{ "llm": { "conf": 0.8466489, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "review": false, "outcome": "benign", "interpretation": "Legitimate .NET library package" }, "ml": { "v": "7", "eng": "2.2.0-rc.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.78092694, "rte": "az", "prob": 0.78092694 } ], "prob": 0.78092694, "skip": [ { "rte": "az/zip", "why": "unavailable" }, { "rte": "az/zip", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.7809269428253174, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.010236918926239014, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00011461973190307617, "type": "markdown" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.7220720052719116, "type": "pe" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000033408403396606445, "type": "xml" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00003832578659057617, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000033408403396606445, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-06-29T19:56:27Z" }, "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg", "raw": { "files": [ { "id": 0, "mol": "O(Al)H(Db)", "sha": "7a6c60cd4da30cc7c7f70c5edbe2a7a77aa323b92f1529493a8c325ee7c7ed6b", "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg", "risk": 3, "size": 40992, "type": "nupkg", "facts": { "metrics": { "file": { "size": 40992.0, "entropy": 7.94, "size_bytes": 40992.0 }, "binary": { "overall_entropy": 7.94, "peak_region_bytes": 37888.0, "peak_region_entropy": 7.8 }, "archive": { "file_count": 7.0, "member_count": 7.0, "script_count": 0.0, "zip_bomb_ratio": 2.57, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 40010.0, "compression.ratio": 0.54, "hidden_file_count": 2.0, "total_uncompressed": 73489.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 7.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 4.0, "timing.mtime_unique_ratio": 0.57, "misplaced_executable_count": 1.0, "timing.mtime_outlier_count": 3.0, "timing.mtime_dominant_count": 4.0, "timing.mtime_spread_seconds": 25166.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.57, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 6.0 } } }, "ident": { "name": { "value": "RedisVL.Connectors.VectorData", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://github.com/slorello89/redis-vl-dotnet", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://github.com/slorello89/redis-vl-dotnet", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "Steve Lorello", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "0.0.5", "source": "nupkg.version", "verified": false }, "identifier": { "value": "RedisVL.Connectors.VectorData", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE ProductVersion metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET Metadata Root (BSJB)", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6000000238418579, "crit": 3, "desc": "System.Linq.Expressions namespace", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "LINQ query operations", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/extension::dll-dup", "crit": 2, "desc": ".dll extension reference", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET Assembly (mscoree.dll)", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/linq::lambda-expression", "conf": 0.6000000238418579, "crit": 3, "desc": "LambdaExpression class", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "conf": 1.0, "crit": 3, "desc": "JSON polymorphism runtime marker", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR runtime header present (COM descriptor)" }, { "id": "metadata/binary/metrics/pe-details::dotnet-code-entropy-normal", "conf": 0.699999988079071, "crit": 1, "desc": ".NET code entropy in unpacked range", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE FileVersion metadata field", "from": [ { "file": 4 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 519.0, "entropy": 5.21, "size_bytes": 519.0 }, "binary": { "overall_entropy": 5.21, "peak_region_bytes": 519.0, "peak_region_entropy": 5.21 } } }, "id": 1, "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg!!_rels/.rels", "sha": "00a52670b995ded22b2e4e40f9536b8990220eac49ee0e823aa0b446da235c1f", "size": 519, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 36, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh", "ln": 2, "addr": 42 }, { "b": "arS^-wPRu\u003evrt{w", "ln": 3, "addr": 118 }, { "b": "arR^Hjy\u00262Av@=p5BzkVhk22:3A=l2qw]]T]CYWImB7]MgB1QH8v@#Tfl$7gCasG@MrZXwVC4Cf9z/NBJBz(hhay/tczE)s1z/M$jz/M$vwN]H@eP$}Zwn=NcwPPKEmr\u0026=\u0026B7GznqE%xMB5\u003e%Sq!oxTv}XCKwmZ0dvriM1axA5-Bz(g#Bz(hhatj\u003crwN/?2A-m6#A+dQRy\u00260V)BzkVhay/tcB9htdvR/P#vTf7{wO\u003e\u003c[Bzkkcoj-cYwO-F$zE:(ixK@qXx\u003e8g4B8LVje\u003e72bwO#N6z/fRGk$Jhgv@DBlB97#ge\u003c7^$wPIv4x(Ffdz/d-", "ln": 9, "addr": 346 }, { "b": "arR^HjAL1AB3sRQwnc9cA+e=}B1IDAvrb\u003c\u003eaA?saBz(gKB7F^2v}W0awO\u003e\u003c[BzkkpB7F^2v}V#}z//(dBuzi#vp%TB", "ln": 10, "addr": 602 }, { "b": "arR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026IA+)(.xMOunB2\u003e%cxk8E3BZ=$kz/4dGy\u0026su9y\u002612Hiwkz:wnc9pC5e:vz//(dBrR\u0026pA:-\u0026}xGWLWwOc0pxK$Q.B1.xsx(kaqv@Dj3x((GZv(lb7iB=PhwO2vhgg:%bw?WZLfF)h(wIVg$iBVGgv\u003e/@OwJjlXa%nK5", "n": [ { "c": 2, "d": "NuGet package declares repository", "i": "metadata/package/files/nuget::nuspec-repository", "o": 679, "z": 107, "cf": 0.8999999761581421 } ], "ln": 11, "addr": 675 }, { "b": "arR^Hjy\u00262xwO#3\u0026zEWx(B3o", "n": [ { "c": 2, "d": "NuGet package declares dependencies", "i": "metadata/package/files/nuget::nuspec-dependencies", "o": 836, "z": 151, "cf": 0.8999999761581421 } ], "ln": 12, "addr": 832 }, { "b": "arR^HarS^VA=l8taAR4jxjVfOA:-/@Cw?IqjTa=PBu7%cb0C", "ln": 13, "addr": 851 }, { "b": "arR^HarR^Hjy\u00262xwO#3\u0026zEW@mx\u003efvJqE%xMB5\u003e%UaA?spB7]MgjT8NjfFkjbaz2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj]", "ln": 14, "addr": 890 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1143.0, "entropy": 5.02, "size_bytes": 1143.0 }, "binary": { "overall_entropy": 5.02, "peak_region_bytes": 1143.0, "peak_region_entropy": 5.02 } } }, "id": 2, "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg!!RedisVL.Connectors.VectorData.nuspec", "risk": 1, "sha": "630794253bbc89aa1b0ecaa1e8d1680a302fad209cdbc78a6f1c4761633702f9", "size": 1143, "traits": [ { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 836, 151 ] ] }, { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 36 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 679, 107 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "boR2rwnc9pC5e:vz//(dBn", "n": [ { "c": 3, "d": "Recognized domain reference marker", "i": "objectives/command-and-control/infrastructure/domain/tld::recognized-reference-marker", "o": 0, "z": 9, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 18 }, { "b": "u#/*?x(+\u003eHy+ogoBz+Viu)6f8ayMxBpdnblzEET3C4z^]wN]H@axA5-Bz(gxoLE%RvrcSow]zYjqE%xMB0ay)vrb\u003c\u003eayPd#aA?saBz(gxCw?Iqy\u0026r-)B1N", "ln": 3, "addr": 19 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1622.0, "entropy": 4.89, "size_bytes": 1622.0 }, "text": { "space_count": 113.0, "total_lines": 30.0, "char_entropy": 4.89, "unique_chars": 54.0, "lines_over_200": 1.0, "avg_line_length": 53.07, "max_line_length": 267.0, "empty_line_ratio": 0.3, "last_line_length": 58.0, "long_token_count": 3.0, "whitespace_ratio": 0.09, "most_common_ratio": 0.09, "line_length_stddev": 65.65, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0 }, "binary": { "overall_entropy": 4.89, "peak_region_bytes": 1622.0, "peak_region_entropy": 4.94 } } }, "id": 3, "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg!!README.md", "sha": "38942f64eed89455462522c2ed1918de4d0e6a3cd30a846a65b177eb9823c0ae", "size": 1622, "traits": [ { "id": "metadata/file/extension/identity::markdown-file-basename", "conf": 1.0, "crit": 1, "desc": "Markdown document file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "Document or config file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/package/documentation::package-doc-reference-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Package documentation basename", "spans": [ [ 0, 9 ] ] } ], "type": "markdown" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(", "n": [ { "c": 3, "d": "HTTP fingerprinting evasion campaign", "i": "objectives/command-and-control/infrastructure/user-agent::http-fingerprinting-campaign", "o": 0, "z": 34, "cf": 0.8999999761581421 } ], "ln": 0 }, { "b": "000000000000000000006Z+@300000nb@R\u00260SSx7{/WT$+-I(90rr91000000000000", "n": [ { "c": 1, "d": "PE standard code/data section", "i": "metadata/binary/section/names::pe-code-data-standard-section", "o": 512, "z": 5, "cf": 0.8999999761581421 } ], "ln": 496 }, { "b": "huFn(000c7dba+53mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn", "n": [ { "c": 3, "d": "Recognized PE anti-analysis marker", "i": "objectives/anti-analysis/debugger-detect/combined-checks::evasion-aware-recognized-pe-marker", "o": 15608, "z": 4, "cf": 1.0 } ], "ln": 15592 }, { "b": "x(v)ge((K[Bz(g/vrt]TqE%xMB5\u003e%!lVl\u003cWwN/?2A=S\u003clwN/?2AZTtTve%?DByteik4sN!vq[$:zdN:4v/PCMB97#ge\u003c\u003cL[yY", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/persistence/login/scheduled-task/com::task-scheduler-builder-methods--rx-1", "o": 31199, "z": 29, "cf": 0.8999999761581421 } ], "ln": 31183 }, { "b": "BzkP6e((L7B7]Mgx(mL-qE%xMB5\u003e%!lVl\u003cWwN/?2A=S\u003clwN/?2AZTtTvj\u003en.AbYJex8\u003e[Hq/)4]zF5@zvru0)07HWux(^}/xjVf(oL59OBn", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/persistence/login/scheduled-task/com::task-scheduler-builder-methods--rx-1", "o": 35411, "z": 37, "cf": 0.8999999761581421 } ], "ln": 35395 }, { "b": "o\u003ewAWz!8jzy?%8YvqG-WqE%xMB5\u003e%!lVl\u003cWwN/?2A=S\u003clwN/?2AZTtTvj(8byYEBFA=ld[w\u003e)F+yYEgrA6!FYyYEyVB97#ge\u003c\u003cL[yY", "n": [ { "c": 3, "d": "References Windows executable or script", "i": "objectives/execution/interpreter/script/shell::windows-executable-ref", "o": 35655, "z": 4, "cf": 0.6000000238418579 } ], "ln": 35610 }, { "b": "0b2\u003e+uQYiUA+frkx(v\u003e?oKR^Ewmm]KAb]JhB7]Mg08m3DxM4AGvqG:GCYmXmB8#5lzu9yxzdm6%mr\u0026=(", "n": [ { "c": 3, "d": "LINQ expression tree manipulation", "i": "micro-behaviors/data/db/linq::linq-expressions", "o": 36140, "z": 16, "cf": 0.75 } ], "ln": 36124 }, { "b": "z7Xs{z^)c\u003ex)Kifx(v\u003e?q*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/bLND2[7sz7XZ$w]83*BzkVh07/K@y\u00260V)BzkVh07QQxm0SVUze0GEz!%l3v@#B6", "n": [ { "c": 3, "d": "JSON polymorphism runtime marker", "i": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "o": 36345, "z": 16, "cf": 1.0 }, { "c": 2, "d": "Benign high-entropy PE context", "i": "metadata/package/quality/false-positives::benign-high-entropy-pe-context", "o": 36376, "z": 17, "cf": 0.949999988079071 } ], "ln": 36329 }, { "b": "xlw65zGFr(v}xR3x(v\u003e?q*ACawO\u003c50wQ5qHn][]*08^xHz!%PdlVl*Xvrc76z/bLNBAh8kxg3POAa9^3", "n": [ { "c": 2, "d": "System.Text.Json library reference", "i": "micro-behaviors/data/serialize/json::json-system", "o": 36870, "z": 16, "cf": 0.8500000238418579 } ], "ln": 36854 }, { "b": "vqP@-ju+MduVZj907y(cq*ACawO\u003c4[x(m[\u003cpJuB$vrDW9z/OPYzdL[CuTD=evr8uDD2[7sz7Xf", "n": [ { "c": 3, "d": "LINQ query operations", "i": "micro-behaviors/data/db/linq::linq-queries", "o": 37175, "z": 11, "cf": 0.699999988079071 } ], "ln": 37159 }, { "b": "A@XZwBv*v(wPzx\u003ev}xYYq*ACawO\u003c4$B-8qnzdLs\u003ezGGDgz/wS^A=#ebwPE\u0026ID2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE", "n": [ { "c": 3, "d": "Packed binary marker", "i": "objectives/anti-static/obfuscation/eval/loader::packed-binary-marker", "o": 38097, "z": 30, "cf": 0.8500000238418579 } ], "ln": 38081 }, { "b": "x\u003c#jbwKQ\u0026=wO#N6z/fQ@q*ACawO\u003c4[x(m]ymr\u0026=(wPI{bz/fQ@o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003cS5Yl1j[SA:-C", "n": [ { "c": 3, "d": "LINQ query operations", "i": "micro-behaviors/data/db/linq::linq-queries", "o": 38614, "z": 11, "cf": 0.699999988079071 } ], "ln": 38598 }, { "b": "B.LV5r+k=.z/OY$wPA4@qE%xMB5\u003e%!lVl\u003cWwN/?2A=S\u003clwN/?2AZTtTvj\u003c]XvrtjPzeTDu0b2\u003e+uR1)LBz(hB08m3CB75Y)nnic!z/Qa6uUBd{", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/persistence/login/scheduled-task/com::task-scheduler-builder-methods--rx-1", "o": 41422, "z": 40, "cf": 0.8999999761581421 } ], "ln": 41406 }, { "b": "B1IMKeO5^wzE)[\u002609Py6rz)ysx(^rGe\u003c\u003cL{zE)s1z/P[Kr+k=.z/OlOByu!1wN]H@r.L(0y\u00260V)BzkVhu[%k{mq^f?A+dQRy\u00260V)BzkVhl$HgCBy!#GB9RUkk4F2cf/e\u003egmGAGPqE%xMB5\u003e%!lVl\u003cWwN/?2A=S\u003clwN/?2AZTtTvj\u003eC?wnc9=oHA-my?m9#x(v(%gaLESwPQjVD2vaQwm5W#hui.G0rtI=wN]H@r.Lbkz/fD7v@#TfB1QH8v@#Tfl$7gCe(Dm\u003ex(^rGlVl^SwN/*@z/e@rd)c*JB7Gxll34r?v)jBguOKFt07^g\u003el@EPbx(^rGe\u003c\u003cL{zE)s1z/P[Kr+k=.z/OlOByu!1wN]H@r.L(0y\u00260V)BzkVhu[%k{rD91\u003cA=:P*D2vaQwm5W#h#\u0026}K0rtO!wN]H@r.Lbkz/fD7v@#TfB1QH8v@#Tfl\u0026", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/persistence/login/scheduled-task/com::task-scheduler-builder-methods--rx-1", "o": 51841, "z": 86, "cf": 0.8999999761581421 } ], "ln": 51825 }, { "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000", "n": [ { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 53760, "z": 5, "cf": 0.8999999761581421 } ], "ln": 53744 }, { "b": "00000000000058:gYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr910000", "n": [ { "c": 3, "d": "Recognized marker for timing checks", "i": "objectives/anti-analysis/timing/evasion::timing-anti-debug-recognized-marker", "o": 53854, "z": 15, "cf": 0.949999988079071 } ], "ln": 53838 }, { "b": "wDlMEe=U\u003eK001?Q3ig8blJz38z2!IPve$fBC(QOtve$cAwDhYg002)%wDllvx-JhOaoj$kzuaeD003Kf9SMivmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002)%wDllvx-JhOrSC!", "n": [ { "c": 2, "d": "PE CompanyName metadata field", "i": "metadata/package/versioning::pe-companyname-field", "o": 54550, "z": 11, "cf": 0.699999988079071 }, { "c": 2, "d": "PE FileDescription metadata field", "i": "metadata/package/versioning::pe-filedescription-field", "o": 54602, "z": 15, "cf": 0.699999988079071 } ], "ln": 54534 }, { "b": "l\u0026ZS}Bo2.H001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001XMe=WN9e=W:ee=WN9003Kfa]?SznDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002)%wDllvx-JhOrSC![e=Xls", "n": [ { "c": 3, "d": "Dotted-quad PE version metadata marker", "i": "objectives/command-and-control/infrastructure/ip::ipv4-version-metadata-marker", "o": 54702, "z": 11, "cf": 0.9399999976158142 }, { "c": 2, "d": "PE InternalName metadata field", "i": "metadata/package/versioning::pe-internalname-field", "o": 54750, "z": 12, "cf": 0.699999988079071 } ], "ln": 54686 }, { "b": "xAibO001bw003*na]?Szpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002)%wDllvx-JhOrSC![", "n": [ { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 54890, "z": 16, "cf": 0.699999988079071 } ], "ln": 54874 }, { "b": "e=YzZyYFnK003m79SMivpYLIozVBqFBPt[KBo25ove$cAwDhYg002)%wDllvx-JhOrSC![e=Xl", "n": [ { "c": 2, "d": "PE ProductName metadata field", "i": "metadata/package/versioning::pe-productname-field", "o": 54998, "z": 11, "cf": 0.699999988079071 } ], "ln": 54982 }, { "b": "l\u0026ZS}Bo2.H004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001XMe=WN9e=W:ed/:5Vh2)", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 55090, "z": 14, "cf": 0.8999999761581421 } ], "ln": 55074 }, { "b": "000000000000000000000n)?S3\u0026*ncg^g)t000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 55296, "z": 6, "cf": 0.8999999761581421 } ], "ln": 55280 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 53248, 5.99, "r-x" ], [ ".rsrc", 53760, 1536, 3.29, "r--" ], [ ".reloc", 55296, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 119540.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "bss_like_section_count": 0.0, "section_overflow_count": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.01, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.06 }, "file": { "size": 55808.0, "entropy": 5.88, "size_bytes": 55808.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.99, "string_count": 669.0, "overall_entropy": 5.88, "entropy_variance": 5.83, "avg_string_length": 22.41, "max_string_length": 224.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 6.37, "string_length_stddev": 22.1, "largest_section_ratio": 0.95, "sentence_string_count": 36.0, "sentence_string_ratio": 0.05, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 53248.0, "entropy_max": 5.99, "entropy_mean": 3.12, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 4, "mol": "O(Al)H(Db)", "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg!!lib/net9.0/RedisVL.Connectors.VectorData.dll", "risk": 3, "sha": "c0bfde49f8be523c6c118257240ee9f1a658652098b08b8ef7a55d515b2cd280", "size": 55808, "traits": [ { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6000000238418579, "crit": 3, "desc": "System.Linq.Expressions namespace", "spans": [ [ 38614, 23 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE ProductVersion metadata field", "spans": [ [ 55090, 14 ] ] }, { "id": "micro-behaviors/fs/path/extension::dll-dup", "crit": 2, "desc": ".dll extension reference", "spans": [ [ 35655, 4 ] ] }, { "id": "metadata/binary/metrics/pe-details::dotnet-code-entropy-normal", "conf": 0.699999988079071, "crit": 1, "desc": ".NET code entropy in unpacked range", "spans": [ [ 0, 26 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "LINQ query operations", "spans": [ [ 37175, 11 ], [ 38614, 11 ] ] }, { "id": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "conf": 1.0, "crit": 3, "desc": "JSON polymorphism runtime marker", "spans": [ [ 36345, 16 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE FileVersion metadata field", "spans": [ [ 54702, 11 ] ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET Metadata Root (BSJB)", "spans": [ [ 15608, 4 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 53854, 15 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR runtime header present (COM descriptor)" }, { "id": "micro-behaviors/data/db/linq::lambda-expression", "conf": 0.6000000238418579, "crit": 3, "desc": "LambdaExpression class", "spans": [ [ 36140, 16 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET Assembly (mscoree.dll)", "spans": [ [ 15608, 4 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "ju[7cy-)[jA=U@kzAPf#e?!E(wO#0@wnb{]jTb2\u003cw?t$^krYAprc-B]B0bZAy\u0026jqSb4#7uA5]T9B7n({zddGrz/xo9CX}nez/PY6BAo5", "n": [ { "c": 1, "d": "File uses a document or configuration extension", "i": "metadata/file/extension/identity::doc-or-config-extension", "o": 0, "z": 19, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 520.0, "entropy": 4.81, "size_bytes": 520.0 }, "binary": { "overall_entropy": 4.81, "peak_region_bytes": 520.0, "peak_region_entropy": 4.81 } } }, "id": 5, "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg!![Content_Types].xml", "pid": 0, "sha": "1a6670ec6cb20a6520f5d6b9be859fcd7416bef2ba0e8e40bfbf0aaab5409e4f", "size": 520, "traits": [ { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "File uses a document or configuration extension", "spans": [ [ 0, 19 ] ] } ], "type": "xml" }, { "id": 6, "sha": "eae3b7cf47df6528275ba961b69502a9033868a7281523ccb4bb253c62d2dcf3", "path": "RedisVL.Connectors.VectorData.0.0.5.nupkg!!package/services/metadata/core-properties/89891406a92544288a41b32d87487d4b.psmdcp", "size": 890, "type": "xml", "depth": 1 }, { "id": 7, "sha": "645a4f91569e9bde0984b7f80037f5c5a780eebb912dcb6ede937edd0bb9949e", "path": "RedisVL.Connectors.VectorData@0.0.5.registry.json", "size": 1006, "type": "registry", "depth": 1 } ], "omitted_files": 2, "v": "8" } }