{ "llm": { "conf": 0.28047967, "error": "LLM endpoint http://10.9.8.149:8000/v1 did not become healthy within 120s", "model": "Qwen/Qwen3.6-27B", "review": false, "outcome": "benign" }, "ml": { "v": "7", "eng": "2.2.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.28047967, "rte": "az", "prob": 0.28047967 }, { "cls": 0, "raw": 0.001187861, "rte": "az/nupkg", "prob": 0.001187861 } ], "prob": 0.28047967, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.28047966957092285, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000012805064216081519, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.28047966957092285, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.28047966957092285, "type": "text" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000012556712135847192, "type": "markdown" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00001428524683433352, "type": "png" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000012834866538469214, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000012834866538469214, "type": "xml" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.28047966957092285, "type": "xml" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.28047966957092285, "type": "xml" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.28047966957092285, "type": "xml" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.2795827090740204, "type": "pe" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000013142824172973633, "type": "xml" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000013222296729509253, "type": "javascript" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000012258688911970239, "type": "xml" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000012805064216081519, "type": "xml" } ], "version": "v18.18", "analyzed_at": "2026-07-29T08:37:55Z" }, "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MT6f@AHj838]uO000xd000xb003wDwO=Ave]\u003eJtBcI*wy63a7mC[63KAV]j!V?7vv\u003eC4", "n": [ { "c": 2, "d": "Archive contains an executable member", "i": "metadata/file/metrics::archive-contains-executable-member", "o": 0, "z": 31, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H(Cm)Md₂(BiPa)", "sha": "c56bbac0e42dbb98bda6d829ac6ce27116e59327f0d99159091475babe37caef", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg", "risk": 4, "size": 42702, "type": "nupkg", "facts": { "metrics": { "file": { "size": 42702.0, "entropy": 7.92, "size_bytes": 42702.0 }, "binary": { "overall_entropy": 7.92, "peak_region_bytes": 36864.0, "peak_region_entropy": 7.84 }, "archive": { "file_count": 16.0, "member_count": 16.0, "script_count": 1.0, "zip_bomb_ratio": 4.24, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 40286.0, "compression.ratio": 0.68, "hidden_file_count": 2.0, "total_uncompressed": 59432.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 16.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 4.0, "timing.mtime_unique_ratio": 0.25, "misplaced_executable_count": 1.0, "timing.mtime_dominant_count": 7.0, "timing.mtime_spread_seconds": 25172.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.44, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 15.0 } } }, "ident": { "name": { "value": "Soenneker.Blazor.Utils.JsVariable", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://github.com/soenneker/soenneker.blazor.utils.jsvariable", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://github.com/soenneker/soenneker.blazor.utils.jsvariable", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "Jake Soenneker", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "4.0.1345", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Soenneker.Blazor.Utils.JsVariable", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 2836, "file": 11 } ] }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 11 } ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash" }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes CompanyName", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 11 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 11 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 523.0, "entropy": 5.19, "size_bytes": 523.0 }, "binary": { "overall_entropy": 5.19, "peak_region_bytes": 523.0, "peak_region_entropy": 5.19 } } }, "id": 1, "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!_rels/.rels", "sha": "d6debeb3b06b764b1c8be90853cd227c610256fbc7951615f3411029660031df", "size": 523, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 40, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh", "n": [ { "c": 2, "d": "NuGet package declares repository", "i": "metadata/package/files/nuget::nuspec-repository", "o": 42, "z": 976, "cf": 0.8999999761581421 } ], "ln": 2, "addr": 42 }, { "b": "arS^-wPRu\u003evrt{w", "ln": 3, "addr": 118 }, { "b": "arR^Hjzws\u0026q/uk+zE)P{AXoW{vr#\u003cje(^1cy\u0026.j3B5(Z\u0026x\u003c\u003eE!wJRRWwiG", "ln": 4, "addr": 131 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1389.0, "entropy": 5.1, "size_bytes": 1389.0 }, "binary": { "overall_entropy": 5.1, "peak_region_bytes": 1389.0, "peak_region_entropy": 5.06 } } }, "id": 2, "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!Soenneker.Blazor.Utils.JsVariable.nuspec", "risk": 1, "sha": "aa46a5ab86e32f3697724137682ac91812a5728158ed8516282eccf4ca8c09f2", "size": 1389, "traits": [ { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 42, 976 ] ] }, { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 40 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "o?wqboLF0FzGxv@3pw-JD2^RixMLvBv\u003c@JQfFUEpgb7Evawc6TwGT]\u0026wO#x%yH}I[3q+qOze16jx(v(ix(+zgwPzu\u003eC{3:uvqZf#wgO\u003cnA+e/8z!pb4xKL{]wH[%CzY\u0026FaC{46qA=VepaA7.hvqfQ[zF782ay/teC)XF4aARphB0bKxw]@l9A+cw4zE:\u003e#B8#nfx\u003c(9{wftA3v%8T1zGGrex(v(iw[=6)B08(MxK@qgq/un\u0026CvtJ6a$k5=Bz\u0026pjwNPxZx(k5nxK@q+z!s9nvrb{4Cwhejz/{dAA+frlA+P39x(v(uazC.6y\u0026%o5zF78ox([3bB-X:xx(dNavruj4zxK4mwGV2cxj}", "ln": 0, "col": 1, "line": 1 }, { "b": "z/f91BzkVhB2\u003cTnra]?=vpBd#wGUG3AcVFrxj#xfzF%Shv}u=\u003ezE:(ixLzJgAaK6bx(!ufz/cXnz//Y6wGV5cvqG:5vR3V@zEWH9wmYo]x(k54y?%C*z/xA4B0bywaAIWmB97\u0026dBzkf1aAhmtBzkVhB0bykaARpdax9h\u003cBA.elwIaq%r7GC2q+]\u003eZs3Y.Mav#", "ln": 475, "col": 47, "line": 10 }, { "b": "l)bD8axg)2axH\u003cbqBa5SnKVM2pEVE3mn=Gzk#7xBlp\u003c\u003cxr9p:VmOcMOmn)bcmO=]8k{e#\u0026qDcjPrzkXRaw=6op!$1Uave:\u003cawLZcnLR-MnLR=Ao*}/Re*9.XawLYPmoh\u0026Lr3kagk$\u003c@{r7GB+k#*(PpF$alpF@r5pF+g(nK(rJav]p4l}70LavnG", "ln": 723, "col": 34, "line": 16 }, { "b": "r7GCQs4MsVefEkRnMehQm\u003c7o0pFAwEpGpvppEVE5qxOLaavw}1pdmJHnL-87s4MvZaxg)2ax869r98v-miCx7axg)2axqueawU(TpGf\u003eNqxOv@k$\u003c\u003cBm]HK4p9rIbmg8%?mPrCPqBJhB", "ln": 964, "col": 55, "line": 19 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1076, "entropy": 5.13 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.13 } } }, "id": 3, "mol": "K(Te)", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!LICENSE", "pid": 0, "risk": 1, "sha": "00792f4b9c7e6a8c02c3b3cc74051318b8e7e6b278dd8c776c98494bef7e468d", "size": 1076, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 183, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 147, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 771, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1012, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 133, 0 ] ] }, { "id": "well-known/tool/development/vcs/github-web::github-repo-fetched-path", "conf": 0.98, "crit": 3, "desc": "Fetched github.com repository artifact" } ], "type": "text" }, { "id": 4, "sha": "1a61e24dd17fd7ed9a827615d0dbe8eedad2911d2bcd7a21bb48376d2658889d", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!README.md", "size": 1126, "type": "markdown", "depth": 1 }, { "id": 5, "sha": "93511e8937b27717eb154ee90eaf1655d4dbbad2865ecfc5a7d0bd794c945c49", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!icon.png", "size": 16083, "type": "png", "depth": 1 }, { "id": 6, "sha": "6b9217242dc9fd1181b8c952a800a18285dc31508e78e134d996bcbb607d020d", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!build/Microsoft.AspNetCore.StaticWebAssetEndpoints.props", "size": 1898, "type": "xml", "depth": 1 }, { "id": 7, "sha": "ad0fbba033f22c040a37ab682d6abf48641e46ab213674722acaced34120fed9", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!build/Microsoft.AspNetCore.StaticWebAssets.props", "size": 1240, "type": "xml", "depth": 1 }, { "id": 8, "sha": "01abcf003fb124a7d214a8898c2932c11b9aeaf0a8ecbd16bbca184f5d4b859b", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!build/Soenneker.Blazor.Utils.JsVariable.props", "size": 163, "type": "xml", "depth": 1 }, { "id": 9, "sha": "51bc85b7182ce42889090518055cf32ff1420675090593d2e5988668906d6f2f", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!buildMultiTargeting/Soenneker.Blazor.Utils.JsVariable.props", "size": 95, "type": "xml", "depth": 1 }, { "id": 10, "sha": "8094bb8c3c7bf9b1772fc028c5b58908aeeec9aeb0c49c160e1ad0831759df61", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!buildTransitive/Soenneker.Blazor.Utils.JsVariable.props", "size": 109, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(00", "n": [ { "c": 3, "d": "PE has no signature record", "i": "metadata/binary/layout::pe-no-signature-record", "o": 0, "z": 1, "cf": 0.949999988079071 } ], "ln": 0 }, { "b": "00000000000000000000{dbe-00000nb@R\u00260SSx76E:1ZXe\u003eRI0rr91000000000000", "n": [ { "c": 1, "d": "PE standard code/data section", "i": "metadata/binary/section/names::pe-code-data-standard-section", "o": 512, "z": 5, "cf": 0.8999999761581421 } ], "ln": 496 }, { "b": "huFmu000c7c[\u003eS33mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 2836, "z": 4, "cf": 1.0 } ], "ln": 2820 }, { "b": "rDI}\u003eB1Q7ar:*2.vpB4:e[w^m08[e:By/p?xjVf(lT:\u003exwO=f\u003eBzkVhrbVL-zuafP", "n": [ { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 7090, "z": 4, "cf": 0.5 } ], "ln": 7074 }, { "b": "zE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh07{fUCW\u003er7BzkVh00", "n": [ { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 7230, "z": 17, "cf": 0.699999988079071 } ], "ln": 7214 }, { "b": "m}DNHA::6dASv.4Bz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGz!i*7wOU\u003c$e\u003c:w.Dt^*RrDI}\u003eB1Q3{A@Yc:B94", "n": [ { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 7616, "z": 18, "cf": 0.75 } ], "ln": 7600 }, { "b": "zdK2apdnb8f!+jl8ux*MxMOunB2\u003e%cB8LSczE)P{AXp\u003cuz2:LA0rrv5wO+{^B7CsKdGGI}lVl{?A+Pf1BrFD1atLSag+yEpgbZmEvqxA%q/uk+zE)P{ASu8w0r", "n": [ { "c": 3, "d": "Embedded HTTP or WebSocket URL", "i": "micro-behaviors/communications/http/url/domain::http-url-binary", "o": 10002, "z": 21, "cf": 0.699999988079071 }, { "c": 2, "d": "Copyright notice", "i": "metadata/package/license::copyright-word", "o": 10042, "z": 9, "cf": 0.6000000238418579 } ], "ln": 9986 }, { "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000", "n": [ { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 11264, "z": 5, "cf": 0.8999999761581421 } ], "ln": 11248 }, { "b": "0000000000000ibgYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr911onA", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 11358, "z": 15, "cf": 0.8999999761581421 } ], "ln": 11342 }, { "b": "ve%:pyYF2D002W)761vnlJz38z2!IPve$fBC(QOtve$cAwDhYg003WjBo3y.z#:}ViSH/kf934", "n": [ { "c": 3, "d": "PE version metadata includes CompanyName", "i": "metadata/package/versioning::pe-companyname-field", "o": 11770, "z": 11, "cf": 0.699999988079071 } ], "ln": 11754 }, { "b": "e=YwYzVBRO003*na]?SzmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$zVBtGzuaLOwDlG", "n": [ { "c": 3, "d": "PE version metadata includes FileDescription", "i": "metadata/package/versioning::pe-filedescription-field", "o": 11846, "z": 15, "cf": 0.699999988079071 } ], "ln": 11830 }, { "b": "ve%:pyYF2D001[S3JHhcmGvc5yYF2DrSDXhASydXx-J5Kzu6Up001?Qe=WN9e=WQagxolih2]lefAq7M003*ncia5DnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$zVBtGzuaLOwDlGCwDl-J", "n": [ { "c": 3, "d": "PE version metadata includes FileVersion", "i": "metadata/package/versioning::pe-fileversion-field", "o": 11954, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes InternalName", "i": "metadata/package/versioning::pe-internalname-field", "o": 12010, "z": 12, "cf": 0.699999988079071 } ], "ln": 11938 }, { "b": "yxd]CASu7t0049vcia5Dpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$zVBtGzuaLOwDlGC", "n": [ { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 12230, "z": 16, "cf": 0.699999988079071 } ], "ln": 12214 }, { "b": "ve%:pyYF2D004/Pg5}sPpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001?Qe=WN9e=WQagxolih2]cbv/Og.vGng:gxoxmg5%3ewb[B^v/Os=hukAhwDjH^iriK?hVLSlwDjH^w=KT/vGo{sh#\u003eYlf-U!=g5%i", "n": [ { "c": 3, "d": "PE version metadata includes ProductVersion", "i": "metadata/package/versioning::pe-productversion-field", "o": 12446, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 12476, "z": 49, "cf": 0.8999999761581421 } ], "ln": 12430 }, { "b": "0000000000000000000006*I:3\u0026*nc7=.M@000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 12800, "z": 6, "cf": 0.8999999761581421 } ], "ln": 12784 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 10752, 5.65, "r-x" ], [ ".rsrc", 11264, 1536, 3.14, "r--" ], [ ".reloc", 12800, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 70138.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "bss_like_section_count": 0.0, "section_overflow_count": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.24, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.11 }, "file": { "size": 13312.0, "entropy": 5.2, "size_bytes": 13312.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.65, "string_count": 191.0, "overall_entropy": 5.2, "entropy_variance": 5.19, "avg_string_length": 21.93, "max_string_length": 98.0, "peak_region_bytes": 1024.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.68, "string_length_stddev": 15.87, "largest_section_ratio": 0.81, "sentence_string_count": 8.0, "sentence_string_ratio": 0.04, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 10752.0, "entropy_max": 5.65, "entropy_mean": 2.96, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 11, "mol": "H(Cm)Md₂(BiPa)", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!lib/net10.0/Soenneker.Blazor.Utils.JsVariable.dll", "risk": 4, "sha": "af4533979b006612322eb88280e0adeae0f7e5876b81544dad60dda853f707d6", "size": 13312, "traits": [ { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 12446, 14 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 11846, 15 ] ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 2836, 4 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 11954, 11 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 11770, 11 ] ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 12476, 49 ] ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 12010, 12 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 11358, 15 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "spans": [ [ 10002, 21 ] ] }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 2836, 4 ] ] } ], "type": "pe" }, { "id": 12, "sha": "0c5b036c8709cbca7ef1b45e54cfc34b093f440d094365c9c8caff6d07fc1b0d", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!lib/net10.0/Soenneker.Blazor.Utils.JsVariable.xml", "size": 4989, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "v@DmaBrCKlzE^E0xcotWzE[2mo\u003c}#?dlv\u003ezw{503BzkVhaAz4mz!%Pdp*[x^B0#0oA==vKaBsCrarR!ywPP58B-IIlzGE0:azkIevQT7LxLzJH3jm)#arUomAV==DwPP5eauZ\u00263j0nkWjrOPKA==vPy?mG%Bz9-Ux!7X.aBsCrarR^HarR!pz/fSraAg+fBrAZ?Aa9^eB6Au:i%(rqarR^HarR!vw/@HiB-IIlzGE0:jS[S+y?$kwD(%NXAa9^eazCZov%8*jwO#PsdiJ%AarR^HarR^HarR^HA+funA=91xzE^r\u003cx(mG)i%)8MarR^HarV7t3lQDlarR^Hay/LmA+fcgauZ\u0026SB-IIlzGG94vrcD}i%)8MarV7t3lQDlaAz4nB-Ivx", "ln": 0, "col": 1, "line": 1 }, { "b": "arUfjzGx[xwn=MYzE^s6auZ\u0026\u003cvrc6\u003cvR/QJvqPNdx(mD)CU.{1a$+5*i%(rqarR!vw/@Hjz/!M*wmZ0djV$}JeIOW%DKp(rarR^HarUYoBAIRwazkIevQT7LxLzJ(C42y", "ln": 367, "col": 3, "line": 20 }, { "b": "zdN0m3lQDlaBKO7arR^HA+funA=91uwPI^aC4BGUA==vJC42A9vpB4:pgn0Je]$#Fx(\u003e:Ee*q.[i%{xy3t1E3z/P}xw{503BzkVhazC)$vrc6\u003cvR/QwC4293vpB4:d0x3tx\u003c\u003eE!wLMVJwHO:G3lQDlaAz4nB-IvxA+frgy\u003c6w\u003cvrc6\u003cvR/Q7C42A9vpB4:pgm#", "ln": 477, "col": 37, "line": 23 }, { "b": "A+O@\u003ey?k2kAaK5#BzkVhnN%m)DKp(rarUfjzGx[xB97\u0026jwGTbUAaJ]$x(mMoxjVfkz/xodvruj4zB[v/i%(rqarR!vw/@HyByxo5au.\u003eJaA.NjwObT]wN)kjDKp(rarR^HarUYoBAIQ", "ln": 684, "col": 32, "line": 33 }, { "b": "auyS=wPI^aC4BGUA==vJAa9^eB15KXaW4$hB-7-3w[=c]wgnTF3lQDlarR^HaAz4nB-Ivxp\u0026ZF\u003ex(^\u0026rA+frgy\u003c6wrdlv\u003eVarR!P3jm)#arUxgasIhuzE^E0xd^\u003eaB0$%CwPzj3x(v(Xwgn@IDKp(rarR^HarU=tA=ldAzE[2mmriA!AWUrYaA}mdBrCHvwPzj3x(v(iCwhejazCvea%.INAaK5#BzkVhnO0k[ayP8bwNPa{az2!iB98EQu[1eAarR^HEf{r7arR!EwPS6nzxJ?dCox.5z/6ifwHF%EwPI^aC4BG\u003cz/6ifwH[%AwOL^^BwN0@ze165diH=qaBsCrarR^HarR!pz/fSrazth8rb3hXz/{dAjS[\u0026XzdNTdBrz.\u0026az#sry=.$DarR^HarR!pz/fSraAITkA=+(6auZ\u0026XvrkyZzdNTdBrA^\u003cl$7gGe]CPKc[co1att\u003e:3lQDlarR^Hay/tcB95KCByxo5auZ\u0026]3lQDlarR^HarR^Hay!?$v}xE)wN)?Aw)]H%wH[fhao", "ln": 1258, "col": 51, "line": 57 }, { "b": "BAIRwi%)8MarR^HarR^HarV7t3lQDlarR^HarR^HaAITkBy^7rvqYQ(wGTbUB7GC)x(dB1B-Y3Jz!%kvay]51vr\u003cp-3lQDlarR^HaBKO7arR^HarR^HAbPMec[dj+arR^HEjmk+Ee", "ln": 2704, "col": 19, "line": 106 } ], "depth": 1, "facts": { "imp": [ [ "", "pending" ], [ "", "current" ], [ "", "part" ], [ "", "current" ], [ "", "dotIndex" ], [ "", "variableName.indexOf" ], [ "", "resolveParts" ], [ "", "variableName.split" ], [ "", "resolveVariable" ], [ "", "state" ], [ "", "pending.get" ], [ "", "state.cancelled" ], [ "", "handle" ], [ "", "clearTimeout" ], [ "", "state.handle" ], [ "", "pending.delete" ], [ "", "dotIndex" ], [ "", "variableName.indexOf" ], [ "", "parts" ], [ "", "variableName.split" ], [ "", "resolveParts" ], [ "", "Promise.resolve" ], [ "", "pending.has" ], [ "", "hasTimeout" ], [ "", "started" ], [ "", "Date.now" ], [ "", "state" ], [ "", "pending.set" ], [ "", "handle" ], [ "", "clearTimeout" ], [ "", "state.handle" ], [ "", "pending.delete" ], [ "", "resolveParts" ], [ "", "rejectPromise" ], [ "", "isAvailable" ], [ "", "cleanup" ], [ "", "resolvePromise" ], [ "", "Date.now" ], [ "", "cleanup" ], [ "", "rejectPromise" ], [ "", "state.handle" ], [ "", "setTimeout" ], [ "", "poll" ] ], "mbr": [ "Date.now", "Promise.resolve", "parts.length", "pending.delete", "pending.get", "pending.has", "pending.set", "state.cancelled", "state.handle", "variableName.indexOf", "variableName.split" ], "tgt": [ "Date.now", "Error", "Map", "Promise", "Promise.resolve", "cleanup", "clearTimeout", "isAvailable", "pending.delete", "pending.get", "pending.has", "pending.set", "poll", "rejectPromise", "resolveParts", "resolvePromise", "resolveVariable", "setTimeout", "variableName.indexOf", "variableName.split" ], "funcs": [ [ "resolveParts", 28 ], [ "resolveVariable", 324 ], [ "isVariableAvailable", 549 ], [ "cancelWaitForVariable", 660 ], [ "waitForVariable", 1021 ], [ "anonymous", 1492 ], [ "cleanup", 1765 ], [ "isAvailable", 2007 ], [ "poll", 2151 ] ], "metrics": { "ast": { "op.eq": 6, "op.ge": 1, "op.lt": 1, "op.ne": 6, "op.lor": 1, "op.sub": 3, "op.land": 1, "op.lnot": 1, "max_depth": 20, "call_count": 31, "node_count": 783, "member_count": 11, "op_density.eq": 0.01, "op_density.ge": 0, "op_density.lt": 0, "op_density.ne": 0.01, "op_density.lor": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0, "member_depth_max": 2 }, "file": { "size": 2813, "entropy": 4.36 }, "text": { "lines": 114, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 809, "char_entropy": 4.36, "unique_chars": 63, "top_char_null": 0, "string_density": 0.06, "top_char_ratio": 0.07, "avg_line_length": 23.68, "max_line_length": 109, "empty_line_ratio": 0.26, "last_line_length": 1, "whitespace_ratio": 0.33, "identifier_density": 1.21, "line_length_stddev": 24.65, "normalized_string_count": 0.66, "repeated_char_sequences": 25, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 6 }, "binds": { "count": 18 }, "binary": { "peak_region_bytes": 2813, "peak_region_entropy": 4.48 }, "source": { "function_count": 8 }, "strings": { "bytes": 185, "count": 7, "avg_length": 26.43, "max_length": 64, "avg_entropy": 1.85, "entropy_stddev": 2.13 }, "functions": { "count": 8, "nested": 2, "density": 7.89, "anonymous": 1, "avg_params": 1.11, "code_ratio": 1.67, "max_params": 4, "length_stddev": 19.49, "avg_name_length": 13, "no_params_count": 3, "avg_length_lines": 21.11, "max_length_lines": 62, "min_length_lines": 3, "avg_nesting_depth": 0.78, "max_nesting_depth": 2, "high_entropy_names": 1, "avg_param_name_length": 10.2 }, "identifiers": { "count": 138, "unique": 41, "avg_length": 8.02, "max_length": 21, "min_length": 1, "avg_entropy": 2.47, "reuse_ratio": 0.3, "length_stddev": 4.46, "sequential_names": 1, "single_char_count": 1, "single_char_ratio": 0.02, "high_entropy_count": 1, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.51 } } }, "id": 13, "mol": "O(C)", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!staticwebassets/js/jsvariableinterop.js", "pid": 0, "risk": 1, "sha": "f382c09c6ffdcae935637c26400f76778cc4152d3a818d35e7bcccac5aa2d931", "size": 2813, "traits": [ { "id": "objectives/command-and-control/dropper/delivery/blockchain::blockchain-resolve-source-function", "conf": 0.9, "crit": 3, "desc": "Source resolves blockchain payload data", "spans": [ [ 1322, 8 ] ] } ], "type": "javascript" }, { "id": 14, "sha": "6e5b23ee2316dbdfb56026a4047433ff9caf14ba1fc54ddd49f9d32ee444c868", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!![Content_Types].xml", "size": 837, "type": "xml", "depth": 1 }, { "id": 15, "sha": "2818905b0ca5b1fd50b6502a1c8d8c7367099a72021d56d1480fcd13d78c9a0d", "path": "Soenneker.Blazor.Utils.JsVariable.4.0.1345.nupkg!!package/services/metadata/core-properties/5b3ecb174c4d44b2a9e8da0ca350639b.psmdcp", "size": 796, "type": "xml", "depth": 1 } ], "omitted_files": 10, "rev": "6a958", "v": "8" } }