{ "ml": { "v": "7", "eng": "2.2.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.6463421, "rte": "az", "prob": 0.6463421 }, { "cls": 0, "raw": 0.5068099, "rte": "az/nupkg", "prob": 0.5068099 } ], "prob": 0.6463421, "skip": [ { "rte": "az/zip", "why": "unavailable" }, { "rte": "az/zip", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.6463420987129211, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000954747200012207, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00006663799285888672, "type": "png" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.6386661529541016, "type": "pe" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000033408403396606445, "type": "xml" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000041097402572631836, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.11724051833152771, "type": "pe" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000033408403396606445, "type": "xml" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "xml" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000033408403396606445, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-06-29T20:22:34Z" }, "path": "FastEndpoints.Generator.8.3.0-beta.5.nupkg", "raw": { "files": [ { "id": 0, "mol": "O(Al)H₂(CmDb)", "sha": "0a2cb95217e3bb25ee9b611f173b8a0db51bc606b04594bc5f83e3c92c511d05", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg", "risk": 4, "size": 54635, "type": "nupkg", "facts": { "metrics": { "file": { "size": 54635.0, "entropy": 7.96, "size_bytes": 54635.0 }, "binary": { "overall_entropy": 7.96, "peak_region_bytes": 51200.0, "peak_region_entropy": 7.81 }, "archive": { "file_count": 10.0, "member_count": 10.0, "script_count": 0.0, "zip_bomb_ratio": 4.05, "directory_count": 0.0, "executable_count": 2.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 53111.0, "compression.ratio": 0.48, "hidden_file_count": 2.0, "total_uncompressed": 111452.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 10.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 5.0, "timing.mtime_unique_ratio": 0.5, "misplaced_executable_count": 2.0, "timing.mtime_dominant_count": 4.0, "timing.mtime_spread_seconds": 25170.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.4, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 9.0 } } }, "ident": { "name": { "value": "FastEndpoints.Generator", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://fast-endpoints.com/", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://github.com/FastEndpoints/FastEndpoints.git", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "FastEndpoints", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "8.3.0-beta.5", "source": "nupkg.version", "verified": false }, "identifier": { "value": "FastEndpoints.Generator", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "LINQ query operations", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET Assembly (mscoree.dll)", "from": [ { "file": 4 }, { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/server/managed::http-response-get", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET Response object", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET Metadata Root (BSJB)", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-file-version-ipv4-shape", "conf": 0.9200000166893005, "crit": 1, "desc": "PE FileVersion resembles IPv4", "spans": [ [ 14920, 7 ] ] }, { "id": "micro-behaviors/fs/path/extension::dll-dup", "crit": 2, "desc": ".dll extension reference", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "conf": 1.0, "crit": 3, "desc": "JSON polymorphism runtime marker", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/metrics/pe-details::dotnet-code-entropy-normal", "conf": 0.699999988079071, "crit": 1, "desc": ".NET code entropy in unpacked range", "from": [ { "file": 4 } ], "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-product-version-ipv4-shape", "conf": 0.9200000166893005, "crit": 1, "desc": "PE ProductVersion resembles IPv4" }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR runtime header present (COM descriptor)" }, { "id": "micro-behaviors/communications/http/server/managed::http-request-get", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET Request object", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE FileVersion metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE ProductVersion metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 4 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 513.0, "entropy": 5.16, "size_bytes": 513.0 }, "binary": { "overall_entropy": 5.16, "peak_region_bytes": 513.0, "peak_region_entropy": 5.16 } } }, "id": 1, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!_rels/.rels", "sha": "101c43534ffb7eb4c73817c042db4b46efbdba3c0064686e35215525c7700687", "size": 513, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 30, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLpnf!+m#B-RIkv\u003eJ1EwfKh", "ln": 2, "addr": 42 }, { "b": "arS^-wPRu\u003evrt{w", "ln": 3, "addr": 118 }, { "b": "arR^HjAbsVygQ)%rDq[txMOunB2\u003e%cw)]+5eOe*gAbPDdBAo6Az/4c\u0026fk$@IygQ)%rDq[t", "ln": 10, "addr": 372 }, { "b": "arR^Hjy\u00262Av@=p5BzkVhk2VxxA:@V6xjU%(A::6dAV/gjvSC)$C{3ZqAV^?WB96\u0026*wn(E3zGG}LjtgkRB7ol8Acb/jzAX", "ln": 11, "addr": 429 }, { "b": "arR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026IA+)(.xMOunB2\u003e%cxk8E3BZ=$kz/4c%vrlJVzE^Z8x(n3lfgGw\u003eBvy7TAbPDdBAo6Ex(\u003eKwv@Dj3x((GZw[tHbwN]vhh90xJvL.BKg?piehdni@f/iu1gCJxJh8u{AgbyQya%nK5", "n": [ { "c": 2, "d": "NuGet package declares repository", "i": "metadata/package/files/nuget::nuspec-repository", "o": 508, "z": 87, "cf": 0.8999999761581421 } ], "ln": 12, "addr": 504 }, { "b": "arS^1zdN/$wmoN*j]", "ln": 13, "addr": 641 }, { "b": "jtgUZv@2H=wJ*", "ln": 14, "addr": 655 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 665.0, "entropy": 5.05, "size_bytes": 665.0 }, "binary": { "overall_entropy": 5.05, "peak_region_bytes": 665.0, "peak_region_entropy": 5.05 } } }, "id": 2, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!FastEndpoints.Generator.nuspec", "risk": 1, "sha": "061a9f309b310e08647b65b0c47764f6e56553aaf9cab4fa2fbc1e83e06bced6", "size": 665, "traits": [ { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 508, 87 ] ] }, { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 30 ] ] } ], "type": "xml" }, { "depth": 1, "facts": { "metrics": { "png": { "a_entropy": 1.16, "chunk_count": 5.0, "trailing_bytes": 0.0, "idat_chunk_count": 1.0, "text_chunk_bytes": 1625.0, "chunks_after_iend": 0.0, "compression_ratio": 0.06, "unknown_chunk_count": 0.0 }, "file": { "size": 3944.0, "entropy": 7.39, "size_bytes": 3944.0 }, "image": { "width": 128.0, "height": 128.0, "channels": 4.0, "b_entropy": 0.98, "g_entropy": 1.06, "r_entropy": 0.91, "edge_density": 0.02, "pixel_entropy": 1.29, "histogram_flatness": 0.16 }, "binary": { "overall_entropy": 7.39, "peak_region_bytes": 1896.0, "peak_region_entropy": 7.64 } } }, "id": 3, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!icon.png", "pid": 0, "sha": "701836c28ccd5aeb9f655af6b6826370d13f0aca9718f6ada1aed8530c99df38", "size": 3944, "traits": [ { "id": "metadata/package/files/included::png-extension-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Filename ends with .png", "spans": [ [ 0, 8 ] ] } ], "type": "png" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/", "n": [ { "c": 3, "d": "Packed binary marker", "i": "objectives/anti-static/obfuscation/eval/loader::packed-binary-marker", "o": 0, "z": 30, "cf": 0.8500000238418579 } ], "ln": 0 }, { "b": "00000000000000000000ulGsH00000nb@R\u00260SSx7UWvCh]U7q92(\u003c@9000000000000", "n": [ { "c": 1, "d": "PE standard code/data section", "i": "metadata/binary/section/names::pe-code-data-standard-section", "o": 512, "z": 5, "cf": 0.8999999761581421 } ], "ln": 496 }, { "b": "019:kk(+\u003cLs]XKfdGxCGlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn", "n": [ { "c": 3, "d": "Recognized PE anti-analysis marker", "i": "objectives/anti-analysis/debugger-detect/combined-checks::evasion-aware-recognized-pe-marker", "o": 17072, "z": 4, "cf": 1.0 } ], "ln": 17056 }, { "b": "AaG2ZwPRoCvrl0VD2Nr{xjVf(qE%]*z/fScrc-B]0chT(AbPSnwMi}]wDlvOBydQXr://!wMi}]", "n": [ { "c": 3, "d": "Access to ASP.NET Response object", "i": "micro-behaviors/communications/http/server/managed::http-response-get", "o": 36582, "z": 12, "cf": 1.0 } ], "ln": 36566 }, { "b": "xjVf(mqMKLwO#P?D2Nr{xjVf(qE%\u0026\u003cwPI@)D2Nr{A+flkwPI@)D2Nr{xjVf(p\u0026ZF[wPz)rrc-A", "n": [ { "c": 3, "d": "Access to ASP.NET Request object", "i": "micro-behaviors/communications/http/server/managed::http-request-get", "o": 36732, "z": 11, "cf": 1.0 } ], "ln": 36716 }, { "b": "AbPDdBAo68wO#71vruBde[w^m07*amzdmB10b2\u003e+uShk!vSc5.m}D^gwN/K+A+e=W", "n": [ { "c": 3, "d": "References Windows executable or script", "i": "objectives/execution/interpreter/script/shell::windows-executable-ref", "o": 37796, "z": 4, "cf": 0.6000000238418579 } ], "ln": 37780 }, { "b": "l2HaED2)Xve\u003c\u0026MJvrcq!q*ACawO\u003c4[x(m[\u003cjvs3$wJ\u003c\u003couSo\u003cgASwi%vqPN%k5aCir8v1z07gM", "n": [ { "c": 3, "d": "LINQ query operations", "i": "micro-behaviors/data/db/linq::linq-queries", "o": 38629, "z": 11, "cf": 0.699999988079071 } ], "ln": 38613 }, { "b": "wQanrfG@\u0026Jqfuq-x\u003ezR\u003cq*ACawO\u003c4#wN/\u003e6x([RMlVND\u003eBz\u003e/jvq][90b2\u003e+uRbrgzFsh*zFTN#l2H@", "n": [ { "c": 2, "d": "System namespace reference", "i": "metadata/lang/compiler/managed::system-namespace", "o": 41663, "z": 15, "cf": 0.800000011920929 } ], "ln": 41647 }, { "b": "pYK]7ASydXwDhYjBn#qLqVI7yA@ZpZwDlMEe=X\u0026JwDl@PBo0][n=S]jzVBUPe=X/IwDl-Jx-IMwyYFeH", "n": [ { "c": 3, "d": "JSON polymorphism runtime marker", "i": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "o": 58307, "z": 16, "cf": 1.0 } ], "ln": 58291 }, { "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000", "n": [ { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 66560, "z": 5, "cf": 0.8999999761581421 } ], "ln": 66544 }, { "b": "0000000000004VNgYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr910000", "n": [ { "c": 3, "d": "Recognized marker for timing checks", "i": "objectives/anti-analysis/timing/evasion::timing-anti-debug-recognized-marker", "o": 66654, "z": 15, "cf": 0.949999988079071 } ], "ln": 66638 }, { "b": "fAr{fvGn7Z001LI0SSl3mGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up001bw001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001XMe=WN9e=WN9e=WN9003a38#{0tnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002E*ve$uGBo1-fzuahEz#:!R", "n": [ { "c": 3, "d": "Dotted-quad PE version metadata marker", "i": "objectives/command-and-control/infrastructure/ip::ipv4-version-metadata-marker", "o": 66944, "z": 7, "cf": 0.9399999976158142 }, { "c": 3, "d": "HTTP fingerprinting evasion campaign", "i": "objectives/command-and-control/infrastructure/user-agent::http-fingerprinting-campaign", "o": 66908, "z": 1, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE FileDescription metadata field", "i": "metadata/package/versioning::pe-filedescription-field", "o": 66874, "z": 15, "cf": 0.699999988079071 }, { "c": 2, "d": "PE InternalName metadata field", "i": "metadata/package/versioning::pe-internalname-field", "o": 66966, "z": 12, "cf": 0.699999988079071 }, { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 66918, "z": 11, "cf": 0.8999999761581421 } ], "ln": 66858 }, { "b": "xAibO001bw003yb8#{0tpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002E*ve$uGBo1-fzuahE", "n": [ { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 67094, "z": 16, "cf": 0.699999988079071 } ], "ln": 67078 }, { "b": "e=YzZyYFnK001?Q2MK(9pYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001XMe=WN9e=WN9e=WN9001$U2MK(9k(+%aA@Y+Kz2!2ByYF.Xao", "n": [ { "c": 2, "d": "PE ProductVersion metadata field", "i": "metadata/package/versioning::pe-productversion-field", "o": 67190, "z": 14, "cf": 0.699999988079071 }, { "c": 1, "d": "PE version numbers look like IPv4", "i": "metadata/package/versioning::version-number-ipv4-metadata", "o": 67220, "z": 7, "cf": 0.949999988079071 } ], "ln": 67174 }, { "b": "0000000000000000000003zpx3\u0026*ncFh437000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 67584, "z": 6, "cf": 0.8999999761581421 } ], "ln": 67568 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 66048, 5.72, "r-x" ], [ ".rsrc", 66560, 1024, 2.35, "r--" ], [ ".reloc", 67584, 512, 0.1, "r--" ] ], "metrics": { "pe": { "checksum": 74665.0, "checksum_valid": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "computed_checksum": 74665.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "bss_like_section_count": 0.0, "section_overflow_count": 0.0, "misaligned_section_count": 0.0, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0 }, "file": { "size": 68096.0, "entropy": 5.64, "size_bytes": 68096.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.72, "string_count": 609.0, "overall_entropy": 5.64, "entropy_variance": 5.34, "avg_string_length": 18.9, "max_string_length": 379.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 6.28, "string_length_stddev": 23.2, "largest_section_ratio": 0.97, "sentence_string_count": 18.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 66048.0, "entropy_max": 5.72, "entropy_mean": 2.73, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 4, "mol": "O(Al)H₂(CmDb)", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!analyzers/dotnet/cs/netstandard2.0/FastEndpoints.Generator.dll", "risk": 4, "sha": "080be6ee9cc8ff058c31e10a5ca1fef07d6cd70e9eccb2302b1bd8e713860dca", "size": 68096, "traits": [ { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE FileVersion metadata field", "spans": [ [ 66918, 11 ] ] }, { "id": "metadata/package/versioning::pe-file-version-ipv4-shape", "conf": 0.9200000166893005, "crit": 1, "desc": "PE FileVersion resembles IPv4", "spans": [ [ 66944, 7 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 66654, 15 ] ] }, { "id": "micro-behaviors/fs/path/extension::dll-dup", "crit": 2, "desc": ".dll extension reference", "spans": [ [ 37796, 4 ] ] }, { "id": "metadata/package/versioning::pe-product-version-ipv4-shape", "conf": 0.9200000166893005, "crit": 1, "desc": "PE ProductVersion resembles IPv4", "spans": [ [ 67220, 7 ] ] }, { "id": "metadata/binary/metrics/pe-details::dotnet-code-entropy-normal", "conf": 0.699999988079071, "crit": 1, "desc": ".NET code entropy in unpacked range", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET Metadata Root (BSJB)", "spans": [ [ 17072, 4 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::http-request-get", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET Request object", "spans": [ [ 36732, 11 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE ProductVersion metadata field", "spans": [ [ 67190, 14 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::http-response-get", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET Response object", "spans": [ [ 36582, 12 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR runtime header present (COM descriptor)" }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "LINQ query operations", "spans": [ [ 38629, 11 ] ] }, { "id": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "conf": 1.0, "crit": 3, "desc": "JSON polymorphism runtime marker", "spans": [ [ 58307, 16 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET Assembly (mscoree.dll)", "spans": [ [ 17072, 4 ] ] } ], "type": "pe" }, { "id": 5, "sha": "a1aabbf4123dea5bd70817fdffbb279cdc1399c6da5231f890f417de7536f163", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!analyzers/dotnet/cs/netstandard2.0/FastEndpoints.Generator.xml", "size": 140, "type": "xml", "depth": 1 }, { "id": 6, "sha": "8e64b52342cf186a2f55070e60b097f6026a86b5fd76cb07f66eb2ffa69946cf", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!build/FastEndpoints.Generator.targets", "size": 7419, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}nA6K500000000", "ln": 0 }, { "b": "3\u0026*nc0dU4H00ic206Qw.000000000000000kMy^J000000000000000000005l5Sf00000nb@R\u00260SSx7oEfVs2Ru2R2(\u003c@9000000000000000r8JX@Fb/MH00000000000000000000000000000000000000009S^-5000uQ9S^-5000uQuihI/000uc7MxKq00awY1dT=u000cKiSZYx000uc1apgI00B=j0W[VY015=fEf6xG1s=Clc\u003eVHW3iyrT0@@r7dJOTt5=.[sdPMPMEfoJI1oFZO1POJ90W[VY017g%0^+4I00B+)0^+7J00B+#0V-792MK\u0026edKCi07BPK?00T]10V.v\u003e2MK\u0026edJOUr5=.[mdK1]@Eg=IW1s=Clc\u003eVHW3iyqT4/=OldJOTt5=.[sdJOUr6951ndK1]@Eg(OX1s+C]DLuCW1s+O%1ap\u003c-00B=j0W[SX00SGbc\u003e=NX1$y!#94hN500T[%0VJK6000iMa{5Sg761ssdK\u003eG41qSyg000iM9S^-5000uQ9S*W6000cKa{4\u003c{6-XjpdJOUr761sqdK1]@Ehh!.1s+C]DLVUZ1s+O%1ap%=00B=(0W[SX00SGsc(\u0026o/1{a(P9@(oB0T6[{000iMASNT3000i811ke\u002600SGcc)5A?1{a@RaPIGDdJOUr7YTKsdK1]@Ehz}:1s+C]DL(!-1s+O%1aq3!00B+)0^+*=00B+}0T0\u0026?000cKASNT3000i86EUmc00SGbc)[#{1{a]Qdf6tLdSLOs5Dz!n0S%?%000i81sLR$00SGdc[bb@1$yU}c\u003eMBV1$yU}DM8}+", "ln": 464 }, { "b": "gxmyTdJOUrgYNHUdK1]@Eky{71s+C]DO\u003e^61s+O%1ar3b00B+)0W[-.017gQlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCng-3b(byPQ)PCEOdyZ{BBbu5Y8x(mN8000003)\u003e@O1onA4bumUx5gdwS5c8Xgbs+:9l\u0026Wh!asm6*\u003eMR1!", "ln": 1820 }, { "b": "y?k^gnjt*j08#\u0026ZlQZ#ymnccHmf3dIr6%gRpF+1ZpFK**lR*DLmmg2Om[3wSp!$1?08MV{08V-+qDT0yvqH6$uTA!CwPRoSwO(vewKZYUzbT}TwO\u003e\u0026QB7GD2qE%Y-C4Bc-z/5A.xK#3?0chT/z*2XYA=k![v}YB\u003cve%}KBydBOzGFf!Bz\u003cGWzE=jP", "ln": 8006 }, { "b": "wId1{A=U@kzFs0308)#Wx(mL-l2puqmQZvWmq=TPz!T9hB1P+2BAh88B-.hoe[w^m08^-TBy!oSA:-!+qfuC\u003cC#d{\u0026vqM0yD2[7sz2^1xB.}aAB8#5dzu9ZGA=U@kzuarXByd\u003cQA=2JiB7]Mg0cqZ[uR\u003erOze16jx(v\u003e?AaK6bx(!ufz/bLND2[7sz7XZ$w]83*BzkVh091k.wKH9wx(mTbx(v\u003e?p\u0026ZF[wPz)rl$G$AzFsibz/bLNx(mN1wPR\u003cd08NYOAaK6iC$z)=zVAsIBz}j)wPRoWvqH6$p*[x=wPv=(wPRoWvqH6$p*[x=wPv=-wPRoHwPS39ASye(BydKHBAz8m0b2\u003e+uSgJTBy/E)B7GD2q!p5)wPv=6v@#Tf08[e:By/qwl${7xzF%Prx\u003e8h:xjVf(m0iJUBzkVhq!oDSzE^!*B7GD2m0iJUBzkVhq!oDSzE^!*woz{3BzkVhq!oDSzE^!*q*ACawO\u003c4$B-8qnzdLs!z/6Dcy?mS=wPz%dv}xYYxjVf(ltpr", "ln": 10565 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae1oXY800000000001oZKY00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310@@Pb000000@@Pb00000kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "ln": 14288 }, { "b": "002m^00031fAr^bfAr^bfAr{fvGn7Z003m7a]?SzlJz38z2!zMwDlPFBo3vZ002p+Bo3y.ASx!NvGpJJBo2\u003eLA@Wr.BPuE.wDllvaok\u003cJC(O@!mGu\u0026%A@ZpZmf4i9wb{MGzVBFKzua+UA@W/)002aY4GDIflJz38z2!IPve$fBC(QOtve$cAwDhYg002E*ve$uGBo1-fzuahEz#:!Rx-J2JBo3vZ003g582%WqmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002E*ve$uGBo1-fzuahEz#:!Rx-J2JBo3vZe=XfqBo3y.ASx!NvGpJJBo2\u003eLA@Vgu001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001$Ue=WWce=WN9e=WN9003g59rl9unDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002E*ve$uGBo1-fzuahEz#:!Rx-J2JBo3vZe=XfqBo3y.ASx!NvGpJJBo2\u003eLA@W/)wb{ACyYBCn001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw003Ed9rl9upxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002E*ve$uGBo1-fzuahEz#:!Rx-J2JBo3vZe=XfqBo3y.ASx!NvGpJJBo2\u003eLA@W/)wb{ACyYBCn002)%82%WqpYLIozVBqFBPt[KBo25ove$cAwDhYg002E*ve$uGBo1-fzuahEz#:!Rx-J2JBo3vZe=XfqBo3y.ASx!NvGpJJBo2\u003eLA@Vgu0058Xhui:TpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001$Ue=WWce=WN9eDxkWwDl/Lve}[Wh2]cbw=Mxxwb[p-wDllvwDjT?h2]Spf-TfkvGng:ve@j^gYR4^w=Muwh2}4+f-T3gf-T3gvGny*gxocfv/Q6uh2]AjfAs0hg5%9gfAs3i001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001$Ue=WWce=WN9e=WN9000000000000000000000000000000", "ln": 14618 }, { "b": "00000000000000000000000000000000000000000000000000000000000008JT}3\u0026*ncfF\u0026+f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 15824 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 13824, 5.74, "r-x" ], [ ".rsrc", 14336, 1536, 2.57, "r--" ], [ ".reloc", 15872, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 23856, "timestamp": 3707625800, "image_size": 40960, "headers_size": 512, "checksum_valid": 1, "clr.is_il_only": 1, "file_alignment": 512, "resource_count": 1, "has_version_info": 1, "computed_checksum": 23856, "headers_size_ratio": 0.03, "prose_section_count": 0, "reloc_overhang_bytes": 500, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0, "bss_like_section_count": 0, "clr.is_32bit_preferred": 0, "clr.strong_name_signed": 1, "section_overflow_count": 0, "clr.is_native_entrypoint": 0, "clr.strong_name_sig_size": 128, "misaligned_section_count": 0, "version.identity_entropy": 3.72, "base_relocation_block_count": 1, "base_relocation_entry_count": 1, "declared_data_directory_count": 6, "version.identity_symbol_ratio": 0.03, "executable_prose_section_count": 0, "directory_section_mismatch_count": 0 }, "file": { "size": 16384, "entropy": 5.32 }, "binary": { "is_pie": 1, "code_entropy": 5.74, "string_count": 245, "entropy_variance": 5.37, "avg_string_length": 18.65, "max_string_length": 346, "peak_region_bytes": 2048, "code_to_data_ratio": 1, "peak_region_entropy": 5.99, "string_length_stddev": 23.76, "largest_section_ratio": 0.84, "sentence_string_count": 4, "sentence_string_ratio": 0.02, "high_entropy_string_count": 0 }, "imports": { "count": 1 }, "strings": { "truncated": 0, "retained_count": 245, "extracted_count": 245 }, "sections": { "count": 3, "code_size": 13824, "entropy_max": 5.74, "entropy_mean": 2.8, "name_entropy": 3.03, "writable_count": 0, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "consistency": { "internal_name_original_filename_mismatch": 0 }, "dependencies": { "count": 1 } } }, "id": 7, "ident": { "name": { "value": "FastEndpoints.Attributes.dll", "source": "pe.version.original_filename", "verified": false }, "title": { "value": "FastEndpoints.Attributes", "source": "pe.version.description", "verified": false }, "trust": "unsigned", "project": { "value": "FastEndpoints.Attributes", "source": "pe.version.product_name", "verified": false }, "version": { "value": "8.3.0.0", "source": "pe.version.file_version", "verified": false }, "build_path": { "value": "/home/runner/work/FastEndpoints/FastEndpoints/Src/Attributes/obj/Release/netstandard2.0/FastEndpoints.Attributes.pdb", "source": "pe.debug.pdb.path", "verified": false }, "organization": { "value": "FastEndpoints", "source": "pe.version.company", "verified": false } }, "mol": "Md₃(Bi₄PaSi)", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!lib/netstandard2.0/FastEndpoints.Attributes.dll", "pid": 0, "risk": 6, "sha": "fa8f96c99947477a7fc840a225d27edae09dcb36b7843b01426c8f43f218b08e", "size": 16384, "traits": [ { "id": "metadata/binary/code/entropy::code-entropy-at-most-7-5", "conf": 0.7, "crit": 2, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 512, 13824 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 1868, 0 ] ] }, { "id": "metadata/binary/layout/overlay::image-under-768kb", "conf": 0.9, "crit": 3, "desc": "PE mapped image under 768 KiB" }, { "id": "metadata/binary/layout/size::small-pe", "conf": 0.6, "crit": 3, "desc": "Small PE binary (\u003c100KB)" }, { "id": "metadata/binary/resource/identity::pe-description-equals-product-name", "conf": 0.9, "crit": 3, "desc": "PE description duplicates ProductName" }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/package/versioning/scheme::pe-companyname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 14742, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-filedescription-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 14802, 15 ] ] }, { "id": "metadata/package/versioning/scheme::pe-fileversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 14894, 11 ] ] }, { "id": "metadata/package/versioning/scheme::pe-internalname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 14942, 12 ] ] }, { "id": "metadata/package/versioning/scheme::pe-productversion-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 15258, 14 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-file-version-value", "conf": 0.9, "crit": 3, "desc": "PE version resource carries a file version", "spans": [ [ 14920, 7 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-product-name-value", "conf": 0.9, "crit": 3, "desc": "PE version resource names a product", "spans": [ [ 15200, 24 ] ] }, { "id": "metadata/package/versioning/scheme::pe-version-resource", "conf": 0.8, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 14430, 0 ] ] }, { "id": "metadata/package/versioning/scheme::version-info-file-version-present", "conf": 0.95, "crit": 3, "desc": "PE FileVersion value is present", "spans": [ [ 14920, 7 ] ] }, { "id": "metadata/signed/trust-level::dotnet-strong-name-signed", "conf": 0.95, "crit": 3, "desc": "Managed assembly is strong-name signed" }, { "id": "metadata/binary/provenance/build::pe-far-future-timestamp", "conf": 0.95, "crit": 3, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/symbols/imports::single-import-count", "conf": 0.7, "crit": 3, "desc": "PE with single import" }, { "id": "metadata/package/versioning/scheme::pe-productname-field", "conf": 0.7, "crit": 3, "desc": "PE version metadata includes ProductName", "spans": [ [ 15174, 11 ] ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "uses": [ 1, 2 ], "spans": [ [ 1868, 0 ] ] } ], "type": "pe" }, { "id": 8, "sha": "ffa4c2edcfbef0a694e87e368d08d894973b07c4b691ae8cacb3bf417a41b28f", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!![Content_Types].xml", "size": 649, "type": "xml", "depth": 1 }, { "id": 9, "sha": "a3f457d7b00d20a3bcd58a255c9833567f2d2a2923e7eba46967c754dd79e68d", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/FastEndpoints.Generator/FastEndpoints.Generator.8.3.0-beta.5.nupkg!!package/services/metadata/core-properties/25246fb75a9040a5aa96560123b9c8f9.psmdcp", "size": 655, "type": "xml", "depth": 1 }, { "id": 10, "sha": "4a94e51ceeedb6ccfda4be099b4cf4bf65a1a171c705efce94a00f0c7da2e5a1", "path": "FastEndpoints.Generator@8.3.0-beta.5.registry.json", "size": 820, "type": "registry", "depth": 1 } ], "omitted_files": 5, "rev": "46112", "v": "8" } }