{ "ml": { "v": "5", "fs": [ { "id": 0, "prob": 1.0, "class": 2, "threshold": 1.0 } ], "prob": 1.0, "class": 2, "level": 3, "models": [ { "m": "az", "prob": 0.9187621, "class": 0 }, { "m": "az/vbs", "prob": 1.0, "class": 2 } ], "version": "v17.17", "threshold": 1.0, "analyzed_at": "2026-05-31T06:52:46Z" }, "path": "c7adfd09bd6dad559f242d00e0b4d3872b25cfcddc56f2612d73cf8bcdd880ec.vbe", "raw": { "v": "5", "fs": [ { "f": "O(As)Md", "x": 35, "ff": { "m": { "file": { "size": 792093.0, "entropy": 4.51, "size_bytes": 792093.0 }, "text": { "tab_count": 71.0, "digit_ratio": 0.18, "space_count": 14223.0, "total_lines": 1.0, "char_entropy": 4.51, "unique_chars": 100.0, "escape_density": 0.0, "lines_over_200": 1.0, "lines_over_500": 1.0, "avg_line_length": 792093.0, "high_byte_ratio": 0.0, "lines_over_1000": 1.0, "max_line_length": 792093.0, "non_ascii_ratio": 0.0, "null_byte_count": 1.0, "last_line_length": 792093.0, "long_token_count": 1924.0, "whitespace_ratio": 0.02, "most_common_ratio": 0.14, "octal_escape_count": 2.0, "non_printable_ratio": 0.02, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 2.0, "most_common_char_codepoint": 33.0 } }, "s": [ [ 98, "u8", "mDcJUm.kaYrUTRsbs+UX/Dnhr(L" ], [ 2613, "u8", "vF2vO*fG8vy 9\u0026/" ], [ 2799, "u8", "/+,v+{,+ GZX*vlvWGfGX" ], [ 2827, "u8", "FZfTy! T+Z T Z+z!9Z22,GWGO" ], [ 3003, "u8", "3 Avwv1v*{8vfvO" ], [ 3259, "u8", "Xv2G2Gqv/fz!9!Afs2 +fF*v1{y 9\u0026l" ], [ 3333, "u8", "Wvov2" ], [ 4232, "u8", "*ZT*+!T/+!!1" ], [ 9995, "u8", "F8*qqZF2T08FXF~TA!3Z ZFv8FlqFZf* 8*q)Z%!AT2Z !8" ], [ 10043, "u8", "qFlF8!q2T08FXFlTf8c{qR F*{8%+FlTGFXZf8cG8%yqZ+F0 82T3Z !8" ], [ 10704, "u8", "ZG!1qy!0F8Ty!Ty*Z%!R!RT Z!T*Z%T0Z2!Gq%Z2!lT9FR!R!/\u0026q0yF0!RT*ZfqXZfF*+8%+FATG%qR 8%FA!;fFR qFZf*+8*F2qGZ* 2T3!8!Z!*!0T2!9F2Tf8%T3" ], [ 12036, "u8", "T8*+F8TFZ!+XZf +08F1A80yFql 8F!2!Z+AZ%TfFF0+8, y0 8,A80+FOFyFXZq0yF3!l$FR q0ZG!XqR!/\u002680yFqZfW FlF;fFR q2Z2T3Z2!AT2Z%!WXq%yFA!3!/" ], [ 13336, "u8", "RTR!3Zf8%!A!GqZ2F0 82T3ZfFAT2ZfFAT/\u00268%yFq!9*yFXF;TGZbq0Z%!3TGF0!ATGF3Zf82!A!AT2Z2T2Z2T982!ATf8Z\u002680+F8!Gc+FXqZF{!Gq%Z2T9wF%+qA!X!" ], [ 17520, "u8", "Z%!RTclFFWXqFW!F!0!/*yFq!zTcZ%T/W F/*yF/cyqW!{Z,Z%cyF8TbZcT!Z2qTZ2FZT28!FZT3F2!8!TF/TR!0cyq%W q0W F*TF!1!RTZ!TZ\u0026Z%!O!yTGZcT!WFqq" ], [ 18347, "u8", "\u0026+!ff2cvyffyvvy" ], [ 18447, "u8", "+F%v*XAvovO" ], [ 18526, "u8", "ZcZ!cy%8qvZcTZ2 0q8v!WT%2 %8q" ], [ 19266, "u8", "!0TO!q!8T!ycT/GF%+qO!q!yTZ {Z*Z!!R 2T*Zfq%GF0+8F!ZTGZ*!ZTT 2!;fq%+qA!q!yT!yGT/8!!0+2!{!ZTR fZZ;F%8FZT%y*TZ8!TTy\u0026!FT!Z! 2T/Z8%8FT" ], [ 20847, "u8", "TZ%vZT\u0026FZ!AT0!l!GF+!T++!T!Aq!Z2qT8!!3qy!q!Zqz!0Z*ZfF8!Z+*Z%T*ZfqXZfFO" ], [ 22107, "u8", "Z!f+!ZFcZFATZ2F0 8FT9W FlqFZ!!zTq*yFl!9FqTZ!" ], [ 26320, "u8", "WAFTTZ!)\u0026ZTGGTZ!2!!~GOT!Z!TZ+!T9+!!W{!Z%vZT3 ~!Z!T!/" ], [ 27861, "u8", "Z!*GZTFvTZ2+!!lvZTZW!TG+!Tq+!!WX!Z%vZT*GZ!lGT!q*~FT!ZTfW!TfW!!{*Z!XvZTWvTZs+!!GcZTG+!T2+!T1+!!A" ], [ 27989, "u8", "Z!3vZTlvTZZW!!WGZT\u0026+!T*+!T)+!!y" ], [ 31877, "u8", "Z!TGZT,+!TX+!!/" ], [ 32085, "u8", "Z!qvZT+GTZ,+!!+*2+!Z!T,+!T*+!!;" ], [ 34805, "u8", "!Z%v8qT!Z!2GT!3" ], [ 37253, "u8", "Z!*vZT2y!Tq+!!*{Z!qvZTWvTZsl!!yGZT*+!T\u0026F!TXF!!wX!Z%vZTfvZ!AvT!X" ], [ 37333, "u8", "Z!{GZT;*TZ%+!!2vZT2+!T*+!T++!!~" ], [ 38133, "u8", "!ZFvZTTGFFZ!T!X" ], [ 38907, "u8", "T!2GZ!3 TTyGT!l" ], [ 39023, "u8", "TZFvZTs+!!;" ], [ 39247, "u8", "TZFvTTyGT!F" ], [ 40187, "u8", "T!FGZ!fGTT2GT!8" ], [ 40527, "u8", "TZFvTTlvT!yXFFTZ!Z vZ!W" ], [ 41007, "u8", "TZvGZTs+!!y{T!Z*Z!+ q+8!T!W*!Z *TZ*\u0026TTl\u0026T!8fZ!qW!ZF\u0026Z!yf!ZFf!Z%fTZ*cZTc2!!G+T!O\u0026Z!0\u0026TTW\u0026T!8*!Zf+TZG\u0026TT+cT!2*Z!*2!Zf Z!W*!Zv*!Zcf" ], [ 41199, "u8", "TZ GZT\u0026+!!l" ], [ 42696, "u8", "*ZTZlfXTZ!!/" ], [ 42901, "u8", "Z!{vZT8vTZ F!!wvZTcF!T\u0026l!T/l\u0026FZT!Z%vZT*GZ!8vT!TXZ!/vZT,+!Tq+!!9" ], [ 44815, "u8", "TZsvTTyGT!ZXZ!/l!ZfvZ!l" ], [ 44923, "u8", "T!WvZ!3vTTOvT!FX!ZZXTZ2vTTwvT!O" ], [ 46421, "u8", "Z!+GZT8vTZGF!!WGZTv+!Ts+!Tfl!!;X!Z *ZTXcZ!2*T!XXZ!o*ZTcl!T3W!!X*Z!+*ZTy*TZ*l!!2cZTsl!T,l!TXW!!~*!Z%cGXT!Z!8 T!1{Z!$vZT\u0026+!TX+!!+*" ], [ 48309, "u8", "!ZZvZTTGZ!WGT!" ], [ 48847, "u8", "TZZvTTZGT!W{Z!" ], [ 48911, "u8", "TZFvTTGvT!G" ], [ 49007, "u8", "TZ GZTG+!!w" ], [ 49211, "u8", "T!2cZ!TGTTWGT!+*,8!TTZf\u0026TTWcT!FXZ!Tl,Z!!Z!W*!ZGX!Z!X{Z!!ZTcW!!O*T!l*F!T!TTW*T!2X!Zs*TZ%c1TZ!T!O" ], [ 49915, "u8", "T!WGZ!qvTTFvT!O" ], [ 50031, "u8", "TZ%vZT*W!!W" ], [ 50043, "u8", "T!R\u0026Z!*\u0026TT8cT!z{!ZvfTZ\u0026\u0026TT8cT!O{O\u0026TZ!ZZ*Z!ZX!Z%X!Zv*TZ%vZT\u0026F!!8" ], [ 51023, "u8", "TZ%vq+Z!T!W{Z!+F!ZsvZ!ZX,Z!T!Zc{TZ\u0026GZTs+!!R*1!Z!Z!+GTTlvT!2{!Z*X1Z!!TT2GT!l" ], [ 51515, "u8", "T!Z*Z!/\u00269TZ!T!zf\u0026Z!TTZ2\u0026TTWGT!2{Z!o+!Z%cZ!w+!ZZfsZ!TTZ2\u0026ZTcF!!2{T!wvZ!0cTT;\u00269!ZT!Z2fTZ GTTlvT!+{Z!+F!Z*vZ!2X!ZZfF8!TTZZvZTf+!!R{" ], [ 52015, "u8", "TZfvZTF+!!A" ], [ 52155, "u8", "T!8cZ!T TTWGT!l" ], [ 52687, "u8", "TZcGTTWGT!l" ], [ 52719, "u8", "TZ*GZTZ+!!8" ], [ 53167, "u8", "TZcGZTF+!!W" ], [ 53775, "u8", "TZ\u0026GTTlGqFZTZ!3y!ZcGZ!A" ], [ 53819, "u8", "qFZ!Z!fGTTWGT!A" ], [ 53871, "u8", "TZsvZTZ+!!F" ], [ 54479, "u8", "TZ\u0026GTTFGT!w" ], [ 54795, "u8", "sZ!TTZ\u0026GTT2GT!l" ], [ 55163, "u8", "T!WGZ!fGTT8vT!G" ], [ 55271, "u8", "!Z {!Z\u0026{TZGGZTF+!!;" ], [ 55727, "u8", "TZAvZTZ+!!8" ], [ 56251, "u8", "T!lGZ!ovTT2vT!2" ], [ 56335, "u8", "TZFvTTGcT!O" ], [ 58319, "u8", "TZccTTZ T!A" ], [ 58491, "u8", "T!2vZ!1vTTWGT!A" ], [ 58511, "u8", "TZ%vTTWGT!l{Z!qW!Z!G~ ZT!Zc" ], [ 58543, "u8", "TZ\u0026*ZT*+!!F" ], [ 59138, "u8", "cTT+\u0026T!Rf!Z%fTZ\u0026cTT2\u00261cZTZ!/+!ZFvZ!O" ], [ 59195, "u8", "T!yGZ!fcTTZ T!W" ], [ 59595, "u8", "!ZGX$WF!TT2cT!y*Z!+2!Z\u0026cZ!2*!Zcf!Zc*TZc\u0026ZTcW!!ZfT!2\u0026Z!+\u0026TTG T!lf!Zc*TZ,\u0026TTR\u0026T!G+Z!12!Z\u0026cZ!+*!Zcf!Zf+TZ*\u0026ZT W!!8fT!O\u0026Z!9 TTR\u0026T!2f" ], [ 60015, "u8", "TZ GZT\u0026W!!Z+T!yvZ!XvTTF*oF8T!Z%fTZ \u0026TTycT!W*Z!*W!Zc\u0026Z!Zf!ZGf!ZF*TZc\u0026ZTcW!!W*T!G Z!T\u0026TTR\u0026T!2f!Z *TZf TTZ\u0026T!8*Z!q2!Zc\u0026Z!G+!ZF*!Z%f" ], [ 60603, "u8", "T!F*w\u0026q!TTl\u0026T!lf!Z *TZ\u0026\u0026TTWcT!W*Z!02!Z%\u0026Z!Rf!Z%f!Z!fTZv\u0026ZTfy!!lfT!8\u0026Z!+\u0026TT8cT!G+!Z!fTZF\u0026TTycT!WfZ!9y!Z%\u0026Z!8*!ZGf!Z%fTZf ZT,2!!Of" ], [ 60827, "u8", "Z!1+!ZG*F 8T!Z*f!Z**TZ \u0026ZTvW!!lfT!+\u0026Z!0\u0026TTWcT!yf!ZFfTZv\u0026TT2\u0026T!G+Z!X2!Z cZ!y*!Z%f!Zf+TZvcZT\u0026W!!WfT!W\u0026Z!9 TT8\u0026T!Wf!ZvfTZ!\u0026TTG T!Wf" ], [ 61259, "u8", "!Zv+1Z!!TT;\u0026f!ZTZ!9F!Zv\u0026Z!+*!ZA{,Z!TTZfGZT W!!8*T!W*Z!$ TTW*T!;*!ZF*TZAGfqZ!T!G{Z!{2!ZvcZ!~{,Z!T!Zf{TZ*\u0026ZTvW!!~{1!Z!Z!9GTTlcT!G*" ], [ 61563, "u8", "T!Z*Z!$GqqZ!T!G{!ZcXTZ%cTTFcT!O*Z!+l!Z,*Z!l*!ZA*!ZA{X8!!ZTZ+!!w" ], [ 62587, "u8", "T!2vZ!3 TTOvT!W" ], [ 62607, "u8", "TZFvTT2GT!A" ], [ 62651, "u8", "X Z!Z!9vTTwvT!2" ], [ 62715, "u8", "T!8vZ!9vf+Z!T!Ff!Z%fTZ*\u0026{TZ!T!l" ], [ 64603, "u8", "yGTlf+%vWGO" ], [ 65191, "u8", "*+\u0026{\u0026FF*{+2vO" ], [ 65295, "u8", "{+\u0026\u0026TTOGXv~" ], [ 65621, "u8", "lGfGZTOGX+AW vlG2X2+*" ], [ 65653, "u8", "AWs*W{Xv2GZ!1GX" ], [ 65717, "u8", "s+\u0026cZT1G2v~v1Go" ], [ 65803, "u8", "F {qW*v){Ov/v8" ], [ 65895, "u8", "bF {*W!T1FscWX!F\u0026v+*XcWv+v3vTTOG/cO{!2F{TZ,G{f;v+\u0026;*~v3+ FbvZ!O{\u00262***W%fqlcGF{*l!GZT0GRGwv{G9*Z***FX!Z%{+Fb*0X+GT!R{wv+2GWGGl\u0026ZT" ], [ 66127, "u8", "/+ cTTRGXvW" ], [ 66357, "u8", "AW2vl" ], [ 66683, "u8", "TGlc+c**)XZ!{GO{,+,X+FF*1fwvX*2{Z!{FGF cOvWf\u0026l {\u0026+v{+l%vZTGFsvW" ], [ 66901, "u8", "zG1v2XGvXFf+,vRG8" ], [ 67013, "u8", "8c0GO" ], [ 67019, "u8", ",W {{l!!{{2c+vR*2\u0026*W%2%vyGZTvF," ], [ 67157, "u8", "wcT\u0026ZT+G*WA+G\u00262GRXcFc{v2 {XW!!+{\u0026W*GW*T!+Gycqc1X+*$vZTvF%ffl!!" ], [ 67307, "u8", "FF!TXF%vl*c2F*FXT*W*Z!XG/*2*f*yXFF *f+GvTTlG{c+XOG9+!Z*GWclXG+vf!Zc{)F*Gy*G2!!W{0GlvWG3vo" ], [ 67451, "u8", "/cZ!WG0GX" ], [ 67499, "u8", "clc{X+GcZTcF%Gl" ], [ 67695, "u8", "TZcGl{!FcGl{ocWvyGqv*" ], [ 67989, "u8", "Rco*W{lvfF!ZcG2Gw" ], [ 68437, "u8", "yGT*F{WvTZcF2vlGw" ], [ 68571, "u8", "FvTZcF2vlGw" ], [ 68613, "u8", "WG3vw" ], [ 68629, "u8", "yG+Gl{2colcF*vFvZTcF2" ], [ 68687, "u8", "TZcG3" ], [ 68741, "u8", "lv9vR" ], [ 68795, "u8", "XvyG2v3v1*FG*vZTcF2" ], [ 68923, "u8", "Xclv2v+GX{wvfGl" ], [ 69077, "u8", "OvfGA" ], [ 69351, "u8", "!F%{*WsXTFsvZTcF%vF" ], [ 69647, "u8", "TZcGf" ], [ 69685, "u8", "+scO{Xv~cyvTGTTWGfvl" ], [ 69723, "u8", "Z!*F\u0026+*vzvy" ], [ 70779, "u8", "ovyGZGT!f{2GXv2" ], [ 70933, "u8", "FvqvA" ], [ 71003, "u8", "wv1+cFFvGvy{s+v" ], [ 71055, "u8", "/+svTX;vfG2XZ!fF F*vWGl" ], [ 71087, "u8", "Tl Gl" ], [ 71125, "u8", "WG3vl{y*TZ\u0026F GlvG" ], [ 71387, "u8", "GcolcF*v2GZT\u0026F2" ], [ 71733, "u8", "F\u0026cW{/vlG8v" ], [ 71797, "u8", "v+*vW*o*WGlv{vTT2G/v8" ], [ 71899, "u8", "W*olcF*vFvZT\u0026FA" ], [ 72187, "u8", "qcWv8vXv+XZ!fGl" ], [ 72261, "u8", "WGXGy" ], [ 72395, "u8", ",+c{+F*vf*O\u0026T\u0026lfR*3y,F%vZG8" ], [ 72635, "u8", "XGAvlcT!f{lv/vO" ], [ 72651, "u8", "vWc{X+GcTT2GXv;" ], [ 72699, "u8", "XcWvAvqvT{RGXcZT\u0026F*" ], [ 72731, "u8", "yGTlslcGlvF" ], [ 72763, "u8", "/vyv8v*GoXyGXvW{\u0026FF" ], [ 72837, "u8", "8v3vl*!Z\u0026{X+%vf" ], [ 72879, "u8", "fWs*W{*+GvZTfGlv2v3vq" ], [ 72901, "u8", "WGfGA" ], [ 72955, "u8", "1vWGAvXG+XA 9vl" ], [ 73093, "u8", "yGfvO" ], [ 73179, "u8", "ZGq+ FGcZ!2{sWs" ], [ 73807, "u8", "/+\u0026c*{lvf*ZTyGX+vF Glv2X!Fc{f+\u0026XTZ Gl" ], [ 73883, "u8", "+c1F FFvAvO" ], [ 73925, "u8", "WGfGw" ], [ 74133, "u8", "wv/cZTyGX+Z+cvAv8" ], [ 74245, "u8", "yvocZT F*" ], [ 74459, "u8", "AvXW!Z GlvF" ], [ 74491, "u8", "qvGcWG3v1" ], [ 74543, "u8", "XF cl" ], [ 74575, "u8", "TZ GX" ], [ 74635, "u8", "*+\u0026{TZ GX" ], [ 74645, "u8", "Wv3vl" ], [ 74763, "u8", "F!X9+%v*{Ov+Gw" ], [ 75141, "u8", "8vXvy{cF\u0026XTZ GX" ], [ 75157, "u8", "yv9vl{Ac/+F+,vyGl" ], [ 75221, "u8", "wcT!y{lvfW!Z G8vR" ], [ 75291, "u8", "Z!+FF+%v2cw" ], [ 75303, "u8", "cl!T FF" ], [ 75573, "u8", "FGcZTTGyG~v9co*2c0GW" ], [ 75739, "u8", "WG1F Wvvwcy{*+" ], [ 75856, "u8", "+%*0{wcocZTZG" ], [ 76085, "u8", "v+2vO**GlGZG3v1*WGfG8" ], [ 76107, "u8", "ZWc{X+GcTTwv" ], [ 76348, "u8", "vAvOcfvX" ], [ 76475, "u8", "TGGvwvfcTTwv{c2fs+f" ], [ 76597, "u8", "GFsvW*1Glv~c*G/" ], [ 76661, "u8", "GFsvW*1Glv~c/v+{WGfcwXcF*" ], [ 76827, "u8", "Ovq+ FcG2GA" ], [ 76943, "u8", "TZ2vo" ], [ 77071, "u8", "+lvvo*WGXGw*WG3+*+fvlGF" ], [ 77205, "u8", "wv1vW{OvfFs+!G2GO" ], [ 77269, "u8", "Wc3vw" ], [ 77445, "u8", "WGfvl" ], [ 77557, "u8", "cFFvW*1GWGyGXvT{wv+GZX!Z2" ], [ 77845, "u8", "WGqvG" ], [ 77967, "u8", "1WcGX" ], [ 78069, "u8", "cFFvG" ], [ 78229, "u8", "OcXvZ{OG*lcF\u0026vlvz" ], [ 78357, "u8", "Av1cl" ], [ 78459, "u8", "3vOclvfv3" ], [ 78779, "u8", "ovOvWGqv9" ], [ 78853, "u8", "WGqv2" ], [ 79109, "u8", "OvqvR" ], [ 79227, "u8", "XvlvyGfvfXGvovy{vW,{TFsvf*Z!3v8" ], [ 79291, "u8", "/vwvwv+co" ], [ 79307, "u8", "Flb*0lF*TTAv3cyfWc+WG+ZcGvzX!Z2" ], [ 79499, "u8", "F+ XTZfv/" ], [ 79527, "u8", ",+ {cl!T9+%vW{,+ Gw" ], [ 79605, "u8", "G+Zv8*0vZGZ!9v0" ], [ 79701, "u8", "WGqvy{lvTFsW!!Gvl" ], [ 79727, "u8", "XFFv+{!Zfvl" ], [ 79829, "u8", "yGqvZX;vTZf+FvyG8" ], [ 80213, "u8", "yGXG2" ], [ 80219, "u8", "lvflslcGlv2{!ZZ" ], [ 80245, "u8", "s+ c2{1cw*WGXvf{Z!/vG" ], [ 80309, "u8", "c+2 W{TGOGyGfv+" ], [ 80597, "u8", "wvTGG" ], [ 80629, "u8", "s+fcW{fvlvzv+vo*A fGA" ], [ 80757, "u8", "+ZcZT/v8v+G+GX" ], [ 80949, "u8", "GFcGl" ], [ 81077, "u8", "AWbvZT/v2cAv/vqXR*{vl{Gls" ], [ 81109, "u8", "2cqcG" ], [ 81211, "u8", "9vWG2Gov0" ], [ 81295, "u8", "0Wcv1" ], [ 81551, "u8", "/+Fvf*AvovO" ], [ 81627, "u8", "yv/+Z+Fv2cA" ], [ 82203, "u8", "Gv/WsW!!Ov2fbW," ], [ 82283, "u8", "*F\u0026ffl%cy*!Z%vW{1vF*2G*G+{8v*G2X!Z%" ], [ 82351, "u8", "9WGGW" ], [ 82357, "u8", "!Z%vW{{vAvlv/c*{RGXvWXGFs" ], [ 82427, "u8", "fcGvlG9v1" ], [ 82437, "u8", "RGqvG" ], [ 82549, "u8", "+scZT0vWGFv3vX" ], [ 82613, "u8", "ZW2vO" ], [ 82715, "u8", "Z*1F FsvWG2" ], [ 82831, "u8", "*FFvTX;v/vl{+cTF*FcGyG8" ], [ 82869, "u8", "cFFvZXXv;vOv" ], [ 82907, "u8", "WGXF\u0026+*vRGl*slc{*+G" ], [ 82927, "u8", "TZ%vW{F+!*8" ], [ 83029, "u8", "wvfcZTRv+F!2fv~vz" ], [ 83047, "u8", "F f,FG{TZ%v8{GFGG;" ], [ 83125, "u8", ",+ *zXT!RvRv0G{{;v{\u0026+fGF!XTZ%v{" ], [ 83157, "u8", "Ov0cW{lvfFv+vvwcl" ], [ 83291, "u8", "zGo+ 2b*z*ZT%+s*\u0026+vfTZ%vA* l!!R" ], [ 83413, "u8", "lv*G2{OGfl!ZGvAvO" ], [ 83631, "u8", "TFFv2" ], [ 83669, "u8", "ZGqv2" ], [ 83717, "u8", "yG*G2Xc2vfX+\u0026Gq" ], [ 83765, "u8", "vW*vW{qvlvyGfcTTFv3vO" ], [ 83909, "u8", "wvfvA" ], [ 84015, "u8", "TZGvO" ], [ 84079, "u8", "TZGv8" ], [ 84091, "u8", "qvW*yvTGTTFvqvWX +\u0026" ], [ 84405, "u8", "c+2vO**G2G8v/cTT+vocG" ], [ 84789, "u8", "bF,v2XXvZGOG**q" ], [ 84805, "u8", "WGqvW*ZWFXfl!!X" ], [ 84821, "u8", "zG1v2Xlv9+F+2cGvl" ], [ 84853, "u8", "vW2vZTXvzGOvf*X" ], [ 84879, "u8", "XFZvo" ], [ 84917, "u8", "bF,v2XXv;vOv" ], [ 84955, "u8", "WGflslcGlvF" ], [ 85007, "u8", "fls**{lvfGZTlv)F,+\u0026*w*W{*+G" ], [ 85381, "u8", "WGXG2" ], [ 85499, "u8", "3v8vGv3vXX2GfGl" ], [ 85563, "u8", "TGGvwvfcX" ], [ 85711, "u8", "*FFv0{8v/vl" ], [ 86159, "u8", "oW GX" ], [ 86533, "u8", "yGXvA" ], [ 86645, "u8", "Z+\u0026cZTXv2GAvovT{2GXvyXcF*" ], [ 86677, "u8", "2G3vw" ], [ 87067, "u8", "GcTZ*+!GOGWX*+Z" ], [ 87323, "u8", "Ov/WGF*vAcwXcF*" ], [ 87349, "u8", "ZWcvA" ], [ 87355, "u8", "XvZGZGqcTTlv3vy*AW%" ], [ 87445, "u8", "Gv1vWXlv*FF+ccZ!l" ], [ 87573, "u8", "GvqvA" ], [ 87669, "u8", "F+cG2{qvZ!lv9vq" ], [ 87851, "u8", "s+ {TlcGl" ] ], "v": { "file.stem": "c7adfd09bd6dad559f242d00e0b4d3872b25cfcddc56f2612d73cf8bcdd880ec", "file.basename": "c7adfd09bd6dad559f242d00e0b4d3872b25cfcddc56f2612d73cf8bcdd880ec.vbe" }, "id": "vbs" }, "id": 0, "sz": 792093, "ts": [ { "c": 0.9200000166893005, "d": "Security advisory source identifiers", "e": [ "Osv" ], "i": "micro-behaviors/data/text/security/threat-intel::advisory-source-identifiers", "l": 1 }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 792093.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Last line is over 1000 chars", "e": [ "text.last_line_length = 792093.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "l": 1, "m": "B0032" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "c": 0.949999988079071, "d": "File is a one-liner", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-one-liner", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 1.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "c": 0.8500000238418579, "d": "PowerShell or VBScript line bloat", "e": [ "text.avg_line_length = 792093.00" ], "i": "objectives/anti-static/obfuscation/string/anomaly::script-host-line-bloat", "l": 4 }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.02" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "c": 0.8999999761581421, "d": "Encoded payload detected: url", "e": [ "2G2v\u00262\u0026WfF2cf*2cf{2c\u00268f*2G\u0026Wf+\u0026l\u00268\u0026*\u0026qfW \u003curl\u003e", "\u0026F\u0026W\u0026{\u0026**8\u0026X\u0026OfcW\u0026f*2F\u0026ffl\u0026*\u0026yfW\u0026q2c2*\u0026W \u003curl\u003e" ], "i": "metadata/encoded-payload/url", "l": 3, "el": [ "offset:651108", "offset:546108" ] } ], "sha": "c7adfd09bd6dad559f242d00e0b4d3872b25cfcddc56f2612d73cf8bcdd880ec", "path": "c7adfd09bd6dad559f242d00e0b4d3872b25cfcddc56f2612d73cf8bcdd880ec.vbe", "type": "vbs" } ], "tv": "52045" } }