{
  "llm": {
    "conf": 0.27977636,
    "error": "LLM endpoint http://10.9.8.149:8000/v1 did not become healthy within 120s",
    "model": "Qwen/Qwen3.6-27B",
    "review": false,
    "outcome": "benign"
  },
  "ml": {
    "v": "7",
    "eng": "2.2.0-beta.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.27947026,
        "rte": "az",
        "prob": 0.27947026
      },
      {
        "cls": 0,
        "raw": 0.0014123917,
        "rte": "az/nupkg",
        "prob": 0.0014123917
      }
    ],
    "prob": 0.27977636,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.27977636456489563,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001142422388511477,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008761882781982422,
        "type": "text"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001245737075805664,
        "type": "markdown"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001428524683433352,
        "type": "png"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.27977636456489563,
        "type": "pe"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013142824172973633,
        "type": "xml"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012248754501342773,
        "type": "xml"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-29T06:37:15Z"
  },
  "path": "Soenneker.Blob.Suite.4.0.7506.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MN0/@AGR#xoabn00900000xb003wDwO=Ave]\u003eJtBcI!)y63a7m=dGu:H!#Ow#YuX6S?Y",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "3a47d61ae1f71594fa83addc78b20c835c25bb9ec123e3563ed0a8be2f027c5f",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg",
        "risk": 4,
        "size": 35571,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 35571.0,
              "entropy": 7.91,
              "size_bytes": 35571.0
            },
            "binary": {
              "overall_entropy": 7.91,
              "peak_region_bytes": 31744.0,
              "peak_region_entropy": 7.83
            },
            "archive": {
              "file_count": 10.0,
              "member_count": 10.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 3.98,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 34293.0,
              "compression.ratio": 0.78,
              "hidden_file_count": 2.0,
              "total_uncompressed": 43764.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 10.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 4.0,
              "timing.mtime_unique_ratio": 0.4,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 25170.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.4,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 9.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Soenneker.Blob.Suite",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/soenneker/soenneker.blob.suite",
              "kind": "homepage",
              "source": "nupkg.project_url"
            },
            {
              "url": "https://github.com/soenneker/soenneker.blob.suite",
              "kind": "repository",
              "source": "nupkg.repository_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Jake Soenneker",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "4.0.7506",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Soenneker.Blob.Suite",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 692,
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash"
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Embedded HTTP or WebSocket URL",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 6
              }
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 510.0,
              "entropy": 5.18,
              "size_bytes": 510.0
            },
            "binary": {
              "overall_entropy": 5.18,
              "peak_region_bytes": 510.0,
              "peak_region_entropy": 5.18
            }
          }
        },
        "id": 1,
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!_rels/.rels",
        "sha": "38311377cf0eaca94dca03384d0df57f4d7c6f3e0f6c9df58b7680f6858f694b",
        "size": 510,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 27,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh",
            "n": [
              {
                "c": 2,
                "d": "NuGet package declares repository",
                "i": "metadata/package/files/nuget::nuspec-repository",
                "o": 42,
                "z": 847,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 2,
            "addr": 42
          },
          {
            "b": "arS^-wPRu\u003evrt{w",
            "ln": 3,
            "addr": 118
          },
          {
            "b": "arR^Hjzws\u0026q/uk+zE)P{AXoW{z^\u003es$B.L@ejtgzVj]",
            "ln": 4,
            "addr": 131
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1529.0,
              "entropy": 5.08,
              "size_bytes": 1529.0
            },
            "binary": {
              "overall_entropy": 5.08,
              "peak_region_bytes": 1529.0,
              "peak_region_entropy": 5.06
            }
          }
        },
        "id": 2,
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!Soenneker.Blob.Suite.nuspec",
        "risk": 1,
        "sha": "ca260ba8c861dd263db7f03ce7e6af5b879c89cfd0d6a34b991e6c705157d4a2",
        "size": 1529,
        "traits": [
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                42,
                847
              ]
            ]
          },
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                27
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1076,
              "entropy": 5.13
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 5.13
            }
          }
        },
        "id": 3,
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!LICENSE",
        "pid": 0,
        "risk": 1,
        "sha": "f7982c6d623a596f15d5597575e5f6cde25dec380c4fb8da31cd721ea4c088b2",
        "size": 1076,
        "traits": [
          {
            "id": "metadata/permission/prose::permission-permission-term-english",
            "conf": 0.9,
            "crit": 2,
            "desc": "Permission or access term",
            "spans": [
              [
                53,
                0
              ]
            ]
          }
        ],
        "type": "text"
      },
      {
        "ctx": [
          {
            "b": "x\u003eq9\u003eB1RfBfk+]BwPPOGfh(!2zF\u003c33wPxy\u0026y\u0026r=nq/#!@wIe4ExfQDVD2d4Pw]zYwBzbkqvQS!WwHQ[kxMOunB2\u003e%cCxXl-zGPP6Bs}GLxd[jjv@2H=wPGI6z!i*7wOU\u003c$e\u003c:w)vLgP4x()]tdgfo5tu@T\u003cBAzFyiXJd2zd+FxxLz3]wofwqz.C:qBzb^",
            "ln": 19,
            "col": 20,
            "line": 1
          },
          {
            "b": "flq5yzF\u003c33wPxzjy\u0026r=nB9hhswIn1BvR/+1xF1giv@2H=wIemBy^h#.D2d4Pw]zYwBzbkqvQS!WwHQ[kxMOunB2\u003e%cxk8E3BZ=$kz/4dGz!i*7wOU\u003c$flq5yzF\u003c33wPxzjy\u0026r=nB9hhswImF4BzkVhB1.-QA+/o6z*cmQAckSax(^@tAa9l(vp%d7D2mvD3r[VTt{%xdBz#pZfe43Rxd!msx\u003eq9\u003eB1RfBfk+]BwPPOoBt3NhwO#x%yH}JsltQNHe(M[bBy^6",
            "ln": 205,
            "col": 69,
            "line": 2
          },
          {
            "b": "B8LSczE)P{AXzGLwO#x%yH}JsvR/%(e]#eHBy^alv@#B6zGvEPz/PS9y\u0026sJsfjO{hwPqJsD2mvD3jn12aZnk2xMOunB2\u003e%cB-RbmeOP6gxjVcpxk8E3BZ/GmwPzp0zGGDcBs}6wz7^.5g+**CfFtgpg=d6Eh8WcuiwC8QgI7bReOl\u003c{fFbang+*N\u003ciaK=@gIgbJiwSuAh8c*ve]UYvdiIMcwO#x%yH}JsltQNHe(M[bBy+!7bo[r%ay/tcv@C\u003e0x(v(iz!paTDuBmtavo).vJXP\u003ez/Po0wGVbqx(4H9x\u003equdvqYP#y?Wv0vrc6[A%-m0boPM}B97\u0026by*?B1z/b)?u%)vHwn=NcwPP56wmM*4vpK7YxjSh:z!i*7wOU\u003c$e\u003c:w)vLgP4x()[[u%)vH",
            "ln": 651,
            "col": 156,
            "line": 4
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 971,
              "entropy": 5.06
            },
            "text": {
              "lines": 13,
              "top_char": 101,
              "max_ws_run": 1,
              "digit_ratio": 0.05,
              "space_count": 15,
              "char_entropy": 5.06,
              "unique_chars": 57,
              "top_char_null": 0,
              "lines_over_200": 2,
              "top_char_ratio": 0.1,
              "avg_line_length": 73.69,
              "max_line_length": 220,
              "empty_line_ratio": 0.23,
              "last_line_length": 3,
              "long_token_count": 5,
              "whitespace_ratio": 0.03,
              "line_length_stddev": 80.04
            },
            "binary": {
              "peak_region_bytes": 971,
              "peak_region_entropy": 5.06
            }
          }
        },
        "id": 4,
        "mol": "H₂(Cm₂Db)",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!README.md",
        "pid": 0,
        "risk": 2,
        "sha": "511903acd39f86a3b06d347bcd062522325b05d7892ed3a4f6b8a56ee5266e4f",
        "size": 971,
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                71,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                891,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                67,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "spans": [
              [
                269,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/path::image-file-url",
            "conf": 0.85,
            "crit": 3,
            "desc": "HTTP URL targets an image file",
            "spans": [
              [
                719,
                100
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/format/html::markdown-remote-image-source",
            "conf": 0.9,
            "crit": 3,
            "desc": "Markdown references a remote image",
            "spans": [
              [
                715,
                104
              ]
            ]
          }
        ],
        "type": "markdown"
      },
      {
        "id": 5,
        "sha": "93511e8937b27717eb154ee90eaf1655d4dbbad2865ecfc5a7d0bd794c945c49",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!icon.png",
        "size": 16083,
        "type": "png",
        "depth": 1
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb",
            "n": [
              {
                "c": 3,
                "d": "PE has no signature record",
                "i": "metadata/binary/layout::pe-no-signature-record",
                "o": 0,
                "z": 1,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          },
          {
            "b": "00000000000000000000wg)].00000nb@R\u00260SSx7V(/tGPBy(30rr91000000000000",
            "n": [
              {
                "c": 1,
                "d": "PE standard code/data section",
                "i": "metadata/binary/section/names::pe-code-data-standard-section",
                "o": 512,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 496
          },
          {
            "b": "017a{000uO9SMfEcitT%lq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 692,
                "z": 4,
                "cf": 1.0
              }
            ],
            "ln": 676
          },
          {
            "b": "zE)P{AXoW{z^\u003es$B.L@ee[w^m08[e:By/p?o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003c%n\u0026wO#3\u0026zEW@-zFA-)BzkVh08[e:By/qwqE%DRwN/*@z/bLDq!o#)x\u003e7Zwz!%l3v@#B6zu8$kwi$9JvPdz-By+",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 2793,
                "z": 17,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 2740,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 2724
          },
          {
            "b": "qE%GPB98ChASv.4Bz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGD2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 3142,
                "z": 18,
                "cf": 0.75
              }
            ],
            "ln": 3126
          },
          {
            "b": "zdK2apdnb8f!+jl8ux*MxMOunB2\u003e%cB8LSczE)P{AXp\u003cuz2:LA0rrv5wO+{^B7CsKdGGI}lVl{?A+Pf1BrFD1atLSagC7vogbZmEvqxA%q/uk+zE)P{ASu870r",
            "n": [
              {
                "c": 3,
                "d": "Embedded HTTP or WebSocket URL",
                "i": "micro-behaviors/communications/http/url/domain::http-url-binary",
                "o": 3765,
                "z": 21,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "Copyright notice",
                "i": "metadata/package/license::copyright-word",
                "o": 3805,
                "z": 9,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 3749
          },
          {
            "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000",
            "n": [
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 4608,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 4592
          },
          {
            "b": "0000000000004fBgYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr911onA",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 4702,
                "z": 15,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 4686
          },
          {
            "b": "x-IYAA@Vgu002W)761vnlJz38z2!IPve$fBC(QOtve$cAwDhYg003WjBo3y.z#:}ViSH/kf934",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes CompanyName",
                "i": "metadata/package/versioning::pe-companyname-field",
                "o": 5066,
                "z": 11,
                "cf": 0.699999988079071
              }
            ],
            "ln": 5050
          },
          {
            "b": "e=YwYzVBRO002)%6-XmmmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$zVBtGzuaLOwDlG",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 5142,
                "z": 15,
                "cf": 0.699999988079071
              }
            ],
            "ln": 5126
          },
          {
            "b": "x-JkPwDhYg001[S3JHhcmGvc5yYF2DrSDXhASydXx-J5Kzu6Up001?Qe=WN9e=W*gh2]rghukuffAq7M002)%82%WqnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$zVBtGzuaLOwDlGCwDl-J",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 5226,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 5282,
                "z": 12,
                "cf": 0.699999988079071
              }
            ],
            "ln": 5210
          },
          {
            "b": "yxd]CASu7t003g582%Wqpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$zVBtGzuaLOwDlGC",
            "n": [
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 5478,
                "z": 16,
                "cf": 0.699999988079071
              }
            ],
            "ln": 5462
          },
          {
            "b": "x-JkPwDhYg004/Pg5}sPpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001?Qe=WN9e=W*gh2]rghuklcwDjE=h2]Pof-T6hwb{6shVLVmwDjW\u0026hVLYnw=KQ!hVNy?vGns!vGnd-h#\u003e-mf-UU.ve@p/f-U.:humm",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 5646,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE ProductVersion has SemVer git hash",
                "i": "metadata/package/versioning::pe-productversion-semver-git-hash",
                "o": 5676,
                "z": 49,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 5630
          },
          {
            "b": "0000000000000000000003zmw3\u0026*ncGG/Cp000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 6144,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 6128
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              4096,
              5.31,
              "r-x"
            ],
            [
              ".rsrc",
              4608,
              1536,
              2.84,
              "r--"
            ],
            [
              ".reloc",
              6144,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 58005.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "bss_like_section_count": 0.0,
              "section_overflow_count": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 3.96,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.13
            },
            "file": {
              "size": 6656.0,
              "entropy": 4.42,
              "size_bytes": 6656.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.31,
              "string_count": 112.0,
              "overall_entropy": 4.42,
              "entropy_variance": 4.56,
              "avg_string_length": 22.73,
              "max_string_length": 72.0,
              "peak_region_bytes": 1024.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.47,
              "string_length_stddev": 12.27,
              "largest_section_ratio": 0.62,
              "sentence_string_count": 5.0,
              "sentence_string_ratio": 0.04,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 4096.0,
              "entropy_max": 5.31,
              "entropy_mean": 2.74,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 6,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!lib/net10.0/Soenneker.Blob.Suite.dll",
        "risk": 4,
        "sha": "8e1e84a425e4da44462c4309ee42952f1eb666f9b7cebdb7f886be7de300de76",
        "size": 6656,
        "traits": [
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                5282,
                12
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                5142,
                15
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                4702,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                5646,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "spans": [
              [
                5066,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash",
            "spans": [
              [
                5676,
                49
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                5226,
                11
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                692,
                4
              ]
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Embedded HTTP or WebSocket URL",
            "spans": [
              [
                3765,
                21
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                692,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "id": 7,
        "sha": "790086f236e56a769f2f30e3dba3e3cd0a5e6e19ea48d65260996dcf689b7bc0",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!lib/net10.0/Soenneker.Blob.Suite.xml",
        "size": 2548,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 8,
        "sha": "63feef730c8c6225c83eeeb608a1575fcac22006897782d889c10c4310523657",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!![Content_Types].xml",
        "size": 712,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 9,
        "sha": "07659d1d98b639bc3ca8612f60df9c09d73856f41019eea164058e69f58b052c",
        "path": "Soenneker.Blob.Suite.4.0.7506.nupkg!!package/services/metadata/core-properties/fa40f91d2aeb4c249411337db1d188a1.psmdcp",
        "size": 695,
        "type": "xml",
        "depth": 1
      }
    ],
    "omitted_files": 4,
    "rev": "6a958",
    "v": "8"
  }
}