{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 1.0,
        "class": 1
      }
    ],
    "prob": 1.0,
    "class": 1,
    "models": [
      {
        "m": "az",
        "prob": 0.6687533,
        "class": 0
      },
      {
        "m": "az/source",
        "prob": 0.7058824,
        "class": 0
      },
      {
        "m": "az/kotlin",
        "prob": 1.0,
        "class": 1
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961373,
      0.9998425
    ],
    "analyzed_at": "2026-05-15T02:57:00Z"
  },
  "path": "VirusShare_04ed3fdd6184f53f0859f9e8a169b2e9",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(As₂C)",
        "k": {
          "source.imports[0]": "DnL",
          "source.imports[1]": "LoI",
          "source.imports[2]": "M2l",
          "source.imports[3]": "Sa0n",
          "source.imports[4]": "Sall",
          "source.imports[5]": "ay0rla0",
          "source.imports[6]": "ct",
          "source.imports[7]": "da",
          "source.imports[8]": "edl",
          "source.imports[9]": "ejv",
          "source.strings[0]": "()vp.r9uucn(Iin{f;.p{(,=)ea.qda)r)t.uby2n,()(b5xdp[n,#r6)xeufridbwdnudf{d;sarrt_f1ok0[ahne7mS3{dLoudo(][!}s",
          "source.strings[1]": "(lf]r,1Lu)=L(rcru)2(\\'{;.(4[)stb7(qn]4nr;.rfr40a.u()0e(r]3cht(.50d.t]((aibC(]c(d}7[0Ld)nn#;);3\\'ad)1}v7u3e{.;))bqe}s3band]}ir.r6]ood{L6(;{_){t=)(.adxtxf(.!3tatc.![tdr[cu(eflour)Cii,t+4.ii.;d.e;l]f)t\\'cC(1uig]}.u#.rtdo;eaa;.cLda]h.)hp6cq.[]y)[);[{o)jo.1(s}{:]).d3i.nt)f(sd",
          "source.strings[2]": "(nb,e.h)g7%)(]b=.eo,(nL4)6odi.iu3xfl]+[E]4nun])xt)!)5nppl!at]gf(x,1tn4=S.{).hc.0{n.ue;nm{tni;ei1ur[(dc={44}aLr}}e;se]fy,][=)tndo3n7v;i;z.0fvld[0)iea;)}8rt14.!.dh8)=t1.d!v4flx.=96nr[)(0,t[td[u=4)Sijfe3u5(t.#].{;)rb}d(])ua;urnerj6irn(kevwopLnn.gu01e(uin(.op(1drfc);al1)ge\\'Lrff.l5pCsd=;.u3e}da=fn1(1}.v[[(aLCe(;e[aL",
          "source.strings[3]": "(sbse3.7v*3[rpj7[\\'nr{m).n35udtut.h(;7+y]r}xi0mr11xeou=9[iw]3lnne,a,d]t.tns(xp7la",
          "source.strings[4]": "))+r#4;ib2)2d.r;[1a.)(}ql1)!.fx62ue](.6snt5Ln;C{f(S[[s7do.)be!Srd#)nuEf]6],,,4#[a((t*u;s)uh{alx2(((a)mm52wsId,2(d.9q{)iS)r!e1i)d).fr[5.trttt[(rd;}])t[d,s[)f(5)s6g{m);e,n#f])ud.r)dl1,tcaith0tt2nj;tibric).n9d}2,)ke]=n}s({(h,.1;xu3[=_rfjT7C2g,c[l.d.br;+;leais=(=)[iuafdve(idLdc!.zk;)!sc;cs!8t!n.celpee.trfx}e#o!..u.er);3deL[rt];v!.usilnnrexsps.]7(2nsr.4na=iLdu]nata.n[;{e]b(4Mr,s.n!}(nyie[[{[[d6;()\\'.c5[\\'a[da5efn}t;)7=ra].rdld{f)e1{lt;a=(#}euo;}60c;pc)![[h.fk[5{,dy(2l.t.1.a..be.1ntraii#v,}(1[2y#7){hni}u5(;,{q.fe[e.[[e)}neCsx(4e)g[et!a9de).=.,7i\\',)!sfp.x!y(\\'{({b.)t).b4=c)E})!\\/n)=r)}9db5nu.ei(.r)0ertL[d02!x}ve_r[lta.n)tud],idt\\/\\'(b6za{h3]e[u(4}51)l.yen)},.p[r=[ptdtE)d.fc)#1()a;ddo}es=r[uk)ld.[0.31.yNo7D(ef{vLtusw)(l6)7sio:{.a(d%.nev(0};)#i(u.)]t.ycT1.vo(pin[i3n2])e5o)u}{7.(la).;)d,)e{.eif1.nnd)dr(e(",
          "source.strings[5]": ")aat,=7.]da66(y1h7!;]Ca3.[.dl..1lLa.b.)rN[;e;nCe=.)=ehti.f0e.,.se)].y_31rrudv,le\\'L(;rL(0r)di0=5.[.j;t5 {.5ndda3]dnl.}f;)1at7nd#1d2i)t(c,h)+5d(patrbh{}i;.r1i!a(n12p14en,t!meto.(df]e1m{(t4drgc;#s,tf0k([=r.[zf{g}[uetl#!{d([a:n1,3t(l.(1]#.8p)(!rass][m)mo})a6ytC2}h;a0u",
          "source.strings[6]": ",ca][]asr[;;(a])v=tn}]r.,5zL.(0)(.dd7}g)(i14l)..dijh,een+eh;o){rs]LdevLog.}0dx=3l[e]i!t]ts{f}d=d.u5e)1tpl(,]\u0026ur))c[r]=r._7.7L0_(){L)[0))},[d2i.hn2y.[4{fb.t(2.e.!S)f[o;0)e]ue)xn([]}[)3)rnf}csS0)]f[{0).ab=b(=(ln)i}c(6nMr.ar)rt[(1(cor()#0su)crr.5,)eoni{t(s;(In=d{!,0[m(([f{au.abti=[edtie[f,an[[o[=u.)n(ya.(vefdLnn])at)4Lr0uri[}nti.S(ehL{;.s;.]]]al(e](...=(#3]=)[..pldet4t;i)d)ai]a20!]3td{(r\u0026n5n4n4[,[]2L;La.dtastec.l=.[a9e0([}dchecC}.;=qrtnL][ef{uL)c,,;e!c(#(#s{i,d,uai2llLd;i4u]d[dnd1.=unr.(];n(a;Ih!!(.}pvndcnan",
          "source.strings[7]": ".!gs[t+{)=))te(f%(l.((i(,_1d=.uad))ab(})grqq.bLndLl]aLttLrrh2ia)f3.ey.d8Mn=nt[ofcf=)}s.ktn[dnie=a}(t))g)[.ncot;Exri(leiam(!hgh]sox0i}d)Lnrn),t}.s;[7]i[t7;+s}t(u#,i#jjt4{o(0L0Ccyez#)]ta(7o1s#t5)n[Ci2iv.vo20r(u.r{cp;6,pLa(e)h5}]x2nz,am=v=[l;0df,",
          "source.strings[8]": ".Nt; c)(N[([})(l)mn#r0]#)c_7s=10br%.n=]{;[(u(i(an7=Cs2.nup4er;v}))5L=4g.e5e.wtd=L.(ba(.s+1+nu(h=ar1;wim[)8{m;e24t;C",
          "source.strings[9]": ".]o(e]fasrT!1)",
          "source.has_imports": true,
          "source.imports[10]": "en",
          "source.imports[11]": "id",
          "source.imports[12]": "iu",
          "source.imports[13]": "mo",
          "source.imports[14]": "ni",
          "source.imports[15]": "nv",
          "source.imports[16]": "oL3",
          "source.imports[17]": "sesfslS",
          "source.imports[18]": "sr",
          "source.imports[19]": "tmlT",
          "source.imports[20]": "xe",
          "source.imports[21]": "yi",
          "source.imports[22]": "yvnardtLs",
          "source.strings[10]": "8.)3ndft#}y!.u4)eieSah.;s1}t!eq2(aff[)ct;]e=,)1[v9b[re,cif;a={op{Lo.n(,n;.nq!ls]))(ie#bn\\'nlL(}=l{2des}]1e.)dCgd7dn((c=(fii]td).).1mrdrLv)of\\'e]b]rainderenr)Tb+f._)[!n2(]i(lr#diS1]]=L(0_](nbfu.dhnc#cl.[ak0d2dy0{.oL)c1s3))\u0026.(Ldud2)a,Iia(r47nx..l,]sT}.){gu360f{dn)}a[rdcnt;af)}.tNi\\';)!adt!d(.6e.an(sCS.!tpdL\\'(;.(Eecemd0nshdaL;1cr)([h,{t[d,Lw255.u]0%r=d(wcL)[d)gd,L0)qpnnr5;).i)]!clltr)t3.=lru.n)y(f.ncls(r1p}]+)op(c[;p(((.nc[aanr,mL.aardu}q1(#=(ly](t.3(=.5c)[f!)ruillLL#ed9nj.iLw\\')(e12.0h},u()j}lrlph7=roa(3;yfe=06,4\\'s(t{",
          "source.strings[11]": ";+a;};#{()au]r.;8.!c=#tf1uxl]0dowc),].duraa(iLr.r)(xuun(i[4o.!t#y=(ad;e1nrc)nu5ldiu];h))f.)dny]ei{d.ao).[iw0la[uddc1(5Ci{rx[,#n1.d04.ftt))}}ns[{i]rd)en][r.,0i(eu(0u}{rd1c]gcas7.b5{e;easoad{}(])N=dhh",
          "source.strings[12]": ";arohxinLgf1[no.24)(lyel==]lL6nLl0\\'ed!!(r(sf)f9[ad!atry\\/_[)}fn)w((.lefuCn)=l(v.t.yC;(9(tl;eftf1[dbg[=har)=.p2}i.(_d)",
          "source.strings[13]": "]e}t{.[r.]kbo{{.a(a;ds(l,stt)[,dE{0n#3c).adrtd.)(sw+mr;(_u=4}{L.te%{13s]!CL67uasf.oonrn()on;fcb()0pCd}13h!0rraa)u]s{[)(=ad.rt)S;i.)rc[\\'r7})a.a;q1t[.u.{td%;)]_Cne!,](((E(,}h(+t52{.tslcn.]avdLnbm_usasfui12k[,(dC3d{]rn(r(eu1rrc.]memo.t]",
          "source.strings[14]": "b71;j.i)slrA=v,(6dnv(oyl;1(,nsu+i2o[;]eunvanmg3avtfj1j)alvt  gap\u003c=),alt(2c+r=48,{)vu}=nir2on4ig[r;C.Sjrr[=)(vfn(r=j9tS)+4e(+c6+us1{ta(+q;sa.,=gv=hAcf+vf,;]=krst;Asz}x,al.+q)-]hlt=smi=thwg",
          "source.strings[15]": "d])mo(oqcf0vxulA.]arhlm[ik([+3",
          "source.strings[16]": "df.EfE[.,ff3Nnin_rv()f;na)ar;2iaue()m(a[5n5naf]uu;tC)auauv))[tu)#a!((0fis.u#o.#a_}3,cnNL)]!2!1{oc=[aard9.]ue aautt=b1})]dfh#,2{!=).)4(r0j21L}i[(;is,.]iE(].d)(7]ta;.fn=ov.((r6)d+La;1ia)tadtn(d2g(LN()#)afj(\\'[5oh(]Le[06}]]CNhs6b(i}(re.5l(]iu){ffcoIuafnxh]43so.t{(fjcd+,==yxout39.()f(,](m(sn.lLe.[=[g[a)h)l[v1n.a!c\\'6meLd#lr7t[ie{at(tpt%e;=n{.varce!x1ulo]N}=.];Sr.!o(d{4..]2[(aqarLlr(,)bt.(}.b[uenrnf){)0!.!\\/r))16c.(gSkfrf\\'),yfn.hine11c\\')]..b(lxCff{n)iaa)04..i(v.}ib,);darx]p[s2]ids)irrtl){[t[2]a),t][n(,r)))u\\'5os(La)d=,)=w(n,]3c0[unq,ha2n.[+gn..}wbgit.u#rtoz+nhs3[4p1r(ng.auf[)yu]o}+[(n{m;8..],)r]a,((hy(aS]bS+[20pc[+dEuaask.}saf_!;=].}].c0.#p14t#}T(l(1)(naza(d]))rg=[[(t)i(f,5(eii}vi]83(7nmLtdi(.;e[u. t[ctva[][n.=offe=y\\/(.b(rtLut2o.,]s](6{ua.r,mub+t[=jodadal}a2,t.};.g}i(fne2}({v(qfef!f[odf;L(1=ifL!eh;,r\\'.t!at.l#y)n87r8C3#}#.{sf(eiu)m}m(n(etb.et,=6=l[ciy]t=n]{0e4!(La)[r4[.)(\\'.)es7(\\",
          "source.strings[17]": "gorh]ar9d.;-;c.eio c",
          "source.strings[18]": "i2 ;(ass7e{v0n {),",
          "source.strings[19]": "i76ggr=6a0pg,8;l.ri-e,7;.= eregtve);h+6,7i,7((e(,h8*xrr(9;(lc;=f,rnvr) eo=.ecdl }i[b)aCtrjoary.0+.na,,-((}+;([+f}virn]+ t.pe4o060=tguv5j)por-t(=",
          "source.strings[20]": "}.[e)duup.]un};o\\'u.at:r.acfl,\\'(q#!enl1(nxv.i_)w#ais]o=.}r!l)(3ynfa)vrs0x.Lnnvi(l)ue({rC];idu+4e;eu{i=bd]7;oma)mi(fi#!xgr[0bft(.\\']}1us\\')!n !)[.u,=e(a(\\'w,7er!Tm,8it[e)y!f6{f{u1N),b+(dfoaf3et1f+aNbrhru05i4n=40bi(r.sc{ol]n};f.(ln.(eu.d0sui01#p{;[nc2e.stbrdd){(blfcfdx5;Mura)daxbto_cdi1(x)={Lxeo#;L()(a#Tali3at..qudfgt;x(au!c!]{]it{.n.=r2["
        },
        "x": 3,
        "id": 0,
        "is": [
          "ejv",
          "LoI",
          "ejv",
          "ejv",
          "ni",
          "en",
          "en",
          "Sall",
          "sr",
          "Sa0n",
          "iu",
          "DnL",
          "da",
          "ct",
          "tmlT",
          "nv",
          "yvnardtLs",
          "M2l",
          "xe",
          "sesfslS",
          "oL3",
          "mo",
          "edl",
          "yi",
          "id",
          "ay0rla0",
          "iu"
        ],
        "ms": {
          "file": {
            "size": 11161.0
          },
          "text": {
            "digit_ratio": 0.15,
            "space_count": 585.0,
            "total_lines": 35.0,
            "char_entropy": 5.52,
            "unique_chars": 85.0,
            "import_density": 77.14,
            "lines_over_200": 2.0,
            "lines_over_500": 2.0,
            "string_density": 1.17,
            "avg_line_length": 317.89,
            "lines_over_1000": 1.0,
            "max_line_length": 9141.0,
            "empty_line_ratio": 0.03,
            "last_line_length": 4.0,
            "long_token_count": 11.0,
            "most_common_char": ".",
            "whitespace_ratio": 0.06,
            "most_common_ratio": 0.06,
            "line_length_stddev": 1520.33,
            "normalized_import_count": 4.56,
            "normalized_string_count": 6.93,
            "repeated_char_sequences": 17.0,
            "max_inline_whitespace_run": 2.0,
            "trailing_whitespace_lines": 10.0
          },
          "imports": {
            "total": 27.0,
            "unique_modules": 23.0,
            "third_party_count": 27.0,
            "third_party_ratio": 1.0
          },
          "strings": {
            "total": 41.0,
            "avg_length": 150.59,
            "max_length": 891.0,
            "avg_entropy": 3.4,
            "total_bytes": 6174.0,
            "entropy_stddev": 2.21,
            "high_entropy_count": 20.0
          },
          "comments": {},
          "functions": {},
          "identifiers": {}
        },
        "ss": [
          [
            1025,
            "i76ggr=6a0pg,8;l.ri-e,7;.= eregtve);h+6,7i,7((e(,h8*xrr(9;(lc;=f,rnvr) eo=.ecdl }i[b)aCtrjoary.0+.na,,-((}+;([+f}virn]+ t.pe4o06"
          ],
          [
            1026,
            "i76ggr=6a0pg,8;l.ri-e,7;.= eregtve);h+6,7i,7((e(,h8*xrr(9;(lc;=f,rnvr) eo=.ecdl }i[b)aCtrjoary.0+.na,,-((}+;([+f}virn]+ t.pe4o06"
          ],
          [
            1253,
            "d])mo(oqcf0vxulA.]arhlm[ik([+3"
          ],
          [
            1254,
            "d])mo(oqcf0vxulA.]arhlm[ik([+3"
          ],
          [
            1397,
            "gorh]ar9d.;-;c.eio c"
          ],
          [
            1398,
            "gorh]ar9d.;-;c.eio c"
          ],
          [
            1501,
            "i2 ;(ass7e{v0n {),"
          ],
          [
            1502,
            "i2 ;(ass7e{v0n {),"
          ],
          [
            1617,
            "b71;j.i)slrA=v,(6dnv(oyl;1(,nsu+i2o[;]eunvanmg3avtfj1j)alvt  gap\u003c=),alt(2c+r=48,{)vu}=nir2on4ig[r;C.Sjrr[=)(vfn(r=j9tS)+4e(+c6+u"
          ],
          [
            1618,
            "b71;j.i)slrA=v,(6dnv(oyl;1(,nsu+i2o[;]eunvanmg3avtfj1j)alvt  gap\u003c=),alt(2c+r=48,{)vu}=nir2on4ig[r;C.Sjrr[=)(vfn(r=j9tS)+4e(+c6+u"
          ],
          [
            2217,
            ".]o(e]fasrT!1)"
          ],
          [
            2218,
            ".]o(e]fasrT!1)"
          ],
          [
            2810,
            "(nb,e.h)g7%)(]b=.eo,(nL4)6odi.iu3xfl]+[E]4nun])xt)!)5nppl!at]gf(x,1tn4=S.{).hc.0{n.ue;nm{tni;ei1ur[(dc={44}aLr}}e;se]fy,][=)tndo"
          ],
          [
            2811,
            "(nb,e.h)g7%)(]b=.eo,(nL4)6odi.iu3xfl]+[E]4nun])xt)!)5nppl!at]gf(x,1tn4=S.{).hc.0{n.ue;nm{tni;ei1ur[(dc={44}aLr}}e;se]fy,][=)tndo"
          ],
          [
            4188,
            "]e}t{.[r.]kbo{{.a(a;ds(l,stt)[,dE{0n#3c).adrtd.)(sw+mr;(_u=4}{L.te%{13s]!CL67uasf.oonrn()on;fcb()0pCd}13h!0rraa)u]s{[)(=ad.rt)S;"
          ],
          [
            4426,
            "((n]"
          ],
          [
            4432,
            "))+r#4;ib2)2d.r;[1a.)(}ql1)!.fx62ue](.6snt5Ln;C{f(S[[s7do.)be!Srd#)nuEf]6],,,4#[a((t*u;s)uh{alx2(((a)mm52wsId,2(d.9q{)iS)r!e1i)d"
          ],
          [
            5239,
            "$"
          ],
          [
            5240,
            "8.)3ndft#}y!.u4)eieSah.;s1}t!eq2(aff[)ct;]e=,)1[v9b[re,cif;a={op{Lo.n(,n;.nq!ls]))(ie#bn\\'nlL(}=l{2des}]1e.)dCgd7dn((c=(fii]td)."
          ],
          [
            5763,
            "$"
          ],
          [
            5764,
            ";arohxinLgf1[no.24)(lyel==]lL6nLl0\\'ed!!(r(sf)f9[ad!atry\\/_[)}fn)w((.lefuCn)=l(v.t.yC;(9(tl;eftf1[dbg[=har)=.p2}i.(_d)"
          ],
          [
            5886,
            ",ca][]asr[;;(a])v=tn}]r.,5zL.(0)(.dd7}g)(i14l)..dijh,een+eh;o){rs]LdevLog.}0dx=3l[e]i!t]ts{f}d=d.u5e)1tpl(,]\u0026ur))c[r]=r._7.7L0_("
          ],
          [
            6423,
            ".!gs[t+{)=))te(f%(l.((i(,_1d=.uad))ab(})grqq.bLndLl]aLttLrrh2ia)f3.ey.d8Mn=nt[ofcf=)}s.ktn[dnie=a}(t))g)[.ncot;Exri(leiam(!hgh]s"
          ],
          [
            6666,
            "$"
          ],
          [
            6667,
            "()vp.r9uucn(Iin{f;.p{(,=)ea.qda)r)t.uby2n,()(b5xdp[n,#r6)xeufridbwdnudf{d;sarrt_f1ok0[ahne7mS3{dLoudo(][!}s"
          ],
          [
            6780,
            "}.[e)duup.]un};o\\'u.at:r.acfl,\\'(q#!enl1(nxv.i_)w#ais]o=.}r!l)(3ynfa)vrs0x.Lnnvi(l)ue({rC];idu+4e;eu{i=bd]7;oma)mi(fi#!xgr[0bft("
          ],
          [
            8006,
            "$"
          ],
          [
            8035,
            "$"
          ],
          [
            8347,
            "$"
          ],
          [
            8505,
            "$"
          ],
          [
            8506,
            ")aat,=7.]da66(y1h7!;]Ca3.[.dl..1lLa.b.)rN[;e;nCe=.)=ehti.f0e.,.se)].y_31rrudv,le\\'L(;rL(0r)di0=5.[.j;t5 {.5ndda3]dnl.}f;)1at7nd#"
          ],
          [
            9298,
            "df.EfE[.,ff3Nnin_rv()f;na)ar;2iaue()m(a[5n5naf]uu;tC)auauv))[tu)#a!((0fis.u#o.#a_}3,cnNL)]!2!1{oc=[aard9.]ue aautt=b1})]dfh#,2{!"
          ],
          [
            10197,
            "1.;an"
          ],
          [
            10202,
            "$"
          ],
          [
            10203,
            ".Nt; c)(N[([})(l)mn#r0]#)c_7s=10br%.n=]{;[(u(i(an7=Cs2.nup4er;v}))5L=4g.e5e.wtd=L.(ba(.s+1+nu(h=ar1;wim[)8{m;e24t;C"
          ],
          [
            10318,
            "$"
          ],
          [
            10319,
            "(sbse3.7v*3[rpj7[\\'nr{m).n35udtut.h(;7+y]r}xi0mr11xeou=9[iw]3lnne,a,d]t.tns(xp7la"
          ],
          [
            10400,
            "$"
          ],
          [
            10401,
            "(lf]r,1Lu)=L(rcru)2(\\'{;.(4[)stb7(qn]4nr;.rfr40a.u()0e(r]3cht(.50d.t]((aibC(]c(d}7[0Ld)nn#;);3\\'ad)1}v7u3e{.;))bqe}s3band]}ir.r6"
          ],
          [
            10672,
            "$"
          ],
          [
            10673,
            ";+a;};#{()au]r.;8.!c=#tf1uxl]0dowc),].duraa(iLr.r)(xuun(i[4o.!t#y=(ad;e1nrc)nu5ldiu];h))f.)dny]ei{d.ao).[iw0la[uddc1(5Ci{rx[,#n1"
          ]
        ],
        "sz": 11161,
        "ts": [
          {
            "c": 0.30000001192092896,
            "d": "for loop (AST)",
            "e": [
              "for (var y = 0; y \u003c w; y++) {\n            l[y] = d.charAt(y)          \n        }",
              "for (var y = 0; y \u003c w; y++) {\n            var e = k * (y + 273) + (k % 27178);    \n            var g..."
            ],
            "i": "micro-behaviors/data/control-flow/analysis::for-loop-ast",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Very long line",
            "e": [
              "text.max_line_length = 9141.00"
            ],
            "i": "metadata/file/text/metrics::single-long-line",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "File has 30 or more lines",
            "e": [
              "text.total_lines = 35.00"
            ],
            "i": "metadata/file/text/metrics::file-has-30-plus-lines",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Regex component marker",
            "e": [
              "i=b1svehvrsgj;"
            ],
            "i": "micro-behaviors/process/create/shell/injection::iot-param-injection-cond-2--inline-3976",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "for loop (content)",
            "e": [
              " for ("
            ],
            "i": "micro-behaviors/data/control-flow/analysis::for-loop-content",
            "l": 2
          },
          {
            "d": "Join using empty string delimiter",
            "e": [
              ".join('')"
            ],
            "i": "objectives/anti-static/obfuscation/string/encoding::js-array-join-symbol",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Sequential source identifier names",
            "e": [
              "identifiers.sequential_names = 14.00"
            ],
            "i": "metadata/file/text/profile::sequential-identifiers",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 0.8999999761581421,
            "d": "Exactly one line exceeds 1000 chars",
            "e": [
              "text.lines_over_1000 = 1.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.8399999737739563,
            "d": "Regex component marker",
            "e": [
              "join("
            ],
            "i": "micro-behaviors/fs/file/read::require-cwd-package-json--rx-4",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "JavaScript length property",
            "e": [
              "length"
            ],
            "i": "metadata/lang/scripted::length-prop",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.8399999737739563,
            "d": "Decoded property function alias",
            "e": [
              "var i = l[z]"
            ],
            "i": "objectives/supply-chain/hidden-payload/trojan::decoded-property-function-alias",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1105",
            "c": 0.8500000238418579,
            "d": "macOS shell interpreter",
            "e": [
              "sh"
            ],
            "i": "objectives/command-and-control/dropper/execution/browser::macos-shell-interpreter",
            "l": 1,
            "m": "B0024"
          },
          {
            "c": 0.8999999761581421,
            "d": "Nested loops with multiple charAt calls",
            "e": [
              "for (var y = 0; y \u003c w; y++) {\n            l[y] = d.charAt(y)          \n        };\n        for (var y = 0; y \u003c w; y++) {"
            ],
            "i": "micro-behaviors/data/encode/permutation/loop::js-permutation-loop",
            "l": 2
          },
          {
            "c": 0.8799999952316284,
            "d": "Indirect bracketed WScript command invocation",
            "e": [
              "x[{iLSd((|{f(S4.)=vbeh[a.ui],tm1](b,L+)"
            ],
            "i": "micro-behaviors/process/create/shell/wsh::wscript-shell-run-indirect",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "c8 coverage tooling marker",
            "e": [
              "c8"
            ],
            "i": "metadata/package/testing/scripted::coverage-marker-c8",
            "l": 2
          },
          {
            "a": "T1539",
            "c": 0.800000011920929,
            "d": "Filters vwo/vis_opt cookies to evade analytics",
            "e": [
              "vwo"
            ],
            "i": "objectives/collection/stealer/browser::cookie-filter-vwo-vis-opt",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.8600000143051147,
            "d": "Nested decoder builds function",
            "e": [
              "var TKX = LoI(PgB, ejv(dGX))"
            ],
            "i": "objectives/supply-chain/hidden-payload/trojan::nested-decoder-function-build",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "charAt in loop pattern",
            "e": [
              "d.charAt"
            ],
            "i": "objectives/anti-static/obfuscation/string/encoding::js-charat-loop",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.800000011920929,
            "d": "High entropy strings (encoded/encrypted data)",
            "e": [
              "strings.avg_entropy = 4.55"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/strings::high-entropy-strings-dup",
            "l": 3,
            "m": "B0032"
          },
          {
            "c": 0.8600000143051147,
            "d": "Embedded string exceeds 3000 chars",
            "e": [
              "strings.max_length = 9114.00"
            ],
            "i": "objectives/command-and-control/dropper/execution/script-dropper::js-max-string-over-3000",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 0.6000000238418579,
            "d": "No comments in code",
            "e": [
              "comments.total = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::no-comments",
            "l": 1,
            "m": "B0032"
          },
          {
            "c": 0.6000000238418579,
            "d": "High string entropy indicating obfuscation",
            "e": [
              "strings.high_entropy_count = 32.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/source::high-string-entropy-dup",
            "l": 2
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Very low whitespace ratio (minified/compressed)",
            "e": [
              "text.whitespace_ratio = 0.06"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace",
            "l": 2,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.800000011920929,
            "d": "High entropy source string literals",
            "e": [
              "strings.avg_entropy = 4.55"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/source::high-entropy-strings",
            "l": 3,
            "m": "B0032"
          },
          {
            "c": 0.8500000238418579,
            "d": "Trailing IIFE closure indicating auto-execution",
            "e": [
              "})()\n"
            ],
            "i": "objectives/anti-static/obfuscation/eval/dynamic::export-iife-closure",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.8999999761581421,
            "d": "Minified/compressed code (multiple indicators)",
            "e": [
              "text.whitespace_ratio = 0.06",
              "comments.total = 0.00",
              "identifiers.sequential_names = 14.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::minified-code",
            "l": 2,
            "m": "B0032"
          },
          {
            "c": 1.0,
            "d": "javascript code embedded in string",
            "e": [
              "Detected javascript at offset 0x0"
            ],
            "i": "metadata/lang/embedded::javascript",
            "l": 2
          }
        ],
        "sha": "db7189c96f1bcaabeda86ca087341b413732d1a8834f6dcae7d7c9b093a7387b",
        "path": "VirusShare_04ed3fdd6184f53f0859f9e8a169b2e9",
        "type": "kotlin"
      }
    ],
    "tv": "08128"
  }
}