{ "llm": { "conf": 0.51422787, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate NuGet package metadata" }, "ml": { "v": "7", "eng": "2.4.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.16662662, "rte": "az", "prob": 0.16662662 }, { "cls": 0, "raw": 0.02453807, "rte": "az/nupkg", "prob": 0.02453807 } ], "prob": 0.30603978, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.3060397803783417, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000007420778274536133, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000006973743438720703, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.3060397803783417, "type": "pe" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000006884336471557617, "type": "xml" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00000712275505065918, "type": "xml" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000007420778274536133, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000009526808753435034, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-28T15:34:17Z" }, "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MLV\u003c@9k.CY/!4I000-n000xb003wDwO=Ave]\u003eJtBcI*OyqIUwm/N/Ia]+o+r[?Z#-NLo83]WRW^!4w}!{JNPQiw*k2AyK\u003ef5N.v.)w6!][Vx3Gr?w\u003e31jW4K*Xn!UKAmriMESZy\u0026$n9l$G7fLNDW", "n": [ { "c": 2, "d": "Archive contains an executable member", "i": "metadata/file/metrics::archive-contains-executable-member", "o": 0, "z": 31, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H(Cm)Md₂(BiPa)", "sha": "beffecd0d44d061f3252cf428ab3b4be9cbd8a52628bcabd82be762286ac084d", "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg", "risk": 4, "size": 29917, "type": "nupkg", "facts": { "metrics": { "file": { "size": 29917.0, "entropy": 7.88, "size_bytes": 29917.0 }, "binary": { "overall_entropy": 7.88, "peak_region_bytes": 25600.0, "peak_region_entropy": 7.85 }, "archive": { "file_count": 8.0, "member_count": 8.0, "script_count": 0.0, "zip_bomb_ratio": 2.64, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 28589.0, "compression.ratio": 0.65, "hidden_file_count": 2.0, "total_uncompressed": 43875.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 8.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 3.0, "timing.mtime_unique_ratio": 0.38, "misplaced_executable_count": 1.0, "timing.mtime_dominant_count": 4.0, "timing.mtime_spread_seconds": 52816.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.5, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 7.0 } } }, "ident": { "name": { "value": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://gitlab.kayicloud.com/kayi-cloud-enterprise/dotnet/kayisoft", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://gitlab.kayicloud.com/kayi-cloud-enterprise/dotnet/kayisoft", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "virtual", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "5.2.9", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded network URL with domain name", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 3 } ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash" }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 1152, "file": 3 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 3 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 533.0, "entropy": 5.21, "size_bytes": 533.0 }, "binary": { "overall_entropy": 5.21, "peak_region_bytes": 533.0, "peak_region_entropy": 5.21 } } }, "id": 1, "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg!!_rels/.rels", "pid": 0, "sha": "6ec9be57919181a0f216b6fe2d8079384a12dfc4e47c81ffcc3726abd073558b", "size": 533, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj{\u003cz\u003evpK7YxjSigzes9hjTaMYBz%n]flpSpwO\u003e\u003c%e]trjA=l2qw]]Unz/4dDvpK7Yxk8l@fetjogCpBtfk+]NAaJJiCYNytj{\u0026zPjz!UKvpS!*vlL2varR^?x\u003efz2vr(Ndz!s8zl1j^=l${dHzbtv@xLzu%e\u003c\u003cL{B9hthAXpl#vQ:4[o\u0026j2ax\u003efymarR^HjA+pRB7]Mgj#B@Fe\u0026=3EC4CYnx(v(M3lQDlauT7PBzbPkB3s+YA==Cjy=\u003cvVB-.qnA=TzKarR^HjAbsVygQ)%rDq[txMOunB2\u003e%cxk8E7vpy\u003c8vr(M%y\u0026sDbe[n*pfkC0wx!r?hz/]OxwO#Q3A=u5kB7E1nz//(dBt4ArD1?trw]{c*Ab](iwN/*ZA+)]DarR^Hjy\u00262Av@=p5BzkVhk1/sfx(!i8BrA$=v@DiXB-RkgzF77^z!a0bwJRRRwPIv4x(Ffdz/d-CarR^HjAL1AB3rl9D1?trw]]dYvSi]xpgXV(azbU5zdN{fA+^=\u003cByw*6j{\u0026zParS^!wPhNex([olC{4iOAaIfRxk8DiaA.ZvjTaMYBz#pZfe3%LBzLw{e]a)vx\u003e7%$B.0amz/4dyvr(Msv@c7awg.wgBy/GiA+PPafjY0yzE)]yyHIH5B8LVja%pxlzeB0ejTaF$hA0MIgbrw%iaBW3h.Wj4hE!T5w[B1.gg-p2h!luavLzw5v(U.QffPZ=arR^?wmYZ\u003ezE^r@v}/H}j{\u0026zParR^HjzeXMB-nEBvrc0(BvHpVzdN{fA+^/ZzE)]Ie?!Fk3lQDlarR^HauTgCAaJ]$wO#16azCvHb1(u\u0026x(!i8Bs]\u003c*A4TK)v@DiXB-RkgzF7N?z/fSszdN-iaA?spB7]MgjT8:oga\u003eNhaz2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj{\u0026zParR^HarS^SwPhi#wmYT*C{3*ijT9*rvrcrMvSi}=vSi}]vrlG?A:-\u003cbx(\u003e$9vpAXWBwkQRaA?spB7]MgjT8Znh.D)gaz2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj{\u0026zParR^Hjtgt/zV", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 50, "cf": 0.9800000190734863 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 929.0, "entropy": 5.18, "size_bytes": 929.0 }, "binary": { "overall_entropy": 5.18, "peak_region_bytes": 929.0, "peak_region_entropy": 5.18 } } }, "id": 2, "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg!!Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.nuspec", "pid": 0, "risk": 1, "sha": "a61884be3d896ac73683c63960ec1db49a96a926d4060a29daa9ca173db75a1b", "size": 929, "traits": [ { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 50 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 42, 515 ] ] }, { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 42, 743 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}ft@}d0000", "n": [ { "c": 2, "d": "PE contains exactly one resource entry", "i": "metadata/binary/resource::pe-single-version-resource", "o": 0, "z": 24, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000kMy^J00000000000000000000cozhc00000nb@R\u00260SSx7FfB%[c(h\u003c-0rr9100000000000000000000000000000000000000000000000000000000000000000L5*%g00T.JEfGVK1sjd#2lj-b@SS-g00WGP000uO5c8XqdGxCG6efH*r@-j20000018!+K017a!000vD0rraszXA9J3mC]P04R$5000vDcJBc=8/DF(017n60!7pM00BP17BBOi000f31{L5c26gNX017351POJ9c\u0026%wGd\u003c#nn017g%0W[@!017hdA%hKz27MZO00B+)0W[#/017gQ6efN\u0026Mh*)+0000018/dV019=/000uLAYBa1AbM=$0172)BPqzXzYX@V3mgc5000cFeF/:.0rr95@SSPc00WG!000uLFc2YJ1AbB-017330@@r7b}P]WEGoAG1PwPh000jAa]?PIc4D6$00Ei+000uLEGPSJ1skSocvL%}00Jo92(\u003c@fB0H.=3mgi9000dub(^]LzZCC:3mWw86Mj6N04PxC6efH*aohxw0rr9iA%@3G1{$LpEfY/M1oX@d1}pLj26hf)019SE001J06efK?jPCDZ0SSijA$efI1{$LrEf/(N1o[%R3ig5e1{xtZ000ca4G}g*000ci1QoqY000ca@SS(k00WG]000vAd/YLRdJOTt8VP\u003cBdOo+?1][Sa0^+dL00Ei\u003e000uQ9S^-e000uQhuK2c", "n": [ { "c": 1, "d": "No section reaches compression-grade entropy", "i": "metadata/binary/metrics/threshold::no-compression-grade-section", "o": 512, "z": 512, "cf": 0.8999999761581421 } ], "ln": 480 }, { "b": "3m-s.DKfVL1skS4cmYYgDKo-M1oJ]T000c7z.q1\u00263iHuR3\u0026*ng6ETa+04PJ0lq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCnncP4]byPQ)V\u003c3HgS0SI8bu5Y8x(mN800000tOc@oZYjumbumUx91\u0026kK5c8Xgbs+:9l\u0026Wh!ed}{.}#^01", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 1152, "z": 4, "cf": 1.0 } ], "ln": 1104 }, { "b": "wb]2iv@DiXB-RkgzF8)VzE=aPwNPW(o\u003ewx!vp%cKnP5Y\u0026yH)GivSk4WwozZ107pKhz/5r[B7/o9xg3PPB9hthA-csPvRG{UAzpvZB.\u003eQ?l1j!cvrlG?A:-\u003cbx()lYvQY", "n": [ { "c": 1, "d": "References the .NET Invoke member name", "i": "micro-behaviors/process/interpreter/reflection/runtime::invoke-token", "o": 3549, "z": 6, "cf": 0.6600000262260437 } ], "ln": 3517 }, { "b": "raf\u0026-083:Cx(!i8Bs]\u003c*A4TK)v@DiXB-RkgzF7N?z/fSszdN-uqEK3zx()6De[w^m08[e:By/p?o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003c\u003cL{w[+[2A::67z/bLHvrlG?A:-\u003cbx(\u003e%{z/ff3xlwl6BzkVh07/K@zF0P}B-H]jx(v\u003e?qEK3zx()6?lVl\u003c-", "n": [ { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 4302, "z": 4, "cf": 0.5 } ], "ln": 4254 }, { "b": "wN/*@z/bLHx\u003e8g4B8LVje\u003e72bwO#N6z/fRGl$HsGzE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh08)#Wx(mMJz/6D4A+PPkzuarXByd\u003c+z*2\u00269wPv=Bx\u003e8g4B8LVje\u003e72bwO#N6z/fRGlVl\u003cOx\u003eINevruj4zz1m\u0026zE^s007gWxw=", "n": [ { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 4511, "z": 17, "cf": 0.699999988079071 } ], "ln": 4463 }, { "b": "z/L?HqEK3zx()6?luNusvpKy$A^p2\u003czF0P}B-H]jz/L?gv@#Tf04}+\u003eBz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?S.wPRoTwPz%dv}xYYp\u0026Zbmz/ff3xlwlaq!o#)x\u003e7Z}08[e:By/qwqGV(0x(dAllVl*Xx(4v3q!o#)x\u003e7Z}07pycB.tu3zF8WZwmY/Zju+PeuVY%}A@Yc:B94", "n": [ { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 4920, "z": 18, "cf": 0.75 } ], "ln": 4872 }, { "b": "04QYJD1?trw]]T\u003evSi}/x\u003e86#p\u003c3?)x(mMolVl\u003c-B.$Yge(Da!vRG{Uq2*O@0rrNbwPhNex([olC#X)3ltgE.Ac15[fk20vy**^9yHIH5v@c7awg?wgz7/WkD1!\u003cuy\u0026sDbeOe*wwPz:gx(^\u0026swn=NcwPPOvvr(Ndz!s7\u003e00Jx60rr9b0rrf300001004Nj0rrf3004Lpojr9WB8LVje\u003cS@=e\u003c%z-z/5r[B7/o9xd=L\u0026zGx@qwPxy\u003ex\u003e86#p\u003c3?)x(mMJz/fSszdN-Zz!a0bwH[@%vr(Ndz!s8zl1j^=l${dHzbtv@xLzu%e\u003c\u003cL{B9hthAX5tlwPz\u003caz/dY}e\u002624te?!?0lV)i!B-I4RzE)%jA:-=naw^h\u0026y?WxLwQdl[yH}xDzGP=iFs6nGvrcrMvSi}=vSi}]vrlG?A:-\u003cbx(\u003e$9vpAXWBwkQ+l1j!cvrlG?A:-\u003cbx()lYvQ:4[o(S)CwozZ1efE(8vrcrMvSi}=vSi}]vrlG?A:-\u003cbx(\u003e$9vpAXWBwkQ-axA5]B7]MgjV1=Ie\u0026balefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-zAR(Wy?%7K1owG500\u0026P93JHeb00000000008X/-s00b!\u003c0SSi2=J0}B@5B-S@2kRo00000000000rr91", "n": [ { "c": 3, "d": "Hardcoded network URL with domain name", "i": "micro-behaviors/communications/http/url/domain::http-url-binary", "o": 6660, "z": 29, "cf": 0.699999988079071 }, { "c": 2, "d": "IPv4-like .NET assembly version", "i": "metadata/lang/compiler/managed::dotnet-ipv4-like-version", "o": 6855, "z": 15, "cf": 0.8500000238418579 } ], "ln": 6596 }, { "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026su(\u0026^+Mv?B0000000000+MxW400341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310SSx7000r90SSx7000r9kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 7774, "z": 15, "cf": 0.8999999761581421 }, { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 7680, "z": 5, "cf": 0.8999999761581421 } ], "ln": 7648 }, { "b": "000ob00031fAr^bfAr^bfAr{fvGn7Z002)%9rl9ulJz38z2!zMwDlPFBo3vZ002T(ve$MMx-JhOzVBwHBo0A-l\u0026Z{3v/QAEz2^xjBPuE.xAh-DzuaqHaokaozVBqFBPujTwDhYg004JHec2XJmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2^xjBPuE.xAh-DzuaqHe=XlszVBUPA@Zs.z2!bEASvY(qugb9vGo\u003cqx-JkPo-O2\u003c001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001\u003eRe=WTbe=W)ie=WN9004JHfAqaNnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2^xjBPuE.xAh-DzuaqHe=XlszVBUPA@Zs.z2!bEASvY(qugb9vGo\u003cqx-JkPo-O2\u003ce=YzZyYFnK001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw004/PfAqaNpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2^xjBPuE.xAh-DzuaqHe=XlszVBUPA@Zs.z2!bEASvY(qugb9vGo\u003cqx-JkPo-O2\u003ce=YzZyYFnK004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W)id/:eYh#\u003e\u0026phuk-qf-S%eg5$?+gYPGnv/Oj-hukVofAs6jwb[H/v/Oy!h2}j*w=K^\u003cirg/mwDjK!hukVowb{3rvGo\u003cqfAtU:vGo)rirf3V001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W)ie=WN9000000000000000000000000000000", "n": [ { "c": 3, "d": "PE version metadata includes FileDescription", "i": "metadata/package/versioning::pe-filedescription-field", "o": 8078, "z": 15, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes FileVersion", "i": "metadata/package/versioning::pe-fileversion-field", "o": 8206, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes InternalName", "i": "metadata/package/versioning::pe-internalname-field", "o": 8254, "z": 12, "cf": 0.699999988079071 }, { "c": 3, "d": "PE version metadata includes ProductVersion", "i": "metadata/package/versioning::pe-productversion-field", "o": 8558, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 8588, "z": 46, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 8422, "z": 16, "cf": 0.699999988079071 }, { "c": 1, "d": "Several short title-cased resource strings", "i": "metadata/binary/resource::short-titlecase-resource-words", "o": 7994, "z": 8, "cf": 0.800000011920929 }, { "c": 1, "d": "PE FileDescription field is populated", "i": "metadata/package/versioning::pe-file-description-present", "o": 8112, "z": 43, "cf": 0.949999988079071 }, { "c": 1, "d": "PE LegalCopyright field is populated", "i": "metadata/package/versioning::pe-legal-copyright-present", "o": 8412, "z": 1, "cf": 0.949999988079071 }, { "c": 1, "d": "PE FileVersion value is present", "i": "metadata/package/versioning::version-info-file-version-present", "o": 8232, "z": 7, "cf": 0.949999988079071 } ], "ln": 7962 }, { "b": "00000000000000000000000000000000000000000000000000000000000005axM3\u0026*ncnil!K00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 9216, "z": 6, "cf": 0.8999999761581421 } ], "ln": 9168 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 7168, 5.64, "r-x" ], [ ".rsrc", 7680, 1536, 2.55, "r--" ], [ ".reloc", 9216, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "clr.is_il_only": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 69540.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0.0, "bss_like_section_count": 0.0, "clr.is_32bit_preferred": 0.0, "clr.strong_name_signed": 0.0, "section_overflow_count": 0.0, "clr.is_native_entrypoint": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.49, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.09 }, "file": { "size": 9728.0, "entropy": 4.96, "size_bytes": 9728.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.64, "string_count": 151.0, "overall_entropy": 4.96, "entropy_variance": 5.18, "avg_string_length": 24.86, "max_string_length": 182.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.8, "string_length_stddev": 23.08, "largest_section_ratio": 0.74, "sentence_string_count": 5.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 7168.0, "entropy_max": 5.64, "entropy_mean": 2.76, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 3, "mol": "H(Cm)Md₂(BiPa)", "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg!!lib/net9.0/Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.dll", "pid": 0, "risk": 4, "sha": "62eea835c5f6bdd78c7f2a712082026b97e583dd9b16819aae2cf20de5533a2e", "size": 9728, "traits": [ { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 7774, 15 ] ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 8588, 46 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileVersion", "spans": [ [ 8206, 11 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes FileDescription", "spans": [ [ 8078, 15 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes ProductVersion", "spans": [ [ 8558, 14 ] ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE version metadata includes InternalName", "spans": [ [ 8254, 12 ] ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 1152, 4 ] ] }, { "id": "metadata/binary/layout::pe-no-signature-record", "conf": 0.949999988079071, "crit": 3, "desc": "PE has no signature record" }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "Hardcoded network URL with domain name", "spans": [ [ 6660, 29 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE COFF timestamp encodes a future date" }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 1152, 4 ] ] } ], "type": "pe" }, { "ctx": [ { "b": "ju[7cy-)[jA=U@kzAPf#e?!Flj{\u003cz.z^$%rarR^HjyJqLwO\u003e))C%hMTarR^HarR^?zEEx[k1/sfx(!i8Bs]\u003c*A4TK)v@DiXB-RkgzF7N?z/fSszdN-uqEK3zx()6DjtgOXzdL)rarR^", "n": [ { "c": 1, "d": "File uses a document or configuration extension", "i": "metadata/file/extension/identity::doc-or-config-extension", "o": 0, "z": 47, "cf": 1.0 } ], "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 160.0, "entropy": 4.65, "size_bytes": 160.0 }, "binary": { "overall_entropy": 4.65, "peak_region_bytes": 160.0, "peak_region_entropy": 4.65 } } }, "id": 4, "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg!!lib/net9.0/Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.xml", "pid": 0, "sha": "0982dfa3e9c9b5c9984f4b640fb7cde3718f256c4208becbd74be5bced358759", "size": 160, "traits": [ { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "File uses a document or configuration extension", "spans": [ [ 0, 47 ] ] } ], "type": "xml" }, { "id": 5, "sha": "9a2ad7955f0bde8d3f7b1091dc6884e5eb3945dee6abcbf53864fdc16496a4ed", "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg!![Content_Types].xml", "size": 583, "type": "xml", "depth": 1 }, { "id": 6, "sha": "4b23cedcd729e35bc933bf35ddba1a56e1e510e94d51b91cd41e6b5018275109", "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ.5.2.9.nupkg!!package/services/metadata/core-properties/b3ae02c41e834de2a9a98c2c67519fc1.psmdcp", "size": 692, "type": "xml", "depth": 1 }, { "id": 7, "mol": "Md", "sha": "11d07e1cc29e636b7f2ebd4c004c17fcccfb71d8585b836ab15538ee4d6327bb", "path": "Kayisoft.Abp.DicomPushing.Consumer.RabbitMQ@5.2.9.registry.json", "risk": 1, "size": 971, "type": "registry", "depth": 1 } ], "omitted_files": 3, "rev": "488c9", "v": "8" } }