          ],
          [
            6737,
            "//Processing of \"g\""
          ],
          [
            7225,
            "\"ggi\" \"[yaeiou]\" \"[aou]\" \"(gI|dZ[italian]|j[greeklatin])\""
          ],
          [
            8213,
            "]\" \"(gi|dj[hungarian])\""
          ],
          [
            8340,
            "//Processing of \"j\""
          ],
          [
            8547,
            "//Processing of \"z\""
          ],
          [
            8860,
            "]\" \"(Za[polish]|za[polish]|zja)\""
          ],
          [
            9130,
            "]\" \"(Ze[polish]|ze[polish]|ze|tsi[german])\""
          ],
          [
            9623,
            "// VOWELS"
          ],
          [
            10950,
            "// LANGUAGE SPECIFIC CHARACTERS"
          ],
          [
            12261,
            "]\" \"(O|P[polish])\""
          ],
          [
            12289,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 13059,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          },
          {
            "c": 0.8399999737739563,
            "d": "Right string trimming",
            "e": [
              "right"
            ],
            "i": "micro-behaviors/process/create/shell/lang::right-string-call",
            "l": 2
          }
        ],
        "sha": "d23d576829821edd7de13f6734eca746a767dd6d565a4cd18e33d9736df0d0ac",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1057,
        "ms": {
          "file": {
            "size": 2208.0
          },
          "text": {
            "digit_ratio": 0.04,
            "space_count": 435.0,
            "total_lines": 76.0,
            "char_entropy": 4.6,
            "unique_chars": 101.0,
            "avg_line_length": 28.05,
            "high_byte_ratio": 0.06,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.06,
            "empty_line_ratio": 0.01,
            "last_line_length": 34.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.21,
            "line_length_stddev": 18.56,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 30.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// General"
          ]
        ],
        "sz": 2208,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "82b707c79998031bda269fd7c1192ea1a9670c03ead09ee77a77ce4feca12c38",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_arabic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1058,
        "ms": {
          "file": {
            "size": 2300.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 360.0,
            "total_lines": 99.0,
            "char_entropy": 4.57,
            "unique_chars": 99.0,
            "avg_line_length": 22.23,
            "high_byte_ratio": 0.15,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.15,
            "empty_line_ratio": 0.07,
            "last_line_length": 15.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.26,
            "line_length_stddev": 18.35,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ]
        ],
        "sz": 2300,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "0c8158127f19bd0e683bf883ab2fb7eb4c173a34ee51ab6752f56c932ab125e8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_cyrillic.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1059,
        "ms": {
          "file": {
            "size": 1561.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 291.0,
            "total_lines": 67.0,
            "char_entropy": 4.42,
            "unique_chars": 80.0,
            "avg_line_length": 22.3,
            "high_byte_ratio": 0.02,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.06,
            "last_line_length": 14.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.24,
            "line_length_stddev": 21.1,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 5.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            1155,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1561,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "84de9e152412cd6129340590372571fedb14876054b5df3b82a2a36564fcd619",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_czech.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1060,
        "ms": {
          "file": {
            "size": 1867.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 357.0,
            "total_lines": 78.0,
            "char_entropy": 4.39,
            "unique_chars": 70.0,
            "avg_line_length": 22.94,
            "high_byte_ratio": 0.0,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.05,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.24,
            "line_length_stddev": 19.78,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 13.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// CONSONANTS"
          ],
          [
            1026,
            "aeiou]\" \"(t|th)\" // German"
          ],
          [
            1115,
            "// VOWELS"
          ],
          [
            1457,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1867,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "9921e75dbbc942d2572a8660b0979329639e8707ffa9bb1de6b7d1a7a9955c2b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_dutch.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1061,
        "ms": {
          "file": {
            "size": 3013.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 546.0,
            "total_lines": 113.0,
            "char_entropy": 4.42,
            "unique_chars": 74.0,
            "avg_line_length": 25.66,
            "high_byte_ratio": 0.0,
            "max_line_length": 79.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.23,
            "line_length_stddev": 19.77,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 9.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ],
          [
            816,
            "// CONSONANTS"
          ],
          [
            852,
            "Neill"
          ],
          [
            1704,
            "// VOWELS"
          ],
          [
            1812,
            "\"ai\" \"\" \"\" \"(aj|ej|e)\" // rain | said"
          ],
          [
            2491,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 3013,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "bcfb8723cbf3966b09ba0dc6f3dbbdc7882869c4e7af160f803c2f0519785a22",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_english.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1062,
        "ms": {
          "file": {
            "size": 2778.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 487.0,
            "total_lines": 114.0,
            "char_entropy": 4.49,
            "unique_chars": 78.0,
            "avg_line_length": 23.37,
            "high_byte_ratio": 0.02,
            "max_line_length": 78.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.11,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.24,
            "line_length_stddev": 19.48,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 15.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ],
          [
            816,
            "// CONSONANTS"
          ],
          [
            1259,
            "iou]\" \"[^ae"
          ],
          [
            1276,
            "iou]\" \"(s|)\" // Deschamps, Malesherbes, Groslot"
          ],
          [
            1355,
            "iou]\" \"(t|)\" // Petitjean"
          ],
          [
            1677,
            "\"s\" \"[aeiouy"
          ],
          [
            1695,
            "]\" \"[aeiouy"
          ],
          [
            1876,
            "// VOWELS"
          ],
          [
            2398,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 2778,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "b5f12b085cfb4896a91020f901bc16e6f3164f0641e683b0d205a730560274b3",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1063,
        "ms": {
          "file": {
            "size": 2735.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 429.0,
            "total_lines": 129.0,
            "char_entropy": 4.34,
            "unique_chars": 77.0,
            "avg_line_length": 20.2,
            "high_byte_ratio": 0.02,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.09,
            "last_line_length": 14.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.28,
            "line_length_stddev": 16.71,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERIC"
          ],
          [
            816,
            "// CONSONANTS"
          ],
          [
            1754,
            "aeiou]\" \"(t|th)\""
          ],
          [
            1802,
            "\"h\" \"[aeiouy"
          ],
          [
            1875,
            "aeiouy]\" \"(z|s)\""
          ],
          [
            1892,
            "\"s\" \"[aeiouy"
          ],
          [
            1910,
            "j]\" \"[aeiouy"
          ],
          [
            1952,
            "// VOWELS"
          ],
          [
            2252,
            "// FOREIGN LETTERs"
          ],
          [
            2347,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 2735,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "453d474ab996523a2f09a1c5897d8e3e1b4c045061227c052792f982e1c3c8b7",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_german.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1064,
        "ms": {
          "file": {
            "size": 2918.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 471.0,
            "total_lines": 97.0,
            "char_entropy": 4.74,
            "unique_chars": 104.0,
            "avg_line_length": 29.08,
            "high_byte_ratio": 0.14,
            "max_line_length": 79.0,
            "non_ascii_ratio": 0.14,
            "empty_line_ratio": 0.07,
            "last_line_length": 14.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.22,
            "line_length_stddev": 22.3,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 16.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 2918,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "6b56c5d8a9b6270f8777cce5f1b0860390aa218f7e2b43eeb1d7cbdb38778830",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_greek.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1065,
        "ms": {
          "file": {
            "size": 3041.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 541.0,
            "total_lines": 118.0,
            "char_entropy": 4.34,
            "unique_chars": 80.0,
            "avg_line_length": 24.77,
            "high_byte_ratio": 0.01,
            "max_line_length": 93.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.06,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.26,
            "line_length_stddev": 19.79,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 31.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 3041,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "06122f03fe879f2ef78b0b76bf1412eb170c69fa828f40d7e7b907856656446e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_greeklatin.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1066,
        "ms": {
          "file": {
            "size": 1462.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 257.0,
            "total_lines": 62.0,
            "char_entropy": 4.6,
            "unique_chars": 94.0,
            "avg_line_length": 22.58,
            "high_byte_ratio": 0.07,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.07,
            "empty_line_ratio": 0.1,
            "last_line_length": 34.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.22,
            "line_length_stddev": 22.15,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// General = Ashkenazic"
          ]
        ],
        "sz": 1462,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "a570f37f45f35f2e409b1173d955d83adc878da8187f899db930d5d19f89a5f1",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1067,
        "ms": {
          "file": {
            "size": 1887.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 328.0,
            "total_lines": 83.0,
            "char_entropy": 4.54,
            "unique_chars": 78.0,
            "avg_line_length": 21.73,
            "high_byte_ratio": 0.04,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.04,
            "empty_line_ratio": 0.08,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.24,
            "line_length_stddev": 19.92,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 9.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ],
          [
            816,
            "// CONSONANTS"
          ],
          [
            1332,
            "// SPECIAL VOWELS"
          ],
          [
            1487,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1887,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "16ba7cf79bf85089dc29fd92eff6358c893bc6aef85e6396dd29af7c41a4f611",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_hungarian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1068,
        "ms": {
          "file": {
            "size": 1873.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 344.0,
            "total_lines": 77.0,
            "char_entropy": 4.42,
            "unique_chars": 68.0,
            "avg_line_length": 23.32,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.1,
            "last_line_length": 19.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.22,
            "line_length_stddev": 20.62,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 9.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            1416,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1873,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "99155dedf0caeaae4212877d0b90da52e0252812eee4ab06a9aaf5393b94afb0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_italian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1069,
        "ms": {
          "file": {
            "size": 4112.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 643.0,
            "total_lines": 185.0,
            "char_entropy": 4.39,
            "unique_chars": 79.0,
            "avg_line_length": 21.23,
            "high_byte_ratio": 0.02,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.1,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.28,
            "line_length_stddev": 15.23,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 43.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERIC"
          ],
          [
            816,
            "// CONVERTING FEMININE TO MASCULINE"
          ],
          [
            1190,
            "// CONSONANTS"
          ],
          [
            2972,
            "// VOWELS"
          ],
          [
            3724,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 4112,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e4e0eb610a8bccf71d39cd0e10b2c51e4d1f132a052d183c749511464ed51fc9",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_polish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1070,
        "ms": {
          "file": {
            "size": 2598.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 463.0,
            "total_lines": 105.0,
            "char_entropy": 4.49,
            "unique_chars": 80.0,
            "avg_line_length": 23.74,
            "high_byte_ratio": 0.03,
            "max_line_length": 133.0,
            "non_ascii_ratio": 0.03,
            "empty_line_ratio": 0.11,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.24,
            "line_length_stddev": 23.38,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 11.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            1483,
            "y]\" \"(ez|eS|eks)\" // ez in Brazil"
          ],
          [
            2188,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 2598,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "0c51c2cc22988516b03f6afdd5699897b7cafe2b3e5d3676ab101941fbfd92dc",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_portuguese.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1071,
        "ms": {
          "file": {
            "size": 1509.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 284.0,
            "total_lines": 64.0,
            "char_entropy": 4.4,
            "unique_chars": 71.0,
            "avg_line_length": 22.58,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.08,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.23,
            "line_length_stddev": 21.64,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 5.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            1106,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1509,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "75ee26f3c6bf6cafc2258be21b820952e2e07c192919e34fd717dd81b0a2f4ad",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_romanian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1072,
        "ms": {
          "file": {
            "size": 3042.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 569.0,
            "total_lines": 142.0,
            "char_entropy": 4.16,
            "unique_chars": 71.0,
            "avg_line_length": 20.42,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.08,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.29,
            "line_length_stddev": 15.87,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 62.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "//GENERAL// CONVERTING FEMININE TO MASCULINE"
          ],
          [
            1082,
            "//SPECIAL CONSONANTS"
          ],
          [
            1753,
            "//SPECIAL VOWELS"
          ],
          [
            2651,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 3042,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "ded105c857167c2ba8c44ced7cee000d6bcd7823a4851b698f8ea540115a7f37",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_russian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1073,
        "ms": {
          "file": {
            "size": 2382.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 430.0,
            "total_lines": 85.0,
            "char_entropy": 4.57,
            "unique_chars": 79.0,
            "avg_line_length": 27.02,
            "high_byte_ratio": 0.01,
            "max_line_length": 89.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.08,
            "last_line_length": 89.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.2,
            "line_length_stddev": 22.73,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 4.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// GENERAL"
          ],
          [
            816,
            "// Includes both Spanish (Castillian) \u0026 Catalan"
          ],
          [
            865,
            "// CONSONANTS"
          ],
          [
            1311,
            "//\"ll\" \"\" \"\" \"(l|Z)\" // Z is typical for Argentina, only Ashkenazic"
          ],
          [
            1645,
            "// SPECIAL VOWELS"
          ],
          [
            1834,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 2382,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "e7253c7c1ab7e46d29c85792be68c15a7bdb8937c364043f4c4c658d08f76a6b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1074,
        "ms": {
          "file": {
            "size": 1386.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 254.0,
            "total_lines": 50.0,
            "char_entropy": 4.5,
            "unique_chars": 70.0,
            "avg_line_length": 26.72,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.04,
            "last_line_length": 14.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.19,
            "line_length_stddev": 24.08,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 1.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 1386,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "1800bab9aee6be5f57838bfaaf071009841c1af93d5dd22789e1a7643d199261",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/gen_rules_turkish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1075,
        "ms": {
          "file": {
            "size": 819.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 134.0,
            "total_lines": 16.0,
            "char_entropy": 4.8,
            "unique_chars": 58.0,
            "avg_line_length": 49.19,
            "max_line_length": 75.0,
            "last_line_length": 3.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.2,
            "most_common_ratio": 0.1,
            "line_length_stddev": 28.99,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            4,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            75,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            149,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            221,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            297,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            370,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            432,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            488,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            560,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            630,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            707,
            "* See the License for the specific language governing permissions and"
          ],
          [
            779,
            "* limitations under the License."
          ]
        ],
        "sz": 819,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "05987a68044246aa19eabb6abc5a6d9bd066cb250b7fdc95ae9672b7389dc91e",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/lang.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1076,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 138.0,
            "total_lines": 20.0,
            "char_entropy": 4.81,
            "unique_chars": 58.0,
            "avg_line_length": 40.55,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.1,
            "last_line_length": 12.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 31.27,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// SEPHARDIC"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "47661c92b7bd2a3dbff0b19f2342281076f2877fab2592a0c076a555a813947f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1077,
        "ms": {
          "file": {
            "size": 3195.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 986.0,
            "total_lines": 115.0,
            "char_entropy": 4.12,
            "unique_chars": 78.0,
            "avg_line_length": 26.78,
            "high_byte_ratio": 0.0,
            "max_line_length": 107.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.19,
            "last_line_length": 14.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.34,
            "most_common_ratio": 0.18,
            "line_length_stddev": 22.03,
            "repeated_char_sequences": 22.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 46.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include sep_exact_approx_common"
          ],
          [
            1699,
            "// DIPHTHONGS ARE APPROXIMATELY equivalent"
          ],
          [
            2718,
            "// CONSONANTS {z \u0026 Z \u0026 dZ; s \u0026 S} are approximately interchangeable"
          ],
          [
            3084,
            "// special character to deal correctly in Hebrew match"
          ],
          [
            3170,
            "// Arabic"
          ]
        ],
        "sz": 3195,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "7f3ea2985fd4b1b5e0f5a6544a47ab632497a7853b691aef5e6bd7320fcaa3a6",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1078,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1079,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1080,
        "ms": {
          "file": {
            "size": 830.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include sep_approx_french"
          ]
        ],
        "sz": 830,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "b6165dbda3d972b5c54b2191409a2c04ac35fc7dba0abf5ddf3c9ae13f9a98a0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_italian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1081,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include sep_approx_french"
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "21d632279772ae8983832220505bcf0c6fb500f4ffade0f9908306d018710f13",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_portuguese.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1082,
        "ms": {
          "file": {
            "size": 831.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.78,
            "unique_chars": 59.0,
            "avg_line_length": 45.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 26.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 29.92,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include sep_approx_french"
          ]
        ],
        "sz": 831,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "21d632279772ae8983832220505bcf0c6fb500f4ffade0f9908306d018710f13",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_approx_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1083,
        "ms": {
          "file": {
            "size": 817.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 137.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.44,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.52,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ]
        ],
        "sz": 817,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "df3f63b3946b8d5f05c4977ee5ab488da8162f4ad8cafa7a81cd8731b4954cb8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1084,
        "ms": {
          "file": {
            "size": 1685.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 290.0,
            "total_lines": 79.0,
            "char_entropy": 4.51,
            "unique_chars": 68.0,
            "avg_line_length": 20.33,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.14,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.23,
            "line_length_stddev": 20.63,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Sephardic"
          ],
          [
            833,
            "// VOICED - UNVOICED CONSONANTS"
          ],
          [
            1339,
            "// SIMPLIFICATION OF CONSONANT CLUSTERS"
          ],
          [
            1395,
            "// DOUBLE --\u003e SINGLE"
          ]
        ],
        "sz": 1685,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "232f59750f9dedcf0bc2af194d16a1f434a56a0ace0415fe67924b73c7e22a32",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_approx_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1085,
        "ms": {
          "file": {
            "size": 1109.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 181.0,
            "total_lines": 32.0,
            "char_entropy": 4.93,
            "unique_chars": 68.0,
            "avg_line_length": 33.66,
            "high_byte_ratio": 0.0,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 13.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.08,
            "line_length_stddev": 27.94,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include sep_exact_approx_common"
          ],
          [
            851,
            "//\"C\" \"\" \"\" \"k\"  // c that can actually be"
          ],
          [
            899,
            "// VOICED - UNVOICED CONSONANTS"
          ],
          [
            1027,
            "//special character to deal correctly in Hebrew match"
          ]
        ],
        "sz": 1109,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "c3654ad436be18536fef3e3872db7255659c413bfc9b5ad446b1467b68c8b8c0",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1086,
        "ms": {
          "file": {
            "size": 815.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.76,
            "unique_chars": 57.0,
            "avg_line_length": 44.33,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 11.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.64,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Sephadic"
          ]
        ],
        "sz": 815,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "9ddcb79875c3a49259e98faf98433c7d8c29e368dedea7155c9ff7171016857d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1087,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1088,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_italian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1089,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_portuguese.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1090,
        "ms": {
          "file": {
            "size": 812.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 135.0,
            "total_lines": 18.0,
            "char_entropy": 4.77,
            "unique_chars": 57.0,
            "avg_line_length": 44.17,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.06,
            "last_line_length": 8.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.1,
            "line_length_stddev": 30.83,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// empty"
          ]
        ],
        "sz": 812,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "d54f26f806ec83a34beaa033cbd110a9204f853045bf9050a3050146b52ec50b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_exact_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1091,
        "ms": {
          "file": {
            "size": 2187.0
          },
          "text": {
            "digit_ratio": 0.02,
            "space_count": 392.0,
            "total_lines": 86.0,
            "char_entropy": 4.6,
            "unique_chars": 72.0,
            "avg_line_length": 24.43,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.2,
            "last_line_length": 12.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.19,
            "line_length_stddev": 22.62,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 3.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "#include sep_exact_approx_common"
          ],
          [
            2040,
            "// special for Spanish initial B/V"
          ]
        ],
        "sz": 2187,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "f54d8a4d50ac4331b34a9a6d6466108e8d462f590d83b88130cb439f760a74e8",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_hebrew_common.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1092,
        "ms": {
          "file": {
            "size": 2536.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 373.0,
            "total_lines": 105.0,
            "char_entropy": 4.75,
            "unique_chars": 97.0,
            "avg_line_length": 22.15,
            "high_byte_ratio": 0.03,
            "max_line_length": 78.0,
            "non_ascii_ratio": 0.03,
            "empty_line_ratio": 0.1,
            "last_line_length": 19.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.23,
            "most_common_ratio": 0.11,
            "line_length_stddev": 19.06,
            "repeated_char_sequences": 1.0,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 15.0
          }
        },
        "ss": [
          [
            4,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            75,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            149,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            221,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            297,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            370,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            432,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            488,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            560,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            630,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            707,
            "* See the License for the specific language governing permissions and"
          ],
          [
            779,
            "* limitations under the License."
          ],
          [
            821,
            "// SEPHARDIC"
          ],
          [
            837,
            "// 1. following are rules to accept the language"
          ],
          [
            887,
            "// 1.1 Special letter combinations"
          ],
          [
            923,
            "eau french true"
          ],
          [
            940,
            "ou french true"
          ],
          [
            956,
            "gni italian+french true"
          ],
          [
            981,
            "tx spanish true"
          ],
          [
            998,
            "tj spanish true"
          ],
          [
            1015,
            "gy french true"
          ],
          [
            1031,
            "guy french true"
          ],
          [
            1050,
            "sh spanish+portuguese true // English, but no sign for /sh/ in these languages"
          ],
          [
            1132,
            "lh portuguese true"
          ],
          [
            1152,
            "nh portuguese true"
          ],
          [
            1172,
            "ny spanish true"
          ],
          [
            1191,
            "gue spanish+french true"
          ],
          [
            1216,
            "gui spanish+french true"
          ],
          [
            1241,
            "gia italian true"
          ],
          [
            1259,
            "gie italian true"
          ],
          [
            1277,
            "gio italian true"
          ],
          [
            1295,
            "giu italian true"
          ],
          [
            1327,
            "// 1.2 special characters"
          ],
          [
            1360,
            "spanish true"
          ],
          [
            1377,
            "portuguese+french true"
          ],
          [
            1404,
            "portuguese+spanish true"
          ],
          [
            1432,
            "portuguese true"
          ],
          [
            1472,
            "french+portuguese true"
          ],
          [
            1527,
            "french true"
          ],
          [
            1590,
            "italian+spanish true"
          ],
          [
            1693,
            "// Hebrew"
          ],
          [
            1707,
            "hebrew true"
          ],
          [
            2068,
            "// 2. following are rules to reject the language"
          ],
          [
            2124,
            "// Every Latin character word has at least one Latin vowel"
          ],
          [
            2186,
            "a hebrew false"
          ],
          [
            2203,
            "o hebrew false"
          ],
          [
            2220,
            "e hebrew false"
          ],
          [
            2237,
            "i hebrew false"
          ],
          [
            2254,
            "y hebrew false"
          ],
          [
            2271,
            "u hebrew false"
          ],
          [
            2296,
            "kh spanish false"
          ],
          [
            2314,
            "gua italian false"
          ],
          [
            2333,
            "guo italian false"
          ],
          [
            2354,
            "italian false"
          ],
          [
            2370,
            "cha italian false"
          ],
          [
            2389,
            "cho italian false"
          ],
          [
            2408,
            "chu italian false"
          ],
          [
            2427,
            "j italian false"
          ],
          [
            2444,
            "dj spanish false"
          ],
          [
            2462,
            "sce french false"
          ],
          [
            2480,
            "sci french false"
          ],
          [
            2500,
            "french false"
          ],
          [
            2517,
            "portuguese false"
          ]
        ],
        "sz": 2536,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          },
          {
            "c": 0.7599999904632568,
            "d": "Regex component marker",
            "e": [
              "following"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-path-navigation-action--rx-22",
            "l": 1
          }
        ],
        "sha": "e63319156c076f8d60e944e5f998729f079316abd8e5c2f63e67b8de57fba69f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_lang.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1093,
        "ms": {
          "file": {
            "size": 849.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 134.0,
            "total_lines": 23.0,
            "char_entropy": 4.76,
            "unique_chars": 57.0,
            "avg_line_length": 35.91,
            "max_line_length": 75.0,
            "empty_line_ratio": 0.04,
            "last_line_length": 7.0,
            "most_common_char": "e",
            "whitespace_ratio": 0.18,
            "most_common_ratio": 0.1,
            "line_length_stddev": 31.47,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            808,
            "french"
          ],
          [
            815,
            "hebrew"
          ],
          [
            822,
            "italian"
          ],
          [
            830,
            "portuguese"
          ],
          [
            841,
            "spanish"
          ]
        ],
        "sz": 849,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "9cc12d4172e415642b4105d96717d9c9b28abca8abfb61b6443f4e9c47adaf87",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_languages.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1094,
        "ms": {
          "file": {
            "size": 4632.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 740.0,
            "total_lines": 155.0,
            "char_entropy": 4.71,
            "unique_chars": 87.0,
            "avg_line_length": 28.88,
            "high_byte_ratio": 0.02,
            "max_line_length": 112.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.14,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.2,
            "line_length_stddev": 23.32,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 36.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// SEPHARDIC: INCORPORATES Portuguese + Italian + Spanish(+Catalan) + French"
          ],
          [
            882,
            "// CONSONANTS"
          ],
          [
            2134,
            "]\" \"(tS[italian]|ks[portuguese+french+spanish])\""
          ],
          [
            2202,
            "]\" \"(tS[italian]|s[portuguese+french+spanish])\""
          ],
          [
            2251,
            "//\"c\" \"\" \"[aou]\" \"(k|C[portuguese+spanish])\" // \"C\" means that the actual letter could be \""
          ],
          [
            2344,
            "\" (cedille omitted)"
          ],
          [
            2422,
            "y]\" \"(s[spanish]|z[portuguese+french+italian])\""
          ],
          [
            2950,
            "y]\" \"(ez[portuguese]|eS[portuguese]|eks|egz)\""
          ],
          [
            3213,
            "// VOWELS"
          ],
          [
            4088,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 4632,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "a334356decf81c182682d8e0d03e1727ab45a068446ed11c96809167aca1877f",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_rules_any.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1095,
        "ms": {
          "file": {
            "size": 2224.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 407.0,
            "total_lines": 91.0,
            "char_entropy": 4.39,
            "unique_chars": 73.0,
            "avg_line_length": 23.44,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.05,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.24,
            "line_length_stddev": 19.69,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 8.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Sephardic"
          ],
          [
            818,
            "// CONSONANTS"
          ],
          [
            1158,
            "\"s\" \"[aeiouy"
          ],
          [
            1176,
            "]\" \"[aeiouy"
          ],
          [
            1387,
            "// VOWELS"
          ],
          [
            1927,
            "// TRIVIAL"
          ]
        ],
        "sz": 2224,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "2a3cbe347fda0df595e3110959c49656c6ec6b6f3b7af69a67d5590f0729699b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_rules_french.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1096,
        "ms": {
          "file": {
            "size": 1459.0
          },
          "text": {
            "digit_ratio": 0.01,
            "space_count": 259.0,
            "total_lines": 62.0,
            "char_entropy": 4.57,
            "unique_chars": 92.0,
            "avg_line_length": 22.53,
            "high_byte_ratio": 0.07,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.07,
            "empty_line_ratio": 0.1,
            "last_line_length": 41.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.22,
            "line_length_stddev": 22.26,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 1.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "// Sephardic"
          ]
        ],
        "sz": 1459,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "545919eeecaee7301ff14afe69c88faf0277f3568c154032be204d3ff0d9da68",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_rules_hebrew.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1097,
        "ms": {
          "file": {
            "size": 1848.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 339.0,
            "total_lines": 76.0,
            "char_entropy": 4.42,
            "unique_chars": 67.0,
            "avg_line_length": 23.32,
            "high_byte_ratio": 0.01,
            "max_line_length": 75.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.11,
            "last_line_length": 19.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.22,
            "line_length_stddev": 20.76,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 9.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            1391,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 1848,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "3b4d253710d0c9dd5649594047c8e10763094c10b7b518cfd84048c122255f9b",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_rules_italian.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1098,
        "ms": {
          "file": {
            "size": 2573.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 458.0,
            "total_lines": 104.0,
            "char_entropy": 4.5,
            "unique_chars": 80.0,
            "avg_line_length": 23.74,
            "high_byte_ratio": 0.03,
            "max_line_length": 133.0,
            "non_ascii_ratio": 0.03,
            "empty_line_ratio": 0.12,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.23,
            "line_length_stddev": 23.5,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 11.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            1458,
            "y]\" \"(ez|eS|eks)\" // ez in Brazil"
          ],
          [
            2163,
            "// LATIN ALPHABET"
          ]
        ],
        "sz": 2573,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "8a1e06755eba82e40de80beecdcabc01d8a0e9a547f1eabb35346e526bcf90b2",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_rules_portuguese.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1099,
        "ms": {
          "file": {
            "size": 2480.0
          },
          "text": {
            "digit_ratio": 0.0,
            "space_count": 444.0,
            "total_lines": 95.0,
            "char_entropy": 4.57,
            "unique_chars": 78.0,
            "avg_line_length": 25.11,
            "high_byte_ratio": 0.01,
            "max_line_length": 89.0,
            "non_ascii_ratio": 0.01,
            "empty_line_ratio": 0.16,
            "last_line_length": 13.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.22,
            "most_common_ratio": 0.2,
            "line_length_stddev": 23.55,
            "max_inline_whitespace_run": 6.0,
            "trailing_whitespace_lines": 4.0
          }
        },
        "ss": [
          [
            3,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            73,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            146,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            217,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            292,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            364,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            424,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            478,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            549,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            618,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            694,
            "* See the License for the specific language governing permissions and"
          ],
          [
            765,
            "* limitations under the License."
          ],
          [
            804,
            "//Sephardic"
          ],
          [
            817,
            "// Includes both Spanish (Castillian) \u0026 Catalan"
          ],
          [
            866,
            "// CONSONANTS"
          ],
          [
            1379,
            "//\"ll\" \"\" \"\" \"(l|Z)\" // Z is typical for Argentina, only Ashkenazic"
          ],
          [
            1941,
            "//  \"y\" \"\" \"\" \"(i|j|S|Z)\" // S or Z are peculiar to South America; only Ashkenazic"
          ],
          [
            2043,
            "// VOWELS"
          ],
          [
            2224,
            "// TRIVIAL"
          ]
        ],
        "sz": 2480,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "57654b4355e47b908556126a8cf10f9a77dc49e5bf3b179e9797b4e9b47f88ed",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/bm/sep_rules_spanish.txt",
        "type": "text"
      },
      {
        "f": "H(Db)",
        "dp": 1,
        "id": 1100,
        "ms": {
          "file": {
            "size": 3745.0
          },
          "text": {
            "digit_ratio": 0.25,
            "space_count": 549.0,
            "total_lines": 200.0,
            "char_entropy": 4.43,
            "unique_chars": 112.0,
            "avg_line_length": 16.73,
            "high_byte_ratio": 0.02,
            "max_line_length": 101.0,
            "non_ascii_ratio": 0.02,
            "empty_line_ratio": 0.07,
            "last_line_length": 4.0,
            "most_common_char": "\"",
            "whitespace_ratio": 0.25,
            "most_common_ratio": 0.27,
            "line_length_stddev": 16.51,
            "max_inline_whitespace_run": 6.0
          }
        },
        "ss": [
          [
            4,
            "* Licensed to the Apache Software Foundation (ASF) under one or more"
          ],
          [
            75,
            "* contributor license agreements.  See the NOTICE file distributed with"
          ],
          [
            149,
            "* this work for additional information regarding copyright ownership."
          ],
          [
            221,
            "* The ASF licenses this file to You under the Apache License, Version 2.0"
          ],
          [
            297,
            "* (the \"License\"); you may not use this file except in compliance with"
          ],
          [
            370,
            "* the License.  You may obtain a copy of the License at"
          ],
          [
            432,
            "*      http://www.apache.org/licenses/LICENSE-2.0"
          ],
          [
            488,
            "* Unless required by applicable law or agreed to in writing, software"
          ],
          [
            560,
            "* distributed under the License is distributed on an \"AS IS\" BASIS,"
          ],
          [
            630,
            "* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."
          ],
          [
            707,
            "* See the License for the specific language governing permissions and"
          ],
          [
            779,
            "* limitations under the License."
          ],
          [
            821,
            "// Format"
          ],
          [
            832,
            "// \"pattern\" \"replacement at start of word\" \"replacement before a vowel\" \"replacement in other cases\""
          ],
          [
            937,
            "// Vowels"
          ],
          [
            1027,
            "// Consonants"
          ],
          [
            1368,
            "// Romanian t-cedilla and t-comma should be equivalent"
          ],
          [
            1474,
            "// Polish characters (e-ogonek and a-ogonek): default case branch either not coded or 6"
          ],
          [
            1599,
            "// Other terms"
          ],
          [
            3327,
            "// Branching cases"
          ],
          [
            3502,
            "// ASCII foldings"
          ]
        ],
        "sz": 3745,
        "ts": [
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "to the"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-6--inline-11768",
            "l": 1
          }
        ],
        "sha": "2081d3acc1c5b5fc6d619f71fd89e9b00219f3f86a963edd2971dded11393c0d",
        "path": "/data/samples/bad/harvest/malwarebazaar/apk/80c2a67d893f560488cfac7ccf29956d122377ade9edf627a73f505821bc12f1.apk!!org/apache/commons/codec/language/dmrules.txt",
        "type": "text"
      }
    ],
    "tv": "84923"
  }
}