{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9982656836509705, "class": 2 } ], "prob": 0.9982657, "class": 2, "models": [ { "m": "az", "prob": 0.85889155, "class": 0 }, { "m": "az/scripts", "prob": 0.97906744, "class": 0 }, { "m": "az/javascript", "prob": 0.9982657, "class": 2 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-06T14:54:03Z" }, "path": "20170219_63673c54626ff8b38eeea5e870c17f8f.js", "raw": { "v": "4", "fs": [ { "f": "KO₅(As₈Xe₂CErS₂)H₂(DbPo₃)Md", "k": { "source.imports[0]": "Number", "source.imports[1]": "abek", "source.imports[2]": "abinva", "source.imports[3]": "absobj", "source.imports[4]": "acmamf", "source.imports[5]": "adqudef", "source.imports[6]": "adygwen", "source.imports[7]": "afjeqsadg", "source.imports[8]": "agdakik", "source.imports[9]": "agijx", "source.has_imports": true, "source.imports[10]": "agojni", "source.imports[11]": "ahira", "source.imports[12]": "ahjarp", "source.imports[13]": "ajxugh", "source.imports[14]": "akesw", "source.imports[15]": "akgyqdohm", "source.imports[16]": "alhuqfadk", "source.imports[17]": "apeqs", "source.imports[18]": "aqhajn", "source.imports[19]": "aqoxryzn", "source.imports[20]": "aqxuhxe", "source.imports[21]": "aradimb", "source.imports[22]": "ardytte", "source.imports[23]": "atomxi", "source.imports[24]": "atsexkuln", "source.imports[25]": "avnexavn", "source.imports[26]": "avnyg", "source.imports[27]": "awfytu", "source.imports[28]": "axadka", "source.imports[29]": "axatn", "source.imports[30]": "axsicsusn", "source.imports[31]": "azaff", "source.imports[32]": "azidmo", "source.imports[33]": "azycraz", "source.imports[34]": "bawgow", "source.imports[35]": "biqquwy", "source.imports[36]": "bkyxehhu", "source.imports[37]": "bnoviju", "source.imports[38]": "bwabimn", "source.imports[39]": "byra", "source.imports[40]": "cakdymbu", "source.imports[41]": "cawgags", "source.imports[42]": "cekojw", "source.imports[43]": "cgicuh", "source.imports[44]": "choba", "source.imports[45]": "comovx", "source.imports[46]": "compynx", "source.imports[47]": "cowviwi", "source.imports[48]": "cozxi", "source.imports[49]": "cpuwaq", "source.imports[50]": "ctuvve", "source.imports[51]": "cuher", "source.imports[52]": "cuzpa", "source.imports[53]": "cvipkocy", "source.imports[54]": "cwaqyf", "source.imports[55]": "cwatmyzu", "source.imports[56]": "cwektyne", "source.imports[57]": "cyzy", "source.imports[58]": "czibmiba", "source.imports[59]": "dagytq", "source.imports[60]": "denuvc", "source.imports[61]": "dhydny", "source.imports[62]": "dmigqev", "source.imports[63]": "dxusehja", "source.imports[64]": "dypzy", "source.imports[65]": "dyzuz", "source.imports[66]": "ebsihg", "source.imports[67]": "ecarji", "source.imports[68]": "ecebi", "source.imports[69]": "ecile", "source.imports[70]": "edagv", "source.imports[71]": "edehw", "source.imports[72]": "efmosmi", "source.imports[73]": "efzin", "source.imports[74]": "egabrob", "source.imports[75]": "egatwep", "source.imports[76]": "egidy", "source.imports[77]": "egvamn", "source.imports[78]": "egvixtin", "source.imports[79]": "ehloc", "source.imports[80]": "ehvevon", "source.imports[81]": "ejmocc", "source.imports[82]": "ejozry", "source.imports[83]": "emytijg", "source.imports[84]": "engutfu", "source.imports[85]": "eriwur", "source.imports[86]": "erohwot", "source.imports[87]": "erwoku", "source.imports[88]": "esvuqr", "source.imports[89]": "evmyf", "source.imports[90]": "evyb", "source.imports[91]": "ewfukho", "source.imports[92]": "ewidy", "source.imports[93]": "ewigo", "source.imports[94]": "ewreqw", "source.imports[95]": "ewuziv", "source.imports[96]": "exero", "source.imports[97]": "ezazyn", "source.imports[98]": "fdikodt", "source.imports[99]": "fgudkid", "source.imports[100]": "fiqxiz", "source.imports[101]": "foqink", "source.imports[102]": "fovidh", "source.imports[103]": "fviscyxa", "source.imports[104]": "fvuce", "source.imports[105]": "fzyfymu", "source.imports[106]": "ganmo", "source.imports[107]": "gfojfuv", "source.imports[108]": "gizkehce", "source.imports[109]": "gkerudy", "source.imports[110]": "govno", "source.imports[111]": "gozakfo", "source.imports[112]": "gunu", "source.imports[113]": "guzzoh", "source.imports[114]": "gvofe", "source.imports[115]": "gyhsohu", "source.imports[116]": "gykek", "source.imports[117]": "gziqofg", "source.imports[118]": "haxery", "source.imports[119]": "hdepa", "source.imports[120]": "hsajxykle", "source.imports[121]": "htycy", "source.imports[122]": "humvyzw", "source.imports[123]": "hxyqinty", "source.imports[124]": "hzephywm", "source.imports[125]": "ibas", "source.imports[126]": "ibbecozj", "source.imports[127]": "ibopt", "source.imports[128]": "icjub", "source.imports[129]": "iczagciv", "source.imports[130]": "ifyvc", "source.imports[131]": "igduzo", "source.imports[132]": "ihdyxubv", "source.imports[133]": "ijangelh", "source.imports[134]": "ijeji", "source.imports[135]": "ijikasd", "source.imports[136]": "ikox", "source.imports[137]": "ikpus", "source.imports[138]": "ilkegymp", "source.imports[139]": "ilody", "source.imports[140]": "imob", "source.imports[141]": "inlalucb", "source.imports[142]": "ipgepp", "source.imports[143]": "iqese", "source.imports[144]": "iqetnor", "source.imports[145]": "issywic", "source.imports[146]": "isugo", "source.imports[147]": "itvepxa", "source.imports[148]": "ivacwop", "source.imports[149]": "ivnisp", "source.imports[150]": "ivoxo", "source.imports[151]": "ivuvvydz", "source.imports[152]": "iwega", "source.imports[153]": "iwopd", "source.imports[154]": "ixjemirw", "source.imports[155]": "ixlixw", "source.imports[156]": "izil", "source.imports[157]": "jawetn", "source.imports[158]": "jejmeh", "source.imports[159]": "jepwa", "source.imports[160]": "jihbozo", "source.imports[161]": "jmabyh", "source.imports[162]": "jmugotz", "source.imports[163]": "jnilfavi", "source.imports[164]": "jollyhy", "source.imports[165]": "jomysl", "source.imports[166]": "jpava", "source.imports[167]": "jteqfi", "source.imports[168]": "jtiry", "source.imports[169]": "juhna", "source.imports[170]": "juxa", "source.imports[171]": "juxefge", "source.imports[172]": "jvefky", "source.imports[173]": "jwewcoxry", "source.imports[174]": "jyhycc", "source.imports[175]": "jykow", "source.imports[176]": "jyve", "source.imports[177]": "jzunpi", "source.imports[178]": "kagvinc", "source.imports[179]": "kakqy", "source.imports[180]": "kawpivgi", "source.imports[181]": "kilhiqf", "source.imports[182]": "kkabat", "source.imports[183]": "kohuzw", "source.imports[184]": "kortyxmy", "source.imports[185]": "kpavy", "source.imports[186]": "kruli", "source.imports[187]": "ktixgasjo", "source.imports[188]": "kwylribi", "source.imports[189]": "kyfmi", "source.imports[190]": "kyhe", "source.imports[191]": "kytcomc", "source.imports[192]": "kzafpampi", "source.imports[193]": "lejyhe", "source.imports[194]": "leru", "source.imports[195]": "lfonyfmy", "source.imports[196]": "lhicgann", "source.imports[197]": "lunamu", "source.imports[198]": "lwuxlaq", "source.imports[199]": "mbecahu", "source.imports[200]": "mexafpu", "source.imports[201]": "mherdapu", "source.imports[202]": "mjiqnove", "source.imports[203]": "mnese", "source.imports[204]": "mosid", "source.imports[205]": "motude", "source.imports[206]": "mrume", "source.imports[207]": "mtodgo", "source.imports[208]": "mvemlyti", "source.imports[209]": "mvyqnu", "source.imports[210]": "mwugobv", "source.imports[211]": "mydi", "source.imports[212]": "mysum", "source.imports[213]": "nakow", "source.imports[214]": "narbirne", "source.imports[215]": "nbavsy", "source.imports[216]": "ndawuhko", "source.imports[217]": "neto", "source.imports[218]": "nexfaq", "source.imports[219]": "nopof", "source.imports[220]": "nuqiq", "source.imports[221]": "nusruwse", "source.imports[222]": "nxunmyp", "source.imports[223]": "nxuwhamxe", "source.imports[224]": "nyhawa", "source.imports[225]": "nyrott", "source.imports[226]": "ocer", "source.imports[227]": "odgyswy", "source.imports[228]": "odvotyb", "source.imports[229]": "ogfufhih", "source.imports[230]": "ogud", "source.imports[231]": "ogyxw", "source.imports[232]": "ohyr", "source.imports[233]": "ojbyxbenp", "source.imports[234]": "ojek", "source.imports[235]": "ojwomaf", "source.imports[236]": "okiwme", "source.imports[237]": "oldusanm", "source.imports[238]": "oligpe", "source.imports[239]": "olodru", "source.imports[240]": "olycs", "source.imports[241]": "olywi", "source.imports[242]": "onutd", "source.imports[243]": "opiznexl", "source.imports[244]": "oqrer", "source.imports[245]": "oqxiqkahs", "source.imports[246]": "orevywc", "source.imports[247]": "ormiq", "source.imports[248]": "osdecse", "source.imports[249]": "ossejzy", "source.imports[250]": "ovex", "source.imports[251]": "oviw", "source.imports[252]": "ovpet", "source.imports[253]": "owefa", "source.imports[254]": "oxjubi", "source.imports[255]": "oxyww", "source.imports[256]": "ozikaxl", "source.imports[257]": "ozohe", "source.imports[258]": "oztiry", "source.imports[259]": "ozut", "source.imports[260]": "ozybj", "source.imports[261]": "ozymomb", "source.imports[262]": "pcaxevpo", "source.imports[263]": "pdatamke", "source.imports[264]": "pejowny", "source.imports[265]": "pepa", "source.imports[266]": "peqmul", "source.imports[267]": "phijni", "source.imports[268]": "pigekl", "source.imports[269]": "pkafybv", "source.imports[270]": "popibu", "source.imports[271]": "pqunavky", "source.imports[272]": "prany", "source.imports[273]": "qiza", "source.imports[274]": "qjacho", "source.imports[275]": "qlere", "source.imports[276]": "qlujlun", "source.imports[277]": "qmuvy", "source.imports[278]": "qotfur", "source.imports[279]": "qsidhan", "source.imports[280]": "qurzyv", "source.imports[281]": "qvodehmo", "source.imports[282]": "radbuwbo", "source.imports[283]": "rafa", "source.imports[284]": "rgahko", "source.imports[285]": "rhyxox", "source.imports[286]": "ridto", "source.imports[287]": "rizo", "source.imports[288]": "rlemxi", "source.imports[289]": "rlysycxy", "source.imports[290]": "robizi", "source.imports[291]": "rpymo", "source.imports[292]": "rujtawje", "source.imports[293]": "rurnyf", "source.imports[294]": "rxiklo", "source.imports[295]": "rxozhuxw", "source.imports[296]": "satfa", "source.imports[297]": "scuju", "source.imports[298]": "sdawvym", "source.imports[299]": "sebzo", "source.imports[300]": "secvavqa", "source.imports[301]": "seqeg", "source.imports[302]": "shitxiso", "source.imports[303]": "simpocn", "source.imports[304]": "siqzexn", "source.imports[305]": "sofofi", "source.imports[306]": "sucnetru", "source.imports[307]": "taclycm", "source.imports[308]": "tbyczo", "source.imports[309]": "tdezy", "source.imports[310]": "thojan", "source.imports[311]": "tijol", "source.imports[312]": "tiqefi", "source.imports[313]": "tivaxde", "source.imports[314]": "tjirqyzo", "source.imports[315]": "toxowj", "source.imports[316]": "tqimlu", "source.imports[317]": "ttekasy", "source.imports[318]": "txari", "source.imports[319]": "txovvipj", "source.imports[320]": "tytolt", "source.imports[321]": "ubwylu", "source.imports[322]": "ubyw", "source.imports[323]": "ucgypcic", "source.imports[324]": "udgivitw", "source.imports[325]": "udib", "source.imports[326]": "udixqoh", "source.imports[327]": "udvegp", "source.imports[328]": "ugdig", "source.imports[329]": "ugokg", "source.imports[330]": "uhsun", "source.imports[331]": "uhydj", "source.imports[332]": "ukmyl", "source.imports[333]": "ukpyf", "source.imports[334]": "ulhywda", "source.imports[335]": "ulyrw", "source.imports[336]": "umamhor", "source.imports[337]": "umardiql", "source.imports[338]": "umxoswalg", "source.imports[339]": "unapj", "source.imports[340]": "unnigx", "source.imports[341]": "unsysixx", "source.imports[342]": "upzoc", "source.imports[343]": "uqapi", "source.imports[344]": "usmockujl", "source.imports[345]": "usufufn", "source.imports[346]": "utibzurl", "source.imports[347]": "uvefvup", "source.imports[348]": "uwwajby", "source.imports[349]": "uxeg", "source.imports[350]": "uxregi", "source.imports[351]": "uzkywmu", "source.imports[352]": "uznypvog", "source.imports[353]": "vasqemw", "source.imports[354]": "vavtis", "source.imports[355]": "vegyji", "source.imports[356]": "vevronb", "source.imports[357]": "vhana", "source.imports[358]": "vnakloph", "source.imports[359]": "vroka", "source.imports[360]": "vtajoje", "source.imports[361]": "vudcabm", "source.imports[362]": "vwexxuwwe", "source.imports[363]": "vyhlozk", "source.imports[364]": "wabkoc", "source.imports[365]": "wgaretce", "source.imports[366]": "whiwfign", "source.imports[367]": "wnavazu", "source.imports[368]": "wnulo", "source.imports[369]": "wodys", "source.imports[370]": "wofo", "source.imports[371]": "wxiri", "source.imports[372]": "xecdyjn", "source.imports[373]": "xfoqcyty", "source.imports[374]": "xibo", "source.imports[375]": "xihymd", "source.imports[376]": "xmiqra", "source.imports[377]": "xnaqe", "source.imports[378]": "xnityzy", "source.imports[379]": "xojys", "source.imports[380]": "xongylx", "source.imports[381]": "xoqapki", "source.imports[382]": "xpojmuh", "source.imports[383]": "xsyqebo", "source.imports[384]": "xxebsy", "source.imports[385]": "ybahbo", "source.imports[386]": "ybjyme", "source.imports[387]": "ybrepb", "source.imports[388]": "ycuqtof", "source.imports[389]": "ydgedsu", "source.imports[390]": "ydmocu", "source.imports[391]": "ydvac", "source.imports[392]": "ydybit", "source.imports[393]": "ygdyqli", "source.imports[394]": "ygep", "source.imports[395]": "ygkujo", "source.imports[396]": "ygukir", "source.imports[397]": "yjovg", "source.imports[398]": "yjovg.xnityzy", "source.imports[399]": "yjuc", "source.imports[400]": "ykenl", "source.imports[401]": "ykiwmuz", "source.imports[402]": "ymaz", "source.imports[403]": "ynet", "source.imports[404]": "ypjeph", "source.imports[405]": "yqmiki", "source.imports[406]": "yspefr", "source.imports[407]": "ytadsu", "source.imports[408]": "ytdykot", "source.imports[409]": "ytomaq", "source.imports[410]": "ytqepezw", "source.imports[411]": "yvqagwi", "source.imports[412]": "yvykumg", "source.imports[413]": "yxkotfo", "source.imports[414]": "yzvec", "source.imports[415]": "zama", "source.imports[416]": "zekpi", "source.imports[417]": "zihmylv", "source.imports[418]": "zijboz", "source.imports[419]": "zofo", "source.imports[420]": "zsuqcamw" }, "x": 67, "id": 0, "is": [ "nakow", "Number", "abinva", "Number", "uhsun", "Number", "Number", "Number", "dhydny", "Number", "Number", "Number", "uqapi", "Number", "Number", "afjeqsadg", "Number", "unsysixx", "Number", "Number", "ewuziv", "Number", "ebsihg", "Number", "Number", "oxjubi", "Number", "Number", "Number", "upzoc", "Number", "ojbyxbenp", "Number", "kwylribi", "Number", "Number", "Number", "nopof", "Number", "Number", "Number", "vnakloph", "Number", "Number", "Number", "evmyf", "Number", "xnaqe", "Number", "tivaxde", "abek", "oqrer", "kyhe", "vyhlozk", "ydgedsu", "uxregi", "wgaretce", "owefa", "ytomaq", "robizi", "cwaqyf", "pdatamke", "xongylx", "denuvc", "ybjyme", "ijeji", "ovpet", "wnulo", "vudcabm", "ewigo", "xpojmuh", "mydi", "gvofe", "rxiklo", "tqimlu", "sebzo", "cuzpa", "nuqiq", "guzzoh", "aradimb", "shitxiso", "yvqagwi", "orevywc", "ixjemirw", "cuher", "jepwa", "umxoswalg", "ikox", "kohuzw", "govno", "tbyczo", "yjuc", "ajxugh", "ugokg", "jihbozo", "kzafpampi", "ygdyqli", "radbuwbo", "izil", "adqudef", "issywic", "jpava", "jwewcoxry", "cvipkocy", "foqink", "zekpi", "nbavsy", "ytqepezw", "nexfaq", "popibu", "hzephywm", "jyve", "ygep", "olywi", "mexafpu", "rpymo", "ejmocc", "txovvipj", "cowviwi", "peqmul", "ilody", "hsajxykle", "ctuvve", "vavtis", "humvyzw", "mbecahu", "ifyvc", "emytijg", "mtodgo", "lfonyfmy", "rafa", "nyhawa", "unnigx", "ibbecozj", "egvamn", "juxa", "ijangelh", "ikpus", "ejozry", "vasqemw", "rurnyf", "iqese", "xoqapki", "ardytte", "ixlixw", "wofo", "atomxi", "ukpyf", "axadka", "gfojfuv", "sucnetru", "jtiry", "vwexxuwwe", "ehloc", "awfytu", "txari", "xihymd", "ozybj", "mnese", "ozikaxl", "fiqxiz", "kruli", "cyzy", "jejmeh", "gizkehce", "kakqy", "engutfu", "egabrob", "qlujlun", "ibopt", "uzkywmu", "mosid", "pqunavky", "ormiq", "acmamf", "icjub", "zofo", "ecile", "oztiry", "edagv", "whiwfign", "exero", "hxyqinty", "kkabat", "rhyxox", "mysum", "gkerudy", "pejowny", "iczagciv", "narbirne", "ijikasd", "udib", "ubyw", "phijni", "qvodehmo", "ihdyxubv", "efzin", "kyfmi", "oqxiqkahs", "jteqfi", "scuju", "umardiql", "ivacwop", "okiwme", "umamhor", "fdikodt", "oldusanm", "czibmiba", "bkyxehhu", "ridto", "vroka", "ydmocu", "qlere", "ogud", "qotfur", "ohyr", "secvavqa", "aqoxryzn", "qiza", "ozymomb", "ecarji", "fvuce", "bawgow", "ydvac", "ehvevon", "ipgepp", "yxkotfo", "ygkujo", "thojan", "ndawuhko", "tytolt", "pigekl", "rizo", "rujtawje", "lejyhe", "ykiwmuz", "wabkoc", "nusruwse", "juxefge", "cawgags", "aqhajn", "rlysycxy", "ivuvvydz", "ytadsu", "uhydj", "egidy", "ibas", "vegyji", "egatwep", "simpocn", "fovidh", "ogfufhih", "cgicuh", "zihmylv", "gozakfo", "odvotyb", "comovx", "inlalucb", "iwopd", "erohwot", "jawetn", "mvyqnu", "tiqefi", "bnoviju", "ybrepb", "ubwylu", "uxeg", "azidmo", "jvefky", "kawpivgi", "siqzexn", "gunu", "xojys", "ulyrw", "fgudkid", "tjirqyzo", "ecebi", "ivnisp", "toxowj", "rgahko", "yqmiki", "odgyswy", "ovex", "iwega", "xxebsy", "axatn", "tdezy", "avnexavn", "evyb", "akesw", "jykow", "ozut", "ukmyl", "seqeg", "mjiqnove", "vtajoje", "oxyww", "qurzyv", "pepa", "efmosmi", "fzyfymu", "usufufn", "nxuwhamxe", "agojni", "ojwomaf", "ivoxo", "qjacho", "motude", "ypjeph", "nxunmyp", "cwektyne", "vhana", "oviw", "ynet", "qsidhan", "udvegp", "jmabyh", "xfoqcyty", "akgyqdohm", "gziqofg", "ilkegymp", "kagvinc", "byra", "ktixgasjo", "rlemxi", "ucgypcic", "kortyxmy", "azycraz", "yzvec", "iqetnor", "ycuqtof", "kpavy", "ossejzy", "mherdapu", "ybahbo", "ocer", "jyhycc", "jzunpi", "dagytq", "yvykumg", "ganmo", "wxiri", "ttekasy", "ogyxw", "eriwur", "yspefr", "aqxuhxe", "dxusehja", "gykek", "neto", "bwabimn", "ahjarp", "kilhiqf", "mwugobv", "prany", "zsuqcamw", "haxery", "rxozhuxw", "xibo", "jollyhy", "cakdymbu", "zama", "absobj", "ozohe", "uwwajby", "taclycm", "dypzy", "atsexkuln", "lhicgann", "opiznexl", "ygukir", "sdawvym", "ewfukho", "wodys", "onutd", "juhna", "cpuwaq", "xecdyjn", "olodru", "uznypvog", "isugo", "dmigqev", "udixqoh", "ahira", "lwuxlaq", "vevronb", "axsicsusn", "erwoku", "jomysl", "ewidy", "ulhywda", "hdepa", "fviscyxa", "xmiqra", "dyzuz", "ykenl", "htycy", "jnilfavi", "zijboz", "nyrott", "usmockujl", "lunamu", "ytdykot", "xsyqebo", "edehw", "compynx", "apeqs", "ugdig", "osdecse", "oligpe", "agdakik", "biqquwy", "sofofi", "uvefvup", "kytcomc", "esvuqr", "wnavazu", "igduzo", "leru", "azaff", "gyhsohu", "egvixtin", "adygwen", "pcaxevpo", "utibzurl", "cekojw", "ojek", "itvepxa", "cwatmyzu", "pkafybv", "agijx", "satfa", "avnyg", "alhuqfadk", "qmuvy", "udgivitw", "ymaz", "tijol", "olycs", "cozxi", "mvemlyti", "imob", "jmugotz", "ezazyn", "ydybit", "choba", "xnityzy", "unapj", "ewreqw", "yjovg", "mrume", "yjovg.xnityzy" ], "ms": { "file": { "size": 23894.0 }, "text": { "tab_count": 3.0, "digit_ratio": 0.09, "space_count": 2913.0, "total_lines": 423.0, "char_entropy": 5.09, "unique_chars": 71.0, "import_density": 106.86, "lines_over_200": 2.0, "lines_over_500": 1.0, "string_density": 1.93, "avg_line_length": 55.49, "lines_over_1000": 1.0, "max_line_length": 4615.0, "last_line_length": 3.0, "most_common_char": "r", "whitespace_ratio": 0.14, "most_common_ratio": 0.06, "identifier_density": 3.92, "line_length_stddev": 222.38, "normalized_import_count": 21.98, "normalized_string_count": 39.72, "suspicious_comment_ratio": 0.67, "max_inline_whitespace_run": 2.0, "normalized_unique_identifiers": 48.37 }, "imports": { "total": 452.0, "unique_modules": 421.0, "third_party_count": 452.0, "third_party_ratio": 1.0 }, "strings": { "total": 817.0, "avg_length": 3.79, "max_length": 4.0, "path_count": 2.0, "avg_entropy": 1.87, "total_bytes": 3098.0, "entropy_stddev": 0.3 }, "comments": { "chars": 181.0, "lines": 3.0, "total": 3.0, "to_code_ratio": 0.01, "high_entropy_comments": 2.0 }, "functions": {}, "identifiers": { "total": 1658.0, "avg_length": 6.21, "max_length": 9.0, "min_length": 4.0, "avg_entropy": 2.42, "reuse_ratio": 0.25, "unique_count": 422.0, "length_stddev": 1.3, "all_lowercase_ratio": 0.99 } }, "ss": [ [ 13, "^if" ], [ 14, "^if" ], [ 47, "zc=" ], [ 48, "zc=" ], [ 91, "ufuf" ], [ 92, "ufuf" ], [ 147, "ksut" ], [ 148, "ksut" ], [ 202, "yjby" ], [ 203, "yjby" ], [ 250, "pc+$" ], [ 251, "pc+$" ], [ 286, "$jme" ], [ 287, "$jme" ], [ 331, "; I" ], [ 332, "; I" ], [ 354, "jn+$" ], [ 355, "jn+$" ], [ 432, "= " ], [ 433, "= " ], [ 454, "nj+$" ], [ 455, "nj+$" ], [ 502, "='^y" ], [ 503, "='^y" ], [ 560, "fynx" ], [ 561, "fynx" ], [ 582, ";$c" ], [ 583, ";$c" ], [ 673, "//';" ], [ 674, "//';" ], [ 706, "^ypa" ], [ 707, "^ypa" ], [ 739, "+$ux" ], [ 740, "+$ux" ], [ 763, "nihe" ], [ 764, "nihe" ], [ 806, "Shel" ], [ 807, "Shel" ], [ 861, "ezox" ], [ 862, "ezox" ], [ 904, "gus+" ], [ 905, "gus+" ], [ 950, "es';" ], [ 951, "es';" ], [ 985, "='^s" ], [ 986, "='^s" ], [ 1019, "bzeh" ], [ 1020, "bzeh" ], [ 1066, "yxbo" ], [ 1067, "yxbo" ], [ 1110, ";$aw" ], [ 1111, ";$aw" ], [ 1144, "rt-" ], [ 1145, "rt-" ], [ 1178, "ty+$" ], [ 1179, "ty+$" ], [ 1223, "fzyt" ], [ 1224, "fzyt" ], [ 1281, "^nlo" ], [ 1282, "^nlo" ], [ 1338, "^Do" ], [ 1339, "^Do" ], [ 1372, "ym+$" ], [ 1373, "ym+$" ], [ 1428, "Scri" ], [ 1429, "Scri" ], [ 1494, "cyt=" ], [ 1495, "cyt=" ], [ 1538, "$fhy" ], [ 1539, "$fhy" ], [ 1560, "ist." ], [ 1561, "ist." ], [ 1606, "h='^" ], [ 1607, "h='^" ], [ 1672, "diks" ], [ 1673, "diks" ], [ 1718, "$ytz" ], [ 1719, "$ytz" ], [ 1750, "$pwi" ], [ 1751, "$pwi" ], [ 1805, "='^/" ], [ 1806, "='^/" ], [ 1850, "GetB" ], [ 1851, "GetB" ], [ 1906, "he=" ], [ 1907, "he=" ], [ 1939, "ovw+" ], [ 1940, "ovw+" ], [ 1994, "e-Ex" ], [ 1995, "e-Ex" ], [ 2027, "^ath" ], [ 2028, "^ath" ], [ 2094, ".';$" ], [ 2095, ".';$" ], [ 2118, "o+$x" ], [ 2119, "o+$x" ], [ 2165, "op';" ], [ 2166, "op';" ], [ 2200, "lse " ], [ 2201, "lse " ], [ 2246, "='^a" ], [ 2247, "='^a" ], [ 2282, "ukys" ], [ 2283, "ukys" ], [ 2315, ";$ob" ], [ 2316, ";$ob" ], [ 2359, " Pr" ], [ 2360, " Pr" ], [ 2396, " tru" ], [ 2397, " tru" ], [ 2417, ";$j" ], [ 2418, ";$j" ], [ 2462, "v+$f" ], [ 2463, "v+$f" ], [ 2506, "yfoc" ], [ 2507, "yfoc" ], [ 2551, "$zmy" ], [ 2552, "$zmy" ], [ 2572, "gozo" ], [ 2573, "gozo" ], [ 2606, "mwek" ], [ 2607, "mwek" ], [ 2639, "jw+$" ], [ 2640, "jw+$" ], [ 2685, ";$wz" ], [ 2686, ";$wz" ], [ 2711, "l';$" ], [ 2712, "l';$" ], [ 2768, "^ec" ], [ 2769, "^ec" ], [ 2815, "-Ob" ], [ 2816, "-Ob" ], [ 2858, "howv" ], [ 2859, "howv" ], [ 2904, "po';" ], [ 2905, "po';" ], [ 2939, "kysu" ], [ 2940, "kysu" ], [ 3005, "='^:" ], [ 3006, "='^:" ], [ 3075, "$uja" ], [ 3076, "$uja" ], [ 3122, "d+$z" ], [ 3123, "d+$z" ], [ 3156, "ju=" ], [ 3157, "ju=" ], [ 3200, "aqa=" ], [ 3201, "aqa=" ], [ 3234, "qvyk" ], [ 3235, "qvyk" ], [ 3270, "ygus" ], [ 3271, "ygus" ], [ 3348, "ct" ], [ 3349, "ct" ], [ 3391, "c';$" ], [ 3392, "c';$" ], [ 3427, "alfe" ], [ 3428, "alfe" ], [ 3448, "ntiq" ], [ 3449, "ntiq" ], [ 3491, "e';$" ], [ 3492, "e';$" ], [ 3568, ";$yk" ], [ 3569, ";$yk" ], [ 3614, "je+$" ], [ 3615, "je+$" ], [ 3658, ";$o" ], [ 3659, ";$o" ], [ 3681, "F';$" ], [ 3682, "F';$" ], [ 3739, "stok" ], [ 3740, "stok" ], [ 3807, "c='^" ], [ 3808, "c='^" ], [ 3852, "ytzo" ], [ 3853, "ytzo" ], [ 3896, "u+$y" ], [ 3897, "u+$y" ], [ 3944, "foke" ], [ 3945, "foke" ], [ 3978, "='^p" ], [ 3979, "='^p" ], [ 4034, "powe" ], [ 4035, "powe" ], [ 4080, "+$oj" ], [ 4081, "+$oj" ], [ 4126, " ($a" ], [ 4127, " ($a" ], [ 4181, "vw=" ], [ 4182, "vw=" ], [ 4238, "\\" ], [ 4270, "v='^" ], [ 4271, "v='^" ], [ 4317, "rshe" ], [ 4318, "rshe" ], [ 4349, "gyf=" ], [ 4350, "gyf=" ], [ 4372, "ute" ], [ 4373, "ute" ], [ 4417, ";$ib" ], [ 4418, ";$ib" ], [ 4464, "$cmo" ], [ 4465, "$cmo" ], [ 4487, "^xe" ], [ 4488, "^xe" ], [ 4552, "pres" ], [ 4553, "pres" ], [ 4599, "); " ], [ 4600, "); " ], [ 4632, "tiqe" ], [ 4633, "tiqe" ], [ 4688, "teOb" ], [ 4689, "teOb" ], [ 4723, "oz=" ], [ 4724, "oz=" ], [ 4746, "^bc" ], [ 4747, "^bc" ], [ 4801, "afod" ], [ 4802, "afod" ], [ 4858, " S';" ], [ 4859, " S';" ], [ 4904, "yjby" ], [ 4905, "yjby" ], [ 4960, "th';" ], [ 4961, "th';" ], [ 4992, "u';$" ], [ 4993, "u';$" ], [ 5037, "^ad" ], [ 5038, "^ad" ], [ 5081, "^tio" ], [ 5082, "^tio" ], [ 5126, "mbed" ], [ 5127, "mbed" ], [ 5161, "gand" ], [ 5162, "gand" ], [ 5197, "mu+$" ], [ 5198, "mu+$" ], [ 5241, "tuku" ], [ 5242, "tuku" ], [ 5300, "edsu" ], [ 5301, "edsu" ], [ 5344, ";$h" ], [ 5345, ";$h" ], [ 5389, "e+$x" ], [ 5390, "e+$x" ], [ 5444, "fufo" ], [ 5445, "fufo" ], [ 5522, "^ss" ], [ 5523, "^ss" ], [ 5566, "te" ], [ 5567, "te" ], [ 5610, "^-S" ], [ 5611, "^-S" ], [ 5645, "$opn" ], [ 5646, "$opn" ], [ 5690, "ject" ] ], "sz": 23894, "ts": [ { "c": 1.0, "d": "Regex component marker", "e": [ "mrume = ezazyn;" ], "i": "micro-behaviors/process/create/shell/injection::iot-param-injection-cond-2--inline-3976", "l": 1 }, { "c": 0.800000011920929, "d": "JScript file type (WScript host)", "e": [ "WScript" ], "i": "micro-behaviors/process/interpreter/jscript::is-jscript", "l": 1 }, { "a": "T1027.003", "c": 1.0, "d": "JavaScript or TypeScript source file extension", "e": [ "20170219_63673c54626ff8b38eeea5e870c17f8f.js" ], "i": "objectives/anti-static/obfuscation/payload/container::js-source-extension", "l": 1, "m": "B0032" }, { "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "crip" ], "i": "objectives/execution/interpreter/scripting/host::wscript-shell-split-join--rx-2", "l": 1 }, { "c": 0.30000001192092896, "d": "xz compression reference", "e": [ "xz" ], "i": "micro-behaviors/dylib/library/family::xz-ref", "l": 2 }, { "c": 1.0, "d": "JavaScript file basename", "e": [ "20170219_63673c54626ff8b38eeea5e870c17f8f.js" ], "i": "metadata/lang/encoded/unicode-escape::javascript-or-dll-basename", "l": 2 }, { "a": "T1027", "c": 1.0, "d": "Many unique import modules", "e": [ "imports.unique_modules = 421.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::imports-unique-modules-50", "l": 1, "m": "B0032" }, { "c": 1.0, "d": "JavaScript many imported modules", "e": [ "imports.unique_modules = 421.00" ], "i": "objectives/anti-static/obfuscation/string/anomaly::js-many-import-modules", "l": 1 }, { "c": 0.8399999737739563, "d": "Hidden directory literal", "e": [ "\".e" ], "i": "objectives/supply-chain/install-hook/module-backdoor::hidden-dir-literal", "l": 1 }, { "a": "T1036.008", "c": 0.949999988079071, "d": "Filename has .js extension", "e": [ "20170219_63673c54626ff8b38eeea5e870c17f8f.js" ], "i": "objectives/evasion/masquerade/extension/shebang::js-extension-name", "l": 1, "m": "F0008" }, { "c": 0.75, "d": "Indirect string replacement call", "e": [ "[xnityzy](mrume, engutfu)" ], "i": "objectives/anti-static/obfuscation/string/recovery::js-indirect-replace-call", "l": 1 }, { "a": "T1552.001, T1041", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "data" ], "i": "objectives/supply-chain/recon-exfil/ai-cli::github-content-base64-upload--rx-36", "l": 1, "m": "E1552" }, { "c": 0.800000011920929, "d": "Immediate indexing of array literal", "e": [ "[Function, Number(4)][0]" ], "i": "micro-behaviors/data/source/syntax/array::array-literal-indexing", "l": 1 }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 423.00" ], "i": "metadata/file/text/metrics::file-has-30-plus-lines", "l": 1 }, { "c": 0.949999988079071, "d": "Large bundled JavaScript graph", "e": [ "imports.unique_modules = 421.00" ], "i": "metadata/library/structure::js-large-module-bundle", "l": 2 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "c": 1.0, "d": "cmd command name", "e": [ "cmd" ], "i": "micro-behaviors/process/create/shell/invoke::cmd-name", "l": 2 }, { "c": 0.8799999952316284, "d": "Indirect bracketed WScript command invocation", "e": [ "yjovg[xnityzy](mrume, engutfu)" ], "i": "micro-behaviors/process/create/shell/wsh::wscript-shell-run-indirect", "l": 1 }, { "a": "T1105", "c": 0.8500000238418579, "d": "Regex component marker", "e": [ "data" ], "i": "objectives/command-and-control/dropper/delivery/fetch-eval::new-function-variable-body--rx-8", "l": 1 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Large import graph base64 context", "e": [ "imports.unique_modules = 421.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/string-blob::js-base64-candidate-large-import-graph", "l": 1, "m": "B0032" }, { "c": 0.699999988079071, "d": "Function constructor keyword", "e": [ "Function" ], "i": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "l": 2 }, { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 4615.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 0.800000011920929, "d": "JavaScript strings capped at five", "e": [ "strings.max_length = 4.00" ], "i": "objectives/anti-static/obfuscation/string/reconstruct::js-max-string-length-short", "l": 1 }, { "c": 1.0, "d": "Tiny WScript.Shell fragment (variant 2a)", "e": [ "WScri" ], "i": "objectives/execution/interpreter/script/wsh-fragments::wscript-shell-fragment-tiny-2a", "l": 1 }, { "c": 0.800000011920929, "d": "WScript.Shell string fragment (WScrip/WScr)", "e": [ "WScr" ], "i": "objectives/execution/interpreter/script/wsh-fragments::wscript-shell-fragment-1", "l": 1 }, { "c": 0.8999999761581421, "d": "Exact tiny WScript fragments (WScr, ipt.)", "e": [ "ipt." ], "i": "objectives/execution/interpreter/script/wsh-fragments::wscript-shell-fragment-tiny-exact-1", "l": 4 }, { "c": 0.75, "d": "JScript array index concatenation (URL obfuscation)", "e": [ "zijboz[1] + avnyg[1]" ], "i": "objectives/anti-static/obfuscation/syntax::js-array-index-concatenation", "l": 4 }, { "c": 0.9300000071525574, "d": "Nemucod short token cap", "e": [ "strings.max_length = 4.00" ], "i": "well-known/malware/dropper/nemucod::short-token-array-cap", "l": 1 } ], "sha": "f00eb42dbac0a00e0c4736d99807e73a8bb9b3d1f493b26c25993ee63eecbbcb", "path": "20170219_63673c54626ff8b38eeea5e870c17f8f.js", "type": "javascript" } ], "tv": "db300" } }