{ "product": "Shortcut Remover", "version": "8.0.0", "buildId": "8.0.0-rc-1786773149059", "target": "Windows 10/11 x64", "bundledRuntime": ".NET Desktop Runtime 8.0.29", "automatedTests": 327, "localizationRenders": 80, "localizationResourceKeys": 296, "cliEndToEndScenarios": 7, "labeledCorpus": { "labeledMaliciousLinks": 310, "truePositiveLinks": 310, "falseNegativeLinks": 0, "labeledBenignLinks": 600, "falsePositiveLinks": 0, "trueNegativeLinks": 600, "falsePositiveRate": 0, "autoSelectedFalsePositiveLinks": 0, "quarantineFalsePositiveLinks": 0, "elapsedMilliseconds": 2024, "scanComplete": true, "missingInputsAfterScan": 0, "modifiedInputsAfterScan": 0, "allInputsSurvivedUnchanged": true, "thresholds": { "highConfidenceLauncherFalseNegatives": 0, "maximumFalsePositiveRate": 0.01, "maximumAutoSelectedFalsePositives": 0, "maximumQuarantineFalsePositives": 0, "maximumElapsedSeconds": 30 }, "labels": "C:\\Users\\fanji\\Documents\\Codex\\2026-08-05\\wo-x\\work\\release-shortcut-remover-1786773149059\\labeled-corpus\\labels.json", "report": "C:\\Users\\fanji\\Documents\\Codex\\2026-08-05\\wo-x\\work\\release-shortcut-remover-1786773149059\\cli-e2e\\labeled-corpus-report.json", "families": [ { "family": "notepad", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "explorer", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "control-panel", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "benign-cmd", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "benign-powershell", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "benign-certutil", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "benign-wmic", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "benign-rundll", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "benign-regsvr32", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "where", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-command/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-document/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-local-operation/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "certutil-local-operation/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-local-control/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "wmic-benign-query/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-benign-command/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "bitsadmin-benign-query/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "regsvr32-local-library/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-comment-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-administration-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-literal-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-builtins-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-handler-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-benign-boundary-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-boundary-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "native-transfer-benign-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "ordinary-application-r2/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-literal-documentation-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-benign-member-symbol-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-local-webclient-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-block-comment-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-local-script-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-safe-command-group-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "msiexec-boundary-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "mshta-local-option-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "rundll-legitimate-document-r3/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-braced-variable-safe-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-concatenation-not-invoked-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-array-join-safe-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-format-local-uri-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-bounded-utf8-safe-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-scriptblock-created-only-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-unknown-receiver-alias-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-webclient-local-alias-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "powershell-ordinary-object-run-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-1", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-2", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-3", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-4", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-5", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-6", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-7", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-8", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-9", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-10", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-11", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-12", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-13", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-14", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-15", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-16", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-17", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-18", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-19", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "cmd-relational-safe-r4/variant-20", "expected": "benign", "detected": false, "autoSelected": false, "recommendedAction": null }, { "family": "hidden-wscript", "expected": "malicious", "detected": true, "autoSelected": false, "recommendedAction": "1" }, { "family": "hidden-cscript", "expected": "malicious", "detected": true, "autoSelected": false, "recommendedAction": "1" }, { "family": "cmd-script-chain", "expected": "malicious", "detected": true, "autoSelected": false, "recommendedAction": "1" }, { "family": "powershell-download", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "remote-mshta", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-script", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "regsvr32-scriptlet", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-process-create", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "certutil-download", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "bitsadmin-transfer", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-encoded/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-encoded/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-encoded/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-encoded/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-encoded/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-remote-package/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-remote-package/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-remote-package/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-remote-package/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-remote-package/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-active-content/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-active-content/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-active-content/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-active-content/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-active-content/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-active-content/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-active-content/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-active-content/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-active-content/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-active-content/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "certutil-transfer/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "certutil-transfer/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "certutil-transfer/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "certutil-transfer/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "certutil-transfer/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-active-command/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-active-command/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-active-command/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-active-command/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-active-command/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-process-create/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-process-create/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-process-create/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-process-create/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-process-create/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "bitsadmin-transfer/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "bitsadmin-transfer/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "bitsadmin-transfer/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "bitsadmin-transfer/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "bitsadmin-transfer/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-powershell-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-powershell-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-powershell-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-powershell-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-powershell-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-transfer-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-transfer-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-transfer-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-transfer-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-nested-transfer-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-command-chain-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-command-chain-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-command-chain-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-command-chain-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-command-chain-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-control-flow-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-control-flow-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-control-flow-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-control-flow-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-control-flow-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-network-command-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-network-command-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-network-command-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-network-command-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-network-command-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-object-call-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-object-call-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-object-call-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-object-call-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-object-call-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-install-protocol-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-install-protocol-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-install-protocol-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-install-protocol-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-install-protocol-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-protocol-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-protocol-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-protocol-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-protocol-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-protocol-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-remote-export-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-remote-export-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-remote-export-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-remote-export-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "rundll-remote-export-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "native-transfer-r2/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "native-transfer-r2/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "native-transfer-r2/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "native-transfer-r2/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "native-transfer-r2/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-subexpression-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-literal-call-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-invoke-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-webclient-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-comspec-start-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-variable-expansion-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-if-command-group-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "msiexec-advanced-remote-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "mshta-leading-option-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "wmic-win32-process-create-r3/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-braced-variable-invocation-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-constant-concatenation-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-array-join-invocation-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-format-uri-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-bounded-utf8-command-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-scriptblock-execution-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-typed-alias-uri-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-alias-dynamic-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-wscript-constructed-progid-r5/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "powershell-comment-newline-execution-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-1", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-2", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-3", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-4", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-5", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-6", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-7", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-8", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-9", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" }, { "family": "cmd-relational-nested-r4/variant-10", "expected": "malicious", "detected": true, "autoSelected": true, "recommendedAction": "1" } ], "familyCoverage": [ { "family": "benign-certutil", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "benign-cmd", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "benign-powershell", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "benign-regsvr32", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "benign-rundll", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "benign-wmic", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "bitsadmin-benign-query", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "bitsadmin-transfer", "samples": 6, "malicious": 6, "benign": 0, "detected": 6, "autoSelected": 6 }, { "family": "certutil-download", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 1 }, { "family": "certutil-local-operation", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "certutil-transfer", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "cmd-benign-command", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "cmd-builtins-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "cmd-command-chain-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "cmd-comspec-start-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "cmd-control-flow-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "cmd-if-command-group-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "cmd-literal-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "cmd-local-script-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "cmd-nested-powershell-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "cmd-nested-transfer-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "cmd-relational-nested-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "cmd-relational-safe-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "cmd-safe-command-group-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "cmd-script-chain", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 0 }, { "family": "cmd-variable-expansion-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "control-panel", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "explorer", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "hidden-cscript", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 0 }, { "family": "hidden-wscript", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 0 }, { "family": "mshta-active-content", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "mshta-leading-option-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "mshta-local-boundary-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "mshta-local-document", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "mshta-local-option-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "mshta-protocol-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "msiexec-advanced-remote-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "msiexec-benign-boundary-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "msiexec-boundary-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "msiexec-install-protocol-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "msiexec-local-operation", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "msiexec-remote-package", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "native-transfer-benign-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "native-transfer-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "notepad", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "ordinary-application-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "powershell-active-command", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "powershell-administration-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "powershell-array-join-invocation-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-array-join-safe-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-benign-command", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "powershell-benign-member-symbol-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-block-comment-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-bounded-utf8-command-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-bounded-utf8-safe-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-braced-variable-invocation-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-braced-variable-safe-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-comment-newline-execution-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-comment-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "powershell-concatenation-not-invoked-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-constant-concatenation-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-download", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 1 }, { "family": "powershell-encoded", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "powershell-format-local-uri-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-format-uri-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-literal-call-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-literal-documentation-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-literal-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "powershell-local-webclient-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-network-command-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "powershell-object-call-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "powershell-ordinary-object-run-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-scriptblock-created-only-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-scriptblock-execution-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-scriptblock-invoke-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-subexpression-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-typed-alias-uri-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-typed-webclient-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-unknown-receiver-alias-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-unknown-receiver-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-webclient-local-alias-r4", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "powershell-wscript-alias-dynamic-r4", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "powershell-wscript-constructed-progid-r5", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 }, { "family": "regsvr32-local-library", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "regsvr32-scriptlet", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 1 }, { "family": "remote-mshta", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 1 }, { "family": "rundll-active-content", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "rundll-legitimate-document-r3", "samples": 20, "malicious": 0, "benign": 20, "detected": 0, "autoSelected": 0 }, { "family": "rundll-legitimate-handler-r2", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "rundll-local-control", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "rundll-remote-export-r2", "samples": 5, "malicious": 5, "benign": 0, "detected": 5, "autoSelected": 5 }, { "family": "rundll-script", "samples": 1, "malicious": 1, "benign": 0, "detected": 1, "autoSelected": 1 }, { "family": "where", "samples": 1, "malicious": 0, "benign": 1, "detected": 0, "autoSelected": 0 }, { "family": "wmic-benign-query", "samples": 10, "malicious": 0, "benign": 10, "detected": 0, "autoSelected": 0 }, { "family": "wmic-process-create", "samples": 6, "malicious": 6, "benign": 0, "detected": 6, "autoSelected": 6 }, { "family": "wmic-win32-process-create-r3", "samples": 10, "malicious": 10, "benign": 0, "detected": 10, "autoSelected": 10 } ], "parserLimits": { "maximumInputCharacters": 32768, "maximumTokens": 1024, "maximumNestingDepth": 6, "maximumVariables": 64, "maximumSegments": 256, "maximumConstantBytes": 256, "maximumArrayItems": 32, "maximumFormatArguments": 16, "maximumOperations": 65536 } }, "scaleReliability": { "gatePassed": true, "evidenceFile": "scale-reliability-gate.json", "scenarioFileCounts": [ 1, 1000, 10000, 100000 ], "hundredThousandThroughputP50FilesPerSecond": 16507.253369666898, "hundredThousandThroughputP95FilesPerSecond": 16862.306519365651, "hundredThousandElapsedP95Milliseconds": 6922.418, "accessErrorRate": 0.01, "parseErrorRate": 0.01, "peakWorkingSetBytes": 71368704, "cancellationP95Milliseconds": 0.4514, "pauseFrozenMilliseconds": 800.2884, "pauseProgressDriftFiles": 0, "dispatcherHeartbeatP95Milliseconds": 68.225199999998949, "residualItems": 0, "physicalUsbStatus": "Deferred" }, "qaInstrumentedProductEndToEndChecks": 48, "removableDriveRuntimeScanProductChecks": 5, "accessibilityUiGate": { "windowScenarios": 60, "interactiveNodes": 1537, "screenshots": 240, "actionableViolations": 0, "languages": 10, "narratorStatus": "Narrator is unverified in this environment; UI Automation and keyboard evidence were captured.", "nodeCountPolicy": "Recorded for evidence; not equality-gated because live UIA DataGrid virtualization is variable.", "requiredControlContract": "passed" }, "formalReleaseQaEndpointsCompiledOut": true, "formalReleaseAccessibilityInstrumentationCompiledOut": true, "formalReleaseRemovableDriveQaInstrumentationCompiledOut": true, "signedDefinitionScaffoldCompiledOut": true, "signedDefinitionArtifactGatePassed": true, "detectionEngine": "versioned-built-in-unsigned", "artifacts": [ { "file": "Shortcut-Remover-8.0.0-Windows-x64.msi", "bytes": 60600940, "sha256": "240c60f766f02f7a91081e0decc0c63503dfc9a1a25c49e016dd1d62e14fdc96" }, { "file": "Shortcut-Remover-8.0.0-Portable-Windows-x64.zip", "bytes": 76751166, "sha256": "56400f64cd0eb26c85bff452d1f745352fc6ba6f245c8dad59f05b4a9436b29a" }, { "file": "Shortcut-Remover-8.0.0-Source.zip", "bytes": 19582014, "sha256": "a40281f95a16f249e05605b4304295660559035d845e75a188eaa14a5bc725ca" }, { "file": "Shortcut-Remover-8.0.0-SBOM.spdx.json", "bytes": 253164, "sha256": "86ea5e23e4e7a24381b1e5ec0c85a404483d46eb0ca897379695890264f6d923" }, { "file": "Shortcut-Remover-8.0.0-Scale-Reliability-Gate.json", "bytes": 13347, "sha256": "3d9628c234a1906a898273ce1fb5e239710cb612b42a58ac18488f6784c15080" } ], "signing": "deferred-by-user" }