{ "llm": { "conf": 0.6025538, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate NuGet package wrapper" }, "ml": { "v": "7", "eng": "2.5.0-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.35479045, "rte": "az", "prob": 0.35479045 } ], "prob": 0.4322197, "skip": [ { "rte": "az/nupkg", "why": "unavailable" }, { "rte": "az/nupkg", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.4322197139263153, "type": "nupkg" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000011483828529890161, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.4322197139263153, "type": "pe" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000012636184692382812, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-08-01T17:28:39Z" }, "path": "Polareum.Commons.RestSharp.1.1.9.nupkg", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MNjq0BpIaBc[xS000oa000xb003wDwO=Ave]\u003eJtBcI!WyqR.tmDYx\u003el1?rh[KE:{Os)wABxl?ak/?oWSp-COlC047NNfs\u0026V\u003cO\u003cGD:]N3-MWJOa.\u003eTeYDN+eU/=T)JTXgGvoITDCjz^%Z:$W)hCR%", "n": [ { "c": 2, "d": "Archive contains an executable member", "i": "metadata/file/metrics::archive-contains-executable-member", "o": 0, "z": 31, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H(Cm)Md₂(BiPa)", "sha": "7926257d6a2b09bb9c19b2ffff7abcada54852743e009abe8ae122ef2d9c86d5", "path": "Polareum.Commons.RestSharp.1.1.9.nupkg", "risk": 4, "size": 21493, "type": "nupkg", "facts": { "metrics": { "file": { "size": 21493.0, "entropy": 7.81, "size_bytes": 21493.0 }, "binary": { "overall_entropy": 7.81, "peak_region_bytes": 19456.0, "peak_region_entropy": 7.77 }, "archive": { "file_count": 6.0, "member_count": 6.0, "script_count": 0.0, "zip_bomb_ratio": 2.43, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 20615.0, "compression.ratio": 0.67, "hidden_file_count": 2.0, "total_uncompressed": 30994.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 6.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 2.0, "timing.mtime_unique_ratio": 0.33, "misplaced_executable_count": 1.0, "timing.mtime_outlier_count": 1.0, "timing.mtime_dominant_count": 5.0, "timing.mtime_spread_seconds": 25158.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.83, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 5.0 } } }, "ident": { "name": { "value": "Polareum.Commons.RestSharp", "source": "nupkg.title", "verified": false }, "trust": "unsigned", "authors": [ { "name": "Polareum.Commons.RestSharp", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "1.1.9", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Polareum.Commons.RestSharp", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/binary/debug::pdb-visual-studio", "crit": 3, "desc": "Visual Studio PDB build path" }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash" }, { "id": "micro-behaviors/communications/http/client/managed::getasync", "atk": "T1105", "conf": 0.8600000143051147, "crit": 3, "desc": "HttpClient asynchronous HTTP response retrieval", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes CompanyName", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/managed::postasync", "atk": "T1071.001", "conf": 0.8799999952316284, "crit": 3, "desc": ".NET asynchronous HTTP POST method", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 3 } ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 3636, "file": 3 } ] }, { "id": "micro-behaviors/communications/http/client/managed::httpclient", "conf": 0.8199999928474426, "crit": 3, "desc": "System.Net.Http.HttpClient type reference", "from": [ { "file": 3 } ] } ] }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj}d\u0026YAa9l(vp%c]CX}nmB3gZXBAzE.fe4xRxK#3?B1Rrzv@=Hez!s8zv@DiqAa9l(vp%p(xd(1]f/7Eph7@\u0026\u0026B8UY2e{ICFb0DCyarS^-wPRu\u003evrt{w4gjj2arS^XwiJ?dy*?u}B.@-#z/6ufzGvBdwPI@(xKL}2jtgzVj}d\u0026warR^?C4CYnx(v(Mf!LgkixO%rwPz\u003caz/d-F3lQDlauT7PBzbPkB3rAsy*?u}B.@-#z/6ufzGvBdwPI@(xKL}2jtgb=BzbPkB3p3uarR^Hjy\u00262Av@=p5BzkVhk2tV$yHH\u003c!avG^Zv@=p5BzkVhjtgkRB7ol8Acb/jzAXHparR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026qz/6u9BuH*7h-iGNwm^USvl3b7fGq0Dh90DGwhm:QfL8$0vkRTNwmGach8/7\u003catk[/3lQDlauTgCAaJ]$wO#0(wPH3A3lQDlarR^?xl4{kA3fmhA+w%9mSI{OwP@6kyDS\u003eVwPPTXe?!Fk4gjj2arR^HarS^SwPhi#wmYT*C{3*ijT9Kczd#{Szdb4:xKL$6x(+)$BAzE\u003cCW\u003er7BzkVhB0q-IwPz\u003caz/dYZf!+jle?]47az2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj}d\u0026warR^HarR^?wmYZ\u003ezE^r@v%GhhwizbfvqPZSvqPB9mr\u0026]=zGxJgzGvA#wPhi#wmYT*C$z)*wN/*@z/c:wC4CYnx(v(La#7=7fFk7la%pDwv@co#wJ.k7B.LV5ej1eZy\u003cytrA=SAEffP*LarR^HarR^Hjy\u00262xwO#3\u0026zEW@mx\u003efvJojqWKq^\u003cJKe\u003e72bwO#N6z/fRGn][]*a%q5uA=U@kzAPf#fFk4if!:^]wQ4Z3B.25Db0{A^y?b7.zEEvbDs.bra%nK54gjj2arR^HarS^SwPhi#wmYT*C{3*ijT9Qmv@=Hez!s8zmr\u0026]=zGxJgzGvB7z!0i(x)Kifx(v(kaA?spB7]MgjT8Qme?![jfD}SJCW\u003eMjwmW[FluN0UwgQ2:vqHjnwPz\u0026oatk[/3lQDlarR^HauTgCAaJ]$wO#16azCvHb2R#[Bw(\u003cYA=riBC4CYnx(v(La#7/ee?![ia%pDwv@co#wJ.k7B.LV5ej1eZy\u003cytrA=SAEffP*LarR^HarS^1xl4{kA6sZrarR^HjtgkRAaJ]$wO#0(", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 33, "cf": 0.9800000190734863 }, { "c": 2, "d": "NuGet package declares dependencies", "i": "metadata/package/files/nuget::nuspec-dependencies", "o": 43, "z": 849, "cf": 0.8999999761581421 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1018.0, "entropy": 5.12, "size_bytes": 1018.0 }, "binary": { "overall_entropy": 5.12, "peak_region_bytes": 1018.0, "peak_region_entropy": 5.12 } } }, "id": 2, "path": "Polareum.Commons.RestSharp.1.1.9.nupkg!!Polareum.Commons.RestSharp.nuspec", "pid": 0, "risk": 1, "sha": "ee4d3cba9a18e3fbce79d5c470c596dd4bc8ae5175168924e0ab23d42b2610d8", "size": 1018, "traits": [ { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 43, 849 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 43, 299 ] ] }, { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 33 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000", "n": [ { "c": 2, "d": "PE contains exactly one resource entry", "i": "metadata/binary/resource::pe-single-version-resource", "o": 0, "z": 24, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000kMy^J00000000000000000000}+Nm)00000nb@R\u00260SSx7g+nRbFfL3]0rr9100000000000000000000000000000000000000000000000000000000000000000iSYzi0rr950W[\u0026+017hV0^:$G00BP13)]#}003$V7YTKyDmCS\u003c10ogm82%TzA:]7HA0dmozYePQ3mD?[016G.8#]%CEf6xG1oH5J0W[PW00SJN0rr9Ic\u0026%wGd\u003c+rEe=(aT7x(i3000iMvGE}?000i91o/nrc)5A?3u43!0174OdNBg+5c8Xm0%y1}000uM0Xc}Dc\u003eDvU1{j#g6CI@t000uM0XdjLc\u003eDvU1{j#RbldYJc)O=)3mk*76efE/kl7V-0rr9i5=:sa000vOcia2M5=.#YcJBbN5=-2Zc\u0026:kO5=-U{df6tP5=^qa000us04m{H04OVZD)O*[3mEz8017gQ6efE/kl7V-0SSij5=:sa000vOec2US5=.#YeDt+T5=-2Ze=U\u003eU5=-U{f8$$V5=^qg000us04m%I04OVZD[kl$3mEz8017gQ6efE/kl7V-0@@rk5=:sa000vOfAq7W5=.#Yf-RgX5=-2Zg5}pY5=-U{gxmyZ5=^qk000us04n0J04OVZD[UK23mEz8017gQ6efE/kl7V-1onAl5=:sp000vO3ig5e5=.#Y3JHef5=-2Z3\u0026*ng5=-U{2(\u003c@d5=^p^000cm04n3K04OVZD\u003cP\u0026N1sMed", "n": [ { "c": 1, "d": "No section reaches compression-grade entropy", "i": "metadata/binary/metrics/threshold::no-compression-grade-section", "o": 512, "z": 512, "cf": 0.8999999761581421 } ], "ln": 480 }, { "b": "000c7c}:Ku3mWVHjobu=FgHW21s+C]c(h\u003c-3mXjwc\u003e#ZZd\u00265*kB8g*R3mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn\u002612!/byPQ)oB}g7apweHbu5Y8x(mN800000y-ruOaoqDxbumUxJ2R/$5c8Xgbs+:9l\u0026Wh!Oe.Ie\u003cotO:", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 3636, "z": 4, "cf": 1.0 } ], "ln": 3588 }, { "b": "z/{e1wPI*ezGxwMwm5W#h#(68irhfoz!a0bwJ*8Rv@b\u003c\u003czGF6s08@@evrt]Tju^lPl$HgCBy^:VD2v9(m}D^dB9RUk08NPPBu%$[zESVyB-Y]\u003cD2v9(l1BI8v@Dr$wb[]tvqf*-zGxk#wLWhhz/6DfwPRG]0b2\u003e+uRbraz/6DfwPRG]090#MzaetM08m3DxM4zYm}D^uwPq\u003cbA+e=WwPz%dv}tTMwPRoTByxolB3\u003c\u003eRwDlpVv@C)?06$damRMWI0a]}YwO}", "n": [ { "c": 3, "d": "HttpClient asynchronous HTTP response retrieval", "i": "micro-behaviors/communications/http/client/managed::getasync", "o": 8273, "z": 8, "cf": 0.8600000143051147 }, { "c": 3, "d": ".NET asynchronous HTTP POST method", "i": "micro-behaviors/communications/http/client/managed::postasync", "o": 8282, "z": 9, "cf": 0.8799999952316284 } ], "ln": 8209 }, { "b": "q*ACawO\u003c4!z/6DizE)Zco(BMNyYEpIy*?u}B.@-#z/6ufzGvBdwPI@(xKL}2e[w^m07H)Eq!o#)x\u003e7ZOA+\u003e.+vrl0WA+\u003e.*wPRoJB5Ni\u003ev}x.5w{4[\u0026q*ACawO?AkB-.K/wmO8tAaJ]$wO#0(wPHsYz/2FwvqYN^y\u00260K4x(v(*z!\u0026{40aPCPv}xE)", "n": [ { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 9307, "z": 4, "cf": 0.5 } ], "ln": 9259 }, { "b": "wN/*@z/bLHx\u003e8g4B8LVje\u003e72bwO#N6z/fRGl$HsGzE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh07?6KvqGT*pJf(=vruj4zBF!WwPh:9z/bLDzGYD8x\u003egaMB8V5nB7E*Yz/5A:A=#2mmr\u0026rNAcb/jzu9QDBvyB:wPh:9z/bLMwPq\u003c7B97w}zdNlNB-Z5%v}xR3x(v\u003e?ojqWKq^\u003cJKe\u003e72bwO#N6z/fRGn][]*08[e:By/qwraQq@e\u003eQh6zu97oB7GxavqGU7wKZYUzaX\u003e/zu9HKy*?u}B.@-#z/6ufzGvBdwPI@(xKL}206$dap\u0026yeUA+fxgqE%]\u003eq!PPWz#:@#08[e:By/qwpgXJ1now@)06$danm=juwPv=xq!o#)x\u003e7ZJA=lbnwmY=Yl34r?v]M(TyFwwZxM4AFB.LV5wPv=xqE%]\u003eluN0UwmY=Yju^\u003c]uT!d(y?d9$06$dap*[xMzdN*2ASwEEwNPW(p*[xMzdN*2ASwyowkNFXA^pF\u0026A:-/@By/E)m}D^dCvticwPv=6v@#Tf04}+\u003eBz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGD2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026)wPz%dv}xYYl$G?Ixj\u003e{@xh9qPwPE\u0026WA+xB[ju+PeuVY%}A@Yc:B97#ge(VI8wNPa-zF7O3vrlj90c4", "n": [ { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 9934, "z": 18, "cf": 0.75 }, { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 9522, "z": 17, "cf": 0.699999988079071 }, { "c": 2, "d": ".NET core namespace reference", "i": "metadata/lang/compiler/managed::system-namespace", "o": 9771, "z": 10, "cf": 0.800000011920929 }, { "c": 2, "d": "System.Text.Json library reference", "i": "micro-behaviors/data/serialize/json::json-system", "o": 9683, "z": 16, "cf": 0.8500000238418579 }, { "c": 1, "d": "AddParameter method (PowerShell execution)", "i": "micro-behaviors/process/interpreter/powershell/host::add-parameter", "o": 9863, "z": 12, "cf": 0.800000011920929 } ], "ln": 9474 }, { "b": "qE%]*z/fScq/(C\u0026B-NKIz/f5[Bo1QqwkuVHwN//Zz/x5Pze:r9v}*2+m}D^uwPJ0gBo2lJBw=W\u003eB.(d1now@)lU{EFzGC\u003eIqE%]\u003elU{EFzGC\u003eCz/ff3xlwlaqE%]\u003elU{EFzGC\u003e*y?WD#Bo1Qqwl0U^q!oPUwO#O\u0026xjVf(lVl\u003c:wO#O\u0026z/x^#rb#X\u0026q/(C*Bo2@+Byd{SADL\u0026lBo3i3y\u00260J?y?lHQADL\u0026lBo2iIB97q\u003eADL\u0026lBo23NC4BAWCYS", "n": [ { "c": 3, "d": "References a .NET HTTP client API", "i": "micro-behaviors/communications/http/client/managed::request", "o": 10481, "z": 10, "cf": 0.8600000143051147 } ], "ln": 10417 }, { "b": "cJBbDPILQ*PFuGE0000000000000005c8Xg000000000000000qD2$ZG[p/fsIAuSGkkZtql3030rr91l][NEC#eK1xl4A$B6JW5y*?u}B.$w$zF0]$B98CBv@#\u003clwN6p%v{A\u003e?wozZ1B6IKWy*?u}B.@-#z/6ufzGvBdwPI@(xKL}2tYj7^tVbcHwNPT\u003etYaa{f!+jltU]uPvrb}4z7Xg]zeBieB1Qv4B97t]vrcrtAaAzTq+fhfh8UC*F?2LTZsG^@yJ%k:S*BUc:azr1(\u003ef8?Ww5B-uzcGIpYHE}0000000009q2*N@aohxw000000000000000000000002@pYHE}00000000000ae9iAZT.Wo\u003c}:N0bV^!z/PA2e[w^m000000093B03zm", "n": [ { "c": 3, "d": "Visual Studio PDB build path", "i": "metadata/binary/debug::pdb-visual-studio", "o": 12832, "z": 127, "cf": 0.5 } ], "ln": 12768 }, { "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae:o8zx0000000000:oam000341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310rrc2000r90rrc2000r9kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 13406, "z": 15, "cf": 0.8999999761581421 }, { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 13312, "z": 5, "cf": 0.8999999761581421 } ], "ln": 13280 }, { "b": "00031qVH[tASx!NzuaqHmGvc5yYF2DnDrSdw=M-H000c700031fAr^bfAr^bfAr{fvGn7Z003418VP)slJz38z2!IPve$fBC(QOtve$cAwDhYg002*}zVBONve$rFwDl\u0026Mz2=f*lJz38z2!zMzVBUPA@W/)qugndA@ZpZqVHFhve$rFz#Y\u003er003s98VP)smGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002*}zVBONve$rFwDl\u0026Mz2=f*lJz38z2!zMzVBUPA@W/)qugndA@ZpZqVHFhve$rFz#Y\u003er001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001.Ne=WQae=W)ie=WN9003s99@(rwnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002*}zVBONve$rFwDl\u0026Mz2=f*lJz38z2!zMzVBUPA@W/)qugndA@ZpZqVHFhve$rFz#.G\u003cwb{ACyYBCn001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw003Qh9@(rwpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002*}zVBONve$rFwDl\u0026Mz2=f*lJz38z2!zMzVBUPA@W/)qugndA@ZpZqVHFhve$rFz#.G\u003cwb{ACyYBCn003418VP)spYLIozVBqFBPt[KBo25ove$cAwDhYg002*}zVBONve$rFwDl\u0026Mz2=f*lJz38z2!zMzVBUPA@W/)qugndA@ZpZqVHFhve$rFz#Y\u003er004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001.Ne=WQae=W)id/.v9hVLYnhuk-qwb{iwgYPDmve@p/gxoAnfAs6jhVLPkh2]Spgxoihwb[v+w=K:\u0026fAtU:f-Tilve@d+w=KT/wb{9tv/Oy!h2]MnwDhYg001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001.Ne=WQae=W)ie=WN9000000000000000000000000000000", "n": [ { "c": 3, "d": "PE version metadata includes CompanyName", "i": "metadata/package/versioning::pe-companyname-field", "o": 13626, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileDescription", "i": "metadata/package/versioning::pe-filedescription-field", "o": 13714, "z": 15, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileVersion", "i": "metadata/package/versioning::pe-fileversion-field", "o": 13810, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes InternalName", "i": "metadata/package/versioning::pe-internalname-field", "o": 13858, "z": 12, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes ProductVersion", "i": "metadata/package/versioning::pe-productversion-field", "o": 14186, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 14216, "z": 46, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 13994, "z": 16, "cf": 0.699999988079071 }, { "c": 1, "d": "PE version company name populated", "i": "metadata/package/versioning::pe-company-name-populated", "o": 13652, "z": 26, "cf": 0.8500000238418579 }, { "c": 1, "d": "PE FileDescription field is populated", "i": "metadata/package/versioning::pe-file-description-present", "o": 13748, "z": 26, "cf": 0.949999988079071 }, { "c": 1, "d": "PE LegalCopyright field is populated", "i": "metadata/package/versioning::pe-legal-copyright-present", "o": 13984, "z": 1, "cf": 0.949999988079071 }, { "c": 1, "d": "PE ProductName field is populated", "i": "metadata/package/versioning::pe-product-name-present", "o": 14124, "z": 26, "cf": 0.949999988079071 }, { "c": 1, "d": "PE FileVersion value is present", "i": "metadata/package/versioning::version-info-file-version-present", "o": 13836, "z": 7, "cf": 0.949999988079071 } ], "ln": 13562 }, { "b": "00000000000000000000000000000000000000000000000000000000000008JT}3\u0026*nc95dA[00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 14848, "z": 6, "cf": 0.8999999761581421 } ], "ln": 14800 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 12800, 5.68, "r-x" ], [ ".rsrc", 13312, 1536, 2.46, "r--" ], [ ".reloc", 14848, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "clr.is_il_only": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 49188.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0.0, "bss_like_section_count": 0.0, "clr.is_32bit_preferred": 0.0, "clr.strong_name_signed": 0.0, "section_overflow_count": 0.0, "clr.is_native_entrypoint": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 3.95, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "declared_data_directory_count": 6.0, "version.identity_symbol_ratio": 0.08 }, "file": { "size": 15360.0, "entropy": 5.24, "size_bytes": 15360.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.68, "string_count": 183.0, "overall_entropy": 5.24, "entropy_variance": 5.27, "avg_string_length": 19.87, "max_string_length": 127.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.78, "string_length_stddev": 15.22, "largest_section_ratio": 0.83, "sentence_string_count": 2.0, "sentence_string_ratio": 0.01, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 12800.0, "entropy_max": 5.68, "entropy_mean": 2.74, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 3, "mol": "H(Cm)Md₂(BiPa)", "path": "Polareum.Commons.RestSharp.1.1.9.nupkg!!lib/net10.0/Polareum.Commons.RestSharp.dll", "pid": 0, "risk": 4, "sha": "0a150b85c35b400e6c4e2b6b0470a86edae9e7950ea42447594ce30f91d3f792", "size": 15360, "traits": [ { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 13858, 12 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 13406, 15 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 14186, 14 ] ] }, { "id": "metadata/binary/debug::pdb-visual-studio", "crit": 3, "desc": "Visual Studio PDB build path", "spans": [ [ 12832, 127 ] ] }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes CompanyName", "spans": [ [ 13626, 11 ] ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 13714, 15 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 13810, 11 ] ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 14216, 46 ] ] }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 3636, 4 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::postasync", "atk": "T1071.001", "conf": 0.8799999952316284, "crit": 3, "desc": ".NET asynchronous HTTP POST method", "spans": [ [ 8282, 9 ] ] }, { "id": "micro-behaviors/communications/http/client/managed::httpclient", "conf": 0.8199999928474426, "crit": 3, "desc": "System.Net.Http.HttpClient type reference", "spans": [ [ 10481, 10 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "micro-behaviors/communications/http/client/managed::getasync", "atk": "T1105", "conf": 0.8600000143051147, "crit": 3, "desc": "HttpClient asynchronous HTTP response retrieval", "spans": [ [ 8273, 8 ] ] }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 3636, 4 ] ] } ], "type": "pe" }, { "id": 6, "sha": "a183eb6de2a17c0a44b4fc84ff4632bb203f668850904f7980ede78f41611ec5", "path": "Polareum.Commons.RestSharp@1.1.9.registry.json", "size": 796, "type": "registry", "depth": 1 } ], "omitted_files": 1, "v": "8" } }