{ "llm": { "conf": 0.4962191, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate NuGet package metadata" }, "ml": { "v": "7", "eng": "2.4.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.2515917, "rte": "az", "prob": 0.2515917 } ], "prob": 0.280313, "skip": [ { "rte": "az/nupkg", "why": "unavailable" }, { "rte": "az/nupkg", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.28031298518180847, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000012834866538469214, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00001142422388511477, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000008761882781982422, "type": "text" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000012566645636979956, "type": "markdown" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00001428524683433352, "type": "png" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000012973944649274927, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000012814998626708984, "type": "xml" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000011344750419084448, "type": "xml" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000011056661605834961, "type": "xml" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000011175870895385742, "type": "xml" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.28031298518180847, "type": "pe" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000013142824172973633, "type": "xml" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.00001337130834144773, "type": "javascript" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000012248754501342773, "type": "xml" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000012834866538469214, "type": "xml" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.000019530454665073194, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-28T17:18:03Z" }, "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MR(D}=\u003cV7Ehajj000xd000xb003wDwO=Ave]\u003eJtBcI*wyqJjImC[63vCWLF5!!i5\u0026?X$GTV{={Ow-m/G{+/BuTCh%LU#fVu[I7Y=LxOrKpc/wOO+roF!CDkWC7r-j/rfWRhLd.W.\u0026ceB#yzHKk$3", "n": [ { "c": 2, "d": "Archive contains an executable member", "i": "metadata/file/metrics::archive-contains-executable-member", "o": 0, "z": 31, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H(Cm)Md₂(BiPa)", "sha": "6532e1bf68abb2dcd13406e771ff4388bd03b9b16ba59ec555232b5860f441f2", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg", "risk": 4, "size": 42202, "type": "nupkg", "facts": { "metrics": { "file": { "size": 42202.0, "entropy": 7.91, "size_bytes": 42202.0 }, "binary": { "overall_entropy": 7.91, "peak_region_bytes": 37888.0, "peak_region_entropy": 7.84 }, "archive": { "file_count": 16.0, "member_count": 16.0, "script_count": 1.0, "zip_bomb_ratio": 5.79, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 39774.0, "compression.ratio": 0.68, "hidden_file_count": 2.0, "total_uncompressed": 58855.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 16.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 4.0, "timing.mtime_unique_ratio": 0.25, "misplaced_executable_count": 1.0, "timing.mtime_dominant_count": 7.0, "timing.mtime_spread_seconds": 25170.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.44, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 15.0 } } }, "ident": { "name": { "value": "Soenneker.Blazor.CallbackRegistry", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://github.com/soenneker/soenneker.blazor.callbackregistry", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://github.com/soenneker/soenneker.blazor.callbackregistry", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "Jake Soenneker", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "4.0.1025", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Soenneker.Blazor.CallbackRegistry", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 11 } ] }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded HTTP or WebSocket URL", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 11 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 11 } ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 2912, "file": 11 } ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash" }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes CompanyName", "from": [ { "file": 11 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 11 } ] } ] }, { "id": 1, "sha": "f9922ab45d4694c134dd3b07fb7c74fe061bc213b65eab4f7e1f9f9a38ac211a", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!_rels/.rels", "size": 523, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj{\u003cz\u003evpK7YxjSigzes9hjTaMYBz%n]flpSpwO\u003e\u003c%e]trjA=l2qw]]Unz/4dDvpK7Yxk8l@fetjogCpBtfk+]NAaJJiCYNytj{\u0026zPjz!UKvpS!*vlL2varR^?x\u003efzaz!i*7wOU\u003c$e\u003c:w.Dt^*RlT:!EvQS+ZqE%GPB98CFjtgzVj{\u0026zParS^\u0026wPz\u003caz/d-}e?![jfFUHFflQ]EB7]Mgj{\u0026zParS^PB-.qnA=TApvqxA%q/uk+zE)P{AY=0-B-.qnA=TzKarR^HjzX.wwO#N2aAR)FwJ.kGCYmXmB8#5lzx.nsnMm/9y?Wx\u003czGxwM3lQDlauTEOv}xL0wMr+!k4]4WAc15[fkLujwO#N2B1RuMxjVfqz/PFzo?wqDfkLujwO#N2rDq[t3lQDlauTvFz/d:Mv@DlqAbGqJfkj{mzAXyIarR^?A+eV\u0026zdL[eml%somj@B/jtg.^vpTj^j{\u0026zParS^=A=kY7v@$Z\u003ey^8JOBz#pZfe3%LBzb/ae[n*pflq5yzF\u003c33wPxCBz!i*7wOU\u003c$e[eT9Dt^*Rv{%g\u0026vQS+ZA+e($B98CFjtgU]z!-\u0026[Bx9u$j{\u0026zParS^SwPIv4x(Ffdz/d:8azkn6wPzG{aAz4ax(!xpC{4iEaAz4ax(!xcAV!!dwftP7C5IecazC.mByx5%wI4$xwN/B^x\u003e5nLy*?TdAV^$May!?@y*{*.yJzP\u003ewmY*(A+PGmx(v(M3lQDlauTWQy?m3@wLNe=wPH4nAaAy0wGUI{AaJ]$wO#16ax9h\u0026zF\u003c33wPxy\u0026y*?TdAXpvlx(4\u0026yo(BM+y?lgPAbP=saARJAg+HEmf/R0zasFD?hzWlujtg.^y?m3@wLNe=wPH3xarR^Hjy-qGD2^RixMMB9z/x#xx\u003eIa3aI$92gb7EveIY1nhxUR2yH[R!z!i*7wOU\u003c$jtgh.AcVFrxj#xJ3lQDlauT:OxlcmCy*?TdAV!\u003e2y\u00260M?v@39@xk8BeA^n^qvqG:?vpK6}yi7IjB8(zvBzkP6azC.nwPzZdaAy[pz/M$fy*?TdA:@J]y*{*.yJs00x(!xpC{4lKx(1]4B7/05A3eXfBz+Viay=Sse]Clxjtg!+xlclzarR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026IA+)(.xMOunB2\u003e%cxk8E3BZ=$kz/4dGz!i*7wOU\u003c$flq5yzF\u003c33wPxzjy*?TdAXp\u003cgy\u00260M?v@39@xk8BeA^n\u0026KvSC){v}X1Hzddc@a%pxlzeB0ejT8:uwh=wSw\u0026qF9wh4EFixe\u0026Qf\u003ei0}h!czNi59c#v(l8KfKXK6g=MW4ffPZ=arR^?wmYZ\u003ezE^r@v}/H}j{\u0026zParR^HjzeXMB-nEBvrc0(BvHpVzdN{fA+^/Zzu", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 40, "cf": 0.9800000190734863 }, { "c": 2, "d": "NuGet package declares repository", "i": "metadata/package/files/nuget::nuspec-repository", "o": 42, "z": 987, "cf": 0.8999999761581421 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1396.0, "entropy": 5.08, "size_bytes": 1396.0 }, "binary": { "overall_entropy": 5.08, "peak_region_bytes": 1396.0, "peak_region_entropy": 5.02 } } }, "id": 2, "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!Soenneker.Blazor.CallbackRegistry.nuspec", "pid": 0, "risk": 1, "sha": "326b9fba9be3da3a92ec0422ac65e18118b81cf95585e74166438a7117c73363", "size": 1396, "traits": [ { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 40 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 42, 987 ] ] } ], "type": "xml" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 1074, "entropy": 5.12 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.12 } } }, "id": 3, "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!LICENSE", "pid": 0, "risk": 1, "sha": "b62828e034a362e03609738a440f8f486ffcce4970f0f1eb958cbd99be8c8a7b", "size": 1074, "traits": [ { "id": "metadata/permission/prose::permission-permission-term-english", "conf": 0.9, "crit": 2, "desc": "Permission or access term", "spans": [ [ 51, 0 ] ] } ], "type": "text" }, { "id": 4, "sha": "b333923d81bbed8029bb605b10f4e28c1a1e92c5827421a0ecff18e248fab021", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!README.md", "size": 1122, "type": "markdown", "depth": 1 }, { "id": 5, "sha": "93511e8937b27717eb154ee90eaf1655d4dbbad2865ecfc5a7d0bd794c945c49", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!icon.png", "size": 16083, "type": "png", "depth": 1 }, { "id": 6, "sha": "992d1f941b41b8a4af1df54785cae249b4adb186a09c4f883ab873fdc7c337cf", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!build/Microsoft.AspNetCore.StaticWebAssetEndpoints.props", "size": 1926, "type": "xml", "depth": 1 }, { "id": 7, "sha": "f43f03fc375fe6f3c725860cd11913dba0d350a6e6c9afaf906ca81a2ab45eb2", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!build/Microsoft.AspNetCore.StaticWebAssets.props", "size": 1257, "type": "xml", "depth": 1 }, { "id": 8, "sha": "01abcf003fb124a7d214a8898c2932c11b9aeaf0a8ecbd16bbca184f5d4b859b", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!build/Soenneker.Blazor.CallbackRegistry.props", "size": 163, "type": "xml", "depth": 1 }, { "id": 9, "sha": "70ab924b0a7fd93ff7736ffe5a77c3a8eb1d6179132f7bbcbc8ca50ce1fcddd8", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!buildMultiTargeting/Soenneker.Blazor.CallbackRegistry.props", "size": 95, "type": "xml", "depth": 1 }, { "id": 10, "sha": "91aea60c95b0128b4248ec9cf8c930efbf545869456e863150faf645a421fe7a", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!buildTransitive/Soenneker.Blazor.CallbackRegistry.props", "size": 109, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oA", "n": [ { "c": 2, "d": "PE contains exactly one resource entry", "i": "metadata/binary/resource::pe-single-version-resource", "o": 0, "z": 24, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000kMy^J00000000000000000000w\u003eSg800000nb@R\u00260SSx7u)#6Q*-VT$0rr91000000000000000000000000000000000000000000000000000000000000000009S^-d000uQ9S^-d000uQ9S*V?000cKiSZYF000uc1apgI00B^m0=]pX01abQ000c6A#UeW3vJ9U00AuK9rl6D0T0\u0026N000cK6efE/kl7V-0rr9i5=:s3000vO5c8Xk5=.#Y5Dz!l5=-2Z5=.[m5=-U{4/=Oj5=^p\u003c000cm04m\u003cF04OVZD\u003elnT1sLw)017gQ6efE/pxgv{0SSij5=:s3000vOaPIGH5=.#Ya]?PI5=-2ZbldYJ5=-5.bME/K5=-8-b(^]L5=-U{cia2M5=^q5000us04m)G04OVZD)5E\u00263mE1%017gQ6efE/so5s30@@rk5=:s3000vOcJBbN5=.#Yc\u0026:kO5=-2Zdf6tP5=-5.dGxCQ5=-8-d/YLR5=-yAEjLu#3k9sNEjUB03k9t^cJBbN5=:rZ001IZ0dlc]017a%000uQ6efH*5c8Xg1onAl0^:$G00Axp0b\u003cE\u0026017556efE/m/SI?1POJm5=:sk000vO761sq5=.#Y7xsBr5=-2Z7YTKs5=-5.82%Tt5=-U{6-Xjp5=^p{000cm04m%I04OVZD\u003e(XZ1sL#8017gQ6efE/hVJ*T1][Sn5=:s3000vO3JHef5=.#Y3\u0026*ng5=-U{3ig5e", "n": [ { "c": 1, "d": "No section reaches compression-grade entropy", "i": "metadata/binary/metrics/threshold::no-compression-grade-section", "o": 512, "z": 512, "cf": 0.8999999761581421 } ], "ln": 480 }, { "b": "3mV2Q0uq7t0ST$QIO5{a00000000Ge=!ONsdGxCHhuFns000udc}Kys3mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn*ZBe.byPQ)ndtL0Kp83*bu5Y8x(mN800000/CBO*Tn\u0026k2bumUxGC::\u00265c8Xgbs+:9l\u0026Wh!LO\u003cD3nc/g}", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 2912, "z": 4, "cf": 1.0 } ], "ln": 2864 }, { "b": "w[u0]zEWkTlT:\u003exwO=f\u003eBzkVhrbVL-zC$E@A:@UXnP5Y\u0026yH)Gql${ZYz/Yt@y?iPrl34r?v)\u003e3LAbP/avR/PQl${ZYz/YFSz/fVdzGFP\u003ewozZ10afOYwozZ108[e:By+", "n": [ { "c": 1, "d": "References the .NET Invoke member name", "i": "micro-behaviors/process/interpreter/reflection/runtime::invoke-token", "o": 6943, "z": 6, "cf": 0.6600000262260437 } ], "ln": 6911 }, { "b": "wozZ1nO@A+A=+r6x(0=Fz!i*7wOU\u003c$e\u003c:w.Dt^*RlT:!EvQS+ZqE%GPB98CFe[w^m0cqZ[uRbuJz2^HWB97#g0b2\u003e+uQFmtv}xE)vruj4zD7K\u0026wO}GTvqYN^y\u00260K4x(v(*z!\u0026{407ggjv}xE)vruj4zD7K\u0026wO#MTCYWImB7]Mg08mfqA=l2qw]]T]CYWImB7]MgB1P\u003c(AaJ]$wO#16nP5oOv@#B6zu9QXB97#ge(Dm)y?m9#x(v\u003e?nMfhvC4\u003eC$lVl^SwN/*@z/bLNwPQv=v}xR3x(v\u003e?q/uk+zE)P{AXpvlx(4\u0026yn][]*08mfqA=l2qw]]T$q+p\u003eGwPzZd08mxxB.\u003eRXze:AlBx9A%y/j?Sx(!v", "n": [ { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 8170, "z": 17, "cf": 0.699999988079071 }, { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 8040, "z": 4, "cf": 0.5 }, { "c": 1, "d": ".NET set_Item method reference", "i": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "o": 8045, "z": 8, "cf": 0.6499999761581421 } ], "ln": 7992 }, { "b": "vrliICvticwPv=vwPQjZvqf*{ASx0Gxk8BewPv=JzGor3x(!xcASv.4Bz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGD2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026)wPz%dv}xYYl$G?Ixj\u003e{@xh9qPwPE\u0026Iz!i*7wOU\u003c$e(^1cy\u0026.i@vqYN^y\u00260K4x(v(/v@Dr$A@YcSwO}", "n": [ { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 8460, "z": 18, "cf": 0.75 } ], "ln": 8412 }, { "b": "Bo2l+B97#ge\u003c\u003cL[y?m9#x(v)ge\u003c\u003cL{v%8*jwO#O\u0026q/(C*Bo2lTwO#x%yH}JsltQ7Rz/NEgBzkMje\u003e{m{B.\u003eRXze:AlBo23NC4BAWCYS{#wPRoJB3\u003c\u003e.Abo9cwN[.Zv/", "n": [ { "c": 1, "d": "Bare Start member-name string", "i": "micro-behaviors/process/create/spawn::process-start-member-token", "o": 9105, "z": 5, "cf": 0.7799999713897705 } ], "ln": 9073 }, { "b": "e(1\u0026mlVm0Rl2Z=]r+lq)x(v(LB$\u003eW6fAzeM4IRxMvqPO1z/PRYx(!lfvr\u003eQRzdK2apdnb8f!+jl8ux*MxMOunB2\u003e%cB8LSczE)P{AXp\u003cuz2:LA0rrv5wO+{^B7CsKdGGI}lVl{?A+Pf1BrFD1atLSah7ZNqgbZmEvqxA%q/uk+zE)P{ASu8s0rt[Yazkn6wPzG{aAz4ax(!xpC{4iEaAz4ax(!xcAV!!dwftP7C5IecazC.mByx5%wI4$xwN/B^x\u003e5nLy*?TdAS", "n": [ { "c": 3, "d": "Hardcoded HTTP or WebSocket URL", "i": "micro-behaviors/communications/http/url/domain::http-url-binary", "o": 10663, "z": 21, "cf": 0.699999988079071 }, { "c": 2, "d": "Copyright notice", "i": "metadata/package/license::copyright-word", "o": 10703, "z": 9, "cf": 0.6000000238418579 } ], "ln": 10599 }, { "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae@SAi30000000000@SC4T00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*600031000c400035000c400035kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 12382, "z": 15, "cf": 0.8999999761581421 }, { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 12288, "z": 5, "cf": 0.8999999761581421 } ], "ln": 12256 }, { "b": "0024.00031fAr^bfAr^bfAr{fvGn7Z006IepYHH@lJz38z2!zMwDlPFBo3vZ002p+aol3OwDlPFwDl-Jx-ISyaolAZwDluyx-JhOBo3sYC(O@!Bo3jVaolAZwDluyx-JhOBo2\u003eLASviZve$fBwb).Lx-J2JB]VBXyxd]Caol9Qzua.TBo2.HzuaeDwDjpZA@ZdVwDliux-I-Bx-ISyaoj.dyYE(zDh}\u003c-ASviZn=R=\u0026aok)Kve$9zyYE]Ave%^qyxezQ002W)761vnlJz38z2!IPve$fBC(QOtve$cAwDhYg003WjBo3y.z#:}ViSH/kf934[zVBtGzuaLOwDlGCwDl-Je=YwYzVBRO003*na]?SzmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$zVBtGzuaLOwDlGCwDl-Je=XiryYE(zDh}\u003c-ASvY(lJyJ{yYFnKvGo*pv/QoAqugndx8(SCA@ZpZASyv+001[S3JHhcmGvc5yYF2DrSDXhASydXx-J5Kzu6Up001?Qe=WN9e=WQafAr\u003cdh2]lefAq7M003*ncia5DnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$zVBtGzuaLOwDlGCwDl-Je=XiryYE(zDh}\u003c-ASvY(lJyJ{yYFnKvGo*pv/QoAqugndx8(SCA@ZpZASyv+e=YzZyYFnK003)pb(^@CoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002v^zVB.RC(R\u003c+x-I=CxAibOaonwvaojd%fAr\u003cdh2]idg5%0dg5%ijaok1lve$6ywDi?MqVH.owDlPFzuakFyxd]CASu7t0049vcia5Dpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$zVBtGzuaLOwDlGCwDl-Je=XiryYE(zDh}\u003c-ASvY(lJyJ{yYFnKvGo*pv/QoAqugndx8(SCA@ZpZASyv+e=YzZyYFnK003Kfa]?SzpYLIozVBqFBPt[KBo25ove$cAwDhYg002{$zVBtGzuaLOwDlGCwDl-Je=XiryYE(zDh}\u003c-ASvY(lJyJ{yYFnKvGo*pv/QoAqugndx8(SCA@ZpZASyv+004/Pg5}sPpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001?Qe=WN9e=WQafAr\u003cdh2]cbh2]Dkwb[K*h2}g/w=KZ?gYPGnwb[p-vGnd-irh2sgYPJof-UX-gxoihhVNs/wDjB+h#\u003eVkf-U.:v/Ov^gYQ}:fAtIYwDllvgYPGn002g.3JHhck(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001?Qe=WN9e=WQafAr\u003cdh2]lefAq7M00000000000000000000", "n": [ { "c": 3, "d": "PE version metadata includes CompanyName", "i": "metadata/package/versioning::pe-companyname-field", "o": 12786, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileDescription", "i": "metadata/package/versioning::pe-filedescription-field", "o": 12862, "z": 15, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileVersion", "i": "metadata/package/versioning::pe-fileversion-field", "o": 12970, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes InternalName", "i": "metadata/package/versioning::pe-internalname-field", "o": 13026, "z": 12, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes ProductVersion", "i": "metadata/package/versioning::pe-productversion-field", "o": 13462, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 13492, "z": 49, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 13246, "z": 16, "cf": 0.699999988079071 }, { "c": 1, "d": "Several short title-cased resource strings", "i": "metadata/binary/resource::short-titlecase-resource-words", "o": 12602, "z": 8, "cf": 0.800000011920929 }, { "c": 1, "d": "PE version company name populated", "i": "metadata/package/versioning::pe-company-name-populated", "o": 12812, "z": 21, "cf": 0.8500000238418579 }, { "c": 1, "d": "PE FileDescription field is populated", "i": "metadata/package/versioning::pe-file-description-present", "o": 12896, "z": 33, "cf": 0.949999988079071 }, { "c": 1, "d": "PE LegalCopyright field is populated", "i": "metadata/package/versioning::pe-legal-copyright-present", "o": 13164, "z": 37, "cf": 0.949999988079071 }, { "c": 1, "d": "PE ProductName field is populated", "i": "metadata/package/versioning::pe-product-name-present", "o": 13388, "z": 33, "cf": 0.949999988079071 }, { "c": 1, "d": "PE FileVersion value is present", "i": "metadata/package/versioning::version-info-file-version-present", "o": 12996, "z": 10, "cf": 0.949999988079071 } ], "ln": 12570 }, { "b": "00000000000000000000000000000000000000000000000000000000000006*I:3\u0026*ncH=+Uq00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 13824, "z": 6, "cf": 0.8999999761581421 } ], "ln": 13776 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 11776, 5.66, "r-x" ], [ ".rsrc", 12288, 1536, 3.1, "r--" ], [ ".reloc", 13824, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "clr.is_il_only": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 63892.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0.0, "bss_like_section_count": 0.0, "clr.is_32bit_preferred": 0.0, "clr.strong_name_signed": 0.0, "section_overflow_count": 0.0, "clr.is_native_entrypoint": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.33, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.09 }, "file": { "size": 14336.0, "entropy": 5.24, "size_bytes": 14336.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.66, "string_count": 184.0, "overall_entropy": 5.24, "entropy_variance": 5.19, "avg_string_length": 23.26, "max_string_length": 98.0, "peak_region_bytes": 3072.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.61, "string_length_stddev": 17.47, "largest_section_ratio": 0.82, "sentence_string_count": 5.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 11776.0, "entropy_max": 5.66, "entropy_mean": 2.95, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 11, "mol": "H(Cm)Md₂(BiPa)", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!lib/net10.0/Soenneker.Blazor.CallbackRegistry.dll", "pid": 0, "risk": 4, "sha": "079db48daf5b4f8212b1fd381bf7565b927656fb0155315d22d87e79a589f6f6", "size": 14336, "traits": [ { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 2912, 4 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 12382, 15 ] ] }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 12970, 11 ] ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 12862, 15 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 13492, 49 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 13462, 14 ] ] }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 12786, 11 ] ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 13026, 12 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded HTTP or WebSocket URL", "spans": [ [ 10663, 21 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 2912, 4 ] ] } ], "type": "pe" }, { "id": 12, "sha": "43f4874b3d7855adc6cd3792132477868fda4575556495acd7260b317b7a1a92", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!lib/net10.0/Soenneker.Blazor.CallbackRegistry.xml", "size": 5885, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "vqYN^i%(saCYmOwBrCgrzEW^5z/cXizFsibvqGU7wHI8cBwuy?diJ%AarR^Hwn=M+wPQHYB97\u0026dv}u=Cay]zjpgXJe3vJl*wQ5fjA=-BoB-7Yhx(v(iB7Gl1rbUcjy\u00260M?v@0GbwgO\u003clvrt{baBsCrarR!pz/fSrazL$ozCT+!y\u0026r-)auZ\u0026tq+{dvB98CpzF9V}C{)iiByuQW3jm)#arUikBwuy?nP5P\u003evqYN^e[]iDz!\u0026]UwPRQ7wi\u003eoZzEU7xqE%uHx)a5WB3\u003cwLy*{*.yBpUQx\u003ee+qyiarhp*[S=z^^f9i%{xy", "ln": 14, "col": 15, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "JSON.stringify" ], [ "", "dotNetInstance.invokeMethodAsync" ] ], "mbr": [ "JSON.stringify", "dotNetInstance.invokeMethodAsync" ], "tgt": [ "JSON.stringify", "dotNetInstance.invokeMethodAsync" ], "funcs": [ [ "initialize", 28 ], [ "sendToCallback", 97 ] ], "metrics": { "ast": { "max_depth": 8, "call_count": 2, "node_count": 71, "member_count": 2, "member_depth_max": 2 }, "file": { "size": 258, "entropy": 4.75 }, "text": { "lines": 11, "top_char": 116, "max_ws_run": 1, "space_count": 27, "char_entropy": 4.75, "unique_chars": 45, "top_char_null": 0, "string_density": 0.09, "top_char_ratio": 0.09, "avg_line_length": 22.45, "max_line_length": 75, "empty_line_ratio": 0.27, "last_line_length": 1, "whitespace_ratio": 0.15, "identifier_density": 1.45, "line_length_stddev": 23.95, "normalized_string_count": 0.3, "normalized_unique_identifiers": 2.89 }, "binds": { "count": 2 }, "binary": { "peak_region_bytes": 258, "peak_region_entropy": 4.75 }, "source": { "function_count": 2 }, "strings": { "bytes": 17, "count": 1, "avg_length": 17, "max_length": 17, "avg_entropy": 3.45 }, "functions": { "count": 2, "density": 18.18, "avg_params": 1.5, "code_ratio": 0.73, "max_params": 2, "length_stddev": 1, "avg_name_length": 12, "avg_length_lines": 4, "max_length_lines": 5, "min_length_lines": 3, "high_entropy_names": 1, "avg_param_name_length": 4 }, "identifiers": { "count": 16, "unique": 10, "avg_length": 9.1, "max_length": 17, "min_length": 2, "avg_entropy": 2.58, "reuse_ratio": 0.63, "length_stddev": 4.76, "high_entropy_count": 2, "high_entropy_ratio": 0.2, "all_lowercase_ratio": 0.4, "all_uppercase_ratio": 0.1 } } }, "id": 13, "mol": "H(Db)", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!staticwebassets/js/callbackregistryinterop.js", "pid": 0, "risk": 1, "sha": "adb08fe4af4e7026454c8b67735bd5344c41c1341819ee3a60ae2385734faa0e", "size": 258, "traits": [ { "id": "micro-behaviors/data/serialize/json::json-stringify-identifier", "conf": 0.85, "crit": 3, "desc": "Serializes an identifier as JSON", "spans": [ [ 157, 14 ] ] } ], "type": "javascript" }, { "id": 14, "sha": "6e5b23ee2316dbdfb56026a4047433ff9caf14ba1fc54ddd49f9d32ee444c868", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!![Content_Types].xml", "size": 837, "type": "xml", "depth": 1 }, { "id": 15, "sha": "0b13b7a898d6a565d44d0264081ff8a500e3d8f0d66c231256c6ef5b4838f787", "path": "Soenneker.Blazor.CallbackRegistry.4.0.1025.nupkg!!package/services/metadata/core-properties/39856c01930c4d439dea914898afb0d1.psmdcp", "size": 807, "type": "xml", "depth": 1 }, { "id": 16, "mol": "Md", "sha": "dabf478e59a1dce88c7d489eea7fe9562ebb95b1f35ea6abf7a7ba61f12519c2", "path": "Soenneker.Blazor.CallbackRegistry@4.0.1025.registry.json", "risk": 1, "size": 1020, "type": "registry", "depth": 1 } ], "omitted_files": 12, "v": "8" } }