{ "llm": { "conf": 0.50844586, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate .NET library package" }, "ml": { "v": "7", "eng": "2.4.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.23601153, "rte": "az", "prob": 0.23601153 } ], "prob": 0.2977798, "skip": [ { "rte": "az/nupkg", "why": "unavailable" }, { "rte": "az/nupkg", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.29777979850769043, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000012814998626708984, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000011483828529890161, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.29777979850769043, "type": "pe" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000010828177437360864, "type": "xml" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.29777979850769043, "type": "pe" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000010828177437360864, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000012248754501342773, "type": "xml" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000012814998626708984, "type": "xml" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000019530454665073194, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-28T14:22:31Z" }, "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MTsx@9kI#f+2]t000\u0026q000xb003wDwO=Ave]\u003eJtBcI!\u003ey63abm=g?nKAV]g-jqW6ID6\u003cMu=oKbNe7w6OM}QK^CpcY3Rz\u003eP3PJ}g[xz.YgOLLoSgv=Vbn\u0026%UMfU^$8HLlSQ@Ft*.!YZQoXOfA={1f", "n": [ { "c": 2, "d": "Archive contains an executable member", "i": "metadata/file/metrics::archive-contains-executable-member", "o": 0, "z": 31, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H(Cm)Md₂(BiPa)", "sha": "0648572583963973fb478b2141a7942d42af454131799f4009c468221b8ba365", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg", "risk": 4, "size": 39737, "type": "nupkg", "facts": { "metrics": { "file": { "size": 39737.0, "entropy": 7.91, "size_bytes": 39737.0 }, "binary": { "overall_entropy": 7.91, "peak_region_bytes": 36864.0, "peak_region_entropy": 7.82 }, "archive": { "file_count": 11.0, "member_count": 11.0, "script_count": 0.0, "zip_bomb_ratio": 2.64, "directory_count": 0.0, "executable_count": 2.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 37695.0, "compression.ratio": 0.57, "hidden_file_count": 2.0, "total_uncompressed": 66405.0, "crc_collision_count": 1.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 11.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 3.0, "timing.mtime_unique_ratio": 0.27, "misplaced_executable_count": 2.0, "timing.mtime_outlier_count": 5.0, "timing.mtime_dominant_count": 6.0, "timing.mtime_spread_seconds": 53234.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.55, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 10.0 } } }, "ident": { "name": { "value": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://gitlab.kayicloud.com/kayi-cloud-enterprise/dotnet/kayisoft", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://gitlab.kayicloud.com/kayi-cloud-enterprise/dotnet/kayisoft", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "virtual", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "5.2.9", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 11684, 46 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 1316, "file": 3 }, { "off": 1316, "file": 5 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded HTTP or WebSocket URL", "from": [ { "file": 3 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 536.0, "entropy": 5.24, "size_bytes": 536.0 }, "binary": { "overall_entropy": 5.24, "peak_region_bytes": 536.0, "peak_region_entropy": 5.24 } } }, "id": 1, "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!_rels/.rels", "pid": 0, "sha": "d2c34b6fa178b087923dd16ead9954c4e6037409f454c7209dd8644db26e5b01", "size": 536, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj{\u003cz\u003evpK7YxjSigzes9hjTaMYBz%n]flpSpwO\u003e\u003c%e]trjA=l2qw]]Unz/4dDvpK7Yxk8l@fetjogCpBtfk+]NAaJJiCYNytj{\u0026zPjz!UKvpS!*vlL2varR^?x\u003efz2vr(Ndz!s8zl1j^=l${dHz9.SGz/PY6y+wL8z!a02wPxz1z/Z2kA+ef?y=\u003cv+wiHtyarR^?C4CYnx(v(Mh7*TpixO%rwPz\u003caz/d-CarR^HjyJwOxM4{jk6yTXBAI2djtgb=BzbPkB3o{NarR^?Ab](iwN/*ZA+){MBAzFyiXJd0x([f1vLhC8D1*=8z/]Oyv@DiqyHIH5eN@QnB.07nzGGDgAb]VlwImOjBz+VifkC0wx(!i8Buzi}A=kY7v@$Z\u003ey^5gGarR^?wmY*(A+PGmx(v(Mojr9WB8LVjavG{Nz/4^HzF%MjvqE5Xz!a0bwJRRRwPIv4x(Ffdz/d-CarR^HjAL1AB3rl9D1?trw]]dYvSi]xpgXV(azbU5zdN{fA+^=\u003cByw*6j{\u0026zParS^!wPhNex([olC{4iOAaIfRxk8DiaA.ZvjTaMYBz#pZfe3%LBzLw{e]a)vx\u003e7%$B.0amz/4dyvr(Msv@c7awg.wgBy/GiA+PPafjY0yzE)]yyHIH5B8LVja%pxlzeB0ejTaF$hA0MIgbrw%iaBW3h.Wj4hE!T5w[B1.gg-p2h!luavLzw5v(U.QffPZ=arR^?wmYZ\u003ezE^r@v}/H}j{\u0026zParR^HjzeXMB-nEBvrc0(BvHpVzdN{fA+^/Ze(1\u0026mq/(C=wmoH?ga\u003em8j{\u0026zParR^HarS^SwPhi#wmYT*C{3*ijT9KcD1?trw]]T\u003evSi}/x\u003e86#l1j.IA=2l3e(lObBz\u003eVcy\u0026Z^yC4CYnx(v(La#H#de\u0026+9#wQ4Z3B.25Db0{A^y?b7.zEEvbDs.bra%nK53lQDlarR^HauTgCAaJ]$wO#16azCvHb2-e-A=srNA4TB=A4T\u003c[B8$r3vqZd2Bs{ydB985nwM9O+a%q5uA=U@kzAPg2e\u0026Lysa%pDwv@co#wJ.k7B.LV5ej1eZy\u003cytrA=SAEffPZ=arR^HauRq\u0026A=l8tj{\u0026zParR^HjzeXMB-nEBvrc0(BvHpVzdN{fA+^/Ze(1\u0026mq/(C=wmoH?ga\u003ep9j{\u0026zParR^HarS^SwPhi#wmYT*C{3*ijT9KcD1?trw]]T\u003evSi}/x\u003e86#l1j.IA=2l3e(lObBz\u003eVcy\u0026Z^yC4CYnx(v(La#H#de\u0026+9#wQ4Z3B.25Db0{A^y?b7.zEEvbDs.bra%nK53lQDlarR^HauTgCAaJ]$wO#16azCvHb2-e-A=srNA4TB=A4T\u003c[B8$r3vqZd2Bs{ydB985nwM9O+a%q5uA=U@kzAPg2e\u0026Lysa%pDwv@co#wJ.k7B.LV5ej1eZy\u003cytrA=SAEffPZ=arR^HauRq\u0026", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 53, "cf": 0.9800000190734863 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1222.0, "entropy": 5.17, "size_bytes": 1222.0 }, "binary": { "overall_entropy": 5.17, "peak_region_bytes": 1222.0, "peak_region_entropy": 5.18 } } }, "id": 2, "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.nuspec", "pid": 0, "risk": 1, "sha": "2daf7724ebadb780f7476e3b617b14e955af411ab59165b1e746a6b84375668e", "size": 1222, "traits": [ { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 42, 1034 ] ] }, { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 53 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 42, 519 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}94XzJ00000000", "n": [ { "c": 2, "d": "PE contains exactly one resource entry", "i": "metadata/binary/resource::pe-single-version-resource", "o": 0, "z": 24, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000kMy^J00000000000000000000b$v}n00000nb@R\u00260SSx7bQio?BrQX+0rr91000000000000000000000000000000000000000000000000000000000000000009S^-A000uQuihJf000uc7MxZv00awY1dT=u000cKiSZY:000uc1apgI00B=j0W]=6015=fEf6xG1s=Clc[$Y43iyrT0@@r7dW1\u003c7000iH0^$pN00BOIEfY/M1PwPS000jAg5}pYc]g\u002663mV2Q6efH*rSAa10000018*0@017bi000vD0rrasz-dN}3mC]P04R$E000vDcJBc=c]?nc3m)F8EG/=L1skSocvM9#00Jo9d/YLNB2\u003cp33mgib000cI0SSiJc{dFf3mW7#c{mLg3mX7rc{vRh3iyrTkl7V\u003cdL.6Lkl7V\u003cB3GZ93mVx0dHD}v3izXL0%i*l000v+3JHeC1AcNa017hR11TT$li3#)DieBT000v+3JHeCdJiv}000vL3kUf07B*tAlJv8[DkZ\u0026(000vLumnhw015^Okl7V\u003c1eMw902]\u0026B000uQAWTrQ015^Okl7V\u003c1eMw902]\u0026B000uT0U)g2dJiv}000vL8GOmC01a2\u003cB3/{c3vjDeDP}Gg3uFDj017g.7B?-NecZeZ000vL0^^ci017g.7B/+ddJiv}000vL8GOmC01a3Ac}14n3iCMs000udz::Ta3mX7s1oJ{m000w43JHeCdJiv}000vL", "n": [ { "c": 1, "d": "No section reaches compression-grade entropy", "i": "metadata/binary/metrics/threshold::no-compression-grade-section", "o": 512, "z": 512, "cf": 0.8999999761581421 } ], "ln": 480 }, { "b": "000uQ6efH*6-Xjl0rr9i0^^Vx017p=0V9c\u0026Enf+x3i?%}dK1{fEnf+x3mVlflq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCnndby$byPQ)V\u003cM\u003cled?\u003cZbu5Y8x(mN800000\u00262zZ%kMy=:bumUxarpBZ5c8Xgbs+:9l\u0026Wh!fDyb[l\u003ciL\u003c", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 1316, "z": 4, "cf": 1.0 } ], "ln": 1268 }, { "b": "yxd1oD1?trw]]T\u003evSi}/x\u003e86#l1j.IA=2l3e(lObwozx[AXpgbB985nwM9O+e[w^m083:Cx(!i8Bs]\u003c*A4TK)v@DiIvS3a8zddlkp\u0026ZF+BZ]06e(lFcBz2S9q/MQNq!PPWA6W@Le\u003cS@=e\u003e]+}B5Wf*zGxJle(lFcBz2S9q/MQNq*ACawO\u003c4!z!%l3", "n": [ { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 6034, "z": 4, "cf": 0.5 } ], "ln": 5986 }, { "b": "wO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jxaG%B7GD2nPXJX08[e:By/qwlVl^SwN/*@z/fRGnLA\u0026tBs}SCBydQYwO?AOx(){608[e:By/p?r+lq)x(v\u003e?o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003c\u003cL{w[+[2A::67z/bLDlVl\u003cOx\u003eE", "n": [ { "c": 1, "d": ".NET set_Item method reference", "i": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "o": 6290, "z": 8, "cf": 0.6499999761581421 } ], "ln": 6258 }, { "b": "wN/*@z/bLHx\u003e8g4B8LVje\u003e72bwO#N6z/fRGl$HsGzE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9l}z!%l3v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh08vDOq*04#z/P@hwjp-MwPh:9z/bLDzE^s6pJZ+Pw(r5PxjTIRv}xR3x(v\u003e?q*ACawO\u003c4!z!%l3v@#B6zu", "n": [ { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 6527, "z": 17, "cf": 0.699999988079071 } ], "ln": 6479 }, { "b": "y?m9#x(v)ge\u003eFGHB.$YgvpB4:e\u003eoF{mq^l+wPzj3z/L?gv@#Tf04}+\u003eBz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?S.wPRoTwPz%dv}xYYp\u0026Zbmz/ff3xlwlaq!o#)x\u003e7Z}08[e:By/qwqGV(0x(dAllVl*Xx(4v3q!o#)x\u003e7Z}07pycB.tu3zF8WZwmY/ZB7GD2o\u003ewx!vp%dJD2J", "n": [ { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 7002, "z": 18, "cf": 0.75 } ], "ln": 6954 }, { "b": "vr(Ndz!s8zl1j^=l${dHz9.SGz/PY6y+wL8z!a02wPxz1z/Z2kA+ef?yYBDn0rrNbwPhNex([olC#X)3ltgE.Ac15[fk20vy**^9yHIH5v@c7awg?wgz7/WkD1!\u003cuy\u0026sDbeOe*wwPz:gx(^\u0026swn=NcwPPOvvr(Ndz!s7\u003e00Jx60rr950rr913ipbd000000rr9D0rv^*00062r00H{y\u002613lo)7n]x(E)108%1anP5iMA+PSbwb)}S08a7b00id10U4Ciy\u0026sI(B.(elAbo7=q#", "n": [ { "c": 3, "d": "Hardcoded HTTP or WebSocket URL", "i": "micro-behaviors/communications/http/url/domain::http-url-binary", "o": 9587, "z": 29, "cf": 0.699999988079071 } ], "ln": 9523 }, { "b": "y\u0026-r?wozZ1efEO]D1?trw]]T\u003evSi}/x\u003e86#l1j.IA=2l3e(lObBz\u003eVcy\u0026.cIr+lq)x(v(Lh7*Tpiw90pavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4j-kyUy\u003ee9QxKL}2l1j^=l1j^=o\u003c@9:rb#z+B7].Gp\u0026yz%xl4MZACNl[vSk4IB8$r3vqZd2BwM)%Bz2S9q/MRFz!a0bwH[%5xKL}2l1j^=l1j^=o\u003c@9:rb#z+B7].Gp\u0026yz%xl4MZACNfGr+lq)x(v(Lg+HZtgCgvjavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4j-kyUyYBCv0rrGc0000000000008}K7wE\u003ego\u00267(\u003e007\u003cQ008vO008vk000000000000031000Vj001w", "n": [ { "c": 2, "d": "IPv4-like .NET assembly version", "i": "metadata/lang/compiler/managed::dotnet-ipv4-like-version", "o": 9910, "z": 15, "cf": 0.8500000238418579 } ], "ln": 9862 }, { "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae\u003co2wZ0000000000\u003co4js00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310SSx7000r90SSx7000r9kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 10846, "z": 15, "cf": 0.8999999761581421 }, { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 10752, "z": 5, "cf": 0.8999999761581421 } ], "ln": 10720 }, { "b": "001bz00031fAr^bfAr^bfAr{fvGn7Z002%#9SMivlJz38z2!zMwDlPFBo3vZ002T(ve$MMx-JhOzVBwHBo0A-l\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYCNTo-P8iwb{-LyYF2D004-Nf8#1MmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYD6/pYLIozVBqFBPt[KwDl-Je=XYFzVB?UBo2}NASxUJqVH!qyYBCn001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001\u003eRe=WTbe=W)ie=WN9004-NgxmBQnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYD6/pYLIozVBqFBPt[KwDl-Je=XYFzVB?UBo2}NASxUJqVH!qyYD6/wb{ACyYBCn001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw0052VgxmBQpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYD6/pYLIozVBqFBPt[KwDl-Je=XYFzVB?UBo2}NASxUJqVH!qyYD6/wb{ACyYBCn004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W)id/:eYh#\u003e\u0026phuk-qf-S%eg5$?+gYPGnv/Oj-hukVofAs6jwb[H/v/Oy!h2}j*w=K^\u003cirg/mwDjK!hukVowb{3rvGo\u003cqfAtU:vGo)rirf3V001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W)ie=WN9000000000000000000000000000000", "n": [ { "c": 3, "d": "PE version metadata includes FileDescription", "i": "metadata/package/versioning::pe-filedescription-field", "o": 11150, "z": 15, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileVersion", "i": "metadata/package/versioning::pe-fileversion-field", "o": 11286, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes InternalName", "i": "metadata/package/versioning::pe-internalname-field", "o": 11334, "z": 12, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes ProductVersion", "i": "metadata/package/versioning::pe-productversion-field", "o": 11654, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 11684, "z": 46, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 11510, "z": 16, "cf": 0.699999988079071 }, { "c": 1, "d": "Several short title-cased resource strings", "i": "metadata/binary/resource::short-titlecase-resource-words", "o": 11066, "z": 8, "cf": 0.800000011920929 }, { "c": 1, "d": "PE FileDescription field is populated", "i": "metadata/package/versioning::pe-file-description-present", "o": 11184, "z": 46, "cf": 0.949999988079071 }, { "c": 1, "d": "PE LegalCopyright field is populated", "i": "metadata/package/versioning::pe-legal-copyright-present", "o": 11500, "z": 1, "cf": 0.949999988079071 }, { "c": 1, "d": "PE FileVersion value is present", "i": "metadata/package/versioning::version-info-file-version-present", "o": 11312, "z": 7, "cf": 0.949999988079071 } ], "ln": 11034 }, { "b": "00000000000000000000000000000000000000000000000000000000000006*I:3\u0026*ncnh*IG00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 12288, "z": 6, "cf": 0.8999999761581421 } ], "ln": 12240 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 10240, 5.66, "r-x" ], [ ".rsrc", 10752, 1536, 2.58, "r--" ], [ ".reloc", 12288, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "clr.is_il_only": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 45714.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0.0, "bss_like_section_count": 0.0, "clr.is_32bit_preferred": 0.0, "clr.strong_name_signed": 0.0, "section_overflow_count": 0.0, "clr.is_native_entrypoint": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.45, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.09 }, "file": { "size": 12800.0, "entropy": 5.16, "size_bytes": 12800.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.66, "string_count": 198.0, "overall_entropy": 5.16, "entropy_variance": 5.21, "avg_string_length": 27.48, "max_string_length": 197.0, "peak_region_bytes": 3072.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.6, "string_length_stddev": 23.43, "largest_section_ratio": 0.8, "sentence_string_count": 6.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 10240.0, "entropy_max": 5.66, "entropy_mean": 2.77, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 3, "mol": "H(Cm)Md₂(BiPa)", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!lib/netstandard2.0/Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.dll", "pid": 0, "risk": 4, "sha": "a46eaf238c7f599f5900ba4760c1bd9528e759131fcd43c08f02da37e5bd7c0d", "size": 12800, "traits": [ { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 1316, 4 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 10846, 15 ] ] }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 11286, 11 ] ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 11150, 15 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 11684, 46 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 11654, 14 ] ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 11334, 12 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded HTTP or WebSocket URL", "spans": [ [ 9587, 29 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 1316, 4 ] ] } ], "type": "pe" }, { "id": 4, "sha": "854caea60bbc24e4e5271f73aec8e64f55623d165919322c1d3f0192f5dac77f", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!lib/netstandard2.0/Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.xml", "size": 163, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}Kv5uH00000000", "n": [ { "c": 2, "d": "PE contains exactly one resource entry", "i": "metadata/binary/resource::pe-single-version-resource", "o": 0, "z": 24, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000kMy^J00000000000000000000b$v}n00000nb@R\u00260SSx7bQio?BrQX+0rr91000000000000000000000000000000000000000000000000000000000000000009S^-A000uQuihJf000uc7MxZv00awY1dT=u000cKiSZY:000uc1apgI00B=j0W]=6015=fEf6xG1s=Clc[$Y43iyrT0@@r7dW1\u003c7000iH0^$pN00BOIEfY/M1PwPS000jAg5}pYc]g\u002663mV2Q6efH*rSAa10000018*0@017bi000vD0rrasz-dN}3mC]P04R$E000vDcJBc=c]?nc3m)F8EG/=L1skSocvM9#00Jo9d/YLNB2\u003cp33mgib000cI0SSiJc{dFf3mW7#c{mLg3mX7rc{vRh3iyrTkl7V\u003cdL.6Lkl7V\u003cB3GZ93mVx0dHD}v3izXL0%i*l000v+3JHeC1AcNa017hR11TT$li3#)DieBT000v+3JHeCdJiv}000vL3kUf07B*tAlJv8[DkZ\u0026(000vLumnhw015^Okl7V\u003c1eMw902]\u0026B000uQAWTrQ015^Okl7V\u003c1eMw902]\u0026B000uT0U)g2dJiv}000vL8GOmC01a2\u003cB3/{c3vjDeDP}Gg3uFDj017g.7B?-NecZeZ000vL0^^ci017g.7B/+ddJiv}000vL8GOmC01a3Ac}14n3iCMs000udz::Ta3mX7s1oJ{m000w43JHeCdJiv}000vL", "n": [ { "c": 1, "d": "No section reaches compression-grade entropy", "i": "metadata/binary/metrics/threshold::no-compression-grade-section", "o": 512, "z": 512, "cf": 0.8999999761581421 } ], "ln": 480 }, { "b": "000uQ6efH*6-Xjl0rr9i0^^Vx017p=0V9c\u0026Enf+x3i?%}dK1{fEnf+x3mVlflq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCnndby$byPQ)V\u003cM\u003cled?\u003cZbu5Y8x(mN800000\u00262zZ%kMy=:bumUxarpBZ5c8Xgbs+:9l\u0026Wh!fDyb[l\u003ciL\u003c", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 1316, "z": 4, "cf": 1.0 } ], "ln": 1268 }, { "b": "yxd1oD1?trw]]T\u003evSi}/x\u003e86#l1j.IA=2l3e(lObwozx[AXpgbB985nwM9O+e[w^m083:Cx(!i8Bs]\u003c*A4TK)v@DiIvS3a8zddlkp\u0026ZF+BZ]06e(lFcBz2S9q/MQNq!PPWA6W@Le\u003cS@=e\u003e]+}B5Wf*zGxJle(lFcBz2S9q/MQNq*ACawO\u003c4!z!%l3", "n": [ { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 6034, "z": 4, "cf": 0.5 } ], "ln": 5986 }, { "b": "wO\u003c4!z!%l3v@#B6zGvB2wO#71x\u003e5+!oLFM\u0026jxaG%B7GD2nPXJX08[e:By/qwlVl^SwN/*@z/fRGnLA\u0026tBs}SCBydQYwO?AOx(){608[e:By/p?r+lq)x(v\u003e?o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003c\u003cL{w[+[2A::67z/bLDlVl\u003cOx\u003eE", "n": [ { "c": 1, "d": ".NET set_Item method reference", "i": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "o": 6290, "z": 8, "cf": 0.6499999761581421 } ], "ln": 6258 }, { "b": "wN/*@z/bLHx\u003e8g4B8LVje\u003e72bwO#N6z/fRGl$HsGzE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9l}z!%l3v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh08vDOq*04#z/P@hwjp-MwPh:9z/bLDzE^s6pJZ+Pw(r5PxjTIRv}xR3x(v\u003e?q*ACawO\u003c4!z!%l3v@#B6zu", "n": [ { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 6527, "z": 17, "cf": 0.699999988079071 } ], "ln": 6479 }, { "b": "y?m9#x(v)ge\u003eFGHB.$YgvpB4:e\u003eoF{mq^l+wPzj3z/L?gv@#Tf04}+\u003eBz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?S.wPRoTwPz%dv}xYYp\u0026Zbmz/ff3xlwlaq!o#)x\u003e7Z}08[e:By/qwqGV(0x(dAllVl*Xx(4v3q!o#)x\u003e7Z}07pycB.tu3zF8WZwmY/ZB7GD2o\u003ewx!vp%dJD2J", "n": [ { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 7002, "z": 18, "cf": 0.75 } ], "ln": 6954 }, { "b": "vr(Ndz!s8zl1j^=l${dHz9.SGz/PY6y+wL8z!a02wPxz1z/Z2kA+ef?yYBDn0rrNbwPhNex([olC#X)3ltgE.Ac15[fk20vy**^9yHIH5v@c7awg?wgz7/WkD1!\u003cuy\u0026sDbeOe*wwPz:gx(^\u0026swn=NcwPPOvvr(Ndz!s7\u003e00Jx60rr950rr913ipbd000000rr9D0rv^*00062r00H{y\u002613lo)7n]x(E)108%1anP5iMA+PSbwb)}S08a7b00id10U4Ciy\u0026sI(B.(elAbo7=q#", "n": [ { "c": 3, "d": "Hardcoded HTTP or WebSocket URL", "i": "micro-behaviors/communications/http/url/domain::http-url-binary", "o": 9587, "z": 29, "cf": 0.699999988079071 } ], "ln": 9523 }, { "b": "y\u0026-r?wozZ1efEO]D1?trw]]T\u003evSi}/x\u003e86#l1j.IA=2l3e(lObBz\u003eVcy\u0026.cIr+lq)x(v(Lh7*Tpiw90pavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4j-kyUy\u003ee9QxKL}2l1j^=l1j^=o\u003c@9:rb#z+B7].Gp\u0026yz%xl4MZACNl[vSk4IB8$r3vqZd2BwM)%Bz2S9q/MRFz!a0bwH[%5xKL}2l1j^=l1j^=o\u003c@9:rb#z+B7].Gp\u0026yz%xl4MZACNfGr+lq)x(v(Lg+HZtgCgvjavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4j-kyUyYBCv0rrGc0000000000001)jeuF)Mo\u00267(\u003e007\u003cQ008vO008vk000000000000031000Vj001w", "n": [ { "c": 2, "d": "IPv4-like .NET assembly version", "i": "metadata/lang/compiler/managed::dotnet-ipv4-like-version", "o": 9910, "z": 15, "cf": 0.8500000238418579 } ], "ln": 9862 }, { "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae\u003co2wZ0000000000\u003co4js00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310SSx7000r90SSx7000r9kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 10846, "z": 15, "cf": 0.8999999761581421 }, { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 10752, "z": 5, "cf": 0.8999999761581421 } ], "ln": 10720 }, { "b": "001bz00031fAr^bfAr^bfAr{fvGn7Z002%#9SMivlJz38z2!zMwDlPFBo3vZ002T(ve$MMx-JhOzVBwHBo0A-l\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYCNTo-P8iwb{-LyYF2D004-Nf8#1MmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYD6/pYLIozVBqFBPt[KwDl-Je=XYFzVB?UBo2}NASxUJqVH!qyYBCn001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001\u003eRe=WTbe=W)ie=WN9004-NgxmBQnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYD6/pYLIozVBqFBPt[KwDl-Je=XYFzVB?UBo2}NASxUJqVH!qyYD6/wb{ACyYBCn001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw0052VgxmBQpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2=\u003c4vGpoCzVB!Tz2^#AyYD6/pYLIozVBqFBPt[KwDl-Je=XYFzVB?UBo2}NASxUJqVH!qyYD6/wb{ACyYBCn004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W)id/:eYh#\u003e\u0026phuk-qf-S%eg5$?+gYPGnv/Oj-hukVofAs6jwb[H/v/Oy!h2}j*w=K^\u003cirg/mwDjK!hukVowb{3rvGo\u003cqfAtU:vGo)rirf3V001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W)ie=WN9000000000000000000000000000000", "n": [ { "c": 3, "d": "PE version metadata includes FileDescription", "i": "metadata/package/versioning::pe-filedescription-field", "o": 11150, "z": 15, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileVersion", "i": "metadata/package/versioning::pe-fileversion-field", "o": 11286, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes InternalName", "i": "metadata/package/versioning::pe-internalname-field", "o": 11334, "z": 12, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes ProductVersion", "i": "metadata/package/versioning::pe-productversion-field", "o": 11654, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 11684, "z": 46, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 11510, "z": 16, "cf": 0.699999988079071 }, { "c": 1, "d": "Several short title-cased resource strings", "i": "metadata/binary/resource::short-titlecase-resource-words", "o": 11066, "z": 8, "cf": 0.800000011920929 }, { "c": 1, "d": "PE FileDescription field is populated", "i": "metadata/package/versioning::pe-file-description-present", "o": 11184, "z": 46, "cf": 0.949999988079071 }, { "c": 1, "d": "PE LegalCopyright field is populated", "i": "metadata/package/versioning::pe-legal-copyright-present", "o": 11500, "z": 1, "cf": 0.949999988079071 }, { "c": 1, "d": "PE FileVersion value is present", "i": "metadata/package/versioning::version-info-file-version-present", "o": 11312, "z": 7, "cf": 0.949999988079071 } ], "ln": 11034 }, { "b": "00000000000000000000000000000000000000000000000000000000000006*I:3\u0026*ncnh*IG00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 12288, "z": 6, "cf": 0.8999999761581421 } ], "ln": 12240 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 10240, 5.66, "r-x" ], [ ".rsrc", 10752, 1536, 2.58, "r--" ], [ ".reloc", 12288, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "clr.is_il_only": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 66236.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0.0, "bss_like_section_count": 0.0, "clr.is_32bit_preferred": 0.0, "clr.strong_name_signed": 0.0, "section_overflow_count": 0.0, "clr.is_native_entrypoint": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.45, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.09 }, "file": { "size": 12800.0, "entropy": 5.15, "size_bytes": 12800.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.66, "string_count": 197.0, "overall_entropy": 5.15, "entropy_variance": 5.2, "avg_string_length": 27.6, "max_string_length": 197.0, "peak_region_bytes": 3072.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.59, "string_length_stddev": 23.43, "largest_section_ratio": 0.8, "sentence_string_count": 6.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 10240.0, "entropy_max": 5.66, "entropy_mean": 2.77, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 5, "mol": "H(Cm)Md₂(BiPa)", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!lib/netstandard2.1/Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.dll", "pid": 0, "risk": 4, "sha": "6aab13bc0c80b01bbc9ecac4eaaa0e6454358c8e30e44b5f08e730997abf16a2", "size": 12800, "traits": [ { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 1316, 4 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 10846, 15 ] ] }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 11286, 11 ] ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 11150, 15 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 11684, 46 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 11654, 14 ] ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 11334, 12 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded HTTP or WebSocket URL", "spans": [ [ 9587, 29 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 1316, 4 ] ] } ], "type": "pe" }, { "id": 6, "sha": "854caea60bbc24e4e5271f73aec8e64f55623d165919322c1d3f0192f5dac77f", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!lib/netstandard2.1/Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.xml", "size": 163, "type": "xml", "depth": 1 }, { "id": 7, "sha": "9a2ad7955f0bde8d3f7b1091dc6884e5eb3945dee6abcbf53864fdc16496a4ed", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!![Content_Types].xml", "size": 583, "type": "xml", "depth": 1 }, { "id": 8, "sha": "f27ada0596be3a30f04df540884ca3347c8f0e63907f5a868aff06332286889f", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.5.2.9.nupkg!!package/services/metadata/core-properties/806897e1953546f89431933b8c558216.psmdcp", "size": 696, "type": "xml", "depth": 1 }, { "id": 9, "mol": "Md", "sha": "d590f760eea8db2ed53b2dba3a717e5b60de4dfa0985c8fb0591c9f45e5f0c4e", "path": "Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql@5.2.9.registry.json", "risk": 1, "size": 976, "type": "registry", "depth": 1 } ], "omitted_files": 5, "v": "8" } }