{ "llm": { "conf": 0.92384493, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": -1, "prob": 0.88633573, "class": "benign" }, "outcome": "hostile", "interpretation": "CS2 cheat with hooks and C2" }, "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": 25, "conf": 92, "mods": [ { "cls": 0, "raw": 0.88633573, "rte": "az", "prob": 0.88633573 }, { "cls": 0, "raw": 0.007944633, "rte": "az/nupkg", "prob": 0.007944633 } ], "prob": 0.92384493, "files": [ { "id": 0, "lvl": 25, "conf": 92, "prob": 0.9238449335098267, "type": "nupkg" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000013232231140136719, "type": "xml" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00025106468820013106, "type": "pe" } ], "version": "v18.18", "analyzed_at": "2026-09-25T06:21:04Z" }, "path": "SwiftlyS2.CS2.1.4.11-beta.8.nupkg", "raw": { "files": [ { "id": 0, "mol": "K(Li₂)O₄(ErAl₂As₆C₂)H₈(CmCrDb₆F₅HfMg₂Os₃Po₉)Md₅(Bi₄BkPa₃Si)", "sha": "f8b0bf1fc880ec0452dc2a5892eb4d41b411c1a5f75eafecc158d4988c90313c", "path": "SwiftlyS2.CS2.1.4.11-beta.8.nupkg", "risk": 147, "size": 3460663, "type": "nupkg", "facts": { "metrics": { "file": { "size": 3460663, "entropy": 8 }, "binary": { "peak_region_bytes": 3165184, "peak_region_entropy": 7.86 }, "archive": { "file_count": 9, "member_count": 9, "script_count": 0, "zip_bomb_ratio": 8.5, "compressed_size": 3459501, "directory_count": 0, "executable_count": 1, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.25, "hidden_file_count": 2, "uncompressed_size": 13709519, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 54, "rtlo_filename_count": 0, "format.regular_count": 9, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 2, "timing.mtime_unique_ratio": 0.22, "misplaced_executable_count": 1, "timing.mtime_outlier_count": 1, "timing.mtime_dominant_count": 8, "timing.mtime_spread_seconds": 25168, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 0.89, "compression.method_counts.stored": 1, "compression.method_counts.deflate": 8 } } }, "ident": { "name": { "value": "SwiftlyS2.CS2", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://github.com/swiftly-solution/swiftlys2", "kind": "homepage", "source": "nupkg.project_url" } ], "trust": "unsigned", "authors": [ { "name": "SwiftlyS2 Team", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "1.4.11-beta.8", "source": "nupkg.version", "verified": false }, "identifier": { "value": "SwiftlyS2.CS2", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version" }, { "id": "micro-behaviors/mem/protect/modify::virtual-protect-text-pe", "conf": 0.9, "crit": 3, "desc": "Hidden VirtualProtect string reference", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::reflection-method-access", "conf": 0.78, "crit": 3, "desc": "Reflection method-enumeration tokens", "from": [ { "file": 4 } ], "uses": [ 43, 76 ] }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "from": [ { "file": 4 } ] }, { "id": "objectives/command-and-control/remote-command/control::generic-dup", "conf": 0.2, "crit": 3, "desc": "Function to execute remote commands", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "well-known/lib/ui/jline::jansi-kernel32-bridge", "conf": 0.99, "crit": 2, "desc": "JLine Jansi Kernel32 bridge", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/binary-structure::large-null-run-text", "atk": "T1055", "conf": 0.85, "crit": 3, "desc": "Large null run in executable (64+ bytes)", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::delegate-invocation-chain", "conf": 0.88, "crit": 3, "desc": ".NET reflected delegate invocation", "from": [ { "off": 9751853, "file": 4 } ], "uses": [ 2, 17, 23, 38, 72 ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-unmanaged-memory-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET unmanaged memory allocation API", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/create/spawn::diagnostics-namespace-dotnet", "conf": 0.75, "crit": 3, "desc": ".NET process namespace token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::appdomain-currentdomain", "conf": 0.6, "crit": 3, "desc": ".NET AppDomain CurrentDomain accessor", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-analysis/vm-detect/vendor::vendor-vbox-short", "atk": "T1497.001", "conf": 0.6, "crit": 3, "desc": "VBOX hypervisor short string", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.8, "crit": 3, "desc": ".NET Activator type reference", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/disk/partition::partition-table-copy", "conf": 0.92, "crit": 3, "desc": "Partition info string reference", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::end-invoke-token", "conf": 0.7, "crit": 1, "desc": "EndInvoke member-name token", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/payload/section::two-section-pe", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with exactly two sections", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/vb::resolveeventhandler-token", "conf": 0.88, "crit": 3, "desc": "ResolveEventHandler delegate token", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-analysis/emulator-detect/hardware::vbox-string", "atk": "T1497.001", "mbc": "B0032", "conf": 0.5, "crit": 1, "desc": "Uppercase VBOX hypervisor token", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::begin-invoke-token", "conf": 0.7, "crit": 1, "desc": "BeginInvoke member-name token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/string/library::dotnet-combine-method-token", "conf": 0.72, "crit": 3, "desc": "Combine method-name token", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/mem/alloc/executable::page-execute-readwrite", "atk": "T1055", "conf": 0.9, "crit": 3, "desc": "PAGE_EXECUTE_READWRITE flag", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/socket/tcp::create-socket", "conf": 0.5, "crit": 3, "desc": "CreateSocket function", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/control/info::process-info-class-31-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 31", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-analysis/emulator-detect/hardware::virtualbox-string", "atk": "T1497.001", "mbc": "B0009", "conf": 0.6, "crit": 3, "desc": "VirtualBox vendor string detection", "from": [ { "file": 4 } ], "uses": [ 21 ] }, { "id": "objectives/evasion/process/injection/harmony-mod::harmony-writealltext", "atk": "T1055,T1027.005", "conf": 0.93, "crit": 5, "desc": "Harmony patcher writes files via WriteAllText", "from": [ { "off": 11791021, "file": 4 } ], "uses": [ 47, 49 ] }, { "id": "micro-behaviors/data/db/access::db-connection-class", "conf": 0.7, "crit": 3, "desc": "DbConnection class", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "from": [ { "file": 4 } ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-gettimestamp", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch timestamp check", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::appdomain-class-token", "conf": 0.65, "crit": 3, "desc": "AppDomain class token", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present" }, { "id": "micro-behaviors/process/create/load/local::dotnet-load-from", "conf": 0.85, "crit": 3, "desc": ".NET LoadFrom assembly-loading reference", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/compiler/managed::reflection-namespace", "conf": 0.7, "crit": 2, "desc": ".NET System.Reflection namespace reference", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/string/assembly::stack-immediate-byte-string-x64", "conf": 0.86, "crit": 3, "desc": "Native stack immediate byte-string fragment", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 2657848, "file": 4 } ], "uses": [ 8, 39 ] }, { "id": "metadata/lang/compiler/managed::get-method-token", "conf": 0.6, "crit": 1, "desc": "References the GetMethod member name", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product" }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::text-heavy-binary", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "One .text section dominates file", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/write/file/full::dotnet-writealltext-token", "conf": 0.84, "crit": 3, "desc": ".NET File.WriteAllText token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-generated-code-attribute", "conf": 0.9, "crit": 3, "desc": "WCF generated code attribute", "from": [ { "file": 4 } ] }, { "id": "well-known/lib/runtime/native-platform/harmony::harmonylib-marker", "conf": 0.99, "crit": 3, "desc": "HarmonyLib runtime-patching library marker", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/temp::dotnet-gettempfilename-token", "conf": 0.86, "crit": 3, "desc": ".NET temp filename helper", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/os/env/read::getenv-profiling-api", "conf": 0.86, "crit": 3, "desc": "GetEnvironmentVariable profiler check", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.72, "crit": 3, "desc": ".NET GetFields reflection method reference", "from": [ { "file": 4 } ] }, { "id": "well-known/lib/ui/jline::jansi-runtime-context", "conf": 0.99, "crit": 3, "desc": "JLine Jansi runtime context", "from": [ { "file": 4 } ], "uses": [ 7 ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/section/prose::large-pe-many-strings", "conf": 0.82, "crit": 3, "desc": "Large PE contains at least 20000 strings", "from": [ { "file": 4 } ] }, { "id": "objectives/command-and-control/dropper/builder::dotnet-crypter-add-resource", "atk": "T1055.012", "conf": 0.88, "crit": 3, "desc": "Crypter AddResource token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-clientbase", "conf": 1.0, "crit": 3, "desc": "References WCF ClientBase class", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/crypto/symmetric/xor/lodsb::asm-loop-dup", "conf": 1.0, "crit": 3, "desc": "Assembly LOOP target mnemonic", "from": [ { "file": 4 } ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "micro-behaviors/process/create/spawn::process-filename-setter-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET process filename property setter token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/hardware/input/keyboard/hook::hookoff-export-text", "atk": "T1056.001", "mbc": "E1056.001", "conf": 0.84, "crit": 3, "desc": "HookOff export name", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/control/info::process-info-class-30-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 30", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/access::connection-string-singular", "conf": 0.7, "crit": 3, "desc": "ConnectionString property", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-token-pair", "conf": 0.72, "crit": 3, "desc": "Multiple .NET reflection resolver APIs", "from": [ { "off": 11352662, "file": 4 } ], "uses": [ 52, 72 ] }, { "id": "metadata/binary/symbols/count::no-imports", "conf": 0.7, "crit": 3, "desc": "PE has no imported DLL dependencies", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::assemblyresolve-hook", "conf": 0.95, "crit": 3, "desc": "AssemblyResolve event registration", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/daemonize/service-path::dotnet-add-hosted-service", "conf": 0.9, "crit": 3, "desc": "Registers a hosted background service", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/mem/protect/modify::page-execute-constant", "conf": 0.8, "crit": 3, "desc": "PAGE_EXECUTE protection constant", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/resource/identity::pe-description-equals-product-name", "conf": 0.9, "crit": 3, "desc": "PE description duplicates ProductName" }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-delegate", "conf": 0.8, "crit": 3, "desc": "Creates .NET reflection delegate", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/control-flow/dispatch::sparse-opaque-pe-profile-code", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with elevated code entropy", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::get-files-token", "conf": 0.88, "crit": 3, "desc": ".NET GetFiles enumeration token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::get-methods-token", "conf": 0.65, "crit": 1, "desc": "GetMethods member-name token", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-assembly-token", "conf": 0.78, "crit": 3, "desc": "Assembly accessor token (get_Assembly)", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/hook/interception::dynamic-proxy-class", "conf": 0.7, "crit": 3, "desc": "DynamicProxy class reference", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-ansi-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET ANSI pointer string marshalling", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/access::sql-connection-class", "conf": 0.7, "crit": 3, "desc": "SqlConnection class", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/payload/camouflage::low-entropy-rsrc", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Resource section entropy is unusually low", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/string/library::dotnet-get-directory-name-token", "conf": 0.72, "crit": 3, "desc": "GetDirectoryName method-name token", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/payload/camouflage::giant-text-section", "atk": "T1027", "mbc": "B0032", "conf": 0.86, "crit": 3, "desc": "Giant text section dominates PE", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/hardware/input/keyboard/hook::hookon-export-text", "atk": "T1056.001", "mbc": "E1056.001", "conf": 0.84, "crit": 3, "desc": "HookOn export name", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/create/compile::codedom-compiler", "conf": 0.8, "crit": 3, "desc": ".NET CodeDOM compiler namespace reference", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-analysis/vm-detect/vendor::vendor-vbox", "atk": "T1497.001", "conf": 0.7, "crit": 3, "desc": "VirtualBox hypervisor vendor string", "from": [ { "file": 4 } ], "uses": [ 14 ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-api-cluster", "conf": 0.91, "crit": 2, "desc": ".NET reflection metadata resolver cluster", "from": [ { "file": 4 } ], "uses": [ 38, 64 ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/payload/section::extreme-dominant-section", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 3, "desc": "Single section occupies nearly all bytes", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/extension::utf16-exe-suffix-token", "conf": 0.84, "crit": 3, "desc": "UTF-16 exe filename suffix token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/os/autorun/scheduled::task-scheduler-keyword", "atk": "T1053.005", "mbc": "F0012", "conf": 0.85, "crit": 3, "desc": "Windows TaskScheduler API keyword", "from": [ { "file": 4 } ] }, { "id": "objectives/command-and-control/remote-command/shell::runcommand-task-label", "atk": "T1059.003,T1071.001", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "RunCommand remote task label", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-function-pointer-delegate", "conf": 0.92, "crit": 3, "desc": ".NET native function-pointer delegate conversion", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 4 } ] }, { "id": "metadata/build/archive::archive-member-over-10mb", "conf": 0.95, "crit": 3, "desc": "Archive has member larger than 10 MB" }, { "id": "metadata/package/files/nuget::nupkg-managed-library-member", "conf": 0.98, "crit": 3, "desc": "NuGet target-framework managed library member" }, { "id": "metadata/package/files/nuget::nupkg-single-executable-member", "conf": 0.98, "crit": 3, "desc": "NuGet package has one executable member" }, { "id": "metadata/file/archive::archive-misplaced-executable-member", "conf": 0.9, "crit": 3, "desc": "Archive executable in atypical path" }, { "id": "metadata/file/naming::archive-member-under-10kb", "conf": 0.9, "crit": 3, "desc": "Archive has a sub-10KB member" }, { "id": "metadata/package/files/mobile-package::apk-misplaced-executable-member", "conf": 0.9, "crit": 3, "desc": "APK executable in atypical path" } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 2557, "entropy": 5.01 }, "binary": { "peak_region_bytes": 2557, "peak_region_entropy": 5.17 } } }, "id": 2, "path": "SwiftlyS2.CS2.1.4.11-beta.8.nupkg!!SwiftlyS2.CS2.nuspec", "pid": 0, "risk": 1, "sha": "c5f5fe8dcd9301809c4c2976f3a022cee7d4efd9306ed9aec7e2862e2e9f5e22", "size": 2557, "traits": [ { "id": "metadata/build/manifest::nuspec-file", "conf": 0.98, "crit": 2, "desc": "NuGet nuspec manifest file" }, { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.9, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 42, 0 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.9, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 42, 0 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:wqgc=E=Re#0000000000[bKTP3J-0Z09W8p00Ao4000000000003zmw000", "ln": 0 }, { "b": "00Ao409)kr000000000000000kMy^H00000000000000000000000000000000000000000000000000nb@R\u00260SSx7iijId2*nFk0rr9100000000000000000000000000000000000000000000000000000000000000000iSZ.FfAqBY1awcx017hh0^?)u019!!fAqCf3kUf07aGT)dOZ6ED=mVs3xd7-02(5V:1NG2dPMT526m\u003ct01a2ND=mVs3xd7-02)yaBic9o3vi3}dHD$w8GT1O01a2\u003cBic9o3vl2b:$J/50^?)u015?8jqN#pz{6*m3mZ6A:$J/50^?)u015?8jqN#pz{6*m3m#q]dI:GLBic9o3viRi:UiY4DkZ\u003eDfAqDag6h*wfAqD3-Xmx1dHD$wliw+yBi33n3vh=2-v}o0dHD$w3kUfgBic9o3viRi:UiY4Dp/QdfAqBYD=mVs3iLj\u0026fAqCfiS/G^D=mVs3zY^202)yaBic9o3vk2vecZgpfAqDa0^?)u017g]Bic9o3vl2b:$J/50^?)u015*D+p\u0026]6eDMUp7aHkz:UiY4DkZ\u003eDfAqDa3kUe(6efK?lJv8^0rr9i0XB!20rrasBiDrr3vjbBfAqCd=m/k9ef1Zl0pZ3*^{AB:^/G.Rspkrr9vJ9i00Tkr0v!cMa3ZCu\u00263Y/I00T[M126=RkMy=:000000W#wG015^F3JHfCEB6UF3iy#\u003e^j+LcEHDhR1sRXL015^R3\u0026*ngEBx\u003eI3iCn)wb#).!gZ\u003ef0VcpnfAqCfe]@rs00W@S000cK126=RkMy=:000000W#wG015^F7xsCOEB6UF3iz2(^j+LcEHDhR1sRXL015^R3\u0026*ngEBx\u003eI3iCn]", "ln": 448 }, { "b": "dGxCG0uq7t000PhVCMUMaPIGy000Ge-):#aaPIGyhuFmTMh?3\u0026c{g013mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCnQ[Z@\u003cbyPQ)5tStb+!k\u003elbu5Y8x(mN800000**Mcw-6jw8bumUxPRmCE5c8Xgbs+:9l\u0026Wh!U+vcUssByN", "ln": 2657800 }, { "b": "-TMIva]\u003e^x006II000000071FwU}6WeCYtDXGg.J00000-TNc?e=Y5J006LJ000000071FVktj{eCYtDX/H?K00000-TP^4f92eK006OK000000071FOqPl8eCYtDYb*}L00000-TPbfh2{!Q006RL4ZVlp005bYGio-9}.!JRYDd4M00000-TQ}70@%[G006.O000000071F[tci!s]59#Z8^mO00000-TJxSh2]i7006+P000000071F8MCT{s]5", "ln": 3424522 }, { "b": "2[=IF0p3()0c@.TXD-9m0eqsS\u003eQ=!z{Y7quB]n=P0002Y2[\u003crv0a\u0026Fs0de\u0026-X^5in0eqsS\u003eQ=!z{Y7qvBY=iW0002Y2[\u003crv0a\u0026Fs0dn{?X^5in0eqsS\u003eQ=!z{Y7qwB*OZ+0002Y3a\u00262K01#vn0dw$}Y9wro0oKPLiYc)IToeDJBZhJ-0002Y3b[}.01#vn0dx0]Y9w", "ln": 4399115 }, { "b": "\u003c{wekd/ZV)0%3q]7%r=%008c/+x2JvafkLA-F56I82%TpH8rnveDAoP006#(BJUK4008c/P3w[/F#/4O-!zHS82%Tp\u003c{vQna])j@0%3t{9lYo2008c/JG2^}afkLA-!wxQ82%Tp\u003c{xc2e=V#{0%3t{-lo80008c/BdLh*afkLA-!tnO82%Tp\u003c{vo$697I{0072)y%r*$008c/QrTzL5c8Xg-!zvQ82%Tp\u003c{u!x0rr+l0%3w}7%T00008c/5-LOD608fn:aXoN82%TpH8rnveDAoP0075[BJ$:7008c/3xkk\u0026vK}SZ:C5T082%TpH8rnveDAoP0078])9lEG008c/YK-O[lh}2!:+s0C82%Tp\u003c{yRye=V#{0%3C%U*jf!00", "ln": 4694440 }, { "b": "\u003cPtG8ToeDGIv^ru0002Y3d9xf03woA0d6JkXGp!K0oKOL(h}2dToeDGINZhs0002Y2)ot)03woA0d6IhX/Q[L0oKP(TtH0fToeDGIEs1q0002Y3c}Vn03woA0d6KfX/Q[L0oKOIE\u003epTxToeDGIu{*o0002Y2$Jz}04F0L0d6JaYb}1M0eqsS\u003eQ=!z{Y7quIE:sv0002Y2@p0m06\u003cM/0dfQKYb}1M0eqsS\u003eQ=!z{Y7qvIRL/=0002Y33@N50l8tF0dj", "ln": 4785901 }, { "b": "000010o\u003emm000010o\u003emm000010o\u003emm000010o\u003emm0000000000000010o\u003emm000010cV0V000010cV0V00000000000000000000000000000000000000000000000000000000000000000000000000000000000010cV0V000010cV0V0000000000000010cV0V000010cV0V0000000000000010o\u003emm000010o\u003emm000010o\u003emm0000000000000010cV0V0000000000000010cV0V000010cV0V000010cV0V00000000000000000000000010o\u003emm000010cV0V0000000000000010o\u003emm000010o\u003emm000010o\u003emm0000000000000010cV0V000010cV0V000010o\u003emm000010cV0V000010o\u003emm000010cV0V000010o\u003emm000010o\u003em", "ln": 5164375 }, { "b": "CwZ5+C@vtRlU{gFA8Z:gi4$tlml%:CpdW\u0026Xp=QiflSW\u0026cAbPR\u003ciwpC2uSQ/EAbPR\u003ciwpB}pI@Kox\u003e7{AB9RUkk4F2ciwpCbpEdxArA9s7oIXR{o?wnJfAsNok$toGpFKt=rz@", "ln": 8337604 }, { "b": "Bx0K8wIs9%wPRoJzG6-ur://!wIs9%wPRoSwOiW%p*))Bx(mMq0b2\u003e+uR\u003eMYxd%sbwPRoQy\u0026%wA0b2\u003e+uR\u003e=Ov@Dj6B-.h9pEmxzA+Pf2zzh66wPRoBBAz8iBZYxaz/dle", "ln": 8362331 }, { "b": "xjVf(ltQjJwjyPFzdN=!wPoy7rb2]:fAuiewPxE8lUgdSwPxE8xjVf(mSh{nw[D9}Bwca*wPxE8xjVf(p\u0026ZbSz/6DoBy!#Ulp9$Qxkzd2fAt-%Byd:+Du%ysp\u0026yze0b2\u003c", "ln": 8362484 }, { "b": "BydBAzdd6*p\u0026yz?BzkVhx(mMLzGGPmC$}^+wIt?swM9XVBy^cX0af\u003e^yCmEyyHoIdwO(vcwL^hKC#FiYzEWP}wKXye09z@\u0026f!\u0026Vaf!\u0026U#ml%*Uq+P$^uS6r\u003emn^ePl%\u0026\u003e^", "ln": 8363137 }, { "b": "Aa@\u0026q0b2\u003e+uQFHvy?bm2xjVf(l34r?v):{zy?bm2rDz.sxLzo[f-U\u0026$Byd{SB7GCXxLzo[f-U\u0026$Byd*^BzLVewKQGEf-U\u0026$Byd%+B-7.A0b2\u003e+uSgSDwn=VVvrk{!wmXeyA@", "ln": 8381909 }, { "b": "uRCfDxMNj0AaH:7xjVf(l3diSv}YZ\u003czGF\u003c6AaH:7o(Ce}wIBf$wPRoCB-..zzGx]dBy^fbB7GD2luNx(z/fSrvru6n0b2\u003e+uRCfDxMNf{wO2WAy\u0026%qz0b2\u003e+uSHPKB.7", "ln": 8382344 }, { "b": "yEz(Gw{5fez/dofxjVf(nP5G\u0026Bvo?Pw{5fez/dofy\u0026r/(BzkVhf-U\u0026$BydZWv{%gKz//Afx(v(z0b2\u003e+uQn^QwO#T0BzkVhf-Ve*B-Y#?zF\u003c2}BzkVhf-U\u0026$BydQSAclm\u0026zV", "ln": 8382860 }, { "b": "uQF:HC4C@qA.QE.wO=Ax0b2\u003e+uRLV?DtEd?z/WSkv@bN{B1)VcwPRoSvpT7{B1)VapHXx-y?mZ1lsBwtlVl*Xvrsj7xjVf(raf/WwPPTbB7GD2raf/WwPPTbxjVf(o\u003es", "ln": 8383457 }, { "b": "wPRoTx(dxWA+N)VB-8pR0b2\u003e+uSp@=vqFqHB-8pR0cqZ[uSp@=vqFqHB-8pR0b2\u003e+uRbuJz9@k:zGESlB7GD2nPXJXlVm9+Btr\u0026ewPRoOz!To7l2yK.zGESlxjVf(q/3w]g5#xbByd%.z/^-mxjVf(lVMWkvrcDB090JJBtr\u0026ewPRoMx\u003eIa3t4I.)l${Z:g5$@#BydZQxj#xRx\u003ezEjl${Z:g5$@#Byd*^Btr\u0026ewPRoJzG6-ug5$@#BydHKwO+)GzG2", "ln": 8398837 }, { "b": "nLzMFlQ:)WlR*AMoHR]H06%4Xm]z=Jk$1dGr7G[.s6[r\u003co\u0026aILr7c^*nj==H09qPPp!%?Tl%\u0026wRnMnaUp^EPuuQX6=lSE8OuS6rUl%0nTr7c^RoHhfQlqHuBuRJ%!m[3=^qB%?R06%vKo*I-IpFLm}pc?YPnkAh(mOcuvoKyd.o\u0026aR:nMnaUoJjBXoHh/IqEryap^[.(nK(JAr8=o^m)P\u003cruR\u003c3^r7PCJmpe+Ppc?xsqEq\u003c[mnu/?q:\u003cU)r7f[*rz(m)k#Z/YnKr", "ln": 8444714 }, { "b": "rzl7TpdCpWlq{rJrZ/[[nLSkNqCZ.0mo0kWnLR+QpEm#!o\u00261eCuS6V=o?w8I07oQUqErv4k#ZoWpF:FPnLR+Ql@cPRuR:G!pdXhJ09qD=mn^F]k$:TNqDlE!nLR+Qq=MdOqBabIuRa0(", "ln": 8448248 }, { "b": "nLR-J07GKGoHJk*ia23soIv=slRy=Tpdw1VqCP$WuRA:+mpeU.nLSR^pE!gXq*ACawO\u003c4\u003epxi\u003cWoIwk-uQEQ:q=DTXnLSk(qBanNpxi:YwPI@\u0026B.(bgnLYt0wPRoFzGGPmC$y^iA7aU^x([R(pxj:kzGGPmC$y^il}6*C07*cUo\u003cZv-k$toHk#7==mnccqq#", "ln": 8464611 }, { "b": "o*I-=l}{+-q+{7Ul%\u0026nEpGNP/lqHX-mOD9ruR0:/lqHX-p^E#UnKDfuuR0:/lqHY\u003clp\u003cEwuR0:/lqHX-rZGO:08L%Vr7PCJmpezQpG6XXr9@Qcp^[.TpGNP[mPAhJuSG-%ry6qIt0VaVpFLm-pGNP-oJs$WnLA8LqEq:^so8#BBydBOzddc@pgn0JpIaiWwPQ:J0bC}gqE%Y-By!x)z/Po0wL^hKBy]Dizbj8j08=l:pGppWmpeFU", "ln": 8495454 }, { "b": "ze-J!y\u0026r/$BA}3\u0026q*ACawO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jxaG%Bzbxftu}kcD2[7sz7Xg]y\u00260V)BzkVhB1P%]zE)\u003c5v\u003eHtJwNPaBzFTO(x(!wUr6z{RxLzJ(t(W/GB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eF-JB963RxLzJ(t(X.GA+w(}p?ToU", "ln": 8503736 }, { "b": "B-oV)p\u0026ZbVvpxjLuQWLdwO\u003em:wP?^0Ct@\u003cbwNwwKwPRA}w)]cGxjVf(pI:-*wKHMEvGp4LByd*Ynn\u0026M\u003evp%drwOkZ{m@\u00263E0b2\u003e+uQnafvGpmNBxr3.07I0Ez9-hPvGp4LBydQSB97\u0026dv}wRNzGF/$xjp\u003cLm}(AjnmuKQz/f?]x\u003c}6PwPRo}x\u003c}6-wPRo}x\u003c}6TuSy#Wz!0MYBA}XluQ!Ery?mc:lT:\u003eOl1T.EA+4ETBAh880b2\u003e+uQnsozGFPYCTDpYzdiGTwPRoIvrj+NzdiG^wPRoIvrj+NzdiGmx(mM{AZK$\u0026y*QdPB.$N/xjVf(p\u00266M=wPygSvGpEXByd\u003cXvr(B8l#MJmyHoH$y?WD#BwMK?B8L@8q/(C\u0026wK*fCwKG%Gvm1^GvGpgJmnm\u0026olU{EFzGFxSzdN=+y*?Q2wliF!xHDoJvm1^GvGpgJmnm\u0026olU{EFzGFxSzdN=+y*?Q2wkm5hvrt{Ay\u0026r+.Aaruzy\u0026r+.Aan", "ln": 8514875 }, { "b": "q!PPWwN)z*vrujbwPGE}r:*2.vqZfMy\u0026131vruBde\u003cTq\u0026z^@=EBzK#?v@#Tfo\u003ewfWA^q1Ty\u002613108)#Wx(mMHy\u002613108c*xBu%.Vz^@=RqE%oMy\u0026r!-xjVf(nPnetmrO", "ln": 8520559 }, { "b": "oLFcMBwMy/xJn}:ADL?:wb{mNBydZQxj#xYvq]j:x(OobnN}*lwPRoTvrMiNwb{mNBydQYwO\u003c?Dw\u003euIkB7GD2nPXJXl$G$4wb]N$uQwsjzbL7=xgVRlzf6tYwb{mNBydBEvS=rPwb{mNByd:JByO#Qwb{WZByd:JByO#Qwb]N$uQXNswN/*Ix(!l4ByO#Qwb{mNByd\u003c+x(dp0C$h)-Aa?*N08#x]o)7=dy?l7Lvrl9Nwb]N$uQX\u003czA+xU@Abn%7xA", "ln": 8574968 }, { "b": "lU{EFzGF*0wNPBEwb{W)wNPBEwb{mNByd{SwmYs?nN}*xwPRoSwN]v-zaOmrxjVf(nPXJXf?DE#zaOmrB7GD2nPXJXf?DE#zaOmrxjVf(nPXJXgd=O0zaOmrB7GD2nPXJXgd=O0zaOmrxjVf(nPXJXnN}*xwPRoJBy/qXwb{mNBydETB7Gl0wL3#PzaOmrB7GD2mrrJYzEWlHBy/qXwb{mNBye3!xl4A\u003ewL3#PzaOmrB7GD2rD8O\u003evpS}vBy/qXwb{mNBydyQvru6LBy/qXwb{WZBydyQvru6LBy/qXwb{l", "ln": 8575904 }, { "b": "wO\u003e1H0cqZ[uQXQunPXJXnN}*lwPRoUz/oC-By/qXwb{WZBye0=z!@0!wO\u003e1H0b2\u003e+uRbuJzaO?XzaOmrB7GD2nPXJXnPXJXnN}*lwPRoDz!%l3v@#B6zB[}YzaOmrB7GD2lVl^SwN/*@z/ec*wO\u003e1H0b2\u003e+uSh5Xv@2T@nPXJXnN}*xwPRoTBzkl2wPyv:wO\u003e1H0b2\u003e+uSh8RygQ)%nPXJXnN}*xwPRoTBZ/8%v@$p:wO\u003e1H0b2\u003e+uQFmyyH}PVBy+", "ln": 8576151 }, { "b": "qFxSVv}YB}nN}/\u003empe(cvr(B8luN9XwPQESBv*0yv@b\u003c\u003czGFDX0b2\u003e+uRbcHBzkf1o(Ch^zdNQbnN}*lwPRoDB-IIlzGFP\u003eC4CJ4zGFDX0b2\u003e+uQYcHzGFDX0cqZ[uQYcH", "ln": 8578060 }, { "b": "lt{:MnP56ICTlB[vpJ$Zwb{yLmnm\u0026oryP[!AaAy0wM08Hz/PwPvru0)wN\u003e^NwPRoJBy/rgo\u003c@cNxK$YOB7GD2nPXJXB4{7+v}YB:0b2\u003e+uQO{MzE(jIB8UMfv}YB:0cqZ[uQO{MzE(jIB8UMfv}YB:07z6xzGFo!z/fbOx(!l4ByO#}wb{gfC4CMkB3%.-Aa9\u0026#xK$YOxjVf(l$G!GxHN8QzGG}/x(!l4ByO#}wb{mNBye0=BZ]8@wb{mNBydNEB4yj\u003c", "ln": 8588106 }, { "b": "0b2\u003e+uRbrny*?j6wN\u003e^ZwPRoJB5lWYzGGD2090JIA=k#jB98F1y*?j6wN\u003e^NwPRoJBy/rgm@\u00263QBy!$.B7GD2nPXJXB4pmVzGGD20cqZ[uSRnZBy!3YwmYU2wN\u003e^dq/D+\u003eBy!l*x\u003eqg7wN\u003e^RuQWH+r8uInvruTklVlHDh83:Wz/!M/Abo95wO#Q3wb{mNBydsQBywV)wN[kEBzk\u0026xs7ceDvrb{%By!$.xjVf(nPNZpx(n37wb{WZBydQXp*[6QBy!$.", "ln": 8636782 }, { "b": "uR\u003eMED1z1{By!($x\u003ediRwPRoUC2z)/vr\u003e^[wNPB\u0026wb{WZBye0\u003cqE%VMC#F/@vqPZ?0b2\u003e+uRbuJze0IXB7GD2nPXJXx\u003ediRwPRoXwNPK@zB[}Yze0IXB7GD2s7L/Vz/ec*wO(c(0b2\u003e+uQ!EDCU90*ze0IXxjVf(m}3mCx(){6x\u003edi+wPRoHvqPN\u0026By/r6wb{mNBye9Xvq{d5mQZB:x(){6x\u003edi+wPRoXwNPK@zBO5SCXInhze0IXA8QT*wb(", "ln": 8644316 }, { "b": "yIvW0mRMBIwb[.Tv}f7\u003eB8M7.yHpBnvpK7!zF8BMwO+(Sjypx:v}x.5z/O3SuTDcdv@2^@xguPDy?9Jdl1t1JC42GhAZ1nCuQwghyIvW0mRMBIwb[./v}fs$B7]MgmQY!Gz/O3SuTDcdv@2^@xguPDy?9JdnmuKHzE))gmQY!Gz/O3SuTDcdv@2^@xguPDy?9JdqG3X\u003cxL}y5B4fOFBz(g-yHpBnvpK7!zF8BMwO+(SjwZcuk5jIjlsBwtx-", "ln": 8660214 }, { "b": "lVl*UvqYPQuQYiJv%8)8lVl*UvqYPQnn\u0026AZmr\u0026xNB-.gZz/6u1zE--EzFi%byEJFVv%8)8lVl*UvqYPQwQ4=@B-.gZz/6u1zE--ozGf/gB.9{UzeAZ0wb[})mpe#nA+PA7lVl*UvqYPQlR}/mwnbK}x(v(TC4CMkuSh5!x(mMJz/6u1zE--oCX7xcBzkS9lVl*UvqYPQl${ZYvru0)lVl*UvqYPQlT:\u003exwO:.LzeAZ0wb]zylVl*UvqYPQp\u00267n!x(i", "ln": 8669161 }, { "b": "z/P(fv@#B6zCsX:xM4zYn{a#\u0026lVm0=wN/*@z/eoXBzbP6090xExjVf^vrcrOz/P(fv@#B6zCsX:xM4zYm}D^pwPRQ7wb{mNByd%TBwls*xM4zYxjVf(ls\u003c?AzE=WSBwls*xM4zYyHoI8vrcc{Bwu:@l2pvQCv+q.wNPT#zEldICtIZ[zdNQbo\u003ewAWz!5\u0026XwPRoTz/P}]wPRQ7wb]4(wNPaXA:\u0026@}A+59!A=+2!BzbP60a!\u0026nvpS}\u0026vSbW}wb", "ln": 8676488 }, { "b": "w[C$4wb{mNByd:JCTDy/A+2e\u003ewPRoNvr+dTz/Pv*xjVf(p*[A^Cw?Ij0cqZ[uR\u003efLB9zLywb{yLmnm\u0026olU{EFzGFlVwN/HwAbXcPByw0OB8#LzA+2e!uT=\u0026uB8#LzA+2e.wPRoF", "ln": 8678897 }, { "b": "Byw9VA=#ebwDl^.BydKDzdMazByw9VA=#ebwDkkiBw=W\u0026B.L(cwk^5WC4\u003eC$07/.1B97#7q!o#)x\u003e7YOl1BH%z/Z2iwk^5WC4\u003eC$07QQxoj-xWwk^5WC4\u003eC$07/K@zeAZ0wk^5WC4\u003eC$0b2\u003e+uQF:Gzddr)q!o#)x\u003e7YOB7GD2lVl*UvqYQOwPz%dv}tTawmO5CA+dQRzeAZ0wk^5WC4\u003eC$09a8KlVm0RlVl*UvqYQOwPz%dv}tTipgXJwwPI{3xjU1M", "ln": 8683722 }, { "b": "z/{8gwDkqtw]ydSA-cE\u0026z/{8gwMi}]wKxG^vrt{QwPI^jA:@UXlQ+)mx([R#wPI^jA:@VPvqY^\u003ewPI%2l1BI7wPI^jA:@UXxjVf(ltQ7uyHRi\u003cA+56VB8Mhwv}tTGwmP4yzCUv+v{@\u003eXwM08Xz/{8gwDl:ZzeTPeuR+MoA+e-?v}YBKwPI^jA:@UXnP5Y\u0026yH{pVp\u0026ZbSvpJ$ZqE%]/B-H#60b2\u003e+uRCfPBy/uhrbUPNwN/dUxK$7MB8Mhwv}tS", "ln": 8739036 }, { "b": "0bC}go(\u003c@ko\u0026tLzz!%Pds7b]YwPQ*YC4CYnwM08.z!\u0026[:yHoI8B7W^kqE%]/y\u003c6w\u003evqG:\u003eBw=W[z!\u0026[:mq=TczGY@lwDlHMmnm\u0026oqCy52zeTJcnP5Y\u0026yH)GjwOkZ{nP5Y\u0026yH)GUwPRoEwPRu{y+!}0vqGGPxjVf(q/#LCx)si9k%XBVvqGGPxjVf(s7#L.z*bhMq!6lLwDlvOBydyiq!6lLwDlvOByd\u003cMA:-/NqbZ$ky?iPVwPRoMpG7h4vqGGPxjVf(q:%\u003e/q!6lLwDlvOBye3Gq!6lLwDkUuAyf", "ln": 8765023 }, { "b": "A=L-eBw#%\u003ewPIu\u0026y?iPVwPRoMz!0i(y?WJ}BAp@2y?iP-uSHcmvR/PQlQLo#y*{*.yEhDJwMz=svR/PQnMfhvC4CX)x\u003eg^xy?WD#Bv6zSwMz=svR/PQnLS\u0026slUG[CzE)S+raflLwDkp%wPQpMvqY%]y!nIRz=P?CvR/PQzc}l.raflLwDlWprb#zSwKZxIBy/F[raflLwDlWpqE%uLAa@)3BvG$XBy/F[raflLwDkkiBx9i}vqYH^wN[nMzEW^5z/d)!r-AHpy?iPVwPRn", "ln": 8769116 }, { "b": "yHRi\u003cA+5iVA+O@\u003ey?iPVwPRoTBAgz\u003cA+O@\u003ey?iP/wPRoTBAgz\u003cA+O@\u003ey?iPluR:H9q!p5Kvrc6\u003cvR/PQm}D^hzGY-mz/fA6zGF]/A+O@\u003ey?iPBwPQvUC4\u003e#nzF-%5Bxh*\u003cx\u003c\u003eE!wDlvOBydy4A+eV{vpB4:07/W?zdMmRz!?:HByx2{A6(%jwNPv.vR/PQlTJf2wNPv.vR/PQxjVf(lulTCyHHW*wDk7]A=k[+z/oU]z//Afx(mMIA+eV{vpB4:07z6xzGFi=wNL", "ln": 8770411 }, { "b": "Abn%8wKZxIwDl^.Bye0Uze:r1By^{Qy?iPZuQWXgxh}A1o\u003e!lXvru6Ix(4tXuSRnZBy^{Qy?iPZuQWXgxgbi/qG3Y1wKZxIwDlHMmnm\u0026oryP[=D2vb9A=k\u0026fDsYMWy?iPZuQWXgxh@[Yvru6Fz/ff3xguPKwDlHMmnm\u0026omNy3NAaAy0wMi8UxjVfLz/ff3xgq", "ln": 8779855 }, { "b": "zGx-jwDkUOB97#ge\u003c\u003cL{B8L(a0cqZ[uQF:HB8L(a08)DDwj7oMB8L(a0bC}gmRc1IB-I4Xz/fSmy?iPrl2H:TlVl\u003c-z!@$+nnhQCoMaMnzBntWB8L(a0aeVozE=EMB8$=5wMiOnz/fSmy?iPBxM53fwjQABwLv2PrbUcxzGx-jwDk!Lx()]=z=pj/C4CXYz/fSmy?iPZuQW)?o(\u003c@OrD8FSBy!f?y\u0026\u003cxgy?iPAwO(vewLEq-BzkYgwDlvOBydx", "ln": 8781562 }, { "b": "zdJYOm}D^rvRPE:BwN71r=?+Vy?lvIzdJY\u003cBywS{wLMVJwDlWTA==29y?lvIzdJYWwPRoGx(4uQvqPMQB7GD2mRMWIpgn0J0b2\u003e+uQF%RA+fcgoMauIlT:FrwN[nAy?lvIzdJY*wPRoDB-IIlzGFM\u003cvpR-lv}YB:mRMWIpgn0J0b$UvByO#Ky\u0026sDbmRMWIpgn0J0b2\u003e+uU%d?v}XtCy?lvIzdJY*wPRo@uVoH*mRMWIpgn0J0b2\u003e+uQnNzzawRPAa?ZPy?lvIzdJY*wPRoBzFr@TA:-{2mRMWIpgn0J0b#BYpJyeZx(mu}mRMWIpgn0J07QQxraP]=mRMWIpgn0J0b2\u003e+uSh5!mRMWIpgn0J0cqZ[uSh5!mRMWIpgn0J0b2\u003e+uQ]cBB8%/+y?lvIzdJY*wPRoHA::3gmRMWIpgn0J07QQxmRMWIpgn0J0b2\u003e+uQ!%KBvG$XwLMVJwDl^.BydHQzGFuZy?lvIzdJYWwPRoTzEEH9xM4#Z", "ln": 8837904 }, { "b": "zfX(+zdJY*wPRoFzE)Wgpgn0J08u%Ax)a5Yx\u003c#9\u003eA^pz*zdJY-x\u003c#9\u003eA^pz*zdJYSvru6[z/Qa#vqPMQm}D^gx(W={Bz(hBpgn0J0aY!:wN/?2A^pz*zdJYWwPRoFzGGPmC$}^+wDl^.BydEOBzk\u0026xpgn0J0b2\u003e+uQPfSvqPZ*mq^iYBA{R\u0026zdJY*wPRoED2v5cx\u003e6OHBzk\u0026xpgn0J0b2\u003e+uSh5!pJyeXzGGrex(v(UvpJ\u003eqzGGPmC$}^+wDl^.Byd%*", "ln": 9634701 }, { "b": "vqGU7wPyEUzE\u0026/owObv[y\u0026\u0026u+zE\u0026/XwPRoOwP{*ZzE\u0026/Ux(!lfvr\u003eKXzE\u0026/tzC$m!wDkqtpJZ+Tx(mFZlVl*Jx(mFZq*h}/BzMk3ga(Hsvrb{\u0026e\u003e6U\u003cx(mFZq*h}/BzMk3ga\u003e}jA+c\u003c(zF9W3wDkUMx\u003ezE6C#DEJq!PPWwN)z+q*h}/BzMj\u0026z/Pzwmq=:LzE\u0026/DCwgVhy\u003cw@me(MB(A+e=lnMf?Ew]}\u003cmlVm0Re[X:quQX\u003cBx(mFZB7GB", "ln": 9649139 }, { "b": "x\u003eId4vqF\u003eRxkRd1B-I3[nmuNrx\u003eIr(BAIRn090#:m}D^vx\u003eIr(BAIRn0aelcBu%CFA+frklu#HzxkRd1B-I3[xjVf(B7]o8vruTjwDl^.Byf96xkRd1B-I3[xjVf(raP]=wPv", "ln": 9680063 }, { "b": "y*?yarZZwrvm1yzwDk7(z*2XWvrt{Avrk#WlQ=ldze:r5q!6GLzdcEkvrt{+p\u0026ye}zeTDlxLy%yvrk#Wo\u003ewAWz!8gyB7Ctsq!o@\u003ewO#0?rD8FSBy!i=wmX8oB7Ctsl2HyNrD8FSBy!i=wmX8oB7Ctsl2HyNm@\u00263SxHD=GuQF:HByw)3wPyK:wmX8oB7Ctsl2HyNm@\u00263SxHD=GuR\u003e=YCZi55wmX8oB7Ct:wPRoNvru73x\u003c\u003e*CvqPB=wKo*DwDh", "ln": 9682294 }, { "b": "o(\u003c@CwN/:(BAo=SB7Ctsl2HyNlVl\u003cOy?Wy3lsB}D0b2\u003e+uS7DRwPQmEB7Ctsm@i9MvqFRKxj#xNvrk#WnMfhvC4CX)x\u003eg^xy?WD#Bv6zSwDlHMmnm\u0026oqE%Y-By^*Qx\u003eqg7lsB}D07g9?p*WaizddxKx(!x8zEWlSz+K\u003e.wM9eMzdNQblsB}D07fH#mq^iYBA{e]BAh88B-.g-C4CMklsB}D07f7\u003ezE(gNzGx]uvqfR3lsB}D0b2\u003e+uQE+gB-7.=ActVgq!p5Ez!T9hlsB}D07/W?zdMmRz!?:HByx2{", "ln": 9683564 }, { "b": "y?ml/By+Ctlt{ZIraf/WwPQmSzdlEMA+w%9rDz.twO+{\u003cvru5XlQ\u003e^hxI-R=y/LB+vru6GwO+{\u003cvru5XlVM:DBy^\u003cKy?ml/By+CtlsB}Dm@\u0026fUvpS}qwPR\u003cdvru6GwO+{\u003cvru5XlQCj5wK*=LzEE6!p\u0026ZbnwPR\u003cdvru6GwO+{\u003cvru5XlQ(iov]vk!vruj3xhSq:wPz\u003c6o(Ch^l$HgCxjk)[07fj#zEVN.Byxo9zF8\u003c=Byxo5o(Ch^l$HgCxjk)[07c", "ln": 9751789 }, { "b": "ADL#owN[8GBAh88B-.f{lVl*Xx(4v3m}DNHA::63wi\u003erVA+P09By+CvC4CMkq/u/0v}v@FBAh88B-.f{m}DNHA::63wj7oCwKgAWA+P09By+CLzGYPix\u003ez6/vR/Qyz!9ABBAzLqvS=^7090SLwNPaHzGxk#wKgAWA+P09By+CrBAzLqvS=^7rDzOYwKgAWA+P09By+CzB3+dIwOaRIyH]!NBAh88B-.f{l$G?Ixj\u003eTZy?k[OBAh88B-.f{piyw?vpB4:l3di?x\u003c}", "ln": 9776013 }, { "b": "vqH6$0b2\u003e+uR+MfwPQ%Yy\u0026%p?rc0mOwPQ%Yy\u0026%p?q!p5KvqH6$0b2\u003e+uSpDOxjVf=vqH6$0b2\u003e+uSQVIBxh*^B.7L=wPRoTCwg@cf?=p#x()x:y\u0026%p?xjVf(q*h}[xeid{", "ln": 9781744 }, { "b": "B3\u003c\u003e.AaKc9Bzk]f0bC}go(\u003c@qlQLZ3qE$2=C4yUypFT}-pEv=Nryf.Tq=MaSnM[zVnL-8*nLr02y\u003c6v\u0026vpS[Ql349UzdmsbqE%]/y\u003c6v\u0026xjVf(lQ+)mx([R*x(!uly\u003c6v\u0026nK)iawK{-TyEzPMvqPB(lQ+)mx([R*x(!uly\u003c6v\u0026lTJo1Bzk\u0026xl${Z-z!%Pd0aP?PuRLDZwDlHMmm?xoB-Y]VBzkVhpJyeZx(moWlt}98hzwGap*))wo(Ch^0bC}gnP5G\u0026Bu%y", "ln": 9786850 }, { "b": "v@1Lxy\u00260*6x8\u003ep^q=4psD1z1\u003cz*2YewO#P*wPz%dv}xZGxK$W?mQZaHx(mL-q*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPGE#vrcB5vqG:]zF5@FBAh8kxh8/PB7!##y?W^10b2\u003e+uS7/Uy?W^10cqZ[uS7/Uy?W^10b2\u003e+uR+cCwN/*HB.\u003e(dzF5@+uQWXgxg3GHwO#P\u0026zFTl3yG2s}wNPB\u0026zF5@ZwPRoEz/b", "ln": 10523951 }, { "b": "x(mMYwPIB6C42Gbz/eG}A+PA70cqZ[uR$@SB.b8Tvru0)zddi]zF8\u003cUB7Gxnvruj4zC$T$x(mL-xjVf(lVl\u003cWwN/*@z/eG}A+PA707QQxlVl\u003cWwN/*@z/eG}A+PA70b2\u003e+uQF:GAa9^3B8L}{BAh8kx8)0:BydyNze-{7x(!igq/)4]zF5@FBy!($k#pcWq/(OVzbaU:Cw?Iqx(mMPp^FS5A:I^:q/)4]zF5@FBy!($k#pcWnMf.xvqO+JBA.UzyIvW0rDI}\u003eB6?\u003c/wNPBJwPScmA+/xb", "ln": 10529189 }, { "b": "zE(vMxj$aZx-I^SByd{OCu5V$0cqZ[uS7rRrDq^NuQ[WHlVl\u003cWwN/*@z/eDYCu5V$084izw[sRTyJsa?p\u0026{.Sz=p:#x(mMHzGxH(xjVf(o)7n]x-I{QmmPZtB7Xi\u0026y\u0026\u003cv\u003eyHoI8B7Xi\u0026y\u0026\u003cv\u003eyHoI8B7W^klUG[Io)7n]x-I{Qmn[qtvqO+JBA.UzyIvW0m}D^fz/ff3xi5CSB.a]DvpSqDz/xn-vRL):v@Dr$pHX5swP?T5BwDvX0b(sY0b2\u003e+uS7!", "ln": 10583271 }, { "b": "BydyTA-MQ+0cqZ[uQF%Rr:/!AxjVf(l1j[ovqC{OwObv[y\u0026\u0026Y^yYF9VByd:JCVFl?0cqZ[uRK%Nr:/!Al2pvQv[oaaz^)c\u003e07I0uwK]scz^)c\u003e0bC}gq/(OVzbaU:Cw?Iqx(mMJz/ff3xj1eBz^)c\u003e0b2\u003e+uQ[{JvQT6MB7GD2m@i9MvqC{VuQWU1vpS}\u0026vSbW}wjf\u003cFvnZVRB.bSom@i9MvqC{hmq^osy\u0026r=\u003eyYD*%B7XDvl$G\u003epyYFK1v{.M3", "ln": 10619295 }, { "b": "zbaU:lVl\u003cWwN/*@z/e0Ywm55BB7nMNgeIsMk#.hXx(W^evqG-WyH}K7wO:dTe[w^m08[8Qw]}\u003cmq./%)q./$oy?%8!uQWH+o?Xo1B-RaYB-ILwA:IgBy?%8:wPRoTwNOIJwO=e.yHoI8B7W*FB7Fo-wO=e.yHoI8B7W%eq=EsGze0(@By!x:wO=e.", "ln": 10630072 }, { "b": "A==N[z/oB(xjVf(p\u0026yn*0afOYC4B6IByw0:z!]zLD2[7sz7X!3A+eV\u0026x(mMora{q-vpShMz!]z^wPRoEwN]H+vru6\u003ep\u0026yn*08)#Wx(mMWz/oB(xjVf(lQ\u003e^hxI-R=yYE3%vqPNDz/ozVvrt{{vq[O6x(^@:z/oB(uVoB$zCUm\u0026yYE*Lz/fVqz!%l3A.{W)yYB", "ln": 10633210 }, { "b": "B7nS$wNxy%z*lK\u003ee\u003ef(1z2!iWBydHTz/2F}wPRoGA=k^{xjVf(l$HgRvmCoQz2!S*BydBEy\u0026\u003c8PA=k^{oMauImSJA:0b2\u003e+uQ!\u003cywKZYUz2^dGl349YxkRc!y?l7Rz/2F!wPRoBB-.L2CwheexHW2Xz2!iWBydHKwO+)GzG6-umSJA:07gWzC$8*)z2!f*z/2F\u0026uQWH+o?Xo1B-RaYB-ILwA:IgRB98tq07pmjvp%dsB-RUyz2!iWBydQY", "ln": 11121113 }, { "b": "x\u003e7N[x(v(@l2Z^VC$RZ]v}Yp+zuarXByd^KzdNlUvqH6$l#M{Jx(i](wPRoOvqPN^r://!wKHDNvqfPVl2Z^hz/5]%zuarXBydyTA=L-eBvp4:vqfPVlR}]wB7E\u003cZvq])KzGx]dzEWl+raQb)l#M{Jx(i]rq^SK0uSq5Ox(i]rlSm0aA.QQ/uSq5Ox(i]-wPRoUA:-W10cqZ[uSq5Ox(i]-wPRoDmS\u0026PUrb#zYzu9l#vqPNDz/ozVvrt{{vq[O6B-7X*A:-W10b2\u003e+uQEo", "ln": 11133101 }, { "b": "A=$(kx(v\u003e?q*ACawO\u003c4\u0026y\u0026r=\u003ey?Xi7BzkVh07Q\u003czvQT7Dz!0i(x)Kifx(v\u003e?q*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/bLAz/o.\u003ez!0MYBZ!x=B9g]cx)Kifx(v\u003e?m}D^gwPhi#wmYT*C$h)-Aa\u0026o^B9g]cx)Kifx(v\u003e?mn)YczE(QMygQ)%r+VR$vqGU7vruj4zu9a7v}xK?pHX6Iv@}", "ln": 11148285 }, { "b": "xjVf(pgXV(q!o=Rv@#B6zuarXBydEOBzk\u0026xnP56ICVef\u0026wN/*@z/bL/wPRoNvr+j^wKH9wy?m9#x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9l}z!%l3v@#B6zu94hnLR\u0026RuRbcHBxh%.lVl^SwN/*@z/bLKA=kD0B8$q]A+eV\u0026lVl^SwN/*@z/bLDq!o#)x\u003e7Zwz!%l3v@#B6zuarXByexNwPz%dv}w2Cy\u00260V)BzkVh0cqZ[uTD-yA=#ebwKyxLy?m9#x(v\u003e?nD", "ln": 11150997 }, { "b": "uQF:HzE)s1x(v\u003e?yHoIeBy!($pgXJ\u003ez/PSczF8sPzF0P}uQF:HzE)s1x(v\u003e?xjVf(lVl\u003cWwN/*@z/bLDl$eJ4zF\u003c2}BzkVh0b2\u003e+uSh5PzEWlRz/{8gwKyxNzE)s1x(v\u003e?lQtQ7zawRPAa?TTv{.#HwmXbDzF\u003c2}BzkVh08)#JvqOqbnNC4/By!($pgXJ\u003ez/PSczF8)^v@2T$B6?pJz/YFSz/fD7v@#B6zu9QjoLFPWlVl\u003cWwN/*@z/bLHC#FZ0lVl\u003cWwN/*@z/bLIAa:liy^SbUzE)s1x(v\u003e?q/(OVz9Z#\u0026uRagrwNPBJwPScmA+/xbxh-.UyH}QeuS7DBwODs0o\u003ewx!vp%d)pI@KrzF\u003c2}BzkVh08)#JvqOqbnNC4/By!($pgXJ\u003ez/PSczF8)^v@2T$B6?yMB-Rj\u003cwPI{3xjVcWzBj", "ln": 11151437 }, { "b": "Bvf$?AbPQ]o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003c\u003cL{w[+[2A::67z/dg1B8L{@q*ACawO\u003c50wQ5qHn][]*08W(IB97l0z!B94B8$X}qE%oTz/bL/wPRoSwNPT#zua-?Byd{Svrlv80b2\u003e+uSy/avQTd+z/eD:v@Dx#wN[XIvrlv80b2\u003e+uRa)Fz/PA1qE%oTz/bL@wPRoJ", "ln": 11185433 }, { "b": "v@1XVze.*:BAzCso(BMNA=7\u003eSzFi%byEq=Dv@1XVze.*:BAzCso(BMNA=7\u003e\u0026wPRoPzC24*A7$mYwPzU*nn\u0026AZpI@^Eze-i/wmY!0099]Iz/oz!zC24*A7$mYwPzU*xjVf(p*[D/wPzU*B7GD2p*[D/wPzU*lSm(kls\u003cOEp*[D/wPzU*Aa9\u003cgwPzU*xjVf(oKS0:luNr^0a!#yvqZf#wk)X(zualFB7Fo(vrcDQB5lWYzGGD2rcrk008NGuzGFfZwk)X(", "ln": 11187096 }, { "b": "wNPBwp!t1=q/(OVzbaU:Cw?Iqx(mMZz!0M]BAp!VwPQpTzF\u003c2}BzkVhnP5cU0bC}go(\u003c@EmPih@y\u0026r-)p*[x^x([6czB[.TzVB:1mr\u0026rNAcb/jzB[.TzVBMWmnm\u0026olU{EFzGFxWBwlEVA=j{4zB[.TzVBAYBydsRwnb%NzF0!!lRR0dnP5cU07fF4xgCrRq/)4]yH]jTuV[hio\u003c@cNxL?f[x(mMZwPz%9A-c*#zE=W/vruM$l#)i+nP5cU0b2\u003e+uJ", "ln": 11194135 }, { "b": "mRM)Os7L/Vz/eJ*zdN^gvqP@-xjVf(t5Os@lVl)Vwn=Wfrb3hXB97\u0026cz#:JZBydT.ze-D*zdN^gvqP@-m}D^wx(dB5Byx3908)#JvqOqbnNC4/By!($nP5Y.zGG/qD0:6MBw=W\u003eB.(e0x(dB5Byx390b2\u003e+uRB)HBw=KTx(u{YzGF\u0026(zdN^gvqP@-xjVf(l$G!yBvoLOvp%dJz:!LPzfX\u0026]B97q\u003ev}xL1rb3hXB97\u0026cz#:JZBydyKx\u003eqg7rb3hX", "ln": 11294357 }, { "b": "A:-/LB-.Llw\u003e3/LAr6S.BydZWCscH{z!rPJA+fj\u003cxjVf(lsB}RmSJ6W0b2\u003e+uSfr.x\u003eI9QvrlGVA+fj\u003cq*ACawO\u003c4[x(m[\u003cm}D^vwPq\u003c7zEWlMASx--BydvyB7Gf4zE(N-0cqZ[uQwgxwO=6#wLNmCz/x5Ix([MkB7Fc/08EMBA::6dA.*YQwM9FSls\u003cOEmrSlWBx0K8wKo*C07fW(rzu?2AaAy0wM98VwO2:IwNPy%xHlcF07faLrDAgPB7X?", "ln": 11301109 }, { "b": "z!8gSx(4r\u003eASwE9Byxo9v]d8+wKx)oxK%IMx(4r\u003eASwEEwNPW(luN0UwmY=YnLB5nxk8l@luN0UwmY=Yl$eJ4zF\u003c2}BzkVhq/)4]zF8pUx(4r\u003eASw*Vq/MRvz/fD7v@#B6zC$T$x(mMIB.LV5wPv=CAa:liy^SbUzE)s1x(v(/BAh8kxf{-Py?d9$0b2\u003e+uQFmry*{*.yEieTy?d9$0cqZ[uQFmry*{*.yEieTy?d9$0aPCNy*{*.yEieTy?d9$07/K@zF0P}B-H]jx(v(QB.LV5wPv=IA:-D?p*[xMzf53^x(4r\u003eASwEEwNPW(l$G$sB.(d^B.LV5wPv=xnb", "ln": 11307339 }, { "b": "zE^M{ASwyDB7Gh$y\u003cwY)vpR/IwO#PXvqYQ(wPv=pwmObLwO#PXvqYQ(wPv=vvqPNAC4CMknmuyDy?mR!qE%]/y\u003c6wUC4CMknmuyDy?mR!mRMWIq*ACawO\u003c\u003eVwO#PXvqYQ(wPv=JzFiD@wnC*/mr\u0026rNAcb/jzBF.WzGFATzE^M{ASwKCBzk\u0026xnP5G\u0026Bvyv:zGFATzE^M{ASwKCBzk\u0026xpJZ+#B-Z5}wO#PXvqYQ(wPv=Tq!p5Ax(!xczE)\u0026+z/Z1\u003evqYQ(wPv+", "ln": 11314857 }, { "b": "uTDSIz!rZ1wPv=HCwgVhy\u003cw@me(MB(A+e=lnMf?Ew]}\u003cmlVm0Re[X:quR\u003e=Yw[=6)ASxD=A=kM7y?mR!q*ACawO\u003c4!z!9AEz/49]z/6Dcy?mR!xjVf(lT:!EwPv=(wPRoDvqG:\u003eASx--Byd\u003cMB8#Cpz/]YalT:!EwPv=\u0026lT:!EwPv=XvqG:\u003eASw*doia\u003e-vrcB5vqG:\u003eASwyyB7[M{A+PA7o\u003c@6-xKLZ[wPv=-wPRoLx(4P%ASye(BydWPy\u00260W60bC}gq/(OVzaOQ", "ln": 11315250 }, { "b": "x\u003ezE6C%=H\u003cwIc[\u003exK$Z%y?mR!q*h}/BzMk3ga(Hsvrb{\u0026e\u003eF#=x\u003ezE6C%=H\u003cwIdRbByd%RxK$Z%y?mR!raf\u0026-q!6GLwozZ1ASx--BydNSy?cHNA+w%9nKMJ(zdN./xjVf(l$HgyC#Oi)xjVfRl@W(qwPv=-wPRoQvqY^?rb3hXASx--Byd^OCYV(6A+eV\u0026rb3hXASwyowk)nWwPv=-wPRoTzFs63A.7a+wk)nWwPv=-wPRoFCX7xcBy^*TzeAZ0wb", "ln": 11317946 }, { "b": "zGGDg0aPOTBy/E)xjVf(pI:Mrz!T9hwPv=HBy!($nP5G\u0026Bu%zUx(v(TC4CMklT:!EvQS+Zp\u0026y5=By/E)m}D^gwO+{\u003cvru6Iz/Or\u0026zEW^5z/ex\u0026x(n37ASx--BydQXmS\u0026PUBzkVhp\u0026y5=By/E)rbUPKx(n37ASx6VC$hB/nP5ASA.{W*zGGDg06$W5z!T9hwPv=-wPRoJB5l^?zGGDg0b2\u003e+uSpYMB5l^?zGGDg0b2\u003e+uQw)Hy\u0026\u0026G(x(n37ASye(BydvSx(4(/z!T9hwPv=Tz#", "ln": 11328823 }, { "b": "Bzkf1p*[6U0bC}gq/(OVzaOR:B-ZPdAaJxPCwheexI9h*lVl\u003csvqf-ZlRIAhx\u003e6IGy\u00260*bx(v(=vqf-Zq/(OVz9Z#\u0026uRagrwNPBJwPScmA+/xbxh-.UyH}QeuQF\u003cBvru6Vz!0M]BwMyWASx(ZmmZxLoIGCFB7EZYA=VetuQF\u003cLB8#26x(Th^wPRoVzE^s0lVN9^B7!#@ASx--Byd%Wz*aM?z/Y#kvqf-ZxjVf(p\u00266M=wPyvWvqf-ZB7GD2p\u00266M=wPyvWvqf-ZxjVf(l#uNEx(Th{wPRoEzd^x[ASx(ZmmPZpBn", "ln": 11338009 }, { "b": "Byxo9B98baA@Y\u0026:Byd%Tvrb\u003c\u003eq/(C\u0026x(!xgv@?Suy\u0026r=\u003ey/tB:Bzk/rx\u003e8h:q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?S.wPRoEx\u003c\u003eT(z/Z2mv@?S(v@?S/z!9AJwod--wPRoTByw/[nN#(xxjVf(nP5G\u0026Bx0K8wL3AN0b2\u003e+uR+/^Acln4D2Ns^wod-tr7fS7z//]bB.jiQA@Y\u0026:Byb", "ln": 11351676 }, { "b": "mr\u0026]{vmB%xy?dO!xjVf(p*)\u003cHwN[nAwO+)#0cqZ[uR\u003efvyH}3Cx\u003eq9\u003eA@Zn)BydQSv@co#wKZxBy?dO!nMfhvC4CX)x\u003eg^xy?WD#Bv6zSwKZxBy?dO!m[3=-z/X\u0026*BwcyTA::0lq/(CTyES2Hy?dO!lRRSmq/u.QwPQQWvSC)$C#F/[v@1LFwO+)#0b2\u003e+uQ]cPB-o/:wO+)#0aYIQxjVa4B-Q2^wO+)#07QQxmRMBIwod--wPRoJzG6-uoKSi+B-Z8!wO+)#0b2\u003e+uQnHAz*a=\u003cBy/G3v@#B6zBOU+z9.#Oq!6xRwMJ!\u003cy?dO!zGP!-zdEX/B9q52rDz.(lV3vP0cJu]AZKXOA@Y\u0026:Bye3?wPzo$wod-(wPRoVB7Gx4zdEX/xjVf(p\u0026ZF:wPE", "ln": 11352481 }, { "b": "x()r)o(BM-0b2\u003e+uS7/MA@Y\u0026:Byd%XzdDK.wod-Twnc9{z*2YjwN[IDBzbP6A@X%zBzk]fo\u003ewAWz!9[?m}D^pwPRQ7wod--wPRoTxKM18wPypSvrlG*xKL{(A@XNapGzyIvruj1wL3#Pz9@bFx(dA(qE$5XA+6j\u003exjVf(mSJ6KqE$5XA+6j\u003eB7GD2mSJ6KqE$5XA+6j\u003exjVf(rbV\u003e!y/j?*vrb[10cqZ[uSp@=vqF?MCvtJ5A@Y\u0026:Bydvyv}#", "ln": 11355922 }, { "b": "C4\u003eC$A@XM{q=4psD1z26qEK9Iz=pj/C4\u003eC$A@Y\u0026:Byd{Ownb%XwPz%dv}xYYq*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026sp\u00266M=wPzcVvru73q!o#)x\u003e7Z}07faLp\u00266M=wPzcVvru73q!o#)x\u003e7Z}0b2\u003e+uSQVTwPyZXA=#ebwPE", "ln": 11359039 }, { "b": "zF8^^z/xodBzkrc0b2\u003e+uRK%IB5l)}AaK6ix\u003eqt=m}D^sA=k]dA==2bA@Y\u0026:BydEEx()f(z/xodBzkrc0b2\u003e+uSgJTp*[x^x\u003e7%\u003cmSiGEA=k]dA==2bA@Y\u0026:Byd\u003c+z*k#cA@Zn)Bn", "ln": 11365658 }, { "b": "xjUBszGP/cA::63rDz.(q!PPWwN[\u003eXA+/-fz/wfWy?mU/xjVf(l349=v}/v[wN[\u003eXA+/-fz/wfWy?mU/m}D^ix(4v40b2\u003e+uQX\u003cxA^qRCwN[nGzGFuZy?mU/xjVf(rb3eWA@Y\u0026:Bydszv@DHcBwN0@w[=6)A@Y\u0026:Byd%Pze:r5A@Y\u0026:Byd%Ty?m9#vpB4:q^\u003cJZy?mU/xjVf(p*[DVrb3hXq^\u003cJZy?mU/xjVf(l1t1JC4BPXze:r5A@Zn)", "ln": 11368225 }, { "b": "v@$W}AaK7\u003cmmPZivrl0RA=l5rpHX6Iv@$W}AaK7\u003cm}D^wD2Nto0b2\u003e+uQn:OwPQ)%AaK7\u003cxjVf(q/#LTB8$]mrc-B]A@Y\u0026:Byd%=xK#i}A@Y\u0026:Byd^=zaFw.vScGXx(W^a", "ln": 11371840 }, { "b": "wL3=aD30Rs0b2\u003e+uQX^xzdNQbq!ZL?nP3\u003euBy/H[m}D^dwmPZ(B8%V[By/H[uQ[WHlv0V:A@YMCwPQm:By/H[m}D^dC4TSWv@2T$lv0V:A@Y\u0026:BydvGzE=KPw]?K9lv0V:A@Zk?Cs3M", "ln": 11374867 }, { "b": "wN/T@wmoI7l2HyNl1BIuBzk]fA@Yc:B97#ge\u003c%.*Cwg@ce(lO5ze19aC4CZ{q*ACawO\u003c4{wPPL3A+Px8Bzk]fA@Y\u0026:Byd%?vSVr]yFw.\u003cwPE\u0026:wPRoBBAy@3yG2v+Bzkl2o(Ch^A@XNms8Sa}wkc#MwO:\u003eMz*2Yk0b2\u003e+uQXEyzBXIYC4CZ{xjVf(pgX0ErbR", "ln": 11376145 }, { "b": "ga(Hsvrb{\u0026e(lb1ze16jx(v)g08[8Qw]}\u003cmq./%)z/Pzwp?sV:x(!ufz/fQ@q*ACawO\u003c4#wN/\u003e6x([RMp?sV:x(!ufz/fQ@xjVf(p?sV:x(!ufz/fQ@B7GD2p?sV:x(!ufz/fQ@m}D^vBZ!fUA=2JiB7]MgA@YM?wO(y8A::0lq/#LCwPzT4B8#5lzGt!+B9g}*wPzR", "ln": 11396388 }, { "b": "x(v(/BZ[])B8}sIqE%](y\u0026\u0026P#v}f7\u003eA@Y\u0026:Bye3\u0026x(4H9C#F\u0026}v}x.50cqZ[uSzhZy?X0pq/#OWwPI[)q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@\u003cn0A=kD0B8}s%uQWXgxgbS(s8Sa{wPyQ/z!0v1A@Y#.mnm\u0026os8Sa{wPyQ/z!0v1A@Y#.mnm\u0026oraQb)s8Sa{wPyQ/z!0v1A@XZwBvgg\u003eA+fcgp\u0026ZF:wPI[)xjVf(nPNBlvpTg=B8}t5wPRoJB4x\u003eJwnC*#A@Y\u0026:BydvPwNPvMxKH", "ln": 11410265 }, { "b": "wPy7DBzk]fs7L/Vz/d%OBy!%707/W?zdMmRz!?:HByx2{A6)PBx\u003eI6\u0026AZshSx)a5?wNPK@zBw5TwN//Zr+VO@BZY8.A=l5hv@}Y/Ab](swN//Zo?W@?v@}Y-wPRoQA+e=}v@}Y-wPRoOwQ5q:y?WD#BvG$+wKpJQy?mY/x(dA*qE%//wN]H+Bo2@+Bye6WA+5(]Bo3w[Bye6WA+5(]Bo38-mnm\u0026ok$%ZWvqG:\u003ezF9JYwPzr}v@}Y-wPRoCx([z:vqL", "ln": 11471455 }, { "b": "v}wCFw]?K90aeVDA:-M]zF9r$z/{8gwLV]IB7GB[uQ!Elx(mM\u003cByxi5wPRp2z/{8gwLV]IB7GB[xjVf(l1BI7wPI^jA:@VRw[D9}Bo2VRwmOOHB8Mhwv}wCFw]?K90ae6evpK7Zz^^V%qE%]/B-H#6pIaiWwPN]Vp\u00266M=wPyWWB8Mhwv}wCFw]?K90aeJABz#wAl${HHzGxJgzC\u003e4RBZ[#Uw[D9}Bo2VImQY?spIaiWwPN]Vq!PPIz*aMSB7nR", "ln": 11526805 }, { "b": "pIaiWwPN]Vl$HBYlUHQWyFOLOB7GB[uQw^AvqwnxB96=.B-7$\u003cw[D9}Bo2VpzGG]AlUHQWyFOLOB7GB[uQn^QA+O#Nz/oz!w[D9}Bo2VzzBFCNoMa\u0026+pIaiWwPN]VpI%9MvrcD-z/oz!w[D9}Bo2Vnz!}:Rz!0MIz/6u5zGF\u0026?CYVtZA+!D.w]?K90aeAdzE^P)A+!D.w]?K90aefjBwcaXwnL:}yFOLOB7GB[uR+MrAa9^5pIaiWwPN]Vq/(O*v}/:SwD", "ln": 11590385 }, { "b": "z!T9hpIaiWwPN]Vp\u0026Zb\u003cx(wcnraQb)p\u0026y5=BwDHXB7GB[uSh5PA=:P?lU{WZwPI@\u0026z!T9hpIaiWwPN]Vm0SVUze0GRA=lhFp\u0026y5=BwDHXB7GB[uSgJTrbUiywn(E3zGFV^w]?K90ae9ize:i9wKZxKxjVa5A+PAkpIaiWwPN]Vq/)4FA::e\u003ewQ5r7mSif^pIaiWwPN]Vq/3w\u003ewKgiDy?l7Rz/fU)w[D9}Bo2VmA+PA7mq=:LzE(^=mSJA+BwDHX", "ln": 11687831 }, { "b": "xM4#\u003eByxiip\u0026y5=Bo2@+Byd\u003c+wP?^aB-QI[B97k%x(n1)xjVf(q/(C*Bu$1oy\u0026sxaB97k%x(n1)xjVf(m0SVUze0GRA=lhFp\u0026y5=Bo1Wbz/]@dmrSlWBvy7?x([R^y?Ws0uVQ9}uUay(zGGl8z!T9h07g9(z/]@dmrSlWBvy7?x([R^y?Ws0uVQ9}uUay(zGGl8z!T9h0b2\u003e+uSgJTrbUiywn(E3zGC\u003eClSlGJuQX\u003cypI9sfByO#Tx(mH8A7aUP", "ln": 11745203 }, { "b": "wNPBLvrb{%Byw#:wPS3dzFa2$lp(k/wNPX6A+d*WltQNIyFnC-Bo2lYwNPBwp!t1=q/(OVzbsUYwO#P#y/s[!BzkS9B6?m9B3T+:nP3\u003ehz!0MRx(!v@lSmMolt{:Mo\u003c@9UoA", "ln": 11772233 }, { "b": "raQq@08)#JvqOqbnNC4/By!($ryYz-q!p5HwNPQ?xJeL/Bo38-mmZxLoIGCFB7EZYA=VetuSH-UBzkk[y/B$\u003cBo2@+Bye((A+w(}pJgz\u0026z/f01raQq@0cqZ[uU%d\u003cxjCQJAcb/jzEEuXwQ5p%qE%oEl2pvpwQ5p%s8@1%wKgcGraQq@0b2\u003e+uQF%SBz(1}wQ5p%B7GD2lV)D(z/5D+CYS}8y*?3}raQq@0bC}gl$HmYrC(O\u0026z*c7#wQ5p%lSmt(o\u003cZ!bwnb%YwQ5p%lQK^LB8\u003c#@xj1LBwnb%YwQ5p%xjVf(nm=QRraQq@0cqZ[uR1:AA8Zy[Bo2#=y\u0026Au+CYS{MuR:H9qE%-RwPy:YCYS{:By!($k#pcWnMf.xvqP1^x(4\u0026$mRMWXwPy:YCYS{:By!($k#pcWnMf.xvqP1^x(4\u0026$nP5l:mRMWXwPy:YCYS{)m}D^fz/]@twPy:YCYS{Ml2HyNvruj4zBX.QAa\u0026o^B9g]cx)Kuh", "ln": 11790893 }, { "b": "v@1XVze.*:BAzCsoL4\u003cBv%F5OzFi%byEq=Dv@1XVze.*:BAzCsoL4\u003cBv%F5!wPRoPzC24*A7\u003c?QvpKM.nn\u0026AZpI@^Eze-fWxjkp}099]Iz/oz!zC24*A7\u003c?QvpKM.lR.F!C4CMklVl\u003c-B.$YgoL4\u003cBv%F5!wPRoSz/]@dB97\u0026jB4*dTvpKM.xjVf(nP4%Dv%8*2v%F5}wPRoJzEE3+B-H]2C(RF*BydQSBy/Giz!@\u003c7wN[wIvpJ!\u0026A:-E607R6FB-7.Y", "ln": 11833202 }, { "b": "C(RF*BydEOC2Jg407HWuxjV9ZAbn%duS7PQxj1FHzFKH$mRM:MwPydXA+]8Vx(mZi0b2\u003e+uQFmtmR)tIxjVf(l349Uzdmsb0b2\u003e+uRCxDwmYpqB8$]fvR*q\u0026l${ZLz*2Yjl2Hj2vpJ$Zl349Uzdmsb07QQxmr\u0026xNB-.tnxf*PWwO\u003e))C(QlDB7ociwPymXvqPO1z/PRVB8$]fvR*q\u0026oMauIl$G$sB.(d=B8$]fvR*q\u0026oMauImr\u0026=\u0026A=:P*B7Gh$y\u003cu1?B8$]fvR*q\u0026xjVf(lV3v6A+P95wnDI\u003eB7GD2lJ", "ln": 11836973 }, { "b": "v/QJHx-J8LBo31PzVBUPe=U\u003eVfArZ9fArZ9fAq7Zk(+x{Bo31PzVBUP02m)4wDlVHwDlPFwb{fvzuaeDC(N*Vq#*OiwDi?Mx-J2Jwb{fvCMn\u0026^09poyx-JhOaolrWBPuH-aolrWw=J}NASxIFzuaqHwDjs.aokaove$JLx-I#IBPumUaok*IyYFnKzVB$YwDllvaol9QzuahEwDl@", "ln": 11858928 }, { "b": "0aV6L0bhBI0b}{O0a=dE0a=dF0cwiH0cwiP0b?\u003cP03zn-0c[M-0a=cM001q/0a(jH0ce5Z0cncI0b8vz0bRZA03znK0bITz0cncY03zmwiyr^D0cwiS08\u0026(t0ce6N0b.^H08@@p0bzNC0b.=V0daX*07W8#0cncN07c:80aV7v06g950019w0a=c", "ln": 11860239 }, { "b": "Bo3H+zVB!TyxezQC(R)=Bo2\u003eLz2:MalJyJ{zu83:Bo0A-xAh@JzVBLMaok%Mzua+Ux-JkPC(O@!x-J2Jz#+1XBo0A-Ck#sSBo2$Oaok)KyYE(zA@ZmYaohBnec3^)Ck#pRx-ISyxAfdPwb{JFwDl=Kzu83:Bo0A-xAhDvB]V7Naok*Iaok{LwDl=Kx-I=CzuakFASviZzua8Bz2!bEe=U]zlJyJ{zu83:Bo0A-xAh@JzVBLMaok%Mzua+Ux-JkPC(O@!zVB[W", "ln": 11867428 }, { "b": "aolfSwDl#QaolfSx-J2Jwb[T\u003caohyye=W0]pYLqiwDlcsA@Y+KaolAZwDlVHzVB!TBo0A-Bo2$Ox-JhOaolG-zVy)WBo2$OwDi?MqVI1wx-I-BBo3aSC(Q+yg5@A%Bo2\u003eLve$cAe=U\u003eXc\u0026!b+BPujTyYC):0deU+pxkIqBo1(jBo2\u003eLz2!RSk(+{", "ln": 11868276 }, { "b": "v/Qfxx-IVz02n]xwb{cuzVBUPuJs%zve$cAwDhY\u003cyYFwNv/P{qyYFbGzVB?UBo2UFA@YRGz2!bEuJt3BASy1Tv/Q6uA@ZmYuJsNoxAhPzv/QoA02YCIzVB?UBo2UFB]V7NAS", "ln": 11907635 }, { "b": "x-IYA02YOMzVB$YuJtlHx-J5KyYF2DzuaeDwDhYRwDlPFv/QJHC(R^-Bo2\u003eLwb]%pz#:qDA@ZmYCk#KYASxRI02Y?Tz#:XOx-JkPz#:XOve$MMwDl-JA@VgPve$AIBo2$OuJtcEBo2\u003eLve{", "ln": 11907845 }, { "b": "ve$9zyYF2DzuaqHwDl6qv/QAEzua+UwDl@PBn#p\u0026yYFwNv/P{qyYFbGzVB?UBo2UFz#:[UzVBnEwDl=KA@YLEx-IVz00^otwDl#Q03b+Nx8(/HzVB!TwDllvuJt9DwDlcsA@", "ln": 11907967 }, { "b": "uJtcEwDl-JB]V7NASxCDve$fBx8(-FwDl6qv/Qfxve$fBx8(GyA@VgNv/QuCwb]%pw=MSEve%{uA@VgZwDl@PwDliuBPuH-x-J5Kzua2zzuaOPBo2\u003eLA@VgLwDl(NwDlPFBo2UFx-IVz02o5BB]V7Nzua+UuJsQpve$xHve{ovA@ZE=zuaeDuJtfFC(R^-wDhYLA@ZE=zuaeDuJtlHve$9zuJtiGx-J2JBo18%g5}p(z#:!RA@ZpZBo3jVA@Y+KASym.wD", "ln": 11908503 }, { "b": "BPupVBn#pKve$cAz2!FOx-IVzCMmZIBo31Pz2!bE01A@GwDlcsA@ZaUzu6UAwb{-Lz2!zMC(N*JxAhDvA@Y\u003eN01\u0026-wBPuBZve$xHx-J5Kzu6UMw=M\u0026KzVBROuJt3ByYE(zC(RyQASu7Iv/Q0sBo3jVyxd]Czu6U:z#:[UwDl=KA@YLEBo3jVuJt9DwD", "ln": 11910589 }, { "b": "z2!nIBn#pUz2!IPuJtfFx-I#IwDlJDx-I#Ix-JkP01B5Jz#:zGve$xHwDhYvB]V7NASydXx-J5Kzu6UEwDlxzve$fBwb{ACwDhYnv/QJHv/MGlx-IVzCMmZKwb{fvyYFLSve{oxzVB\u003eVxAhPzASxCDCMq\u003c^x-IVz03t?Nx-JqRwDlPFuJs\u003cwx-I@HyYE/", "ln": 11911875 }, { "b": "03caXwDl-JB]V7NASxCDB]V7NASydXx-J5Kzu6USwDlPFv/QJHC(R^-Bo31PzVBUPuJs\u003cwwDl#Q03#gRzuaeDASyv+z#:$Wx-J5Kzua2zyxd]CC(RgKz#+1XvGlxwz#:qDASygYC(RgKx-IVzA@VgNCk#pRx-JkPwDlJDx-JhOBn#p=Bo3E:", "ln": 11928281 }, { "b": "0aV7v0bITS0at\u003cc6l%N^0cXAI0aV7v0bITS0at\u003cc2v^:J0aV6fcU9i*0aM1q0bITx0cwiL0c!G=0cFoZ0a=dq0bhBJ0aV7v0c!Fz8d-!=0cwiP0cwi^0ab.u0b.^E0a=dP000*L0b?\u003cF0a=dD0abZ", "ln": 11947490 }, { "b": "ve$rFx-J2JBo2UFvGp9xBo2!JzVB[Wzua+UA@VgNwDlPFv/QJHC(R^-Bo2\u003eLwb(Pwyxd]CC(RgKBo3N^z#:CH02GXRwDl-Jx-IMwyYFeHDh}HRASydX01TbJC(RWYvGprDyY", "ln": 11948005 }, { "b": "z#:qDv/QoAve%{uwDl6qB]V7NASydXx-J5Kzu6U=wDlPFv/QJHC(R^-Bo2\u003eLwb]%pw=M-Hzua+UuJsWrx-I@HwDl=K03#gRzuaeDASyv+z#:$WwDllvuJsNozVBUPBo2\u003eLzua+UA@VgXw=M-Hzua+UuJsWrx-I@HwDl6qzua8Bz2!bE03#K-z#:CHzua+UC(R^-", "ln": 11951195 }, { "b": "0bhBy0a=dK06g9v08\u0026(e0bITD0aM1J09oei0at\u003eD0b?\u003cP002OT07u)90cwiP0cwi^08-/d0cncU0cFoZ0aM1u08iD40b.^J0a(jx0cncZ06g9v06{P}0aV7c0a=dK0b?\u003cW0ce6H0a=cgmmd5w0at\u003eG0a=d00b.^U0bhBP0c[M906g9E0b?\u003cN0bITH0cncO0b?\u003cP08-/t0bITD0cncc0b8vv0b.^H0a=dv0022D07c-+08JVi0at\u003eM0a=dJ07c.", "ln": 11973247 }, { "b": "01h3(wb{fvve%*r00+:?v/QPJ00LQ/Bn#pGkMC\u003c9z#:CHv/MGxuJsBkwb{fvw=MltBPujTBn#pydGxDioAn#hzVB.Raok{LwDl/LwDliuBo2\u003eLwb).Lw=M-HASviZz#:CHASx}Rx-JhOA@Y[OzVBUPiSHo50dY]80a=dF0aV6L0bRZE0cwiO0b?\u003cF0cnb.0bhBO03znV0b?\u003cV03znI0cOuJ0bhBH0at\u003ep0bITD03znN0b?\u003cT03znM0c!G=0a=dJ00", "ln": 11979639 }, { "b": "wDl/LwDliuBo2\u003eLwb).Lx-J2JaollUwDlPFBPrJ:cJBeNcJDgcaoi+?0s{KTaok*IzuahEaoi+?0w#k8aolD.xAhDvASxUJaolrWB]V7NASx[Qve$lDz#:OLzuaqHaolfSwDl#QA@Xl3aohAKz2!FOBPuE.wDjB+01A=BzVB[WA@Y+Kg5}pZA@Zd", "ln": 11982005 }, { "b": "m/V@$z2!bEnc0MdzVBLMA@Xl3iSJjYwDlcsz#:!Rzua.TiSIhvl\u0026.lczVB.RiSIhvpYLzlA@ZpZe=U(=mf4udASy1TASviZx-J2JB]VBXyxe5GzuaqHaoj[ive$cAwDkm3zVBXQyxezQiSIhvo-P8iB]V7Nz2!bEzua+UiSIhvqug?tzu937zVBROz2^#AzuahEiSIhvpYLIowDjs.0bC16ASyaWzVB!Taol9Qzua?WzVBLMx-J2Jx8\u003c4Om/V@$z2!bEnc0MdzVBLMA@Xl3iSI\u003eOzVB}XwDlMEwDlPFBo1u4iSJ4TBPupVlJz38z2!zMve$fBwb[T\u003ciSI$RzVB?UBo0][0b1.2ASyaWzVB!Taol9Qzua?WzVBLMx-J2Jx8\u003c4Om/V@$z2!bEnc0MdzVBLMA@Xl3iSI\u003eOzVB}XwDlMEwDlPFBo1u4iSJ7", "ln": 12045838 }, { "b": "fAq7Taokaoli40gpYLIozVBnEwDl=KA@Wr.q#*OiASxUJve%*rA@Xl3aohy2q#*OiASxUJve%*rpYLzlzVBONaokEyzVB!Tyxd]CASviZq#*OiASxUJve%*rA@Xl3aohxTaoi!\u0026li8cdA@ZE=f91YDve$JLdf6utq#*OiASxUJve%*rpYLzlzVBONaoj+ezVBROz#:XOwDl/Lx-J5Kzu7^", "ln": 12119308 }, { "b": "iSHo5025feyYE(zC(RyQASydXiSHo501hH3ve$lDiSHo504gXBCk#sSw=M]MyYF.XqVFMMaokBxwDl-JA@Y[OzVBUPiSHo505)*RCk#sSw=M]MyYF.XqVFMMaokaove$fBve%{uwDllvaokBxwDl-JA@Y[OzVBUPiSHo505)*RCk#sSw=M]MyYF.XqVFMM", "ln": 12119538 }, { "b": "z2!FOwb{fviSHo500=s2ASxUJ00#E4zVB?UBn#pInDrSdB]VBXyxd]C01h:aC(R^-wDi?M06}.cx-JhOaoloVzVB\u003eVaok*IaolM+ve$9zx-IVzaoloVwDl/LaollUwDh", "ln": 12127735 }, { "b": "lJy^1ve$fBzuakFyYE3bzuanGzVz/#iSIUIwDl/Lqugndz2!FOBo2\u003eLmGvDeve$cAwDl-Jve$xHwDhZ6lJy3+wDl-JB]V7NASx2rx-IVzwDk6$yYFeHwDlPFBo1Scve$uGwDj:\u003eiSK0%uJs7aA@Y+KASwVhl\u0026Zc=Bo3sYx-J2Jx8?][lJy3+wDl-JB]V7NASx2rx-IVzwDk6$yYFeHwDlPFBo1Scve$uGwDj:\u003eiSK0%uJr?3ve$cAwDhZ4lJy3+wDl-JB]V7NASx2rx-IVzwDk6$yYFeHwDlPFBo1Scve$uGwDj:\u003eiSK0%uJs%zlJy{5x-IYAzua+UqVHRlzVB\u003eV082VVqVHweASym.wDl-JqVHIiwb{fvlJy{5x-IYAzua+Uli7A]A@Y+KiSIhvz2^]yzu999zua+Ux-JkPC(QzozuahEwDl@P07PxRqVHweASym.wDl-JqVHIiwb{fvlJy{5x-IYAzua+Uli7A]A@Y+KiSIhvz2^]yp5[\u00269Bo1VdxAhDvzuaLOwDlJD09.!\u003cqVHweASym.wDl-JqVHI", "ln": 12131213 }, { "b": "qVI1wx-I-BBo3aSC(Q+yg5@A%B]RHCe=W0]01y4Jc\u0026=Nlpxjt]df6t.aoi!\u0026A@ZpZwDlcsz2!nIwb[:)03-P^aoiI:aoi$[aoj[iwDlPFwDl-Jve$xHx-J5Kzu7^", "ln": 12135313 }, { "b": "zGvBewN/\u003e6x([R%wPzT4B8#5lzB5w^A+P09By^0Cq*ACawO\u003c4$B-8qnzdLmvr+lq)x(v(Lf!+jle?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zARC.gIeHRh!B^0whM5HgHR10r00RfyIv-*wPzG%x\u003e7N[x(v\u003e\u002610i0Z0V\u00263S9Zx/GFDb-)g6nOJ00so)", "ln": 12294888 }, { "b": "B.$YgvruBdk4F2cgC/7iFR%Ke1:1D\u0026AXEN}r00FbwPQQOB96\u0026\u003eA=k$0r8[Ekq*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPGF5BAh8kxh8/PB7!##y?W^1efE(pB97#ge(D?fBzkP6e\u003eG@5wPzZdq!o#)x\u003e7Z}efE#8A=U@kzAPZde?![ie?!?0lV)i!B-I4RzE)%jA:-=naw^h\u0026y?WxLwQdl[yH}xDvLxPIhd!^Vf!)h@fKV+C5Mr^(x(mMTvrcB5vqG:]zF5}H002${8=H\u003c0x(mMTvrcB5vqG:]zF8sVB98tqrc-B]Ftl4*B97#ge(D?fBzkP6e\u003eG@5wPzZdq!o#)x\u003e7Z}e\u003e]+{B7!##y?W^1e\u003cTw@x\u0026xa]x(mMTvrcB5vqG:\u003eAX5tiD2[7sz7X.ezGGPfwIcL(By/GhA8Qs*C4\u003eC$B1wCmwPz\u003caz/dY)fFk4ifFk4gavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4jZ{93w\u0026jfVw?=2Jh85C{vljF\u0026c@1z=A=l2qw]]T%zGGDgz/vs5x\u003c#9\u003eA^pk[AbP=sm}DNHA::6dAT:-Se?![jg+HQugCy=*06Z", "ln": 12464972 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026sB!9=rS-s40000000000rS+eU00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000311onD5000xb1onD5000xbkl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "ln": 12475328 }, { "b": "00031qVH[tASx!NzuaqHmGvc5yYF2DnDrSdw=M-H005e-00031fAr^bfAr^bfAr{fvGn7Z002g.4/=RglJz38z2!IPve$fBC(QOtve$cAwDhYg002{$Ck#sSw=M]MyYF.XqVFMMaokvvwDlcsz2:Lo002y!4GDIfmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$Ck#sSw=M]MyYF.XqVFMMe=XlsqVFMM001+O2(\u003c#amGvc5yYF2DrSDXhASydXx-J5Kzu6Up001.Ne=WZde=WQaf-S*afAq7M002y!5=.}jnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$Ck#sSw=M]MyYF.XqVFMMe=XlsqVFMMe=YzZyYFnK001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw002W)5=.}jpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$Ck#sSw=M]MyYF.XqVFMMe=XlsqVFMMe=YzZyYFnK002aY4GDIfpYLIozVBqFBPt[KBo25ove$cAwDhYg002{$Ck#sSw=M]MyYF.XqVFMMe=XlsqVFMM005eZhVJ\u003cUpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001.Ne=WZde=WQaf-S^9vGo%tBo2.He=W\u003chd/:bXhums?wb{cuh#\u003e=nf-T0fv/Op+wb{cufAs0hve%)tgxp[+h2]MnwDjy:ve@p/gYR7!hums?g5%3eirg]pvGnd-h2}d!iriN\u0026v/MGe000", "ln": 12475642 } ], "depth": 1, "facts": { "sec": [ [ ".text", 512, 12474880, 6.2, "r-x" ], [ ".rsrc", 12475392, 1024, 3.12, "r--" ] ], "metrics": { "pe": { "checksum": 0, "timestamp": 2299651454, "image_size": 12492800, "headers_size": 512, "checksum_valid": 0, "clr.is_il_only": 1, "file_alignment": 512, "resource_count": 1, "has_version_info": 1, "checksum_stripped": 1, "computed_checksum": 12481394, "headers_size_ratio": 0, "prose_section_count": 0, "clr.is_32bit_required": 0, "bss_like_section_count": 0, "clr.is_32bit_preferred": 0, "clr.strong_name_signed": 0, "section_overflow_count": 0, "clr.is_native_entrypoint": 0, "misaligned_section_count": 0, "version.identity_entropy": 3.62, "declared_data_directory_count": 3, "version.identity_symbol_ratio": 0.18, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 12476416, "entropy": 6.2 }, "binary": { "is_pie": 1, "code_entropy": 6.2, "string_count": 84407, "entropy_variance": 2.37, "avg_string_length": 42.21, "max_string_length": 383, "peak_region_bytes": 51200, "code_to_data_ratio": 1, "peak_region_entropy": 6.3, "string_length_stddev": 37.02, "largest_section_ratio": 1, "sentence_string_count": 1085, "sentence_string_ratio": 0.01, "high_entropy_string_count": 0 }, "strings": { "truncated": 0, "retained_count": 84407, "extracted_count": 84407 }, "sections": { "count": 2, "code_size": 12474880, "entropy_max": 6.2, "entropy_mean": 4.66, "name_entropy": 2.72, "writable_count": 0, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "consistency": { "internal_name_original_filename_mismatch": 0 }, "dependencies": { "count": 0 } } }, "id": 4, "ident": { "name": { "value": "SwiftlyS2.CS2.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "SwiftlyS2.CS2", "source": "pe.version.description", "verified": false }, "trust": "unsigned", "project": { "value": "SwiftlyS2.CS2", "source": "pe.version.product_name", "verified": false }, "version": { "value": "1.4.11.0", "source": "pe.version.file_version", "verified": false }, "build_path": { "value": "/home/runner/work/swiftlys2/swiftlys2/managed/obj/Release/SwiftlyS2.CS2.pdb", "source": "pe.debug.pdb.path", "verified": false }, "organization": { "value": "SwiftlyS2 Team", "source": "pe.version.company", "verified": false } }, "mol": "K(Li₂)O₄(ErAl₂As₆C₂)H₈(CmCrDb₆F₅HfMg₂Os₃Po₉)Md₃(Bi₄PaSi)", "path": "SwiftlyS2.CS2.1.4.11-beta.8.nupkg!!lib/net10.0/SwiftlyS2.CS2.dll", "pid": 0, "risk": 144, "sha": "78aed81e0d2ab6fb31c6dfa1675eaaab52fc7eaf37b43c1b2bf2fd9855da2e11", "size": 12476416, "traits": [ { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 512, 12474880 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 2657848, 0 ] ] }, { "id": "metadata/binary/resource/identity::pe-description-equals-product-name", "conf": 0.9, "crit": 3, "desc": "PE description duplicates ProductName" }, { "id": "metadata/binary/section/prose::large-pe-many-strings", "conf": 0.82, "crit": 3, "desc": "Large PE contains at least 20000 strings" }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/lang/compiler/managed::get-method-token", "conf": 0.6, "crit": 1, "desc": "References the GetMethod member name", "spans": [ [ 8676552, 0 ] ] }, { "id": "metadata/lang/compiler/managed::reflection-namespace", "conf": 0.7, "crit": 2, "desc": ".NET System.Reflection namespace reference", "spans": [ [ 11151061, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 11858996, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 11982053, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 11867540, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 11860287, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 11867476, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 78, 0 ] ] }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 12475706, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 12475770, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 12475838, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 12475890, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 12476134, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 12475864, 8 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 12476100, 13 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 12475486, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 12475864, 8 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-clientbase", "conf": 1.0, "crit": 3, "desc": "References WCF ClientBase class", "spans": [ [ 8769180, 27 ], [ 9683628, 21 ], [ 9683650, 22 ], [ 11352545, 27 ], [ 12131277, 37 ], [ 12131353, 29 ], [ 12131413, 36 ], [ 12131487, 37 ] ] }, { "id": "micro-behaviors/communications/ipc/wcf::dotnet-wcf-generated-code-attribute", "conf": 0.9, "crit": 3, "desc": "WCF generated code attribute", "spans": [ [ 9776077, 22 ] ] }, { "id": "micro-behaviors/communications/socket/tcp::create-socket", "conf": 0.5, "crit": 3, "desc": "CreateSocket function", "spans": [ [ 11338073, 49 ] ] }, { "id": "micro-behaviors/crypto/symmetric/xor/lodsb::asm-loop-dup", "conf": 1.0, "crit": 3, "desc": "Assembly LOOP target mnemonic", "spans": [ [ 11979703, 13 ] ] }, { "id": "micro-behaviors/data/db/access::connection-string-singular", "conf": 0.7, "crit": 3, "desc": "ConnectionString property", "spans": [ [ 10529253, 16 ], [ 10529273, 16 ], [ 11307405, 16 ], [ 11307434, 16 ], [ 11307464, 16 ] ] }, { "id": "micro-behaviors/data/db/access::db-connection-class", "conf": 0.7, "crit": 3, "desc": "DbConnection class", "spans": [ [ 11151501, 12 ], [ 11307403, 12 ] ] }, { "id": "micro-behaviors/data/db/access::sql-connection-class", "conf": 0.7, "crit": 3, "desc": "SqlConnection class", "spans": [ [ 11151636, 15 ], [ 11307429, 28 ] ] }, { "id": "micro-behaviors/data/embedded/payload/resource::assemblyresolve-hook", "conf": 0.95, "crit": 3, "desc": "AssemblyResolve event registration", "spans": [ [ 9786914, 19 ] ] }, { "id": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "conf": 0.65, "crit": 3, "desc": ".NET set_Item method reference", "spans": [ [ 8398901, 14 ], [ 8575032, 13 ], [ 8575968, 15 ], [ 8576000, 15 ], [ 8576215, 14 ], [ 8588170, 16 ], [ 8636846, 16 ], [ 8644380, 10 ] ] }, { "id": "micro-behaviors/data/string/assembly::stack-immediate-byte-string-x64", "conf": 0.86, "crit": 3, "desc": "Native stack immediate byte-string fragment", "spans": [ [ 4694504, 59 ], [ 4694522, 59 ], [ 4694540, 59 ], [ 4694558, 59 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-combine-method-token", "conf": 0.72, "crit": 3, "desc": "Combine method-name token", "spans": [ [ 9649203, 7 ] ] }, { "id": "micro-behaviors/data/string/library::dotnet-get-directory-name-token", "conf": 0.72, "crit": 3, "desc": "GetDirectoryName method-name token", "spans": [ [ 9634765, 16 ] ] }, { "id": "micro-behaviors/fs/path/extension::utf16-exe-suffix-token", "conf": 0.84, "crit": 3, "desc": "UTF-16 exe filename suffix token", "spans": [ [ 11908567, 17 ] ] }, { "id": "micro-behaviors/fs/path/temp::dotnet-gettempfilename-token", "conf": 0.86, "crit": 3, "desc": ".NET temp filename helper", "spans": [ [ 8838161, 15 ] ] }, { "id": "micro-behaviors/hardware/input/keyboard/hook::hookoff-export-text", "atk": "T1056.001", "mbc": "E1056.001", "conf": 0.84, "crit": 3, "desc": "HookOff export name", "spans": [ [ 11590449, 17 ] ] }, { "id": "micro-behaviors/hardware/input/keyboard/hook::hookon-export-text", "atk": "T1056.001", "mbc": "E1056.001", "conf": 0.84, "crit": 3, "desc": "HookOn export name", "spans": [ [ 11187160, 16 ], [ 11833266, 16 ] ] }, { "id": "micro-behaviors/mem/alloc/executable::page-execute-readwrite", "atk": "T1055", "conf": 0.9, "crit": 3, "desc": "PAGE_EXECUTE_READWRITE flag", "spans": [ [ 8444778, 22 ] ] }, { "id": "micro-behaviors/mem/protect/modify::page-execute-constant", "conf": 0.8, "crit": 3, "desc": "PAGE_EXECUTE protection constant", "spans": [ [ 8444778, 22 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-ansi-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET ANSI pointer string marshalling", "spans": [ [ 10583335, 15 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-function-pointer-delegate", "conf": 0.92, "crit": 3, "desc": ".NET native function-pointer delegate conversion", "spans": [ [ 11328887, 29 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::managed-unmanaged-memory-marshalling", "conf": 0.88, "crit": 3, "desc": ".NET unmanaged memory allocation API", "spans": [ [ 10619359, 12 ] ] }, { "id": "micro-behaviors/os/autorun/scheduled::task-scheduler-keyword", "atk": "T1053.005", "mbc": "F0012", "conf": 0.85, "crit": 3, "desc": "Windows TaskScheduler API keyword", "spans": [ [ 11318010, 13 ] ] }, { "id": "micro-behaviors/process/control/info::process-info-class-30-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 30", "spans": [ [ 3424586, 14 ] ] }, { "id": "micro-behaviors/process/control/info::process-info-class-31-constant", "atk": "T1562", "conf": 0.8, "crit": 3, "desc": "Immediate process-information class value 31", "spans": [ [ 4785965, 14 ] ] }, { "id": "micro-behaviors/process/create/compile::codedom-compiler", "conf": 0.8, "crit": 3, "desc": ".NET CodeDOM compiler namespace reference", "spans": [ [ 11315314, 23 ] ] }, { "id": "micro-behaviors/process/create/load/local::dotnet-load-from", "conf": 0.85, "crit": 3, "desc": ".NET LoadFrom assembly-loading reference", "spans": [ [ 11121177, 8 ] ] }, { "id": "micro-behaviors/process/create/spawn::diagnostics-namespace-dotnet", "conf": 0.75, "crit": 3, "desc": ".NET process namespace token", "spans": [ [ 11410329, 26 ] ] }, { "id": "micro-behaviors/process/create/spawn::process-filename-setter-dotnet", "conf": 0.9, "crit": 3, "desc": ".NET process filename property setter token", "spans": [ [ 8837968, 12 ] ] }, { "id": "micro-behaviors/process/daemonize/service-path::dotnet-add-hosted-service", "conf": 0.9, "crit": 3, "desc": "Registers a hosted background service", "spans": [ [ 8683786, 16 ] ] }, { "id": "micro-behaviors/process/hook/interception::dynamic-proxy-class", "conf": 0.7, "crit": 3, "desc": "DynamicProxy class reference", "spans": [ [ 11687895, 12 ], [ 11745267, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::appdomain-currentdomain", "conf": 0.6, "crit": 3, "desc": ".NET AppDomain CurrentDomain accessor", "spans": [ [ 11133175, 17 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::begin-invoke-token", "conf": 0.7, "crit": 1, "desc": "BeginInvoke member-name token", "spans": [ [ 8765118, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::create-delegate", "conf": 0.8, "crit": 3, "desc": "Creates .NET reflection delegate", "spans": [ [ 9751853, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::end-invoke-token", "conf": 0.7, "crit": 1, "desc": "EndInvoke member-name token", "spans": [ [ 8765087, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::get-methods-token", "conf": 0.65, "crit": 1, "desc": "GetMethods member-name token", "spans": [ [ 11355986, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "spans": [ [ 9682358, 10 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/vb::resolveeventhandler-token", "conf": 0.88, "crit": 3, "desc": "ResolveEventHandler delegate token", "spans": [ [ 11314921, 19 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::csharp-stopwatch-gettimestamp", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "C# Stopwatch timestamp check", "spans": [ [ 11294421, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/control-flow/dispatch::sparse-opaque-pe-profile-code", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with elevated code entropy", "spans": [ [ 512, 12474880 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/section::two-section-pe", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Large PE with exactly two sections" }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::appdomain-class-token", "conf": 0.65, "crit": 3, "desc": "AppDomain class token", "spans": [ [ 11133165, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/invoke::get-assembly-token", "conf": 0.78, "crit": 3, "desc": "Assembly accessor token (get_Assembly)", "spans": [ [ 11837037, 12 ] ] }, { "id": "objectives/command-and-control/dropper/builder::dotnet-crypter-add-resource", "atk": "T1055.012", "conf": 0.88, "crit": 3, "desc": "Crypter AddResource token", "spans": [ [ 8739100, 11 ], [ 11526869, 11 ], [ 11973311, 11 ] ] }, { "id": "objectives/command-and-control/remote-command/shell::runcommand-task-label", "atk": "T1059.003,T1071.001", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "RunCommand remote task label", "spans": [ [ 12045902, 52 ], [ 12046008, 53 ] ] }, { "id": "well-known/lib/runtime/native-platform/harmony::harmonylib-marker", "conf": 0.99, "crit": 3, "desc": "HarmonyLib runtime-patching library marker", "spans": [ [ 8515003, 10 ] ] }, { "id": "well-known/lib/ui/jline::jansi-kernel32-bridge", "conf": 0.99, "crit": 2, "desc": "JLine Jansi Kernel32 bridge", "spans": [ [ 8781626, 0 ] ] }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/symbols/count::no-imports", "conf": 0.7, "crit": 3, "desc": "PE has no imported DLL dependencies" }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 12476074, 11 ] ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.7, "crit": 3, "desc": "References the .NET System.Linq namespace", "spans": [ [ 11301173, 11 ] ] }, { "id": "micro-behaviors/fs/disk/partition::partition-table-copy", "conf": 0.92, "crit": 3, "desc": "Partition info string reference", "spans": [ [ 11194199, 13 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::get-files-token", "conf": 0.88, "crit": 3, "desc": ".NET GetFiles enumeration token", "spans": [ [ 11368289, 8 ] ] }, { "id": "micro-behaviors/fs/write/file/full::dotnet-writealltext-token", "conf": 0.84, "crit": 3, "desc": ".NET File.WriteAllText token", "spans": [ [ 11791021, 12 ] ] }, { "id": "micro-behaviors/mem/protect/modify::virtual-protect-text-pe", "conf": 0.9, "crit": 3, "desc": "Hidden VirtualProtect string reference", "spans": [ [ 11471519, 14 ] ] }, { "id": "micro-behaviors/os/env/read::getenv-profiling-api", "conf": 0.86, "crit": 3, "desc": "GetEnvironmentVariable profiler check", "spans": [ [ 8770475, 22 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.72, "crit": 3, "desc": ".NET GetFields reflection method reference", "spans": [ [ 11352662, 9 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.8, "crit": 3, "desc": ".NET Activator type reference", "spans": [ [ 8660278, 9 ] ] }, { "id": "objectives/anti-analysis/emulator-detect/hardware::vbox-string", "atk": "T1497.001", "mbc": "B0032", "conf": 0.5, "crit": 1, "desc": "Uppercase VBOX hypervisor token", "spans": [ [ 8495518, 0 ] ] }, { "id": "objectives/anti-analysis/vm-detect/vendor::vendor-vbox-short", "atk": "T1497.001", "conf": 0.6, "crit": 3, "desc": "VBOX hypervisor short string", "spans": [ [ 8495518, 4 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-metrics/sparse-imports::text-heavy-binary", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "One .text section dominates file", "spans": [ [ 512, 5 ] ] }, { "id": "objectives/anti-static/obfuscation/binary-structure::large-null-run-text", "atk": "T1055", "conf": 0.85, "crit": 3, "desc": "Large null run in executable (64+ bytes)", "spans": [ [ 5164439, 191 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/camouflage::giant-text-section", "atk": "T1027", "mbc": "B0032", "conf": 0.86, "crit": 3, "desc": "Giant text section dominates PE", "spans": [ [ 512, 12474880 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/camouflage::low-entropy-rsrc", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Resource section entropy is unusually low", "spans": [ [ 12475392, 21 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/section::extreme-dominant-section", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 3, "desc": "Single section occupies nearly all bytes", "spans": [ [ 512, 12474880 ] ] }, { "id": "objectives/command-and-control/remote-command/control::generic-dup", "conf": 0.2, "crit": 3, "desc": "Function to execute remote commands", "spans": [ [ 8669225, 14 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "uses": [ 1, 2 ], "spans": [ [ 2657848, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-token-pair", "conf": 0.72, "crit": 3, "desc": "Multiple .NET reflection resolver APIs", "uses": [ 55, 79 ], "spans": [ [ 9751853, 14 ], [ 11352662, 9 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::reflection-method-access", "conf": 0.78, "crit": 3, "desc": "Reflection method-enumeration tokens", "uses": [ 6, 57 ], "spans": [ [ 8676552, 9 ], [ 11355986, 10 ] ] }, { "id": "well-known/lib/ui/jline::jansi-runtime-context", "conf": 0.99, "crit": 3, "desc": "JLine Jansi runtime context", "uses": [ 68 ], "spans": [ [ 8781626, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::resolver-api-cluster", "conf": 0.91, "crit": 2, "desc": ".NET reflection metadata resolver cluster", "uses": [ 7, 90 ], "spans": [ [ 11151061, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::delegate-invocation-chain", "conf": 0.88, "crit": 3, "desc": ".NET reflected delegate invocation", "uses": [ 7, 54, 55, 56, 91 ], "spans": [ [ 8676552, 9 ], [ 8765087, 9 ], [ 8765118, 11 ], [ 9751853, 14 ], [ 11151061, 17 ], [ 11355986, 10 ] ] }, { "id": "objectives/anti-analysis/emulator-detect/hardware::virtualbox-string", "atk": "T1497.001", "mbc": "B0009", "conf": 0.6, "crit": 3, "desc": "VirtualBox vendor string detection", "uses": [ 81 ], "spans": [ [ 8495518, 4 ] ] }, { "id": "objectives/anti-analysis/vm-detect/vendor::vendor-vbox", "atk": "T1497.001", "conf": 0.7, "crit": 3, "desc": "VirtualBox hypervisor vendor string", "uses": [ 82 ], "spans": [ [ 8495518, 4 ] ] }, { "id": "objectives/evasion/process/injection/harmony-mod::harmony-writealltext", "atk": "T1055,T1027.005", "conf": 0.93, "crit": 5, "desc": "Harmony patcher writes files via WriteAllText", "uses": [ 67, 76 ], "spans": [ [ 8515003, 10 ], [ 11791021, 12 ] ] } ], "type": "pe" } ], "rev": "c1ea9", "v": "8" } }