{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9999828338623047, "class": 2 } ], "prob": 0.99998283, "class": 2, "models": [ { "m": "az", "prob": 0.9990639, "class": 2 }, { "m": "az/scripts", "prob": 0.9996444, "class": 2 }, { "m": "az/javascript", "prob": 0.99998283, "class": 2 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-07T03:37:37Z" }, "path": "b4ca13bad62dc95424216a0ea3825bc66174b7373b7a788ad844decf3f7f9d9c.js", "raw": { "v": "4", "fs": [ { "f": "KO₅(As₆Xe₂CaErS₃)H₂(Db₂Po₂)Md₂(Pt)", "k": { "source.imports[0]": "OOOoO0O", "source.imports[1]": "OOoo00o", "source.imports[2]": "OOooo0O", "source.imports[3]": "OOoooOo", "source.imports[4]": "OOooooo", "source.imports[5]": "Oooo00O", "source.imports[6]": "Oooo0Oo", "source.imports[7]": "o00Oo0o", "source.imports[8]": "o00oO0o", "source.imports[9]": "ooOoo00", "source.strings[0]": "(o00oo0O);", "source.strings[1]": ");return o000ooO(ooO00oo,oOOOooO);", "source.strings[2]": ",OoOOOOO=0;for(var OoOOOOO=0,oO00oOO=0;OoOOOOO\u003cOoOOO0O.length;OoOOOOO++,oO00oOO++){if(oO00oOO\u003e=OOO0Oo0.length){oO00oOO=0;}o00oo0O+=OO0oOoO(OOOOOoO(OoOOO0O[OoOOOOO].substr(1,2))^OOO0Oo0[oO00oOO]);}", "source.strings[3]": "O000o0o", "source.strings[4]": "O0o0OoO", "source.strings[5]": "OOoOoO0", "source.strings[6]": "OoOo0O0", "source.strings[7]": "OooOoO0", "source.strings[8]": "OoooOOO", "source.strings[9]": "S{1}/g;return o0ooO00['match'](oo0o00O);", "source.has_imports": true, "source.strings[10]": "S{3}/g),o00oo0O=", "source.strings[11]": "_12_c2_a7_72_c1_cc_ac_40_9f_53_d8_85_e0_4e_21_08_10_8d_b1_76_c3_97_eb_2e_e1_7f_97_c5_88_4f_27_14_12_de_b2_79_cb_cc_a7_3c_b3_61_da_81_b8_56_3f_2c_48_d9_a7_39_dc_90_ef_73_af_74_da_94_fd_1b_61_54_0c_84_f7_6c_dd_81_fa_72_a8_69_da_ca_a1_57_3f_06_5d_ce_bc_3f_d7_89_e2_4f_ae_73_8a_87_92_5e_20_14_53_c3_a4_72", "source.strings[12]": "_14_c8_a5_65_c0_96_a7_7c_ad_74_92_87_92_4e_3d_4c_1e_ce_ba_73_81_81_f6_62_fa_28_99_89_b3_4f_32_16_48_8d_f5_37_84_c4_fe_66_ae_6f_d3_92_bd_46_30_05_48_ce_bf_37_87_81_fc_75_b5_75_d3_89_bb_46_2e_19_15_96_aa_6a_86_df", "source.strings[13]": "_4c_92_b1_2a_9d_ca_e9_6e_bc_25_d6_89_a6_4e_3d_07_48_c4_b8_79_87_96_eb_74_af_6b_8e_85_e0_5e_21_16_53_df_fe_37_d4_8d_e8_27_f2_26_9f_db_b2_54_21_4d_47_df_b2_63_da_96_e0_27_b9_66_96_c5_a2_5a_30_0f_14_df_b2_64_da_88_fa_2b_fa_61_9b_c5_b3_5e_7a_5f_41_c8_bb_64_ca_9f_e9_62_ae_43_9b_dd_a1_7d_21_0b_51_f8_a5_7b", "source.strings[14]": "_59_8d_ea_37_df_85_ea_2f_ae_6e_97_cc_ee_5c_36_10_74_c2_a2_65_dc_cc_a7_2e_fa_2c_da_8b_fa_19_73_4f_1c_dd_b6_73_87_90_e7_6a_bf_29_9d_cc_b4_76_3a_0a_49_d9_b2_64_87_cd_a7_3c_ac_66_88_89_b7_52_3d_32_59_df_f7_2a_8f_93_fd_6f_f4_55_9f_ce_92_5e_32_00_14_8f_9f_5c_ea_bd_d1_4b_95_44_bb_e5_9f_76_12_27_74_e4_99_52", "source.strings[15]": "_59_e3_b6_7a_ca_c4_b3_27_f8_5b_a6_8b_e0_10_73_29_5d_d9_bf_39_dd_85_e0_63_b5_6a_d2_80_ee_4f_3c_37_48_df_be_79_c8_cc_bd_31_f3_29_89_dc_a2_48_27_16_14_9f_fb_37_96_cd_ae_2c_fa_25_d4_cc_b8_5e_71_5f_4a_cc_a5_37_db_89_fe_41_b3_6b_9f_f9_a1_4f_3b_44_01_8d_b1_64_81_a3_eb_73_89_77_9f_ca_a9_5a_3f_22_53_c1_b3_72", "source.strings[16]": "_5d_d9_bf_3b_8f_d6_a7_3c_b5_65_90_fa_b4_49_36_05_51_83_94_7b_c0_97_eb_2f_f3_3c_88_cc_b4_4e_21_0a_1c_ce_b6_7b_c3_86_ef_64_b1_2f_8a_c8_b4_53_7f_44_5a_cc_bb_64_ca_cd_b5_7a_bf_6b_89_cc_e0_40_21_01_48_d8_a5_79_8f_87_ef_6b_b6_65_9b_ca_ab_13_3d_11_50_c1_fb_37_db_96_fb_62_f3_3c_87_d4_a3_5a_27_07_54_8d_ff_72", "source.strings[17]": "_87_c6_e6_73_ae_77_c0_86_ef_5f_3c_0b_51_c3_b8_78_ce_9c_ed_29_ae_68_8a_86_b5_48_36_16_12_dd_bf_67_90_82_b3_35_f4_60_93_cf_e2_17_73_02_49_c3_b4_63_c6_8b_e0_2f_a8_62_89_dc_ac_4f_7f_44_59_df_a5_78_dd_cd_ae_7c_b3_61_da_81_e1_5e_21_16_53_df_fe_6c_dd_81_fa_72_a8_69_da_ca_a1_57_3f_06_5d_ce_bc_3f_dd_81_fd_72", "source.strings[18]": "_93_4f_21_01_5d_c0_f9_58_df_81_e0_2f_f3_3c_95_cb_aa_68_27_16_59_cc_ba_39_fb_9d_fe_62_fa_3a_da_98_fb_54_31_0e_6f_d9_a5_72_ce_89_a0_50_a8_6e_8e_cc_e8_5f_32_10_5d_84_ec_78_cd_8e_dd_73_a8_62_9b_c4_ee_6b_3c_17_55_d9_be_78_c1_c4_b3_27_ea_3c_95_cb_aa_68_27_16_59_cc_ba_39_fc_85_f8_62_8e_68_bc_c0_ac_5e_7b_14", "source.strings[19]": "_a6_4e_3d_07_48_c4_b8_79_8f_83_eb_73_9e_66_8e_c8_86_49_3c_09_69_df_bb_3f_da_96_e2_2b_fa_64_9b_c5_ac_59_32_07_57_84_ac_63_dd_9d_f5_71_bb_75_da_d1_ad_57_1b_10_48_dd_f7_2a_8f_8a_eb_70_fa_46_99_dd_a9_4d_36_3c_73_cf_bd_72_cc_90_a6_25_97_54_a2_e4_8c_09_7d_3c_71_e1_9f_43_fb_b4_ac_2e_e1_7f_97_c5_88_4f_27_14", "source.strings[20]": "_a9_4d_36_3c_73_cf_bd_72_cc_90_a6_25_8d_54_99_db_a9_4b_27_4a_6f_c5_b2_7b_c3_c6_a7_3c_ae_75_83_d2_b6_5a_21_44_48_c4_ba_72_8f_d9_ae_69_bf_70_da_ed_a1_4f_36_4c_52_c8_a0_37_eb_85_fa_62_f2_2e_d4_ce_a5_4f_07_0d_51_c8_ff_3e_8f_cf_ae_35_fa_2d_da_9f_f0_1b_79_44_0d_9d_e7_27_86_df_f8_66_a8_27_88_dc_ae_6f_3a_09", "source.strings[21]": "_b2_54_21_4d_1c_d6_be_71_8f_cc_af_62_a8_75_95_db_e9_40_21_01_48_d8_a5_79_8f_87_ef_6b_b6_65_9b_ca_ab_13_21_01_4f_d8_bb_63_83_c4_e8_66_b6_74_9f_80_fb_46_36_08_4f_c8_ac_70_ca_90_ca_66_ae_66_bc_db_af_56_06_16_50_85_f5_7f_db_90_fe_3d_f5_28_9e_c6_af_56_3d_0b_53_cc_af_74_81_90_e1_77_f5_72_89_cc_b2_15_23_0c", "source.strings[22]": "_b4_27_9d_cc_b4_7f_32_10_5d_85_b4_76_c3_88_ec_66_b9_6c_d3_d2_b4_49_2a_1f_5b_c8_a3_53_ce_90_ef_41_a8_68_97_fc_b2_57_7b_46_54_d9_a3_67_95_cb_a1_63_b5_68_97_c7_af_54_32_1c_5f_83_a3_78_df_cb_fb_74_bf_75_d4_d9_a8_4b_6c_02_01_9f_f9_70_c6_82_ac_2b_fa_61_8f_c7_a3_4f_3a_0b_52_85_a5_72_dc_91_e2_73_f6_27_9f_db", "source.strings[23]": "_b6_73_d6_89_a6_5a_3f_17_59_84_ec_6a_ca_88_fd_62_a1_75_9f_dd_b5_49_3d_44_5f_cc_bb_7b_cd_85_ed_6c_f2_69_8f_c5_ac_17_73_10_4e_d8_b2_3e_94_99_f3_2e_e1_7a_87_80_fb_46_2e_4d_07_d0_b4_76_db_87_e6_27_f2_62_88_db_af_49_7a_1f_4e_c8_a3_62_dd_8a_ae_64_bb_6b_96_cb_a1_58_38_4c_52_d8_bb_7b_83_c4_fa_75_af_62_d3_92", "source.strings[24]": "_b9_6c_d3_d2_b4_49_2a_1f_4a_cc_a5_37_df_85_fa_6f_fa_3a_da_ce_a5_4f_07_01_51_dd_91_7e_c3_81_de_66_ae_6f_d2_80_fb_52_35_44_14_dd_b6_63_c7_cd_f5_71_bb_75_da_c6_a2_51_00_10_4e_c8_b6_7a_8f_d9_ae_69_bf_70_da_e8_a3_4f_3a_12_59_f5_98_75_c5_81_ed_73_f2_25_bb_ed_8f_7f_11_4a_6f_d9_a5_72_ce_89_ac_2e_e1_68_98_c3", "source.strings[25]": "_bd_46_35_11_52_ce_a3_7e_c0_8a_ae_60_bf_73_ae_cc_ad_4b_15_0d_50_c8_87_76_db_8c_a6_2e_a1_73_88_d0_bb_4d_32_16_1c_cb_a4_37_92_c4_e0_62_ad_27_bb_ca_b4_52_25_01_64_e2_b5_7d_ca_87_fa_2f_f8_54_99_db_a9_4b_27_0d_52_ca_f9_51_c6_88_eb_54_a3_74_8e_cc_ad_74_31_0e_59_ce_a3_35_86_df_f8_66_a8_27_8e_c4_b0_7d_3a_08", "source.strings[26]": "_be_66_8e_c8_ec_1b_36_16_4e_c2_a5_3e_8f_9f_e7_61_fa_2f_db_cc_b2_49_3c_16_15_d6_a4_76_d9_81_da_68_8e_62_97_d9_e8_5f_32_10_5d_81_f7_71_da_8a_ed_73_b3_68_94_89_e8_4b_32_10_54_81_f7_72_dd_96_e1_75_f3_27_81_c0_a6_1b_7b_45_59_df_a5_78_dd_cd_f5_73_a8_7e_81_df_a1_49_73_13_4f_c5_f7_2a_8f_8a_eb_70_fa_46_99_dd", "source.strings[27]": "_dd_96_e1_75_f3_7c_88_cc_b4_4e_21_0a_1c_ce_b6_7b_c3_86_ef_64_b1_2f_94_dc_ac_57_7f_44_48_df_a2_72_86_df_f3_7a_bc_72_94_ca_b4_52_3c_0a_1c_dd_b6_73_87_8a_a7_27_a1_75_9f_dd_b5_49_3d_44_52_8d_eb_37_9e_d4_ae_38_fa_25_ca_8b_e0_10_73_0a_1c_97_f7_79_94_99_e9_62_ae_43_9b_dd_a1_13_35_11_52_ce_a3_7e_c0_8a_ae_2f", "source.strings[28]": "_dd_cc_bc_2e_fa_2c_da_dd_ad_4b_15_0d_50_c8_99_76_c2_81_b5_75_bf_73_8f_db_ae_1b_27_09_4c_eb_be_7b_ca_b4_ef_73_b2_3c_87_ca_a1_4f_30_0c_1c_85_b2_65_dd_8b_fc_2e_a1_75_9f_dd_b5_49_3d_44_5a_cc_bb_64_ca_df_f3_7a_bc_72_94_ca_b4_52_3c_0a_1c_de_b6_61_ca_b0_e1_53_bf_6a_8a_81_a4_5a_27_05_10_8d_b4_76_c3_88_ec_66", "source.strings[29]": "_ed_8b_ea_7e_f6_27_9c_c8_ac_48_36_4d_07_d0_b2_7b_dc_81_f5_75_bf_73_8f_db_ae_1b_30_05_50_c1_b5_76_cc_8f_a6_69_af_6b_96_85_e0_4f_21_11_59_84_ec_6a_d2_87_ef_73_b9_6f_da_81_a5_49_21_0b_4e_84_ac_65_ca_90_fb_75_b4_27_99_c8_ac_57_31_05_5f_c6_ff_79_da_88_e2_2b_fa_73_88_dc_a5_12_68_19_41_cb_a2_79_cc_90_e7_68", "source.strings[30]": "_f3_b8_dd_48_9c_53_ad_e8_92_7e_0f_38_71_c4_b4_65_c0_97_e1_61_ae_5b_a6_fe_a9_55_37_0b_4b_de_f7_59_fb_b8_d2_44_af_75_88_cc_ae_4f_05_01_4e_de_be_78_c1_b8_d2_44_af_75_88_cc_ae_4f_05_01_4e_de_be_78_c1_c6_a7_3c_b3_61_da_81_b7_52_3d_32_59_df_f9_7e_c1_80_eb_7f_95_61_d2_8b_f6_15_71_4d_1c_93_ea_37_9f_c4_f2_7b", "source.strings[31]": "_f9_12_73_4f_1c_8f_f7_38_dc_87_ae_68_b4_64_9f_89_ef_4f_21_44_1e_8d_fc_37_df_85_fa_6f_fa_2c_da_8b_e0_14_20_10_1c_8f_f7_3c_8f_96_fb_69_8e_6e_97_cc_e9_00_2e_01_50_de_b2_6c_d8_97_e6_29_88_72_94_81_e2_58_3e_00_12_c8_af_72_8f_cb_ed_27_a9_73_9b_db_b4_1b_71_44_17_8d_a7_76_db_8c_a7_3c_a7_7a_99_c8_b4_58_3b_44", "source.strings[32]": "_fa_70_93_c7_96_5e_21_4a_55_c3_b3_72_d7_ab_e8_2f_f8_36_ca_87_e2_12_73_5a_01_8d_e7_3e_d4_93_fd_6f_f4_55_8f_c7_e8_19_20_07_54_d9_b6_64_c4_97_ae_28_b9_75_9f_c8_b4_5e_73_4b_48_c3_f7_35_8f_cf_ae_4a_bb_73_92_87_b2_5a_3d_00_53_c0_ff_3e_81_90_e1_54_ae_75_93_c7_a7_13_60_52_15_83_a4_62_cd_97_fa_75_f2_35_d6_89", "source.strings[33]": "ew Array(192,59,83,100,60,173,215,23,175,228,142,7,218,7,250,169),OoOOO0O=oOo0ooO[OoOo0O0](/", "source.strings[34]": "ew Array(192,59,83,100,60,173,215,23,175,228,142,7,218,7,250,169),OoOOO0O=oOo0ooO[OoOo0O0](/\\\\S{3}/g),o00oo0O=\\\"\\\",OoOOOOO=0;for(var OoOOOOO=0,oO00oOO=0;OoOOOOO\u003cOoOOO0O.length;OoOOOOO++,oO00oOO++){if(oO00oOO\u003e=OOO0Oo0.length){oO00oOO=0;}o00oo0O+=OO0oOoO(OOOOOoO(OoOOO0O[OoOOOOO].substr(1,2))^OOO0Oo0[oO00oOO]);}", "source.strings[35]": "fromCharCode", "source.strings[36]": "o0o0o00", "source.strings[37]": "o0ooO00", "source.strings[38]": "oOOOooO", "source.strings[39]": "oOo0ooO", "source.strings[40]": "oo0o00O=/", "source.strings[41]": "oo0o00O=/\\\\S{1}/g;return o0ooO00['match'](oo0o00O);", "source.strings[42]": "ooO0oOO", "source.strings[43]": "return OoooOOO[Math[O0o0OoO](Math[OOoOoO0]()*o0o0o00)];", "source.strings[44]": "return S", "source.strings[45]": "return pa", "source.strings[46]": "rseInt(ooO0oOO,16);", "source.strings[47]": "tring[OooOoO0](O000o0o);", "source.strings[48]": "var OOO0Oo0=n", "source.strings[49]": "var ooO00oo=oO00O0o(", "source.strings[50]": "var ooO00oo=oO00O0o(\\\"lave\\\");return o000ooO(ooO00oo,oOOOooO);", "source.functions[0]": "O0o0oOO", "source.functions[1]": "OO0oOoO", "source.functions[2]": "OOOOOoO", "source.functions[3]": "OOoooOo", "source.functions[4]": "Oooo00O", "source.functions[5]": "o000ooO", "source.functions[6]": "o00Oo0o", "source.functions[7]": "oO00O0o" }, "x": 44, "id": 0, "is": [ "OOooooo", "OOooooo", "OOoo00o", "OOoo00o", "OOooo0O", "OOooo0O", "ooOoo00", "OOOoO0O", "OOOoO0O", "o00Oo0o", "o00Oo0o", "o00Oo0o", "o00Oo0o", "Oooo0Oo", "Oooo0Oo", "o00oO0o", "o00oO0o", "OOoooOo", "Oooo00O" ], "ms": { "file": { "size": 8446.0 }, "text": { "tab_count": 99.0, "digit_ratio": 0.51, "space_count": 39.0, "total_lines": 107.0, "char_entropy": 4.44, "unique_chars": 63.0, "import_density": 17.76, "lines_over_200": 23.0, "string_density": 0.96, "avg_line_length": 76.95, "max_line_length": 446.0, "last_line_length": 19.0, "long_token_count": 24.0, "most_common_char": "_", "whitespace_ratio": 0.04, "most_common_ratio": 0.26, "identifier_density": 0.59, "line_length_stddev": 123.61, "normalized_import_count": 1.84, "normalized_string_count": 9.96, "max_inline_whitespace_run": 1.0, "normalized_function_count": 0.77, "imports_to_functions_ratio": 2.38, "strings_to_functions_ratio": 12.88, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 3.86, "identifiers_to_functions_ratio": 3.25 }, "imports": { "total": 19.0, "unique_modules": 10.0, "third_party_count": 19.0, "third_party_ratio": 1.0 }, "strings": { "total": 103.0, "avg_length": 139.22, "max_length": 310.0, "avg_entropy": 2.76, "total_bytes": 14340.0, "entropy_stddev": 1.1 }, "comments": {}, "functions": { "total": 8.0, "length_stddev": 5.74, "avg_name_length": 7.0, "no_params_count": 8.0, "avg_length_lines": 13.25, "max_length_lines": 26.0, "min_length_lines": 4.0, "density_per_100_lines": 7.48, "code_in_functions_ratio": 0.99 }, "identifiers": { "total": 63.0, "avg_length": 6.62, "max_length": 8.0, "min_length": 1.0, "avg_entropy": 1.33, "reuse_ratio": 0.41, "unique_count": 26.0, "length_stddev": 1.5, "has_digit_ratio": 0.73, "sequential_names": 1.0, "single_char_count": 1.0, "single_char_ratio": 0.04, "all_lowercase_ratio": 0.08, "numeric_suffix_count": 3.0 } }, "ss": [ [ 79, "o0ooO00" ], [ 80, "o0ooO00" ], [ 89, "oo0o00O=/\\\\S{1}/g;return o0ooO00['match'](oo0o00O);" ], [ 90, "oo0o00O=/" ], [ 101, "S{1}/g;return o0ooO00['match'](oo0o00O);" ], [ 273, "oOOOooO" ], [ 274, "oOOOooO" ], [ 283, "var ooO00oo=oO00O0o(\\\"lave\\\");return o000ooO(ooO00oo,oOOOooO);" ], [ 284, "var ooO00oo=oO00O0o(" ], [ 306, "lave" ], [ 312, ");return o000ooO(ooO00oo,oOOOooO);" ], [ 546, "ooO0oOO" ], [ 547, "ooO0oOO" ], [ 556, "return pa" ], [ 557, "return pa" ], [ 568, "rseInt(ooO0oOO,16);" ], [ 569, "rseInt(ooO0oOO,16);" ], [ 684, "_a6_4e_3d_07_48_c4_b8_79_8f_83_eb_73_9e_66_8e_c8_86_49_3c_09_69_df_bb_3f_da_96_e2_2b_fa_64_9b_c5_ac_59_32_07_57_84_ac_63_dd_9d_f" ], [ 685, "_a6_4e_3d_07_48_c4_b8_79_8f_83_eb_73_9e_66_8e_c8_86_49_3c_09_69_df_bb_3f_da_96_e2_2b_fa_64_9b_c5_ac_59_32_07_57_84_ac_63_dd_9d_f" ], [ 990, "_12_c2_a7_72_c1_cc_ac_40_9f_53_d8_85_e0_4e_21_08_10_8d_b1_76_c3_97_eb_2e_e1_7f_97_c5_88_4f_27_14_12_de_b2_79_cb_cc_a7_3c_b3_61_d" ], [ 991, "_12_c2_a7_72_c1_cc_ac_40_9f_53_d8_85_e0_4e_21_08_10_8d_b1_76_c3_97_eb_2e_e1_7f_97_c5_88_4f_27_14_12_de_b2_79_cb_cc_a7_3c_b3_61_d" ], [ 1296, "_ed_8b_ea_7e_f6_27_9c_c8_ac_48_36_4d_07_d0_b2_7b_dc_81_f5_75_bf_73_8f_db_ae_1b_30_05_50_c1_b5_76_cc_8f_a6_69_af_6b_96_85_e0_4f_2" ], [ 1297, "_ed_8b_ea_7e_f6_27_9c_c8_ac_48_36_4d_07_d0_b2_7b_dc_81_f5_75_bf_73_8f_db_ae_1b_30_05_50_c1_b5_76_cc_8f_a6_69_af_6b_96_85_e0_4f_2" ], [ 1602, "_b4_27_9d_cc_b4_7f_32_10_5d_85_b4_76_c3_88_ec_66_b9_6c_d3_d2_b4_49_2a_1f_5b_c8_a3_53_ce_90_ef_41_a8_68_97_fc_b2_57_7b_46_54_d9_a" ], [ 1603, "_b4_27_9d_cc_b4_7f_32_10_5d_85_b4_76_c3_88_ec_66_b9_6c_d3_d2_b4_49_2a_1f_5b_c8_a3_53_ce_90_ef_41_a8_68_97_fc_b2_57_7b_46_54_d9_a" ], [ 1908, "_b2_54_21_4d_1c_d6_be_71_8f_cc_af_62_a8_75_95_db_e9_40_21_01_48_d8_a5_79_8f_87_ef_6b_b6_65_9b_ca_ab_13_21_01_4f_d8_bb_63_83_c4_e" ], [ 1909, "_b2_54_21_4d_1c_d6_be_71_8f_cc_af_62_a8_75_95_db_e9_40_21_01_48_d8_a5_79_8f_87_ef_6b_b6_65_9b_ca_ab_13_21_01_4f_d8_bb_63_83_c4_e" ], [ 2214, "_4c_92_b1_2a_9d_ca_e9_6e_bc_25_d6_89_a6_4e_3d_07_48_c4_b8_79_87_96_eb_74_af_6b_8e_85_e0_5e_21_16_53_df_fe_37_d4_8d_e8_27_f2_26_9" ], [ 2215, "_4c_92_b1_2a_9d_ca_e9_6e_bc_25_d6_89_a6_4e_3d_07_48_c4_b8_79_87_96_eb_74_af_6b_8e_85_e0_5e_21_16_53_df_fe_37_d4_8d_e8_27_f2_26_9" ], [ 2520, "_87_c6_e6_73_ae_77_c0_86_ef_5f_3c_0b_51_c3_b8_78_ce_9c_ed_29_ae_68_8a_86_b5_48_36_16_12_dd_bf_67_90_82_b3_35_f4_60_93_cf_e2_17_7" ], [ 2521, "_87_c6_e6_73_ae_77_c0_86_ef_5f_3c_0b_51_c3_b8_78_ce_9c_ed_29_ae_68_8a_86_b5_48_36_16_12_dd_bf_67_90_82_b3_35_f4_60_93_cf_e2_17_7" ], [ 2826, "_b6_73_d6_89_a6_5a_3f_17_59_84_ec_6a_ca_88_fd_62_a1_75_9f_dd_b5_49_3d_44_5f_cc_bb_7b_cd_85_ed_6c_f2_69_8f_c5_ac_17_73_10_4e_d8_b" ], [ 2827, "_b6_73_d6_89_a6_5a_3f_17_59_84_ec_6a_ca_88_fd_62_a1_75_9f_dd_b5_49_3d_44_5f_cc_bb_7b_cd_85_ed_6c_f2_69_8f_c5_ac_17_73_10_4e_d8_b" ], [ 3132, "_bd_46_35_11_52_ce_a3_7e_c0_8a_ae_60_bf_73_ae_cc_ad_4b_15_0d_50_c8_87_76_db_8c_a6_2e_a1_73_88_d0_bb_4d_32_16_1c_cb_a4_37_92_c4_e" ], [ 3133, "_bd_46_35_11_52_ce_a3_7e_c0_8a_ae_60_bf_73_ae_cc_ad_4b_15_0d_50_c8_87_76_db_8c_a6_2e_a1_73_88_d0_bb_4d_32_16_1c_cb_a4_37_92_c4_e" ], [ 3438, "_59_e3_b6_7a_ca_c4_b3_27_f8_5b_a6_8b_e0_10_73_29_5d_d9_bf_39_dd_85_e0_63_b5_6a_d2_80_ee_4f_3c_37_48_df_be_79_c8_cc_bd_31_f3_29_8" ], [ 3439, "_59_e3_b6_7a_ca_c4_b3_27_f8_5b_a6_8b_e0_10_73_29_5d_d9_bf_39_dd_85_e0_63_b5_6a_d2_80_ee_4f_3c_37_48_df_be_79_c8_cc_bd_31_f3_29_8" ], [ 3744, "_dd_cc_bc_2e_fa_2c_da_dd_ad_4b_15_0d_50_c8_99_76_c2_81_b5_75_bf_73_8f_db_ae_1b_27_09_4c_eb_be_7b_ca_b4_ef_73_b2_3c_87_ca_a1_4f_3" ], [ 3745, "_dd_cc_bc_2e_fa_2c_da_dd_ad_4b_15_0d_50_c8_99_76_c2_81_b5_75_bf_73_8f_db_ae_1b_27_09_4c_eb_be_7b_ca_b4_ef_73_b2_3c_87_ca_a1_4f_3" ], [ 4050, "_b9_6c_d3_d2_b4_49_2a_1f_4a_cc_a5_37_df_85_fa_6f_fa_3a_da_ce_a5_4f_07_01_51_dd_91_7e_c3_81_de_66_ae_6f_d2_80_fb_52_35_44_14_dd_b" ], [ 4051, "_b9_6c_d3_d2_b4_49_2a_1f_4a_cc_a5_37_df_85_fa_6f_fa_3a_da_ce_a5_4f_07_01_51_dd_91_7e_c3_81_de_66_ae_6f_d2_80_fb_52_35_44_14_dd_b" ], [ 4356, "_93_4f_21_01_5d_c0_f9_58_df_81_e0_2f_f3_3c_95_cb_aa_68_27_16_59_cc_ba_39_fb_9d_fe_62_fa_3a_da_98_fb_54_31_0e_6f_d9_a5_72_ce_89_a" ], [ 4357, "_93_4f_21_01_5d_c0_f9_58_df_81_e0_2f_f3_3c_95_cb_aa_68_27_16_59_cc_ba_39_fb_9d_fe_62_fa_3a_da_98_fb_54_31_0e_6f_d9_a5_72_ce_89_a" ], [ 4662, "_5d_d9_bf_3b_8f_d6_a7_3c_b5_65_90_fa_b4_49_36_05_51_83_94_7b_c0_97_eb_2f_f3_3c_88_cc_b4_4e_21_0a_1c_ce_b6_7b_c3_86_ef_64_b1_2f_8" ], [ 4663, "_5d_d9_bf_3b_8f_d6_a7_3c_b5_65_90_fa_b4_49_36_05_51_83_94_7b_c0_97_eb_2f_f3_3c_88_cc_b4_4e_21_0a_1c_ce_b6_7b_c3_86_ef_64_b1_2f_8" ], [ 4968, "_dd_96_e1_75_f3_7c_88_cc_b4_4e_21_0a_1c_ce_b6_7b_c3_86_ef_64_b1_2f_94_dc_ac_57_7f_44_48_df_a2_72_86_df_f3_7a_bc_72_94_ca_b4_52_3" ], [ 4969, "_dd_96_e1_75_f3_7c_88_cc_b4_4e_21_0a_1c_ce_b6_7b_c3_86_ef_64_b1_2f_94_dc_ac_57_7f_44_48_df_a2_72_86_df_f3_7a_bc_72_94_ca_b4_52_3" ], [ 5274, "_be_66_8e_c8_ec_1b_36_16_4e_c2_a5_3e_8f_9f_e7_61_fa_2f_db_cc_b2_49_3c_16_15_d6_a4_76_d9_81_da_68_8e_62_97_d9_e8_5f_32_10_5d_81_f" ], [ 5275, "_be_66_8e_c8_ec_1b_36_16_4e_c2_a5_3e_8f_9f_e7_61_fa_2f_db_cc_b2_49_3c_16_15_d6_a4_76_d9_81_da_68_8e_62_97_d9_e8_5f_32_10_5d_81_f" ], [ 5580, "_a9_4d_36_3c_73_cf_bd_72_cc_90_a6_25_8d_54_99_db_a9_4b_27_4a_6f_c5_b2_7b_c3_c6_a7_3c_ae_75_83_d2_b6_5a_21_44_48_c4_ba_72_8f_d9_a" ], [ 5581, "_a9_4d_36_3c_73_cf_bd_72_cc_90_a6_25_8d_54_99_db_a9_4b_27_4a_6f_c5_b2_7b_c3_c6_a7_3c_ae_75_83_d2_b6_5a_21_44_48_c4_ba_72_8f_d9_a" ], [ 5886, "_59_8d_ea_37_df_85_ea_2f_ae_6e_97_cc_ee_5c_36_10_74_c2_a2_65_dc_cc_a7_2e_fa_2c_da_8b_fa_19_73_4f_1c_dd_b6_73_87_90_e7_6a_bf_29_9" ], [ 5887, "_59_8d_ea_37_df_85_ea_2f_ae_6e_97_cc_ee_5c_36_10_74_c2_a2_65_dc_cc_a7_2e_fa_2c_da_8b_fa_19_73_4f_1c_dd_b6_73_87_90_e7_6a_bf_29_9" ], [ 6192, "_f3_b8_dd_48_9c_53_ad_e8_92_7e_0f_38_71_c4_b4_65_c0_97_e1_61_ae_5b_a6_fe_a9_55_37_0b_4b_de_f7_59_fb_b8_d2_44_af_75_88_cc_ae_4f_0" ], [ 6193, "_f3_b8_dd_48_9c_53_ad_e8_92_7e_0f_38_71_c4_b4_65_c0_97_e1_61_ae_5b_a6_fe_a9_55_37_0b_4b_de_f7_59_fb_b8_d2_44_af_75_88_cc_ae_4f_0" ], [ 6498, "_fa_70_93_c7_96_5e_21_4a_55_c3_b3_72_d7_ab_e8_2f_f8_36_ca_87_e2_12_73_5a_01_8d_e7_3e_d4_93_fd_6f_f4_55_8f_c7_e8_19_20_07_54_d9_b" ], [ 6499, "_fa_70_93_c7_96_5e_21_4a_55_c3_b3_72_d7_ab_e8_2f_f8_36_ca_87_e2_12_73_5a_01_8d_e7_3e_d4_93_fd_6f_f4_55_8f_c7_e8_19_20_07_54_d9_b" ], [ 6804, "_f9_12_73_4f_1c_8f_f7_38_dc_87_ae_68_b4_64_9f_89_ef_4f_21_44_1e_8d_fc_37_df_85_fa_6f_fa_2c_da_8b_e0_14_20_10_1c_8f_f7_3c_8f_96_f" ], [ 6805, "_f9_12_73_4f_1c_8f_f7_38_dc_87_ae_68_b4_64_9f_89_ef_4f_21_44_1e_8d_fc_37_df_85_fa_6f_fa_2c_da_8b_e0_14_20_10_1c_8f_f7_3c_8f_96_f" ], [ 7110, "_14_c8_a5_65_c0_96_a7_7c_ad_74_92_87_92_4e_3d_4c_1e_ce_ba_73_81_81_f6_62_fa_28_99_89_b3_4f_32_16_48_8d_f5_37_84_c4_fe_66_ae_6f_d" ], [ 7111, "_14_c8_a5_65_c0_96_a7_7c_ad_74_92_87_92_4e_3d_4c_1e_ce_ba_73_81_81_f6_62_fa_28_99_89_b3_4f_32_16_48_8d_f5_37_84_c4_fe_66_ae_6f_d" ], [ 7456, "oOo0ooO" ], [ 7457, "oOo0ooO" ], [ 7466, "OoOo0O0" ], [ 7467, "OoOo0O0" ], [ 7476, "var OOO0Oo0=n" ], [ 7477, "var OOO0Oo0=n" ], [ 7492, "ew Array(192,59,83,100,60,173,215,23,175,228,142,7,218,7,250,169),OoOOO0O=oOo0ooO[OoOo0O0](/\\\\S{3}/g),o00oo0O=\\\"\\\",OoOOOOO=0;for" ], [ 7493, "ew Array(192,59,83,100,60,173,215,23,175,228,142,7,218,7,250,169),OoOOO0O=oOo0ooO[OoOo0O0](/" ], [ 7587, "S{3}/g),o00oo0O=" ], [ 7607, ",OoOOOOO=0;for(var OoOOOOO=0,oO00oOO=0;OoOOOOO\u003cOoOOO0O.length;OoOOOOO++,oO00oOO++){if(oO00oOO\u003e=OOO0Oo0.length){oO00oOO=0;}o00oo0" ], [ 7845, "(o00oo0O);" ], [ 7846, "(o00oo0O);" ], [ 7867, "match" ], [ 7868, "match" ], [ 8030, "OoooOOO" ], [ 8031, "OoooOOO" ], [ 8040, "o0o0o00" ], [ 8041, "o0o0o00" ], [ 8050, "O0o0OoO" ], [ 8051, "O0o0OoO" ], [ 8060, "OOoOoO0" ], [ 8061, "OOoOoO0" ], [ 8070, "return OoooOOO[Math[O0o0OoO](Math[OOoOoO0]()*o0o0o00)];" ], [ 8071, "return OoooOOO[Math[O0o0OoO](Math[OOoOoO0]()*o0o0o00)];" ], [ 8145, "floo" ], [ 8146, "floo" ], [ 8152, "r" ], [ 8153, "r" ], [ 8156, "rando" ], [ 8157, "rando" ], [ 8164, "m" ], [ 8165, "m" ], [ 8296, "O000o0o" ], [ 8297, "O000o0o" ], [ 8306, "OooOoO0" ], [ 8307, "OooOoO0" ], [ 8316, "return S" ], [ 8317, "return S" ], [ 8327, "tring[OooOoO0](O000o0o);" ], [ 8328, "tring[OooOoO0](O000o0o);" ], [ 8363, "fromCharCode" ], [ 8364, "fromCharCode" ] ], "sz": 8446, "ts": [ { "c": 0.800000011920929, "d": "String.fromCharCode fragment (romChar)", "e": [ "romChar" ], "i": "objectives/execution/interpreter/script/wsh-fragments::from-char-code-fragment-romchar", "l": 1 }, { "a": "T1552.001", "c": 0.8199999928474426, "d": "Regex component marker", "e": [ "match" ], "i": "objectives/credential-access/env/secrets/filtered-access::env-secret-filter-infra--rx-18", "l": 1 }, { "c": 0.8999999761581421, "d": "Regex component marker", "e": [ "from" ], "i": "micro-behaviors/process/interpreter/vm::vm-runInNewContext--rx-9", "l": 1 }, { "c": 1.0, "d": "JavaScript length property", "e": [ "length" ], "i": "metadata/lang/scripted::length-prop", "l": 1 }, { "c": 0.699999988079071, "d": "Function constructor keyword", "e": [ "Function" ], "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "l": 2 }, { "c": 1.0, "d": "JavaScript file basename", "e": [ "20170412_62d5ae8d6f8b6891a829d9f2a58d3ab3.js" ], "i": "metadata/lang/encoded/unicode-escape::javascript-or-dll-basename", "l": 2 }, { "a": "T1552.001", "c": 0.8199999928474426, "d": "Regex component marker", "e": [ "match" ], "i": "objectives/credential-access/env/secrets/filtered-access::env-secret-filter-data--rx-25", "l": 1 }, { "a": "T1552.001", "c": 0.8199999928474426, "d": "Regex component marker", "e": [ "match" ], "i": "objectives/credential-access/env/secrets/filtered-access::env-secret-filter-core--rx-8", "l": 1 }, { "c": 1.0, "d": "fromCharCode keyword", "e": [ "fromCharCode" ], "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-fromcharcode", "l": 2 }, { "c": 1.0, "d": "substr with length 2", "e": [ "substr(1,2)" ], "i": "micro-behaviors/data/encode/hex::substr-2", "l": 2 }, { "a": "T1195.002", "c": 1.0, "d": "Loop construct (for/while)", "e": [ "for(" ], "i": "objectives/supply-chain/hidden-payload/staging::loop-construct", "l": 1 }, { "c": 0.949999988079071, "d": "eval/Function call inside flatted-shaped file", "e": [ "new Function(" ], "i": "well-known/lib/flatted::flatted-tamper-eval", "l": 1 }, { "c": 0.30000001192092896, "d": "for loop (content)", "e": [ ";for(" ], "i": "micro-behaviors/data/control-flow/analysis::for-loop-content", "l": 2 }, { "c": 1.0, "d": "Infinite loop structure (e.g. for(;;) or while(1))", "e": [ "while(true)" ], "i": "micro-behaviors/data/control-flow/loop::infinite-loop-header", "l": 2 }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 107.00" ], "i": "metadata/file/text/metrics::file-has-30-plus-lines", "l": 1 }, { "a": "T1027.002", "c": 0.6499999761581421, "d": "Function access via bracket notation", "e": [ "oOo0ooO[OoOo0O0](" ], "i": "objectives/execution/interpreter/eval/dynamic::bracket-function-access", "l": 3 }, { "c": 1.0, "d": "Substring call", "e": [ "substr(" ], "i": "micro-behaviors/data/encode/xor::js-substring", "l": 2 }, { "a": "T1036.008", "c": 0.949999988079071, "d": "Filename has .js extension", "e": [ "20170412_62d5ae8d6f8b6891a829d9f2a58d3ab3.js" ], "i": "objectives/evasion/masquerade/extension/shebang::js-extension-name", "l": 1, "m": "F0008" }, { "c": 0.8999999761581421, "d": "Reversed eval keyword (lave)", "e": [ "lave" ], "i": "objectives/anti-static/obfuscation/string/conceal::js-reversed-eval", "l": 4 }, { "c": 0.8999999761581421, "d": "Regex component marker", "e": [ "from" ], "i": "micro-behaviors/process/interpreter/vm::vm-runInContext--rx-4", "l": 1 }, { "c": 0.800000011920929, "d": "String.fromCharCode fragment (CharCode)", "e": [ "CharCode" ], "i": "objectives/execution/interpreter/script/wsh-fragments::from-char-code-fragment-charcode", "l": 1 }, { "c": 1.0, "d": "Loop structure", "e": [ "for(" ], "i": "micro-behaviors/data/encode/xor::js-loop", "l": 2 }, { "c": 0.699999988079071, "d": "JavaScript new Function constructor", "e": [ "new Function(" ], "i": "micro-behaviors/process/interpreter/eval::js-new-function-constructor", "l": 3 }, { "c": 1.0, "d": "XOR bitwise operator in expression", "e": [ "O0ooO00^ooOoOOO" ], "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-xor", "l": 2 }, { "c": 0.699999988079071, "d": "JavaScript massive string concatenation chain", "e": [ "=\"_a6_4e_3d_07_48_c4_b8_79_8f_83_eb_73_9e_66_8e_c8_86_49_3c_09_69_df_bb_3f_da_96_e2_2b_fa_64_9b_c5_ac_59_32_07_57_84_ac_63_dd_9d" ], "i": "micro-behaviors/data/encode/skip-step::js-concat-chain", "l": 3 }, { "a": "T1195.002", "c": 0.9700000286102295, "d": "Empty catch hides loader errors", "e": [ "catch(er)\r\n\t{\r\n\t}" ], "i": "objectives/supply-chain/trojanized/library/hidden-dep::swallowed-loader-errors", "l": 1 }, { "a": "T1027", "c": 0.6000000238418579, "d": "No comments in code", "e": [ "comments.total = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::no-comments", "l": 1, "m": "B0032" }, { "a": "T1195.002", "c": 0.699999988079071, "d": "Top-level try/catch empty handler", "e": [ "catch(er)\r\n\t{\r\n\t}" ], "i": "objectives/supply-chain/install-hook/dropper/obfuscation::top-level-try-catch-empty", "l": 1, "m": "B0024" }, { "c": 1.0, "d": "Generic Function constructor usage", "e": [ "new Function(\"" ], "i": "objectives/anti-static/obfuscation/eval/require::function-constructor", "l": 4 }, { "a": "T1027", "d": "new Function constructor", "e": [ "new Function(\"" ], "i": "objectives/anti-static/obfuscation/string/encoding::js-new-function", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "JavaScript comma operator abuse for obfuscation (e.g.,", "e": [ "(192,59,83,100,60,173,215,23,175,228,142,7,218,7,250,169)" ], "i": "objectives/anti-static/obfuscation/syntax::js-comma-operator-abuse", "l": 4, "m": "B0032" }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.04" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Immediate new Function invocation pattern", "e": [ "Function" ], "i": "micro-behaviors/data/source/dynamic/eval::new-function-iife", "l": 3, "m": "B0032" }, { "c": 1.0, "d": "Detects retry loop wrapping try-catch (while loop)", "e": [ "while(true){\r\n\t\ttry\r\n\t\t{" ], "i": "objectives/anti-static/obfuscation/control-flow/retry::retry-loop-while", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Massive string concatenation operations", "e": [ "+\r\n\t\"_12_c2_a7_72_c1_cc_ac_40_9f_53_d8_85_e0_4e_21_08_10_8d_b1_76_c3_97_eb_2e_e1_7f_97_c5_88_4f_27_14_12_de_b2_79_cb_cc_a7_3c_b3" ], "i": "objectives/anti-static/obfuscation/string/array::massive-string-concatenation", "l": 4, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Massive string concatenation operations", "e": [ "+\r\n\t\"_12_c2_a7_72_c1_cc_ac_40_9f_53_d8_85_e0_4e_21_08_10_8d_b1_76_c3_97_eb_2e_e1_7f_97_c5_88_4f_27_14_12_de_b2_79_cb_cc_a7_3c_b3" ], "i": "objectives/anti-static/obfuscation/string/array::suspicious-massive-string-concatenation", "l": 4, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Minified/compressed code (multiple indicators)", "e": [ "comments.total = 0.00", "text.whitespace_ratio = 0.04" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Immediate invocation of new Function", "e": [ "Function" ], "i": "objectives/anti-static/obfuscation/eval/function::suspicious-new-function-iife", "l": 4, "m": "B0032" } ], "sha": "b4ca13bad62dc95424216a0ea3825bc66174b7373b7a788ad844decf3f7f9d9c", "path": "/data/samples/bad/datasets/javascript-malware-collection/2017/20170412/20170412_62d5ae8d6f8b6891a829d9f2a58d3ab3.js", "type": "javascript" } ], "tv": "7f26a" } }