{
  "ml": {
    "v": "5",
    "fs": [
      {
        "id": 0,
        "prob": 1.0,
        "class": 2,
        "threshold": 1.0
      }
    ],
    "prob": 1.0,
    "class": 2,
    "level": 3,
    "models": [
      {
        "m": "az",
        "prob": 0.8911782,
        "class": 0
      },
      {
        "m": "az/vbs",
        "prob": 1.0,
        "class": 2
      }
    ],
    "version": "v17.17",
    "threshold": 1.0,
    "analyzed_at": "2026-05-30T17:55:04Z"
  },
  "path": "c71a4c9abd322516b8cde29f829b35d1c3bdc86504b9632e864c0d4f592eaaac.vbe",
  "raw": {
    "v": "5",
    "fs": [
      {
        "f": "O(As)Md",
        "x": 36,
        "ff": {
          "m": {
            "file": {
              "size": 898359.0,
              "entropy": 5.05,
              "size_bytes": 898359.0
            },
            "text": {
              "tab_count": 55.0,
              "digit_ratio": 0.23,
              "space_count": 19008.0,
              "total_lines": 1.0,
              "char_entropy": 5.05,
              "unique_chars": 101.0,
              "escape_density": 0.0,
              "lines_over_200": 1.0,
              "lines_over_500": 1.0,
              "avg_line_length": 898359.0,
              "high_byte_ratio": 0.0,
              "lines_over_1000": 1.0,
              "max_line_length": 898359.0,
              "non_ascii_ratio": 0.0,
              "null_byte_count": 1.0,
              "last_line_length": 898359.0,
              "long_token_count": 1854.0,
              "whitespace_ratio": 0.02,
              "most_common_ratio": 0.08,
              "octal_escape_count": 1.0,
              "non_printable_ratio": 0.02,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 2.0,
              "most_common_char_codepoint": 50.0
            }
          },
          "s": [
            [
              630,
              "u8",
              "OsKVN"
            ],
            [
              1187,
              "xor",
              "YAfrtz5W5En?bG0Y1nL;bJ4Uv/0GbV"
            ],
            [
              1272,
              "u8",
              "LkkYn.:l/V9"
            ],
            [
              1569,
              "u8",
              "PHnXY@#@\u0026~,P~@#@\u0026~,P~EPA//mX"
            ],
            [
              1933,
              "u8",
              "DXvJUnV"
            ],
            [
              2158,
              "xor",
              "p\u0026cxkqq70Ij7DwwErL"
            ],
            [
              2161,
              "u8",
              "dwmm+,Uv+XkkYnPcd"
            ],
            [
              2195,
              "u8",
              "xb@#@\u0026~,P~,P,Pso9\u0026!P{PHE^V@#@\u0026,PP,3x9Pq6@#@\u0026P,P,rUP3.MW.PVGKKPT@#@\u00262x[~wEUmDrKx@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026@#@\u0026q]q;r@#@\u00265bM\u0026t@#@\u00269AI(i@#"
            ],
            [
              2639,
              "u8",
              "sFT G*T{yvs"
            ],
            [
              2646,
              "xor",
              "20?:6/bc2o"
            ],
            [
              2679,
              "u8",
              "RvsFfGW !y9*v+sF"
            ],
            [
              2791,
              "u8",
              "PPIr5}PLPVpIU2~PLPEwMJ~,js:pMvF6"
            ],
            [
              3457,
              "u8",
              "2vc+fFWv\u0026W*+\u0026Z\u0026y\u0026*c{fWcX\u0026y*G2%f"
            ],
            [
              3460,
              "xor",
              "7zZKj:K67:F:e:6"
            ],
            [
              3557,
              "u8",
              "fW\u0026+\u0026W*F\u002602 2 cF\u0026W*G2%f 2 *{2G\u0026+f*Wv\u0026Of"
            ],
            [
              3747,
              "xor",
              ":czK:7:Fze:7K:."
            ],
            [
              3851,
              "xor",
              "c6o%oboco2/"
            ],
            [
              3981,
              "u8",
              "\u00262\u0026l\u0026fcXf8cf\u0026lf*2\u0026f*2 c*fR\u0026*\u0026Ffy\u0026T2 2cc2\u0026Zf 2 fG2cf+2J#*b@#@\u0026PP,~~q\\Kz5 InLqDrY"
            ],
            [
              6282,
              "u8",
              "f;,/18! ;f2+2 Rq3bW\u0026w fvT0G*"
            ],
            [
              6426,
              "u8",
              "/2F\u0026~c+Ao38A)s;9cAA0TwvF*$8f$!O{FZ/G\u0026y%cwcw$ yF1ZZ%{oyZc~$2Ffs+o1FlsR\u0026XGq)AAoFZ*\u0026w,)/2GA90l%0f~$+%{+ZA2AF*G) F"
            ],
            [
              6538,
              "u8",
              "OA{)2AZO+bw\u0026,+f$AZZycXf${Z%$fW)ZA2ofRcsf3z\u00261\u0026F$F $O*G%Awb~3!zsq\u0026zv1/zfAz$2Wf%2"
            ],
            [
              6618,
              "u8",
              "q%8*yG1\u0026X92 1!Gq,+c1/y GXX8fT\u00268Xw,o+ZRcf+\u0026+1G;,f!82*+8Zf89 lcs~f028bl!$\u00260oZf0\u002680 ~,*{Z!v+)~v9Z83OA1lc+F%ZswTZZb/vlv0)G2fZ9 RbAl)"
            ],
            [
              7233,
              "xor",
              "*3cqx/3opc0oxbbi+"
            ],
            [
              7430,
              "u8",
              "ZRbqcZ%q1W22z)\u0026OA R0q*G2;c1f/0O\u0026/\u0026w+FFZ*9F*s))Ov1blqObXFsZ2bGs21AO*)%AZo3Af FoZ;%vF{fZ8,~,1FoqWGTFWTc+v*1F%!+9~GqvWqZ2)~,FZ%lfW"
            ],
            [
              7607,
              "u8",
              "sG/RFXZsW\u0026b;ZF0vGvXb2cTX+c,yq\u0026FAFR0+*y*z%)!q{WG{ G/bWAqqlc*o{WFoGG"
            ],
            [
              7903,
              "xor",
              "/\u0026hpyrom/r\u0026i"
            ],
            [
              7956,
              "u8",
              "ZO%G2fo\u0026wF;f0fo"
            ],
            [
              7991,
              "u8",
              "%Z{Oc0R2Z v8*F"
            ],
            [
              8039,
              "u8",
              "Z8)GWf9qWbcX0l oZzfR*{AcRcG~%;"
            ],
            [
              8070,
              "u8",
              "Zw /c;*3+y2fG1FFsb23)2l\u0026ZAf*3f~ 0\u0026l{fy )/W*Z9*2%3GRfR )z!2ss~fO+cz f%Zfoq8,\u0026R1FRf%l1f +!Gb1so0w23,AfsOGX18%sXTAZ+A89Z*$zcZ %AbZT"
            ],
            [
              8314,
              "u8",
              "WAo2FlGc2 Z9vZ!"
            ],
            [
              8330,
              "u8",
              "22f/08 s2"
            ],
            [
              8481,
              "u8",
              "2ToyG9 G0F22ofW\u00262"
            ],
            [
              8695,
              "u8",
              ",2$ZF1Z2ZG Fby+!OATsz!0/ysbz$bzFbR/"
            ],
            [
              8731,
              "u8",
              "2l y qcT+Zb0%z"
            ],
            [
              8797,
              "xor",
              "*rlmo/mr?2h"
            ],
            [
              9047,
              "xor",
              ":786o%+rl2+8\u0026qi6"
            ],
            [
              9182,
              "xor",
              "3o/hb\u0026b?yob6"
            ],
            [
              9194,
              "u8",
              "FW2{oZb,1o~%1cG/8so~,Osf; yX*l $A;f+0FfFz"
            ],
            [
              9435,
              "u8",
              "cRZ+ *A90~cXcA1bzf/Xlf\u0026$*zs$!zo;v+WGA*s8GwqZO*0f;29fOs\u0026ZT!Wv\u00262T/\u0026ZvFvo!q)A*of2f Zs{qR\u0026b{$AvoAFo;f"
            ],
            [
              9455,
              "xor",
              "%/omc3:mh3\u0026r?b"
            ],
            [
              9533,
              "u8",
              "2 Wf ~Zl{sWb{Z8v1*;ZGA9%GFZW{qZR,W +\u00260X+f{bGTAZc9qy*bq*Gb{,2TW X+bZssW!20b+%{,Wvo$;,Fyo*R\u0026fy$0!w Fvqs+3ls/vW$s8,$"
            ],
            [
              9981,
              "u8",
              "OZAvAFfz1G+fX Zvf1AZ,w1sFAfWqo,;Gwv$c/0+v"
            ],
            [
              10023,
              "u8",
              "GO*GR%$T8Fv/TAv+by)2,1w%wv,lsR"
            ],
            [
              10053,
              "xor",
              "6?rec:re2xq?"
            ],
            [
              10701,
              "xor",
              "680o*bbl7?l"
            ],
            [
              10706,
              "xor",
              "779bj9F%c679[~z9g6f:8[fm='.8mF]j/m.=8F[,b]6b\u003c':.S.'cj[:%9b"
            ],
            [
              11242,
              "u8",
              "Z2bT9~bAqfG,f\u0026O3O2{l2;,*WcF9cys* ~!T);cv;0b2c yf$G2vWGfs/TZ {b2T!Gf+q2 GT*R*qAR{8"
            ],
            [
              11379,
              "u8",
              "o~F*%z{R\u0026XG,2c ZbR0s2c1Zw**+OFbwqfZA OX9vyvFc9f3/+,{ZAXFR!ooWbs+)ZFTsWXwb)2,O!%R\u0026R*!y q\u0026Rv9"
            ],
            [
              11553,
              "u8",
              "c0{8Ff2Z$sRs"
            ],
            [
              11636,
              "u8",
              "A 9v;TFGfFv+*cRGz)AG2"
            ],
            [
              11699,
              "u8",
              "Xyb$bl$~Ff;\u0026yb,W,OofWs3bFvX3lvARf\u0026zF!Fo9,WGGsf\u0026oq8Z02wqG~!T3G,s3*ls/%ZqG*o~Zl,G;sFf%Ovq\u0026R2o3Ab2~q\u0026GF!Go+!Rs; XZ$*R,{F+1c2b{3Rb\u0026o"
            ],
            [
              11879,
              "u8",
              "*z)FAFTqA\u0026 {/G,f,Z+Zv+~GOfb2fzfF8A{ZWv/1l*bA1bw!GW"
            ],
            [
              12004,
              "u8",
              "W\u00263bR$FZ%3)lvF1TR T w"
            ],
            [
              12199,
              "u8",
              "Zy+v8v{oZFG0*A,/vFf;v)Asw2czc2X GA+2Oso)y,%wT22 22fT Gbzc1\u00260)w*$GR"
            ],
            [
              12276,
              "u8",
              "FsqZ2XGGo8v+ clvFof+c3*;%*XRcZR{AwbfA9ocWbAs"
            ],
            [
              12330,
              "u8",
              "\u00262A1+RFc)q2*0\u0026Aql*T;\u0026Fs!F2~o%2%fGAb01Obf~fZ;\u0026fl39,zZOb*29*~vX!lfvZ!3$wZ\u00261)l%o,89W*/lcO,v2\u0026loF2!f%8Z1TZ! l0cA %F/qZFvRfqsTo~%+b+1"
            ],
            [
              12580,
              "u8",
              "Rs/\u0026Oq W*33O!%oXGf/F;TF,)zFzcszsO9Gzc"
            ],
            [
              13025,
              "u8",
              "s09F!fsz9%AZ39;GZ91~,1F83zA"
            ],
            [
              13348,
              "u8",
              "R*32~q\u0026~sff+v*T/ZFo28o2sf~\u00268%vR A1b;s"
            ],
            [
              13349,
              "xor",
              "cz{78o7://b?c"
            ],
            [
              13431,
              "u8",
              "FR98Zowc;FGF\u0026l) ;!3 yv*X~,GyXsA*2W0/GFvO!f2qTAFfcF"
            ],
            [
              13615,
              "u8",
              "A v{$;%**w{8Z0+cG%s;2w"
            ],
            [
              13914,
              "u8",
              "9vzA~G92f0~soGZ1fWsX1Zf o/A!)fF"
            ],
            [
              14135,
              "u8",
              "vGq2f{AF8f*G!G/2z*q 8 9q8Zs2$AR!2AX{vz%W!Xcq182"
            ],
            [
              14183,
              "u8",
              "%A9FlA0/;b,X/Rf3sw+22T~\u0026+,fA*+{s+\u0026ff8GX1FZfZ/Zyb*zqovG*2 qvT+2FXFy*!ws$flvf)1R,)GA/wZ"
            ],
            [
              14521,
              "xor",
              "b7/x3o7*/0"
            ],
            [
              14804,
              "u8",
              "2wsAGf+G+F~sq 0fGAXvWfvRcqfw%c9TW*{s;XZco~ ZsbR2O{%~,0*8s39ZZ +"
            ],
            [
              14853,
              "xor",
              "2l7eycq:zp"
            ],
            [
              14893,
              "xor",
              "fmb:c\u002627e6"
            ],
            [
              15046,
              "u8",
              "%~,)GOA+122cRT,zvG2f)AWvy!0,0*;f+fW3*+F$oy2*+fz*0%RT2FqycZ 2R\u0026WoZz,*fzGo)Acf8+2;vfz1T2;v; 9%*9Fv)syXbZb+*G*%TqAvT2W/+v02sR*FR!+q"
            ],
            [
              15069,
              "xor",
              "?0hyeycr/b/"
            ],
            [
              15268,
              "xor",
              "7ec+%ye3hbm"
            ],
            [
              15316,
              "u8",
              "G8cb+)9 GbWA"
            ],
            [
              15430,
              "u8",
              "%~v*FG%3f+\u0026G~qfGZFZT+v8v~,3AXT+Z)A;XvOGX3~vb//~ X,WqW!0z,AA,l!W12FF$fG2o)8%vA$Gy%b~1"
            ],
            [
              15534,
              "u8",
              "{lc,)qG*9vZ+F*qRc8f,G,y*vAATs8GT98%2R{ A2fF+oFw z\u0026)fTqys{AOf%~vq/Z**9{+s/sW$8G/ZvO%cWsy0*A*f%G\u0026o98 ,;T2W\u0026%~+1AW*2*{ZX*F*)fO"
            ],
            [
              15662,
              "u8",
              "oGGvT1AZ0sWfA\u0026/2,+\u0026Gy\u0026z9bO\u00263ZRc"
            ],
            [
              15694,
              "u8",
              "fzFsGqfzb!w3$v8Fz 3s*oz*+ZOfFWs1)+*\u00269fR23GF$8GfzszFFwA2*cWAfsyv0"
            ],
            [
              16097,
              "u8",
              "Gf1Gf3Fz{G2Aof8vf0{w23sF/ObTW,ZZc8Z;0 Wb3AFG*9+F!OfvFfvG$$,+fyG/GX"
            ],
            [
              16243,
              "u8",
              "/2Z{sy0~\u002692GRZGlGF+s~F32Av)+W vAXA8ffy*$sz2wZ*co$z!$*OTAlF$)F2!3X+\u0026XAlfw,f8*yb%2AF9%ZZ3cwFT);Z!lTv2cF8/"
            ],
            [
              16359,
              "u8",
              "2RTZG%T"
            ],
            [
              16463,
              "u8",
              "Z**yXv2%Zyf+AGFZF/Zo"
            ],
            [
              16841,
              "xor",
              "p?qi26%iir6"
            ],
            [
              16975,
              "u8",
              "Wb*~+%w ,W*9\u0026Zs821A))wGoF;0 l 11AZ29{8,0%~+y\u0026qA%~%sOAG{szv$%Off0yFsy1,2GvF)+ ;\u00268ATb*98202w9f8s"
            ],
            [
              17070,
              "u8",
              "*Fb%X{yvX2w/Wb"
            ],
            [
              17237,
              "xor",
              "bZz'zczFo$"
            ],
            [
              17243,
              "u8",
              "fZs8coG93As"
            ],
            [
              17257,
              "xor",
              "zl7ixc3e/8m"
            ],
            [
              17348,
              "xor",
              "p6:$97zeF6g."
            ],
            [
              17755,
              "u8",
              ",FG;vo!q0A2*Gwo\u00262b+q+Z%f$R,1GyXGA3wfy!ZAGOo*+fqZ;\u0026qqG GG*,G \u0026OfT\u0026z y%$,o"
            ],
            [
              17911,
              "u8",
              "*;{R2/RfA2!lG+3Zwvf\u0026lZ*oO,%;o!A!vZT1\u0026+2lf/*o1~*$ O{AZG1/OvGo{AA/bz9F\u00260R\u0026F%fFsW)2+ )G2v{+OG2yT*z!%z/0 ;vWZ/!q+zG/vZ"
            ],
            [
              18004,
              "xor",
              "c3hl3fyir?"
            ],
            [
              18292,
              "u8",
              "y\u0026+ZW*yb)lf8G2W,loslc/ 8Z"
            ],
            [
              18728,
              "xor",
              "02+be/\u0026qhhz8"
            ],
            [
              19279,
              "u8",
              "GG2F)FO2,FT*GW2ZA0bqT8,1FZ1 z!)fz,v"
            ],
            [
              19315,
              "u8",
              "+FG0%+0;cXyZz%vO,8*bRG$*~\u0026{*yv,G1v8sZAqTAw*Gf$A13ZF*2Gfc;c$q~GF"
            ],
            [
              19483,
              "u8",
              "!l z*1Gq/GF1*F*\u0026WAoTz%cT92\u0026obW9W,+~ 8*\u0026F2AXsGA9sls$qR,ZZ{!Rb,z09FyAA +c1$2!$28**w2/fA bq+~F*FwTRZ/Wc+%!wAF/Fz**%W!*9G,byo,OAsy/o"
            ],
            [
              19767,
              "u8",
              "2W02*X~GW,s~,z+flc9!zFoTy A~fZO!AZf0v8 G%9bo0+b)vwo2G /0yZZf+yF/,WowG0z%~bZ+fZ9cW,o FfX0Zv,~TvGfbG*$fOsls3vqTRsqvw3fAf)+GfZTf~!1"
            ],
            [
              19776,
              "xor",
              "e:7e3b/%*ph3"
            ],
            [
              20195,
              "u8",
              "3W%f\u0026O+,Zc1Xys,$*zGf,~/2vXZ 8\u0026A;v8o*;b1cFvq0zZ2w"
            ],
            [
              20398,
              "u8",
              "3wvG0olA0 y$O*qFAZ!!l%y1!R\u0026f2Gv09FbFW+*lF l3*GRcy,fc/9~2fv8*,Wco/ysG01w%TZ~)GF9+!Zcf8Fy1Gz,"
            ],
            [
              20651,
              "xor",
              "rlbbbe+xp%"
            ],
            [
              20846,
              "u8",
              "oWGZooR%XfwqW,0w,+\u0026 w%A9GR!/GA%T02%sAqGF \u0026Rq9!l*R292XfO*3cW"
            ],
            [
              21007,
              "u8",
              "Rs 8T\u0026ZsGw/f!z\u0026Ws/F3)l,+2z/bAG1{Osc3/y*9A+0ysT~cy%fwGzT!y 9vAF9fA*c8TcG,bA$X!;v2v{vf)z,f%;Ts8v3*AvZ99~f9c2)R*12s2%cG!l0ZZ2X!2voT"
            ],
            [
              21287,
              "u8",
              "*~q2y%)/lFb13z,q y/~!fzb8cslvzTbl\u0026q%y!X9FFZZ1cy!\u0026A)/*wf+b3*99z ob~ff8F{3WfF$fR2{sF9wf0~GWf,z,w9FOs*ZAG11+sAFX,+F Z{)\u00262fW2o%10;ZT"
            ],
            [
              21297,
              "xor",
              "+xz3e8i0f7h/3+q*:%?3"
            ],
            [
              21531,
              "u8",
              "~,AsqZ1Xy,)%z{%2Z+3~Zb){z T2A3F2*lc2ccwcW/fOG3GAZ3)Rs\u0026W0G~G\u0026Z19\u0026+,wGTf1o+Zo\u0026~)sZFT{Z%Zq1F 3ZAX~ {Rsy%cRZO92yFTZ~2)0A%F8oFOGbl*o,"
            ],
            [
              22042,
              "xor",
              "fo7:0?m+/8b"
            ],
            [
              23012,
              "u8",
              "FA12~)%zfqXGcv+fZ\u0026/s8TWb1Ac2b*~bF+ZlG+,R*)Tlbf2Xb+GvA))vF2Wvf f"
            ],
            [
              23101,
              "xor",
              "q*7l+qe3\u0026hbh6"
            ],
            [
              23183,
              "u8",
              "+%sR{fZ,v2{fbw%R2+!q32Gf\u0026GfAGf3)8 b*02%$FOfOcq+b~A*RZyT*Af0%~!1fO  z0 wbfAf)cG,Z2$c{fwv1221,RF{9yFv+)Z*+*l0lb/+AGc OcW0FFA$ZA\u00261$"
            ],
            [
              23329,
              "u8",
              "\u0026{ql2$fyf*Rsf3lFv1q;\u0026*c80~%+W,zc,Zvyq%8!9\u0026Rv+*wG,F$syFfG0{ZZAOGff)9w\u00263v2T2O%/1+cf"
            ],
            [
              23345,
              "xor",
              "?x8roc*qy7lb"
            ],
            [
              23411,
              "u8",
              "f2b)cAf+*/8v+%sRZ2q*~*/FlAo*w ,A$,A \u0026+$fcRbG,3AqTAb+ WX%G2Tfz,vo+~G*fz"
            ],
            [
              23452,
              "xor",
              "N~[0/]mH]~7\u003cKD9[.Hzf0js7b[6zfcej5N0kz.S\u003cF/Fk96[F6gcK6z.D~7~F'-/.f\u003ck0g6%3f~7=Sm=7[s3bzz%5b"
            ],
            [
              23503,
              "u8",
              "W*f2Xb+bZ;132z w,{*9/zb+!Oq!+Go/~ff9)~c$ l*Oc$WbAc\u0026R2G{%8%+F~cq1Gb\u0026Oo yf!833AGF~2ff)*Gc9,F0!yZ*+lFfqoR,0bFXy 1GZy22GvG"
            ],
            [
              23622,
              "u8",
              "ZwsfcA {$w,v29%W 2W+*vWvFcTsTX8*/Gyo,w\u00263$ysA/{Rs{GA18ffW*OG!A!y0FyGfAZ\u0026+3ZFcO1 l cFXo*AA8s0b$9yc/,8"
            ],
            [
              23710,
              "xor",
              "q:y+mp0*feq6"
            ],
            [
              23722,
              "u8",
              "Z;c99zAcXT;f*bzXOF3R\u0026Ff!l28+G;A1\u0026~A9T~\u0026sWf*GF*w$o!Z22F/ /{Of0\u0026O9b~\u0026$$zfF9XAs9*A0~c1y!~2G+G;+A; $cF%{1zZ\u0026lTF2f lf{Z8ZO\u0026fv3X2sq!F{"
            ],
            [
              23941,
              "xor",
              "mi%cy/r?22"
            ],
            [
              24202,
              "u8",
              "FG2qqO*\u0026R9AzffGo9AGs8,ocToO 9fl9ZWF+0zFGo1W qAA"
            ],
            [
              24532,
              "u8",
              "Gz2sG9+ 8sF*X\u00263"
            ],
            [
              24593,
              "xor",
              "i7boq+i7bp+"
            ],
            [
              24675,
              "u8",
              "9FfqGy3A;!1+zf200Rs/,+Xl*9G!ZsbRfz{s;c*AZ!$+G,s2$vyF*~+)GA\u0026WFXb0+OG)\u0026O$cl,$$z\u0026s+)A%fbAXZZXGcAA*Ovy0%OZ/b2bq1OscwofAfv8T0sR y*oF9"
            ],
            [
              24864,
              "xor",
              "m0/5bo60'D"
            ],
            [
              24875,
              "xor",
              "fF5zezz5z$0m"
            ],
            [
              24993,
              "u8",
              "s{*y TGA9blb0fl!A+oAZ+ZF)WfT22G!!AFZTvGZ1ZOsoX8v,A"
            ],
            [
              25114,
              "u8",
              "ov2!y!3A9XOA+G8"
            ],
            [
              25130,
              "u8",
              "v~Zq$~ ,*f8%XbZ3AF0zFW2c;fF$*Gc{fWv1qzbsR3FWcv+{9\u00262vz,$%1qRFT%O*vwsTX+c%))8Gos8TlG/~!2!cO!lXFR*"
            ],
            [
              25224,
              "xor",
              "c6i%ifc7e/7p:0+"
            ],
            [
              25226,
              "u8",
              "l /*~,f~9sybFy+Xb8ZR,Xs"
            ],
            [
              25251,
              "u8",
              "qF*{ O/Ayv*$A*G3oW2T,~3Rf9wZ~f*w%l3!ws9\u00262F118s +922FA;f$fzvz,T2X)l\u0026+G+)slvXqFF**qzb"
            ],
            [
              25364,
              "u8",
              "F~%v813\u0026OcG%XGX92 1vy{G;\u0026+1yss*o;!3%80;%+y!GZ!ZAG9A~sX\u00262G1qFFFR)by2cwTq!ZZO!*A)9wFfF~0,W,X3AvfTX;bfbZ1~F{Z%G2!R!;/G;Z9,Wb*{l22;/"
            ],
            [
              25578,
              "u8",
              "%WA1qRG,{oO,*s~fFsX8,8ZFO2+TG82+ZF\u0026X3~s O*%O%c8T$AAf+29FooAc"
            ],
            [
              25712,
              "xor",
              "?lp\u00263oylq\u0026"
            ],
            [
              25779,
              "u8",
              "o8!XFGf2so8bAAvws89vzv9bysq*Z!vA9AR\u0026,;/+vRG~f"
            ],
            [
              25889,
              "u8",
              "Z)1AvTb2$ 2!f$yf!f3FG$bFq~ 3+22 Fy,l9f8F3 +2*/w!*AfszZ%R/X!zZls1s{)Z\u0026o A{!OZ"
            ],
            [
              25976,
              "xor",
              "b2q+/q*rei7/"
            ],
            [
              26359,
              "u8",
              "22oy\u0026o2!2\u0026b;2~o\u0026yvfZG 3TWfcG3vwZ%~XTAlvAA+,/3zf"
            ],
            [
              26443,
              "xor",
              "bc/6q*h7cob"
            ],
            [
              26554,
              "u8",
              "A2*8*lcfWGA1Zy%"
            ],
            [
              26674,
              "xor",
              "f6ri6l%f0/"
            ],
            [
              26851,
              "u8",
              "/Wv$sW{bAGo*+Z*3ol21fw*+s)8AO\u0026,Ocz*sG2*AAA1T;F,2Xslc2;)"
            ],
            [
              27192,
              "xor",
              "3cqi2r?rohb/"
            ],
            [
              27274,
              "u8",
              "\u0026wv/$Ovbz*%GFGW+"
            ],
            [
              27805,
              "xor",
              "oqo6h6fbey"
            ],
            [
              27831,
              "u8",
              "GzTZ2/zsw,*+GwqcR2+vAbo)~!Fz"
            ],
            [
              27860,
              "u8",
              ",AF 8TTAy,+s*v+fWvf\u0026O+bw q98*%/XO\u00261,Oq8*3GFZfZ8 R)GAsT\u0026Os1qzbbz+flcsW"
            ],
            [
              28256,
              "xor",
              "pipx7?p*7p+%o\u0026bb"
            ],
            [
              28378,
              "u8",
              "TcA Rc"
            ],
            [
              28462,
              "u8",
              "oGsv*0Os*\u0026Z0OvX;\u0026OsclcGXAAsTvyZ0XA2\u0026G*Flb A"
            ],
            [
              28605,
              "u8",
              "O2FA,yv;0\u00262\u0026*%w2*0Wc2l+vOAcA91\u0026RZZFX\u0026/{ys1A;*s;2o3O%f3{Zv1!+TwA*Ac8*!G,w$vG\u0026"
            ],
            [
              28699,
              "u8",
              "ZyFw20b33GZ"
            ],
            [
              28711,
              "u8",
              ",GTFlsfTR\u0026!o*ZFTFy"
            ],
            [
              28934,
              "u8",
              "GZfovyZ+TAffOffGs,8{*vOZFso!X1ZZ/cZ1!Zf0)wFA+1;s/2RfAZ/y\u0026R2fw2A/,Rb0vO\u00261$F2AA3s;!bW$"
            ],
            [
              29161,
              "xor",
              "/hqo2cq::fy%ib"
            ],
            [
              29197,
              "xor",
              "m%No9S,jk0"
            ],
            [
              29284,
              "u8",
              "lG+2R+,G%foObv$$Rc)%zTRbXybwbc+!w$vwb*AWvq+wA\u0026AXfAf2O$"
            ],
            [
              29373,
              "u8",
              "WvO GlFF*%yZf2ysT"
            ],
            [
              29404,
              "xor",
              "3o7hm:mp7+mo7y:"
            ],
            [
              29420,
              "xor",
              "cyx%i?cy7i6:q/"
            ],
            [
              29431,
              "u8",
              "s8fFGfwZO22l,ZqGzboAW29f8  +ocw!A;0{ZZ,;s3Z+ql%ob8f2+,o9+2\u0026$0wvTvw{8vqRZ;A,O\u0026l12; 9ZwGf/wA\u0026l3,R*vA)qb2Zy!o */As"
            ],
            [
              29543,
              "u8",
              "GF)vW /38\u0026%q3;cfFy{OF*GAl,fzfzofFZT\u0026Zf{qO,F~),Ffsl"
            ],
            [
              29548,
              "xor",
              "ifzqol8zr*/"
            ],
            [
              29594,
              "u8",
              "Xvy w%*fX{lb0bZ)GFfo3A,G*1Z*os8)Gf/Fb;GG+ O9f~,XvwA+qZ!\u0026RfAZGc~+$c2!Z\u00261sf"
            ],
            [
              29966,
              "u8",
              "+8%c2+Zy,*OfX\u0026O,;c3F3fR%3v;fvZsq)~!c/TG%/%W9wv*FGWbc+*y{s;20!F ${+v%F0A2%,;*o!+Zw\u0026$Z+XG {bFfGWFX9ycAoqw!+A81lfoR%Gb!y2W9f8c+*y*"
            ],
            [
              29970,
              "xor",
              ".7Fe06SzD:S0'"
            ],
            [
              30178,
              "xor",
              ",/ez8:$H9fZ-3Z"
            ],
            [
              30821,
              "xor",
              "+2o%xib+mx"
            ],
            [
              30921,
              "xor",
              "f:bh8f7c/%/i7"
            ],
            [
              30945,
              "u8",
              "F9f2ZXfFX OA3/;v%1"
            ],
            [
              31098,
              "u8",
              "OA1;v8\u0026*RFF*cRFqsWbo)yvsl"
            ],
            [
              31124,
              "u8",
              "bZ\u0026\u0026w)/v2sW*TfoTz!TvOq,Av"
            ],
            [
              31242,
              "u8",
              "fwFo/GsAw"
            ],
            [
              31293,
              "u8",
              "Rs22Zy\u0026A3\u0026~ {!R%{/lfGO/*l%cZ)"
            ],
            [
              31434,
              "u8",
              "FfX$l2fZ)vl,bl//Z2G~b+c9qR%{c8TFZ 1"
            ],
            [
              31471,
              "u8",
              "Gss39Gvq*8fl208cZc2AcF$,Zf1v8cTq2 Z;f*;2vA1Xv2bwv+v/02F+fl"
            ],
            [
              31530,
              "u8",
              "Zw\u0026+{z\u0026f*+A%X,Ro;!oyGZfc8vz/ ~c+Gyb+9Gs 23fFs!2$0vZvZ,X!0$+s3bGfc8fXqzvF0oR\u0026f%O3Zs+Gf;2b~*;f,lf{v8F**F  2f%8fc++oFZ 8b)2qT+!3Ay)"
            ],
            [
              31552,
              "xor",
              "/*q?3fi7*b"
            ],
            [
              31671,
              "u8",
              "y0zA/ybzsZWs8*G+Z"
            ],
            [
              31721,
              "xor",
              "xiref2r*:bf3oc"
            ],
            [
              32473,
              "xor",
              "c6l%/3i8icb"
            ],
            [
              32718,
              "u8",
              "{AGf8$2w2sz{XfZ\u0026~2)Z$q;!9sZ)s~sfXA2 T3F%3syTWFfzfzfAWsO9 AvXs+b/08G2ZXA2G2w**flf2c{\u00269$AsqbR0c2f$);fv99zv{GzTwcf2%y2%O%;*ZRf+syF/"
            ],
            [
              32868,
              "u8",
              ";vovA02y\u0026//lG29oO*XfAo+ZXOs~ bl!Z*!l"
            ],
            [
              33019,
              "xor",
              "cmroqi*7/7"
            ],
            [
              33188,
              "u8",
              "z%3!23!y2o0F2,)T~,0c;T2,0y%wA\u00262bZT!Rf9F+ qqy v+1fRbbFT*AWvOAT!q+Ac9*zf2~!3/+cb{"
            ],
            [
              33227,
              "xor",
              "bi880i?bx/"
            ],
            [
              33388,
              "xor",
              "/ymre/6zq:xe"
            ],
            [
              33453,
              "xor",
              "77eoZ33Kj6jN8KZs'"
            ],
            [
              33519,
              "u8",
              "lffo3;Z)\u002621F%oA,zFG~Awof8b9FZ!{*R,GA9*Z2Gy3T2+ZRc{ o1;v/,;+s;sqoRv /9OfqFW$2f{;b;ffFFZ0GZ fsAcfqFA,l{\u0026zZ%G0TZZv~Z"
            ],
            [
              33567,
              "xor",
              "*2i\u0026xr?ferb:r:8\u0026"
            ],
            [
              33633,
              "u8",
              "GT3wGfvl)Z+G"
            ],
            [
              33710,
              "u8",
              ")w2fX)Z*f*+XObf8c;AvlfZ*byb9 8b9$~, yosG2cz99 w,yf9G+/R21Ay0%Zbo"
            ],
            [
              33733,
              "xor",
              "c+0+piq+pm7ei0\u0026:"
            ],
            [
              33775,
              "u8",
              "AGZ0"
            ],
            [
              33915,
              "xor",
              ":f%:3ccri3"
            ],
            [
              34068,
              "u8",
              "Z~%vWo/A+%;!q\u00260q~Z*s~fA8f)o+*%/o;A0fG"
            ],
            [
              34343,
              "u8",
              "Alf,Wv*$R*f9/2*oFF+O%fZ FA2Gb;/*OA+s;b+{w*fF0Z8f*~)obOGZ of+/zbqZz0!O +q;v T$Z,+ yq~2)w\u0026lFGyvZ*c;%"
            ],
            [
              34463,
              "xor",
              "+//6c3*fh7fiq"
            ],
            [
              34663,
              "u8",
              "c~+\u0026wv+*G *+XZ +cl122*zZzG\u0026FcG$vl*3szZ3qFF%+1\u0026+\u0026Zl))f2vFv)s3*Zc*ZG+!w%{{~\u0026%9*A%f!O"
            ],
            [
              35220,
              "u8",
              "!Acf;)1GyA2v)fq9ZF9%~+Fz**)+2\u0026)XZs$AOTw XG*W!%ZvyqfR2/fw,){2v%R*%R2%l*0FA2+2Xv{{G,)ZA*Z~c*0lfv0fG23cF$GcTycyf*Rfz1*FZ1clF+0yZ2lX"
            ],
            [
              35327,
              "xor",
              "ez6Nzf-6ZF-"
            ],
            [
              35398,
              "u8",
              "ARbXAZvq982,Z9GO2s~Tffw\u0026~b/*0oyG3%~"
            ],
            [
              35434,
              "u8",
              "2ZG/)lff008%9b8)Wv9Wc2%fFf~* zb/%z,T3wG,y{b8c\u00268*"
            ],
            [
              35473,
              "xor",
              "e02+q*oqc6*%o"
            ],
            [
              35581,
              "u8",
              "wbFs\u0026WbW1Zy!T ~ZXTZ fWq yb2;{1%RGAF3\u0026f+8!obA$\u0026yA{qGFv{1ZA9fy/yFfAsAfZF,R{cG,ocZ20/wsARo!;A*~++v+vO\u00269AqoG\u0026qFG$AwGf"
            ],
            [
              35802,
              "u8",
              "oGwZl /A+TG%9 yoZ~ /{Rcc{$l,X 2{wF/ycFs2y R+,;Z9Z;c*0Fc\u0026F"
            ],
            [
              35994,
              "u8",
              "/GGbFv3\u0026o38Z{A;+\u0026O%fq+ZZTqwf$fl38f"
            ],
            [
              36200,
              "xor",
              "e8zf:6zfozc8e93"
            ],
            [
              36303,
              "u8",
              "yZvz1fGf\u0026AT)*zsO\u00260vqTyvTZR)fRGTfyAA0XG2ofzol!$8 22G8\u0026W"
            ],
            [
              36432,
              "xor",
              "ehb2?r:i78y"
            ],
            [
              36655,
              "u8",
              "Rsv{/wfqfZ*yZ32fAv\u0026l,AocR2qclZo+2\u0026flo2RsvF9{2WZRvfs1ql {*y"
            ],
            [
              36703,
              "xor",
              "?/:x8%i2c06h"
            ],
            [
              36754,
              "xor",
              "b2:qiorpb/"
            ],
            [
              36809,
              "xor",
              "pe7cy87ohbpc"
            ],
            [
              37134,
              "u8",
              "9lAfzo%2F%OXqc2%z /Gf0OG3szf zG19lvcf9G*1AAoWv+wbw*FlsOTclf"
            ],
            [
              37194,
              "u8",
              "2ZsoT8FfF/f;fcl*TZys8G) $+F!)cZ"
            ],
            [
              37245,
              "u8",
              "W2wZcyv2"
            ],
            [
              37422,
              "u8",
              ")w%s*/l 3bG+2Z{+f~%2l*+*!l,)A2\u00263+8Zfw+%lfA~foA;F~vof33lbX%F+ZRF$)Fvb+TWsXb~T8sfWGlZAOFz0F+!0!zA"
            ],
            [
              37730,
              "xor",
              "6zb/xlrf?0e"
            ],
            [
              37844,
              "u8",
              "ycF8T0GR%lAqc*1yf0,A{FF"
            ],
            [
              37870,
              "u8",
              "/yZ*3oRs*vZ{W 1WFF2,zblT,~\u0026+flf908f yf*FZZW9/A~AZZ*"
            ],
            [
              37894,
              "xor",
              "e7ob/%/pyq/i0/c"
            ],
            [
              37987,
              "u8",
              "oyZ9vG0vAG9)F% +owF+\u0026~ozb92bw clfZX,O 9cZc9{ybAFT,~*cG39%y!W2/\u0026f+l\u0026+bRo2Z\u0026qfzAf))WsXcw{8vX22WA R F0bWf+2Fb"
            ],
            [
              38269,
              "u8",
              "GFZ%v;,Z$GW!*c2%9$zGsA)vA%Zl39blGA\u0026*F1qR%fGl$,GAq{WFv+98ffZR/lG3O,8AA;slXsWF"
            ],
            [
              38363,
              "u8",
              "swbR * 31zb)\u0026O3b22+fR c"
            ],
            [
              38408,
              "xor",
              "+2iq/2/roi"
            ],
            [
              38571,
              "xor",
              "%+ymr?ocpqh6"
            ],
            [
              38832,
              "xor",
              "i/xbb+6/0\u0026"
            ],
            [
              38909,
              "u8",
              "lbw*Awc~ovAAoGA2o0WGb+"
            ],
            [
              39201,
              "u8",
              "q{Zb1c~3FyF0)A%A{fW!TszoZb32fwAAWcZ"
            ],
            [
              39476,
              "u8",
              "lf*sWqFffz\u0026A*GFcO)sw\u00261%wA99RA,Oo2WsGO3/ y\u0026Wc"
            ],
            [
              39710,
              "xor",
              "bh6ip8%lf?"
            ],
            [
              39733,
              "xor",
              "/meqpr+\u00263*"
            ],
            [
              39898,
              "u8",
              "oAlcZ!1G/+Zcq2~{F+,1+Gf!9TZA/sl{zFX2 ybbR2w1v+G1%ZA3$~cfZqczsfw+f,2sFs"
            ],
            [
              39969,
              "u8",
              "%03~2TFGTZl%19;c%fq8,9%w)O\u0026+O\u0026A!F~%FT%Z 9 2Ao+AZsw$AzvfO/*ZOFFvqGT0WsX\u0026ZXv82ofG2G1{~bXG+{8f+;Z~FfAvy/s2sq Of*98v,Zf*82bO0ovFf8*9"
            ],
            [
              40436,
              "u8",
              "+%TFRTwA9z*8F*G w$vlA9 2cfTZ G~9A2vbyf9GycWc9F)9y!/ZFf,l fTWsv1*yF+cw*yf{; 2**A y0\u00268Zo2O\u0026"
            ],
            [
              40858,
              "u8",
              "f,z!lA0\u00269+O*1,~qfWs*/+,fq/lfq%2*F,X2\u0026GZ%Wcy*%ls)Aw%$+lFGl0Gw!!R+3AzG820 Tf2\u0026qszT +G*{8A!)0A*{fA{;s/8vz*FRZwXvW\u00263,2,o)O!G;/cwGAR3"
            ],
            [
              41127,
              "u8",
              "FR$fZ*$0yG%/1Zfq2z+;F/AsR,c8byf!+\u00269Fyb/+A*sR0bOs Z"
            ],
            [
              41152,
              "xor",
              "e*q+0/hbop"
            ],
            [
              41251,
              "u8",
              "q8v+AGoFAb33ZF"
            ],
            [
              41455,
              "u8",
              "~\u0026AfXR,f%wX;s{O,Z!s8fF1!GF1\u0026~%fXw !W0Z82f2Tf%wGZZqG90ycXF+3FzA"
            ],
            [
              41518,
              "u8",
              "3W%21X+,{AR$AfTRAG!Aycw1sWA$f8!XqWZf8)%Zv\u0026yT+cyFyZ) ){RFX*zo!O%f)~2G99A\u00261vZ3FcTF!8fG8vG*ZlcTvRcT$l*ZG$ Os ZqfvyZl!1F302!*fO1!wco"
            ],
            [
              41719,
              "u8",
              "c;oz29+,FZv+ 81vzc{cw%X9zGcW)GWcZR*9cGFzG"
            ],
            [
              41869,
              "xor",
              "85e0op%:k6:e75zZ9.=mom/S=8"
            ],
            [
              41959,
              "u8",
              "R3%Z21TF,foqWc"
            ],
            [
              42398,
              "xor",
              "7oziz23h6h3x*q"
            ],
            [
              42414,
              "u8",
              "TZ b)$2b{bF"
            ],
            [
              42557,
              "u8",
              "AF2 G2ZF)sW2ovy 3"
            ],
            [
              42623,
              "xor",
              "7?/0lr\u0026*3i2o"
            ],
            [
              42715,
              "u8",
              "ZZ*8s0vT9+A0!++%w23Twc2{f~f+sl{Gs3;c2A F ;0,wZ/ lZ{*G*%G9FWc2l$12y28AXb/0~!/A~q%FF)f2,s)+2G0!FTFZ*w%zv!FsWf*zGqflZ**2%*2qfO,vw9X"
            ],
            [
              42941,
              "u8",
              "zGOZb2 2*Z2bTFwbX+8G!WXfO\u0026cZ"
            ],
            [
              43060,
              "u8",
              "F!{cyfG!0wczfs+*~Tfzs9\u0026z\u00263TG,,y0cAAFA99bzA2f1Zo$+ 9fW+\u00268G1+G%co+Ab"
            ],
            [
              43172,
              "u8",
              "z ofFT2~c)X8\u0026GT0Rb)G20RGXZG~\u0026*8c83sWf9!z*qfzF!2$ZR vlq1cGGZ29Zo3yG$f+q*8,q/OA,938c/%F1Ac$y2~s%~vy+2Z,1sGf9qFZA2+fycb8q/,FZRfXA{1"
            ],
            [
              43377,
              "xor",
              "*yf0/fe06%c8qiqo"
            ],
            [
              43635,
              "u8",
              "X2F9bw0~GqF2WAsWGWXFWAqGlv*+~!vO0f8sbZ$qAwG22XbX1F,+bW*vWc{"
            ]
          ],
          "v": {
            "file.stem": "c71a4c9abd322516b8cde29f829b35d1c3bdc86504b9632e864c0d4f592eaaac",
            "file.basename": "c71a4c9abd322516b8cde29f829b35d1c3bdc86504b9632e864c0d4f592eaaac.vbe"
          },
          "id": "vbs"
        },
        "id": 0,
        "sz": 898359,
        "ts": [
          {
            "c": 0.9200000166893005,
            "d": "Security advisory source identifiers",
            "e": [
              "Osv"
            ],
            "i": "micro-behaviors/data/text/security/threat-intel::advisory-source-identifiers",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.8999999761581421,
            "d": "Exactly one line exceeds 1000 chars",
            "e": [
              "text.lines_over_1000 = 1.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.8999999761581421,
            "d": "Last line is over 1000 chars",
            "e": [
              "text.last_line_length = 898359.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.949999988079071,
            "d": "File is a one-liner",
            "e": [
              "text.total_lines = 1.00"
            ],
            "i": "metadata/file/text/metrics::file-one-liner",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Very short file (under 12 lines)",
            "e": [
              "text.total_lines = 1.00"
            ],
            "i": "metadata/file/text/metrics::file-under-12-lines",
            "l": 1
          },
          {
            "a": "T1562.001",
            "c": 0.8199999928474426,
            "d": "PowerShell char arithmetic",
            "e": [
              "h2*260+f:qze",
              "%:xip/3+6c",
              "bo7*7hce/p",
              "0+7efhfm3:8+",
              "3iph7/7*c7l7oe",
              "p:Z,6$F,zF9-5e",
              ":786o%+rl2+8\u0026qi6",
              "23*8*%m*b:xxqo",
              "\u0026P=`\u0026/$7Lg\u003cWe26Dg-0i=QLp3hto%e=t=\u003cQpNghu7Y%7P3Pz\u0026guP6$u'3iyLQiQlB7$:\u003cia:WpgLPpQoplP=Y6.\u003c6A$D?:Pe%3ou...",
              "ibize\u0026x7+2",
              "m0/5bo60'D",
              "3*p?b2cbc6/3+eyc",
              "\u0026/0ozh3*660h",
              "*lmpbe2*02%*x",
              "cmroqi*7/7",
              "i/xbb+6/0\u0026"
            ],
            "i": "objectives/evasion/anti-av/amsi::powershell-char-arithmetic",
            "l": 1,
            "m": "E1562",
            "el": [
              "0xd21f",
              "0x2ef9e",
              "0x1321a",
              "0x3015c",
              "0x1f674",
              "0x256c2",
              "0x2357",
              "0x18a63",
              "0x2efe9",
              "0x2095d",
              "0x6120",
              "0x18ba4",
              "0x23ec5",
              "0xc430",
              "0x80fb",
              "0x97b0"
            ]
          },
          {
            "c": 0.8999999761581421,
            "d": "Very long line",
            "e": [
              "text.max_line_length = 898359.00"
            ],
            "i": "metadata/file/text/metrics::single-long-line",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Very low whitespace ratio (minified/compressed)",
            "e": [
              "text.whitespace_ratio = 0.02"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace",
            "l": 2,
            "m": "B0032"
          },
          {
            "c": 0.8500000238418579,
            "d": "PowerShell or VBScript line bloat",
            "e": [
              "text.avg_line_length = 898359.00"
            ],
            "i": "objectives/anti-static/obfuscation/string/anomaly::script-host-line-bloat",
            "l": 4
          },
          {
            "c": 0.8999999761581421,
            "d": "Encoded payload detected: xor",
            "e": [
              "Z8FjHZ.]~[f]$%0bF-\u003cbF%5F9Z$3].\u003cz'HD:S:po \u003cxor\u003e",
              "zk6No='6pzFe:,='.DH7.zN%=7=op67jN \u003cxor\u003e",
              "ZHDZZ3]ec'],SF.==KFF%9eFz=kZ,/$F\u003c'89].[k \u003cxor\u003e",
              "'6scSoo'g9K.9e3/9.zZ.sj-ceFmzS5zp \u003cxor\u003e",
              "KFem:e:m0Zj7HfZZks9$6=FmHZe]$F/]s%b6zj]6 \u003cxor\u003e",
              "N~[0/]mH]~7\u003cKD9[.Hzf0js7b[6zfcej5N0kz.S\u003c \u003cxor\u003e",
              "m7[j3Ze8e:,Z6po]S=[5oNZ8Zf=35$][.gjSz\u003c', \u003cxor\u003e",
              "%6H5ez/z$z0eZH-$F07%7o6:bHp:3N=.z \u003cxor\u003e",
              "F7.jHKFZ9.$9]coF~/6f=6zK6FNc\u003cS~:7%39b9SF \u003cxor\u003e",
              "779bj9F%c679[~z9g6f:8[fm='.8mF]j/m.=8F[, \u003cxor\u003e",
              "foz://Fo3\u003c]m[K\u003cDH[0668f03:$H]\u003c,pFk \u003cxor\u003e",
              "e]m6gc[o3.F%Z.],87:z85.0H6p-fj,7Z[90e[Z% \u003cxor\u003e",
              "K79$j8g76jzm7]3.pz]j7]:FjZpZ]D9ZZHZ7.DHf \u003cxor\u003e",
              "85[0D=b89F=m8S]~5HNZ/zK%76zp9K:Fb6'z=[\u003c3 \u003cxor\u003e",
              "jF/c:[Z7Zz~sc'jm]F%9F[,-[:0/sbjm\u003cb%bF/[= \u003cxor\u003e",
              ".z,/F9jH3eog:$gpz5kjFzZKokgop:zoFZ7DS \u003cxor\u003e"
            ],
            "i": "metadata/encoded-payload/xor",
            "l": 3,
            "el": [
              "offset:382904",
              "offset:43964",
              "offset:573489",
              "offset:241419",
              "offset:339458",
              "offset:23452",
              "offset:511602",
              "offset:439520",
              "offset:71608",
              "offset:10706",
              "offset:347422",
              "offset:377694",
              "offset:234280",
              "offset:485090",
              "offset:516567",
              "offset:276203"
            ]
          },
          {
            "c": 0.8999999761581421,
            "d": "Encoded payload detected: url",
            "e": [
              "9A f,2+f2ZX{Z*!9$Gb1 ;bTW\u0026AfF+!Z)Fwv)c+, \u003curl\u003e",
              "\u0026l\u0026c2Xf*2F2cfFfX2Ffv2f\u0026+\u0026{fW\u0026cf*2vf\u00262T2* \u003curl\u003e",
              "c8\u0026G20fc2,2cfFf*2Ffc2q\u0026W\u0026qfWccf*2Ff\u00262*2c \u003curl\u003e",
              "\u003cbinary data\u003e \u003curl\u003e",
              "\u00268\u0026c2qfc2,fFf*2Ffc2q\u0026W\u0026qfW\u0026Ff{WFfv2*2v*W \u003curl\u003e",
              "2\u0026f/2vf2\u0026R\u0026\u00262 2f\u0026W\u0026f\u0026y\u0026ffR\u0026\u00262+\u00262\u0026/fv2\u00262G \u003curl\u003e",
              "fW\u0026*f*2Gf*2q2cf8\u0026W\u0026,2{\u0026W\u00261\u0026+\u0026{fW\u0026F2*\u0026F\u0026c \u003curl\u003e",
              "f\u00262c2\u0026fcfq2*f 2*\u0026O\u0026Xf8\u0026Gf+2c*F2f2!fW\u0026W\u0026c \u003curl\u003e",
              "f+\u0026cfqWFf!2T2!fZ\u0026Z\u0026 2\u002620\u0026yc+\u00268\u0026TfZ\u0026!2T\u0026R \u003curl\u003e",
              "2Gfc2q\u0026l\u0026qf+\u0026*f*2Ff*2q2cfR\u0026W\u0026F2G21\u0026W\u0026+\u0026l \u003curl\u003e",
              "2Gfc2q\u0026W\u0026qf+\u0026cf*2Ffv2{2cfF\u0026W\u0026F2vWX\u0026W\u0026+\u0026l \u003curl\u003e",
              "c2\u0026vW+fG2,* fX2Gf*21\u0026W\u0026ffW\u0026 f{2cf*2X2*f2 \u003curl\u003e",
              "Gw Rs$Z+)W!+,8X2W*$9FGGX$;v9c+q28A8c\u00262/A \u003curl\u003e",
              "*W\u0026v2f\u0026W\u0026F2Xf*2vWcfvff2\u0026fF2X\u0026y\u0026*fR\u0026vf+2\u0026 \u003curl\u003e"
            ],
            "i": "metadata/encoded-payload/url",
            "l": 3,
            "el": [
              "offset:51107",
              "offset:621672",
              "offset:608104",
              "offset:254077",
              "offset:663912",
              "offset:593296",
              "offset:622210",
              "offset:807412",
              "offset:884362",
              "offset:626296",
              "offset:609528",
              "offset:667624",
              "offset:86299",
              "offset:789672"
            ]
          }
        ],
        "sha": "c71a4c9abd322516b8cde29f829b35d1c3bdc86504b9632e864c0d4f592eaaac",
        "path": "/data/samples/bad/datasets/various/datalake.abuse.ch/2025-11/c71a4c9abd322516b8cde29f829b35d1c3bdc86504b9632e864c0d4f592eaaac.vbe",
        "type": "vbs"
      }
    ],
    "tv": "ca5ef"
  }
}