{
  "llm": {
    "conf": 0.68713176,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "outcome": "benign",
    "interpretation": "Legitimate NuGet package"
  },
  "ml": {
    "v": "7",
    "eng": "2.4.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.4704566,
        "rte": "az",
        "prob": 0.4704566
      },
      {
        "cls": 0,
        "raw": 0.39866477,
        "rte": "az/nupkg",
        "prob": 0.39866477
      }
    ],
    "prob": 0.55304533,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.5530453324317932,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007420778274536133,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007092952728271484,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.5530453324317932,
        "type": "pe"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00000718235969543457,
        "type": "xml"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009268522262573242,
        "type": "markdown"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00000712275505065918,
        "type": "xml"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007420778274536133,
        "type": "xml"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00000955661107582273,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-26T07:04:12Z"
  },
  "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MLMl}DNCWby.PL000#u000xb003wDwO=Ave]\u003eJtBcL8tyqIUs-{@IH{yM]KbZ\u0026*$.Z..jf=o/CYN.Q%znR!UA?.^2ELqF2g1Xbp}eMz7}snh6A!5X]/[}aIpY:Xdm++8u}}aUoX)gg:]dpwayg\u003c^",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "1af7d563ea293c9d0b70ca6aab0b892a61f21dd482f494ead20f9a9ac076d1a8",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg",
        "risk": 4,
        "size": 20757,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 20757.0,
              "entropy": 7.79,
              "size_bytes": 20757.0
            },
            "binary": {
              "overall_entropy": 7.79,
              "peak_region_bytes": 18432.0,
              "peak_region_entropy": 7.81
            },
            "archive": {
              "file_count": 8.0,
              "member_count": 8.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 2.99,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 19505.0,
              "compression.ratio": 0.71,
              "hidden_file_count": 2.0,
              "total_uncompressed": 27346.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 8.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 4.0,
              "timing.mtime_unique_ratio": 0.5,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 1634438.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.5,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 7.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Galosys.Foundation.AspNetCore.LazySlideCaptcha",
            "source": "nupkg.title",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "Galosys",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "26.7.26.2",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Galosys.Foundation.AspNetCore.LazySlideCaptcha",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/ip/literal::external-ipv4-pe-resource-string",
            "conf": 0.9200000166893005,
            "crit": 3,
            "desc": "IPv4-shaped PE resource string; may be version",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/debug::pdb-visual-studio",
            "crit": 3,
            "desc": "Visual Studio PDB build path"
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 756,
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash"
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 540.0,
              "entropy": 5.23,
              "size_bytes": 540.0
            },
            "binary": {
              "overall_entropy": 5.23,
              "peak_region_bytes": 540.0,
              "peak_region_entropy": 5.23
            }
          }
        },
        "id": 1,
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!!_rels/.rels",
        "pid": 0,
        "sha": "aa51599ec8e4296a0653b1db415b35bcfa53b161d95a7f17660a586ff9c69906",
        "size": 540,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj}d\u0026YAa9l(vp%c]CX}nmB3gZXBAzE.fe4xRxK#3?B1Rrzv@=Hez!s8zv@DiqAa9l(vp%p(xd(1]f/7Eph7@\u0026\u0026B8UY2e{ICFb0DCyarS^-wPRu\u003evrt{w4gjj2arS^XwiJH(y\u0026sxuB1P}2B-7.#BzkVhe\u003cTL$pgXJmz/PzwoKSl)q/3eUwKx)BByO#)jtgzVj}d\u0026warR^?C4CYnx(v(MgbZ:ze\u00262sqgcvjkwPz\u003caz/d-F3lQDlauT7PBzbPkB3r95y\u0026sxuB389:B-.qnA=TzN3lQDlauTEOv}xL0wGV8uAaIfRwQ5fmwPI{bz/c:.o?wqDfkLujwO#N2j}d\u0026warR^?y?Wx\u003czGxw?A+){MBAzFyiXJd5x\u003e7Z(B7GzBzGPP6Bs}GLxd($Jr6h*Ix\u003e7Z(B7Fu(y^5pnarR^HjAt1wwnL)wqBJ(to*{WKwiqI=wNPa^wJ*LgarR^Hjy\u00262Av@=p5BzkVhk1x3$z/ZhBe\u003ef=4zE^f$x(v[JZPlQHPxi.o\u003c=tL=X%2lfwmY*(A+PGmx(v(M4gjj2arS^Rz/x#xx\u003eIa3kiE=U\u003eadd!IgB-UI6aiRdiIb?y\u0026sxuB1P}2B-7.#BzkVhatLSag^0B3z/x#xx\u003eIa3j}d\u0026warR^?A+fidB7]-mA^n^HD2NsTb4\u003eRia%pxlzeB0ejT8*zh-Lk3h8Em5vMv}dh8v3%gbJC#v(MzUf/g*Df!\u003eBuiaK^4h8=Z4ffP*LarR^Hjy\u00262xwO#3\u0026zEWx(B3p3uarR^HarS^VA=l8taAR4jxjVfOA:-/@Cw?IqjTa=PBtkE4fD@W\u00263lQDlarR^HauTgCAaJ]$wO#16azCvHb1D6Tz/ZhBe\u003ef=4zE^f$x(v(wl340uwPQpTA+c\u003c\u003eD2v5cx\u003e6CFx^aWywPz\u003caz/dYZgbZ:ze\u00262sqg9N\u0026LCW\u003eMjwmW[FluN0UwgQ2:vqHjnwPz\u0026oatk[/3lQDlarR^HauTgCAaJ]$wO#16azCvHb2-n\u003evn*\u0026FA=rTavrujbwKgxUwPR#CoLFx!CRh:fl$HsGzE^r@v}/H}a%q5uA=U@kzAPg0e\u0026U*yhx\u003cnPCW\u003eMjwmW[FluN0UwgQ2:vqHjnwPz\u0026oatk[/3lQDlarR^HauTgCAaJ]$wO#16azCvHb5yXlC}KeOx\u003eg^+vq{r#xKJJ6z/PzkaA?spB7]MgjT8TlfFk77az2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj}d\u0026warR^HauRq\u0026A=l8tj}d\u0026warR^?",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 53,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1065.0,
              "entropy": 5.31,
              "size_bytes": 1065.0
            },
            "binary": {
              "overall_entropy": 5.31,
              "peak_region_bytes": 1024.0,
              "peak_region_entropy": 5.32
            }
          }
        },
        "id": 2,
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!!Galosys.Foundation.AspNetCore.LazySlideCaptcha.nuspec",
        "pid": 0,
        "risk": 1,
        "sha": "e76fc9ae5210880556752852b53b521a2cc77b461249ec315fbdb7f879c0d800",
        "size": 1065,
        "traits": [
          {
            "id": "metadata/package/files/nuget::nuspec-dependencies",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares dependencies",
            "spans": [
              [
                43,
                885
              ]
            ]
          },
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                53
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                43,
                526
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}XOdU(00000000",
            "n": [
              {
                "c": 2,
                "d": "PE contains exactly one resource entry",
                "i": "metadata/binary/resource::pe-single-version-resource",
                "o": 0,
                "z": 24,
                "cf": 1.0
              }
            ],
            "ln": 0
          },
          {
            "b": "000000000000000kMy^J00000000000000000000*aSHb00000nb@R\u00260SSx7]DjblFdqLV0rr9100000000000000000000000000000000000000000000000000000000000000000WGuUJ7xsBxEGGMI1skSocvM0@00Jo92MK\u0026eA#j(S3mgi8000cI82%TzcmQ5rc(J6=3mX7rc(J6=3iyrT0rr95dGxCG6efE/aohxw0rr9ic(Sc^3jvEEASDduA3#Xa0165mDJs9D1o@=+000uQiS:Te000c71AbsY017hdA%zWB27M:P00B+)0W[@!017hh19aLB0b#\u0026#000uQlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCni0oiYbyPQ)QYZU$UM+7cbu5Y8x(mN800000r0@WafAq7MbumUxGBm+W5c8Xgbs+:9l\u0026Wh!LNvD\u003e(\u0026Ed!bsli+vGlxd000000SSi3r#g]z2)78b0qVZL02tLm0rr91cia2C1onA40@@r32MK\u002681][S60rr919@(ov7xsBn0rr910rr910rr912(\u003c@90rr91000ia0rr91000i6F=YP?1]@JyxAXOuEe#Xs4/?Z}000i6X=E-(1]{%(\u0026rft+76rB$1{0Y=\u0026rft+h3h.t1{09M\u0026rft+[b.FJ1]#jo\u0026rft+QxfrR1{1S5irPV?@@PXk1]@xtxAXOuvG[*}3inAMXc90odfBk!4GM86Xc9AAD\u003cl+R1]@9kxAXOu",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 756,
                "z": 4,
                "cf": 1.0
              },
              {
                "c": 1,
                "d": "PE standard code/data section",
                "i": "metadata/binary/section/names::pe-code-data-standard-section",
                "o": 512,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 480
          },
          {
            "b": "yxc\u003eky\u0026sxuB1P}2B-7.#BzkVhe\u003cTL$pgXJmz/PzwoKSl)q/3eUwKx)BByO#)e[w^m08[e:By/p?lsB}De\u003cTC}y?Wx/BzkVh08mfqA=l2qw]]T]CYWImB7]MgB1P*#zF0P}B-H]jx(v\u003e?nKEAlw[+[2A::67z/bL/wPRoDz/ff3xlwl6BzkVh08mfq",
            "n": [
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 3020,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 2972
          },
          {
            "b": "Dsp]fz/bLHx\u003e8g4B8LVje\u003e72bwO#N6z/fRGl$HsGzE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh07gglByO#)luN0UwmY=YoKSl)e(MO2wmXbpAcbP6vj\u003c]=A+c\u003e7vqGT*vruBd04}=6z/L?gv}fR0ASx3-B97#ge\u003c%zZxkRTeBzkla07gWxw[+[2A+efXA=#ebwPE\u0026ID2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026)wPz%dv}xYYl$G?Ixj\u003e{@xh9qPwPE\u0026svq{r#xKK?JA=#ebwKyxLy?m9#",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 3291,
                "z": 18,
                "cf": 0.75
              },
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 3193,
                "z": 17,
                "cf": 0.699999988079071
              }
            ],
            "ln": 3145
          },
          {
            "b": "cJBbDE\u003eQ\u003c5E?z.Y0000000000000005c8Xg000000000000000qD2$ZETI:ugoYp%L^We-o3US{0rr91l][N(A=kY7v@$%+vrl0+w]z*fwmoN]z/e/(A:-/@Cw?IqtYT{}tT@jsz/ZhBe\u003ef=4zE^f$x(v(wl340uwPQpTA+c\u003c%vs0h$y?WA\u003elT:}Qv}YpQz^)D^qE%VQvrl0+zE)]AfFk4:m}3jLB9R*VmSiA!wmoN]z/df[B8T(=Bvf$!wIcU+Du\u0026C9x\u003eg^xvq{r#xKJJjwmtKqni]0*hunhO54%:4/vb$)O(Fzd+OnDIPR0[gIkJkhi-bdrot]af0000000000008jp0000w0000000000000000000000000007.b000000000000000uQF:Ll#lWlvqfPVzf6i9A+e/mwnD5Z000000093B03z",
            "n": [
              {
                "c": 3,
                "d": "Visual Studio PDB build path",
                "i": "metadata/binary/debug::pdb-visual-studio",
                "o": 4576,
                "z": 158,
                "cf": 0.5
              }
            ],
            "ln": 4512
          },
          {
            "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026su(\u0026^/AqfO0000000000/As2h00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000312lkUx0STbs2lkUx0STbskl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 5214,
                "z": 15,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 5120,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 5088
          },
          {
            "b": "000Yo00031fAr^bfAr^bfAr{fvGn7Z002K\u00267YTNplJz38z2!zMwDlPFBo3vZ002H?ve$9zzVB?UC(R)=e=XuvzVB[WzuahEve$xHx-J5Kzuf0faclFf^nMln001XM2MK(9lJz38z2!IPve$fBC(QOtve$cAwDhYg002H?ve$9zzVB?UC(R)=004-Nf8#1MmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002H?ve$9zzVB?UC(R)=e=XuvzVB[WzuahEve$xHx-J5Kzu8o?k(+%az#-SkwDl/LlJz38ASxUJe=XMBve$PNC(Q+yyYFeHwb{fvlJyJ{z#:$Wv/Qfxve{oc001?Q3ig8bmGvc5yYF2DrSDXhASydXx-J5Kzu6Up001+OhukufhVLDgg5%ije=WTb004-NgxmBQnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002H?ve$9zzVB?UC(R)=e=XuvzVB[WzuahEve$xHx-J5Kzu8o?k(+%az#-SkwDl/LlJz38ASxUJe=XMBve$PNC(Q+yyYFeHwb{fvlJyJ{z#:$Wv/Qfxve}[Wwb{ACyYBCn003QhaPIJyoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002MglUwU[31\u003evXc\u0026^-Sdf7E\u003cm/V@$yYFwNA@ZE=A@W/)mGvubBPupVwb{3rBo31PzVBUPaojd%fAr\u003cdgYNHQ0052VgxmBQpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002H?ve$9zzVB?UC(R)=e=XuvzVB[WzuahEve$xHx-J5Kzu8o?k(+%az#-SkwDl/LlJz38ASxUJe=XMBve$PNC(Q+yyYFeHwb{fv",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes CompanyName",
                "i": "metadata/package/versioning::pe-companyname-field",
                "o": 5506,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 5554,
                "z": 15,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 5690,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 5742,
                "z": 12,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "IPv4-shaped PE resource string; may be version",
                "i": "micro-behaviors/communications/ip/literal::external-ipv4-pe-resource-string",
                "o": 5716,
                "z": 9,
                "cf": 0.9200000166893005
              },
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 5982,
                "z": 16,
                "cf": 0.699999988079071
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 5434,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE version company name populated",
                "i": "metadata/package/versioning::pe-company-name-populated",
                "o": 5532,
                "z": 7,
                "cf": 0.8500000238418579
              },
              {
                "c": 1,
                "d": "PE FileDescription field is populated",
                "i": "metadata/package/versioning::pe-file-description-present",
                "o": 5588,
                "z": 46,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE LegalCopyright field is populated",
                "i": "metadata/package/versioning::pe-legal-copyright-present",
                "o": 5908,
                "z": 40,
                "cf": 0.949999988079071
              }
            ],
            "ln": 5402
          },
          {
            "b": "EGh230rt{@ASy1Twb{-Lv/QPJp5[Y5z2!bE00000m/V@$yYFwNA@ZE=A@W/)mGvubBPupVwb{3rBo31PzVBUPe=XfqA@ZdVp5[\u00269Bo1VdzVB!TwDjs.oAnG3Dh@i\u003cqVHRlx-IVzwDk6$ve$lDBo2!JxAhDv00000Iu2Bj0rt{@ASy1Twb{-Lv/QPJrSDXhASydXx-J5Kzu6Upg5%ije=W*ge=WTbhukufg5@*8hVL=phVL/qve@4.h2]DkhVNv*vGny*v/Q0sh2]Ajgxp?-g5%chvGnp^v/OE*hVNy?f-T3ghVLYnf-S{dg5%chh#)E?g5%fih2]Mn00000jobY*0rty=A@ZmYwDlMEvGpiAC(O@!rSDXhASydXx-J5Kzu6Upg5%ije=W*ge=WTbhukufg5}pO00000000000000000000000",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 6254,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE ProductVersion has SemVer git hash",
                "i": "metadata/package/versioning::pe-productversion-semver-git-hash",
                "o": 6284,
                "z": 50,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 6394,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE ProductName field is populated",
                "i": "metadata/package/versioning::pe-product-name-present",
                "o": 6152,
                "z": 46,
                "cf": 0.949999988079071
              }
            ],
            "ln": 6120
          },
          {
            "b": "00000000000000000000000000000000000000000000000000000000000005axM3\u0026*nc@4F9J00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 6656,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 6608
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              4608,
              5.36,
              "r-x"
            ],
            [
              ".rsrc",
              5120,
              1536,
              3.11,
              "r--"
            ],
            [
              ".reloc",
              6656,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "clr.is_il_only": 1.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 62031.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "clr.is_32bit_required": 0.0,
              "bss_like_section_count": 0.0,
              "clr.is_32bit_preferred": 0.0,
              "clr.strong_name_signed": 0.0,
              "section_overflow_count": 0.0,
              "clr.is_native_entrypoint": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 4.36,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.06
            },
            "file": {
              "size": 7168.0,
              "entropy": 4.55,
              "size_bytes": 7168.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.36,
              "string_count": 118.0,
              "overall_entropy": 4.55,
              "entropy_variance": 4.68,
              "avg_string_length": 22.36,
              "max_string_length": 158.0,
              "peak_region_bytes": 1024.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.59,
              "string_length_stddev": 18.64,
              "largest_section_ratio": 0.64,
              "sentence_string_count": 1.0,
              "sentence_string_ratio": 0.01,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 4608.0,
              "entropy_max": 5.36,
              "entropy_mean": 2.85,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 3,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!!lib/net10.0/Galosys.Foundation.AspNetCore.LazySlideCaptcha.dll",
        "pid": 0,
        "risk": 4,
        "sha": "7b078df9c47b1252e359dfb023993a984f731f3fd73498683eb11c48a4fb1cec",
        "size": 7168,
        "traits": [
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                5214,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash",
            "spans": [
              [
                6284,
                50
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                5554,
                15
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "metadata/binary/debug::pdb-visual-studio",
            "crit": 3,
            "desc": "Visual Studio PDB build path",
            "spans": [
              [
                4576,
                158
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/ip/literal::external-ipv4-pe-resource-string",
            "conf": 0.9200000166893005,
            "crit": 3,
            "desc": "IPv4-shaped PE resource string; may be version",
            "spans": [
              [
                5716,
                9
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                6254,
                14
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                5690,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                5742,
                12
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                756,
                4
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "spans": [
              [
                5506,
                11
              ]
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                756,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "id": 4,
        "sha": "27e545089aab535a5736873ba86ab8608b5e926329dfec07d2df0f1b00a0a9bc",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!!lib/net10.0/Galosys.Foundation.AspNetCore.LazySlideCaptcha.xml",
        "size": 978,
        "type": "xml",
        "depth": 1
      },
      {
        "analysis_gaps": [
          "flow-graph-limited"
        ],
        "ctx": [
          {
            "b": "[4ls$j%n{#H3aY0\u003cHQv-A:-/@Cw?Iq(7LVJO37}yGZ1$X\u003e7]b/YO#0sX-yGt\u003cH@s\u003eL=b2#4gjs8boQSBx(BH*4gkowdK%OpKMRv\u003c\u003c*}rsdMOZwPoMY9dK%L.P6rnl\u003e76uVdJ)-3LPY53O-)FEaAhvjC4\u003eJiaM[Pq\u003ea5KwYO]cMnG^bQUJQRL\u003c=t!\u003eO3SRij}d\u0026.aMw\u0026.[3[A3\u003ea5KnSg\u0026szM/L(K\u003e^uZ0Ab]Jkx\u003eqGw\u003cHyijSi+P*N=/J-\u003ea5KmJd{-kJ6QoiaMXV/\u003e.3OkNVDP$W=JNq\u003e9@:rFpXjq4giKKu%)wLB7/05A19d$vr9Gpx(F35wfs2Tb5hgqzxZYjz+0#BA6[LXAb]JhB0@F04gmn!AV/pvx\u003eIc$vqE5HaBm:vAaJMjrbUogx(DEKv@Dj6A+frkc[dj!3sEmH4giKKbo[AQB7F\u003c7A+PSv4giKKu%)wLB7/05A19d$vr9GeA+Pf2zEEu7jS\u003e}Xv@0nI4gmn!AV/47B7/b}auZ\u0026CwN/\u003e6x([S1wO(y5vru6ko\u003elaIzEWZjAc9HDA+Pf2zEEugi$hKuvr9G4zEWZjAcbV4auZ\u0026CwN/\u003e6x([S1wO(y5vru6kl$HBdzEWZjAc9HDA+Pf2zEEugi$hKnA+Pf2zEEu7jS)Wmv%8*aBA{?%",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "jS)Wmv%8*aBA{?%ze:r1By^6\u003cwPHmJv@=\u003clBuAGgze:r5m09uhc#%zXazULldlv$C4gmn!AV/szvJW/Rb27T0w\u003e+MBm)*i{m]I#*gEL8elp1EGk%Ws$pc?onltop\u0026lt6d-o/UHXg/4)RoJuvbzff+#n\u003eJI.yE8L^CUp{\u003cvr17.Aw*paq!W$fqd+8dxJn!XxFiKGyC!\u003c}r5dJ)zeJ\u0026%m]-u6m@@\u0026$Bw2U2nodS!gi4FsDo\u003ewMh/\u0026zIC1jhYh!Ws*y+4quB8\u003eeDBAPrkhFv8dydhPdwQ2\u003ewA9t%\u003cz/xl5m09cSBX1?RCsUhazBuAQz/]b#wJsN4k#}X$v})\u0026fsy#L\u003ct5!:Tl{TWollXG23uHrfx(mMakYy:TC42G7auZ?\u003eo?v]zwL(2=k$11llt77NxLRrLiD)ezk#y6uk%XBpl2xtuxj\u003c?Gl1-RLl2PmWk$#UVlWAx6qb}ZqnMf4MA8*W\u0026z!h^jfh$wVnmVZXw{FAns8Z/as2\u0026P2oJKXZpE^@ozH2h%f(P@)vp-\u003eTC%$[lhFlDzfgdBjry7hroMBMYiBUYGfhcIkAw/^=i5+$Ih=\u003c9uwj}h\u0026mnCV(i5+?EA7rS2B2=fId[sz\u003eDrj/%geQ?5og}9KnnZ.6r+V5uB8tRGvoLPBrwl:vn\u003ea85xMN=nAB-{bl1-[Uk%W}bxivU?C2{NXx*DivnouKLk#Q/LiytPpq!*nuvob{1y^P{nhe+ctr^FgNv)$S4lv7B*wIwB9i9d[dzGXPEgI73pm(i+JoIxEZphqvgiDw}TpH=7\u0026pgV{\u0026B#I(BwIl?Gz/^ZTpb2EshGHP=g?6Q3f)UYSDn[x7s.QPiv@U4gnKEJyd@OuQwLk4dd[IH1xjT2kzC:ICB5)f#mqcJ%h^eTcsZ#+RA^p8vqbG.wzBciuwI[4hsZ#bmd}qZ\u003ezb\u003cFFz=!.Nv]VlCxI\u0026k9iydTupbK[swhVzcoLldsoiMsmi7^4EA4:g)qb.0)n\u003eg\u003cKghZ8Kr.EHMrzcpWl3lQ7l2e[PDuz\u003eLnPe90p/ZhiC@WMLxH#2^iB:^xi6{CenJf7jlT-}$Ay@9bgGE{ZggUxFrA.^Xst$1?gIZceq7DJyze?v8nKV0\u0026yEHZsk}tA2p=QBoBX$:$k$U0NogSbrr4?x=q+I4qC#WyOfkKMDqz}01njdUVp/p+8zz%p2Cv\u003er6t5!4AmpXeHnn7\u003c{gJWtcpGxkdiaWeuye5IEwM8P7AbX#Og!.K.zDGR2qbGXtoM\u003eFqqev:Mp^^P?z-pTlmnkHMzaN8)iwru*p!r#ABYZdGB4OljA9k[kpGIWQCtIZbt2E)EhFLc^B1odDhbwBaxkIP?wPZA@xiwhOlqzO*l2e[PzzDf1Bu%.TstsAaqd:z#lRIAAs.xxWhCb#czb%bon\u0026yWnfICO8fF$R9pdvMEs:8?)o?mPfr+\u003e-hDuhFCl{\u0026}cst+j$gh}LsA+50uwP]Uzp^Elcb0ckvwO#0#D2N\u003epwfs2Tq!oDYA+PSvraP]=y*?A%e(CRlmq=QQD2N\u003cNz/PM8x(mu}efF[OvKTwF3u6%0x8",
            "ln": 847,
            "col": 8,
            "line": 29
          },
          {
            "b": "zGxwqy?Wx\u003czGxwXzF0/oi$hJtarR^HarR^HarR^HarR^HarR!Ivr9G1auZ\u0026CwN/\u003e6x([S1wO(y5vru6kr://UwmoN\u003eoLF0FzGxwqbQdOKx\u003e7Z(B7G=ba$kO.3sEmH4giKKbo[AQAb](bwPI]43sEmHv@(r(A=qD{arU\u0026oAV/rzjS[SNCox.5z!0v1B0@E\u0026q/(C*BsntyzdCngCX56IaAzQxl32t5ze0)4B98ChBz(gXaARTDwHPXI3lQDlarR^HarR^HarR^HarR^HaAeC^az$+maw^8%v}x.5c[c=nA=leywPxgyxMOunB2\u003e%cCxXl-v@t:(z!Bbzv@Diqwmog?vr={ayh49fA4-}2i5JJLi5@Q8BzU?refDcFwm]EawQ4=gdlv$CarR^HarR^HarR^HarR^HarR^HA3dp^zE[2mp\u0026ZF:wPI]vdk0@cz*cnlAWSbBBAzFyiXJdgCxUVHzENB2xlbXnz/4drvqfN!CY^Ojx\u003c\u0026T",
            "ln": 2227,
            "col": 64,
            "line": 37
          },
          {
            "b": "arR^HarR^HarR^HarR^HarR!CauZ\u0026+wP]m[A=kD0B8@-Ue(Mn2x(Fexb4CF2e[Gosa$kO.3sEmH4giKKbo[AQA:-\u0026@z/2{\u003c4glGJu$jm\u003evrcq@3u/\u0026#ay/t2wGTbUqEKDNz/4a9xKL{)wg*w-zE)\u0026%By^*FAcbP6vjiM^4glP-wmV(Daw#S=wn=rqq!PPWwN)z-wO#71vru6Vzf49Oi$hK8u%\u003cAJ4gjs8bmK#/u%)FTvrcq@3lQEmvr9G8wfs2ToMaAHy!55OwPzj3z/NE9wQ5q*wge(*4gjj2arR^HarR^HarR^HarR^HarU\u0026oAV/deC{2l)oMaAHy!55OwPzj3z/NE9wQ5q:z/{2qzCaL^c[dj!3lQDlarR^HarR^HarR^HarR^HavQf\u003czdN-@vR/QdqEKDQwHGk-atC-5e(MO2v}v65au.)$3lQDlarR^HarR^HarR^HarR^HaBsL8arR^HarR^HarR^HarR^HarR^HarR^HC42zlB7GtljS)Bpv{%gzwO#71vruBde(2#5Bw(:\u003coj-w%dlv$CarR^HarR^HarR^HarR^HarR^HarR^Hrb#zSwI9",
            "ln": 2768,
            "col": 2,
            "line": 48
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "不稳定版本包，API"
            ],
            [
              "",
              "不稳定版本包，API"
            ],
            [
              "",
              "不稳定版本包，API"
            ],
            [
              "",
              "security"
            ],
            [
              "",
              "security"
            ],
            [
              "",
              "security"
            ],
            [
              "",
              "process"
            ],
            [
              "",
              "process"
            ],
            [
              "",
              "process"
            ],
            [
              "",
              "random"
            ],
            [
              "",
              "random"
            ],
            [
              "",
              "random"
            ]
          ],
          "tgt": [
            "process",
            "random",
            "security",
            "不稳定版本包，API"
          ],
          "metrics": {
            "ast": {
              "op.gt": 1,
              "op.div": 1,
              "op.pow": 4,
              "max_depth": 8,
              "call_count": 14,
              "node_count": 121,
              "op_density.gt": 0.01,
              "op_density.div": 0.01,
              "op_density.pow": 0.03
            },
            "file": {
              "size": 3353,
              "entropy": 6.01
            },
            "text": {
              "lines": 68,
              "top_char": 101,
              "digit_ratio": 0.09,
              "space_count": 421,
              "char_entropy": 6.01,
              "unique_chars": 143,
              "top_char_null": 0,
              "lines_over_200": 2,
              "lines_over_500": 1,
              "string_density": 0.22,
              "top_char_ratio": 0.05,
              "avg_line_length": 47.34,
              "invisible_chars": 1,
              "max_line_length": 873,
              "non_ascii_ratio": 0.05,
              "empty_line_ratio": 0.21,
              "last_line_length": 3,
              "long_token_count": 2,
              "whitespace_ratio": 0.17,
              "identifier_density": 0.26,
              "line_length_stddev": 107.91,
              "max_whitespace_run": 1,
              "normalized_string_count": 1.82,
              "repeated_char_sequences": 14,
              "suspicious_string_ratio": 0.07,
              "suspicious_identifier_ratio": 0.12,
              "normalized_unique_identifiers": 2.79
            },
            "binary": {
              "peak_region_bytes": 2048,
              "peak_region_entropy": 6.14
            },
            "strings": {
              "bytes": 3019,
              "count": 15,
              "shell": 1,
              "very_long": 1,
              "avg_length": 201.27,
              "max_length": 1965,
              "avg_entropy": 4.71,
              "empty_count": 10,
              "entropy_stddev": 0.69,
              "high_entropy_count": 1
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_text": 1
            },
            "identifiers": {
              "count": 18,
              "unique": 17,
              "avg_length": 11.82,
              "max_length": 48,
              "min_length": 3,
              "avg_entropy": 3.03,
              "reuse_ratio": 0.94,
              "length_stddev": 10.66,
              "high_entropy_count": 5,
              "high_entropy_ratio": 0.29,
              "all_lowercase_ratio": 0.29,
              "repeated_char_names": 2
            }
          }
        },
        "id": 5,
        "mol": "H₄(CmDbFOs₂)Md",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!!README.md",
        "pid": 0,
        "risk": 5,
        "sha": "d7d787c0b10d877bde11068769592be420f997bf831d1f4d1e6ee7e49bb3ae80",
        "size": 3353,
        "supp": [
          {
            "by": [
              {
                "id": "metadata/file/naming::readme-requirements-install-basename"
              }
            ],
            "id": "metadata/file/naming::delimited-readme-basename",
            "crit": "notable",
            "kind": "unless"
          }
        ],
        "traits": [
          {
            "id": "metadata/file/profile/markup::markdown-heading-before-fenced-block",
            "conf": 0.98,
            "crit": 3,
            "desc": "Markdown-style heading precedes a code fence",
            "spans": [
              [
                340,
                19
              ],
              [
                2331,
                16
              ],
              [
                2832,
                17
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url",
            "conf": 0.75,
            "crit": 3,
            "desc": "Contains a hardcoded remote HTTP(S) URL",
            "spans": [
              [
                2470,
                24
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/embedded::large-encoded-blob",
            "conf": 0.75,
            "crit": 3,
            "desc": "Large encoded data blob in JavaScript",
            "uses": [
              7
            ],
            "spans": [
              [
                911,
                128
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/path/application/executable::cmd-exe-image-name",
            "conf": 0.9,
            "crit": 3,
            "desc": "References cmd.exe by image name",
            "spans": [
              [
                2385,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/path/application/executable::source-command-shell-reference",
            "conf": 0.9,
            "crit": 3,
            "desc": "Quoted command-shell executable reference",
            "spans": [
              [
                2385,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/privilege/elevation::runas-string",
            "conf": 0.9,
            "crit": 3,
            "desc": "Windows runas account or elevation reference",
            "spans": [
              [
                2396,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/privilege/licensing::license-validation-function",
            "conf": 0.9,
            "crit": 3,
            "desc": "License validation function name",
            "spans": [
              [
                2291,
                15
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/embedded::large-base64-string",
            "conf": 0.7,
            "crit": 2,
            "desc": "Large base64-encoded string (128+ chars)",
            "spans": [
              [
                911,
                0
              ]
            ]
          }
        ],
        "type": "javascript"
      },
      {
        "id": 6,
        "sha": "53789202a7a62de78987becbf3ade1d56e9cb6e6fd525e8db9d2f1d352cb0425",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!![Content_Types].xml",
        "size": 590,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 7,
        "sha": "7ccc4f66ef4dc6107629f22c95719340ba9313447e684d0806f5cc73182b1d1c",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha.26.7.26.2.nupkg!!package/services/metadata/core-properties/1ef7080a612e43468e396d4fb908cca1.psmdcp",
        "size": 667,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 8,
        "mol": "Md",
        "sha": "eb96e63a6dee4965007d0980b8ac79ced6985836baef0c597a32ec5a2920389e",
        "path": "Galosys.Foundation.AspNetCore.LazySlideCaptcha@26.7.26.2.registry.json",
        "risk": 1,
        "size": 859,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 4,
    "rev": "9266e",
    "v": "8"
  }
}