{ "ml": { "v": "7", "eng": "2.3.1-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.0004983048, "rte": "az", "prob": 0.0004983048 } ], "prob": 0.0008336107, "skip": [ { "rte": "az/nupkg", "why": "unavailable" }, { "rte": "az/nupkg", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.0008336107130162418, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000014136235222395044, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000012934207916259766, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000013361374840314966, "type": "markdown" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.0008336107130162418, "type": "pe" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000015834966688998975, "type": "xml" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000014205773368303198, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000014523665413435083, "type": "xml" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00001998742482101079, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-19T10:31:19Z" }, "path": "Iyu.Data.0.7.0.nupkg", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MN))]ivwZYvE/1008M\u003c000xb003wDwO=Ave]\u003eJtBcI*wy63a7mC[63KAS5\u0026BUka0IDQf\u003c-ud76OeBWw7M{iy{L06xdtvD$!)ZpQV:#M!tROUly!KwUq?w4hRr#TTox@Ajt}ECG5L2yC/)87iLa9r", "n": [ { "c": 2, "d": "Archive contains an executable member", "i": "metadata/file/metrics::archive-contains-executable-member", "o": 0, "z": 31, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H₂(DbPo₂)Md(Pa)", "sha": "c6a904097428dfab97febc00a3fd1012a641da30dd47a384f3b77b7c5ec77cc0", "path": "Iyu.Data.0.7.0.nupkg", "risk": 3, "size": 24355, "type": "nupkg", "facts": { "metrics": { "file": { "size": 24355.0, "entropy": 7.84, "size_bytes": 24355.0 }, "binary": { "overall_entropy": 7.84, "peak_region_bytes": 21504.0, "peak_region_entropy": 7.82 }, "archive": { "file_count": 8.0, "member_count": 8.0, "script_count": 0.0, "zip_bomb_ratio": 4.37, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 23331.0, "compression.ratio": 0.6, "hidden_file_count": 2.0, "total_uncompressed": 38582.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 8.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 4.0, "timing.mtime_unique_ratio": 0.5, "misplaced_executable_count": 1.0, "timing.mtime_dominant_count": 4.0, "timing.mtime_spread_seconds": 25168.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.5, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 7.0 } } }, "ident": { "name": { "value": "Iyu.Data", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://github.com/iyulab/iyu-framework-v5", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://github.com/iyulab/iyu-framework-v5", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "iyulab", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "0.7.0", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Iyu.Data", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "System.Linq namespace reference", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE compile timestamp far in future" }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.800000011920929, "crit": 3, "desc": ".NET Activator type reference", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-productname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE ProductName metadata field", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "from": [ { "off": 2856, "file": 4 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE FileDescription metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE FileVersion metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE InternalName metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE CompanyName metadata field", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6000000238418579, "crit": 3, "desc": "System.Linq.Expressions namespace reference", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE ProductVersion metadata field", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.7200000286102295, "crit": 3, "desc": ".NET GetFields reflection method reference", "from": [ { "file": 4 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash" }, { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "from": [ { "file": 4 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 498.0, "entropy": 5.19, "size_bytes": 498.0 }, "binary": { "overall_entropy": 5.19, "peak_region_bytes": 498.0, "peak_region_entropy": 5.19 } } }, "id": 1, "path": "Iyu.Data.0.7.0.nupkg!!_rels/.rels", "pid": 0, "sha": "3b32da3a92c12e7ecf5091857811d4e264c608d971b41444bdad55d73c7a8027", "size": 498, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 15, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh", "ln": 2, "addr": 42 }, { "b": "arR^HjAL1AB3sq-BS+Qkvrt{2xl4B1xMm\u0026hw].r%wP@6kyAN5bAbGlev@Dy0jtg!+xlcl", "ln": 13, "addr": 563 }, { "b": "arR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026IA+)(.xMOunB2\u003e%cxk8E3BZ=$kz/4dwD39}ivLqCvBUdiCvqPO1z/PRBB#pD^v@Dj3x((GZggSy2i5AJFvL?KGvQ%1ch.Wj6wNWwLh8n=Pv(ce4f/rx1g?eK1a%nK5", "n": [ { "c": 2, "d": "NuGet package declares repository", "i": "metadata/package/files/nuget::nuspec-repository", "o": 623, "z": 79, "cf": 0.8999999761581421 } ], "ln": 14, "addr": 619 }, { "b": "arR^Hjy\u00262xwO#3\u0026zEWx(B3o", "n": [ { "c": 2, "d": "NuGet package declares dependencies", "i": "metadata/package/files/nuget::nuspec-dependencies", "o": 752, "z": 254, "cf": 0.8999999761581421 } ], "ln": 15, "addr": 748 }, { "b": "arR^HarS^VA=l8taAR4jxjVfOA:-/@Cw?IqjTa=PBtkE4fD@W", "ln": 16, "addr": 767 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1158.0, "entropy": 5.18, "size_bytes": 1158.0 }, "binary": { "overall_entropy": 5.18, "peak_region_bytes": 1158.0, "peak_region_entropy": 5.2 } } }, "id": 2, "path": "Iyu.Data.0.7.0.nupkg!!Iyu.Data.nuspec", "pid": 0, "risk": 1, "sha": "ee49f68d1e0728935df088871835b6558ee996284d046815c19aad49c4f9f6ff", "size": 1158, "traits": [ { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 623, 79 ] ] }, { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 752, 254 ] ] }, { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 15 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "boQYCBUdiCvqPO1z/PRBB#o", "n": [ { "c": 1, "d": "Document or config file extension", "i": "metadata/file/extension/identity::doc-or-config-extension", "o": 0, "z": 9, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 19 }, { "b": "qGV(0x(dA7y?Wv0vrcSow]zYjBzbkdnQkC3B97\u00262yC3.%z/fSszdNl2vTf88AbY\u003evxjU%(A::63wftG8z/3Q\u003egFw{dz!9A}A@", "n": [ { "c": 2, "d": "Contains frequent English function words", "i": "metadata/file/profile/language::lang-english", "o": 36, "z": 3, "cf": 0.800000011920929 } ], "ln": 3, "addr": 20 }, { "b": "C4\u003ewctwW[YeN\u0026TpB97#lt{%xdBz#pZfe3%LBzb/ae[n*pfkkYOy**^azdEfevScgaBy/Fwe*9#hz*2\u00269wPF#5aAImmxkzb", "ln": 4, "addr": 98 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 3112.0, "entropy": 5.24, "size_bytes": 3112.0 }, "text": { "digit_ratio": 0.01, "space_count": 335.0, "total_lines": 79.0, "char_entropy": 5.24, "unique_chars": 87.0, "escape_density": 0.03, "avg_line_length": 38.39, "high_byte_ratio": 0.01, "max_line_length": 169.0, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.25, "last_line_length": 72.0, "whitespace_ratio": 0.13, "most_common_ratio": 0.09, "line_length_stddev": 39.57, "octal_escape_count": 1.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 2.0, "most_common_char_codepoint": 101.0 }, "binary": { "overall_entropy": 5.24, "peak_region_bytes": 3072.0, "peak_region_entropy": 5.19 } } }, "id": 3, "path": "Iyu.Data.0.7.0.nupkg!!README.md", "pid": 0, "risk": 1, "sha": "984c1f10650bc5b01efde790b1444ddac6890c0ff9c3529348da2e4c2cbf361e", "size": 3112, "traits": [ { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "Contains frequent English function words", "spans": [ [ 36, 3 ] ] }, { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "Document or config file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/extension/identity::markdown-file-basename", "conf": 1.0, "crit": 1, "desc": "Markdown document file extension", "spans": [ [ 0, 9 ] ] } ], "type": "markdown" }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000", "n": [ { "c": 2, "d": "PE CLR header (COM descriptor)", "i": "metadata/binary/framework::clr-runtime-header", "o": 0, "z": 1, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000kMy^J00000000000000000000qaHV!00000nb@R\u00260SSx7c[bb@03hau0rr9100000000000000000000000000000000000000000000000000000000000000000a{4\u0026{6951tdTzc#c\u003e(TY3iI97g5}pPb]dho2(\u003c@fQhH+D01755iSYyi761sw11jPU00T]l0S%?!000udc\u003coOJ1$xPM8..A}UMaU60rr9i0=F[Q019SZ000vA8uo:A3oiRq000jw8VP\u003cBzYw-S3u3{+0168:tl/6/000um2Yy^+016ewc)eG\u00263mdn9cj7s*5D)1}000uShXufv1][Sceh2oK0006Ga]?PI7Mxsk00awY5D[?DbldYJc)O=)3uNi!009-p2OvkUb(^]L2x7{?017rG?u\u003cGs1{Y5]000wY25+**017=d%nSbQ3i\u00263=25+\u003c?01dHh0uq7t0STOFxn#%0000000SS/jL+!u!00000WGmJ/zZUO=3vSlX00BP17BBOo000f31@44q26hi[017352MK\u0026cc\u0026\u003cqFd\u003egJ06efH*NG9r/0SSij=\u003cx:M8Z()g0165Y0SSiJc5#XXec2USFgQ:33mgZDc[UG13uE\u003c201alg000ul77qZ22md7i000@E5^eaG3ig5Bz.Rj(3kiKD5D\u003cf)z..p)3mdnbckm%lc\u003c6CHd\u003cV+Ickm%lc]p]73mdnacj{v]1+5360162A1-Dl#01afe000ur1QP99000ui7G.7K", "n": [ { "c": 1, "d": "No section reaches compression-grade entropy", "i": "metadata/binary/metrics/threshold::no-compression-grade-section", "o": 512, "z": 512, "cf": 0.8999999761581421 } ], "ln": 480 }, { "b": "vGlxndLt=:000jN3\u0026*ngdJOTtvGlxndLt==000jN4fcwhdJOTtvGlxndGxCGlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCnJ0YK+byPQ){Zd03CNKMLbu5Y8x(mN800000A2eGO8#]%sbumUxJ28D]5c8Xgbs+:9l\u0026Wh!Oehe9wcJ2l", "n": [ { "c": 2, "d": ".NET metadata root signature (BSJB)", "i": "metadata/binary/framework::dotnet-metadata", "o": 2856, "z": 4, "cf": 1.0 } ], "ln": 2808 }, { "b": "wPHdUD2v9(B7GD2nPNQAwnbT\u0026wN\u003e^hwPQyQwO+(SlVM:DBy!3YB97\u0026dv}tTcz^^D[B7n+Ypiyw?vpB4:07y^FzdN-@vR/PQnKNolAbP/avR/PQqGV(0x(dAJx\u003eq9\u003enmuyDy?iPAB-4", "n": [ { "c": 1, "d": "CreateInstance member-name token", "i": "micro-behaviors/process/interpreter/reflection/runtime::create-instance-token", "o": 6084, "z": 14, "cf": 0.800000011920929 } ], "ln": 6052 }, { "b": "A-vs6wDkp@B-.53y?l4MBzk\u0026xrc-B]07?DUe\u003c\u003cL$wDkCsv@=Hez!s8zmq^iYBA{t@vqPO1z/PRXz/Py?o\u003ewAWz!8gyB7Ctyo)7L^vR/QPD2NsYvrk#WnM6bdwkv8VC#eK1AaK6iC%U}XwDlvOByd*:wnb{\u0026y!nnSz/PzRvrk#Wl${ZYz/YE\u0026rc0mXvrcB20b2\u003e+uSh5PBy+CvzGGPmC#F/[By+CrB8$]fvR*r:wPRu\u003evrt{zBAzLqvS=^707c", "n": [ { "c": 3, "d": ".NET MethodBase class reference", "i": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "o": 6398, "z": 10, "cf": 0.75 } ], "ln": 6334 }, { "b": "wO.uro)7L^vR/QIz!9A}07y:kx(0=EwOkZ#By/FUy?%8svqG-WnQkChl$7gCe[w^m09r-vrDq)QB7GD2nPXJX0b2\u003e+uShk\u003eBy/p?r7gXEz2!iWBydQXmq^l+07ggjv}xE)vruj4zD7K\u0026wO}GTvqYN^y\u00260K4x(v(*z!\u0026{408mfqA=l2qw]]T]zGGPm", "n": [ { "c": 2, "d": ".dll extension reference", "i": "micro-behaviors/fs/path/extension::dll-dup", "o": 7255, "z": 4, "cf": 0.5 }, { "c": 1, "d": ".NET set_Item method reference", "i": "micro-behaviors/data/manipulation::dotnet-item-setter-token", "o": 7267, "z": 8, "cf": 0.6499999761581421 } ], "ln": 7207 }, { "b": "AZ+j(A+frkx(v\u003e?lVl\u003c-Byx6emr\u0026=(wPI{bz/bLwx(mv1C%#%%A+frkx(v\u003e?q*ACawO\u003c4$B-8qnzdLs#wPzG[y?Xi7BzkVh08[e:By/qwqE%DRwN/*@z/bLAx\u003eq9\u003enP5cU08m3DxM4AMzF0!!o\u003ewfJwPyvWw]vVFD2[7sz7XH@zGbUMxM4^1piyz.wPv=Ix(dATA=lbnwmY=YBzkP6p\u0026ZF$x\u003eg^}08mxxwO:XQx(4r\u003eASx@{wmYNzB.LV5wPv=Bz!9A}lVl\u003cOx\u003eINevruj4zBeFWy?d9$0aP}+w[+[2A::67z/d):x(4r\u003eASwHplVl\u003c:wQ5q)Acb/jzGt", "n": [ { "c": 3, "d": "System.Linq namespace reference", "i": "micro-behaviors/data/db/linq::linq-queries", "o": 7582, "z": 11, "cf": 0.699999988079071 }, { "c": 2, "d": ".NET System.Reflection namespace reference", "i": "metadata/lang/compiler/managed::reflection-namespace", "o": 7532, "z": 17, "cf": 0.699999988079071 }, { "c": 2, "d": "System.Runtime.serialization namespace ref", "i": "micro-behaviors/data/serialize/object::runtime-serialization-namespace", "o": 7503, "z": 28, "cf": 0.6000000238418579 } ], "ln": 7455 }, { "b": "piyz.wPydRzGYPiBy/E)mqVEEy^zPxA+frklVl\u003c=wPz)7ASwW1zGP/cA::6dASwQvBvy7\u0026zdN-@Bz(g1l1t1JC42GhASv.4Bz(g1e[nykz/L?HnP5SYA:@W1Bz(g1nQkCTx(dB5Byx39nP5SYA:@W1Bz(g1q^\u003c\u0026XlUG[CxjVcQzGGDgv}xR3z/L?Lx\u003e8g4B8LVje\u003e6V1x([R\u0026A:-/@Cw?IqlVm0Re\u003c%zZxkRTeBzkla08[e:By/qwl${7xzF%Prx\u003e8h:m}D^ix\u003eq9\u003eA@Yc:B97#ge(D?fBzkP6e\u003c\u003cL]Aa%c1A-lK\u0026C4\u003eC$A@XQtvS=r@x(mMTz!9B208)rHx(mMJxKL^\u003ewPE\u0026uzGG]kwPE\u0026yD37-bz/Pzwmq^iYBzkrc07QQxp\u0026ZF[wPz)bwPE\u0026wwPQvUBzk\u0026xrc-B]A@X:tB46$?zb1OUvR6NCBAzLqvS=^7A@XZwBxh*^B.bQ]q*ACawO\u003c4$B-8qnzdLs#wPzG[y?Xi7BzkVhe(lO5ze19aC4CZ{ltpsFx(mMMy**%$08[e:By/qwra{q-vpT7\u0026xd^d(B8b*%lV)D(z/4^ZBAh88B-.g-CYWImB7]MgA@XNCy\u00260V)BzkVhmr\u0026]=zGxJgzGt!RD2[7sz7XH@zGdo$CYmXmB8#5lzGt!RD2[7sz7Xg]y\u00260V)BzkVhA@XNCzF0P}B-I4Xz/f-fzGGPhzGt!CvNC6KBy/YspJgz\u0026z/fQ@z/x/jz/fQ@l2Z^VC#OG{wPI%4ze:K@o\u003e!9Tz/Y\u0026eBs{11Bzk\u0026xmSI{OwP@6kyEr2XwIcX*BywY*Byu^*B.LV5wPv", "n": [ { "c": 3, "d": "LINQ expression-tree API reference", "i": "micro-behaviors/data/db/linq::linq-expressions", "o": 8317, "z": 23, "cf": 0.75 }, { "c": 3, "d": "Dynamic proxy generation (Castle, etc.)", "i": "micro-behaviors/process/hook/interception::dynamic-proxy", "o": 7913, "z": 12, "cf": 0.800000011920929 }, { "c": 3, "d": "Method interception capability", "i": "micro-behaviors/process/hook/interception::interceptor-comp", "o": 7938, "z": 11, "cf": 0.75 }, { "c": 3, "d": ".NET GetFields reflection method reference", "i": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "o": 8034, "z": 9, "cf": 0.7200000286102295 }, { "c": 3, "d": ".NET Activator type reference", "i": "micro-behaviors/process/interpreter/reflection/runtime::activator", "o": 7890, "z": 9, "cf": 0.800000011920929 }, { "c": 2, "d": ".NET System.Diagnostics namespace reference", "i": "metadata/lang/compiler/managed::diagnostics-namespace", "o": 8015, "z": 18, "cf": 0.75 }, { "c": 2, "d": "System.Runtime.serialization namespace ref", "i": "micro-behaviors/data/serialize/object::runtime-serialization-namespace", "o": 8194, "z": 28, "cf": 0.6000000238418579 }, { "c": 1, "d": "GetProperties member-name token", "i": "micro-behaviors/process/interpreter/reflection/runtime::get-properties-token", "o": 8131, "z": 13, "cf": 0.6000000238418579 } ], "ln": 7826 }, { "b": "r://!wKyxNC4CYowPz?(nQkCVvqH6$lVl\u003c=wPz)7A=RjDAbYSsmq^l+o\u003ewfJwPydRzGYPiBy/Gl06$danP5SYA:@W1Bz(hv07y:kx(37Cwo8m5A@X^SBUl41A+c\u003e7vqH6$pHX6Iv@#+(lVl\u003c=wPz)7A.P$YAa%i5nnh%-A@Zn)Bye3!wmoN\u003ewi\u003eqqB7GD2lVM:DBy!#GBo29CygQ)%07pmqwMiwXwLV]IB7GB[m}D^yvqH6$pJw\u003cmw)]*#Bo3s", "n": [ { "c": 1, "d": "Interceptor class reference", "i": "micro-behaviors/process/hook/interception::interceptor-class", "o": 8543, "z": 11, "cf": 0.6000000238418579 } ], "ln": 8479 }, { "b": "B8U@7C$}^+wEf$:mn$x:fFk3!0rrsrD39}ivGlxp0rrv5wO+{^B7CsK7Y:QIlVl{?A+Pf1BrFD1azDazy**=M07u[*kXUH^eOo3izdN{fA+^mIh98\u003cQl$7gCas!N8A:-{2qa@9MB-8qnzdK\u00264A:-/@Cw?IqazbLjatczTr3i[He=U\u003eW0rruUe\u0026Lype?^n9gx", "n": [ { "c": 2, "d": "Copyright notice", "i": "metadata/package/license::copyright-word", "o": 10206, "z": 9, "cf": 0.6000000238418579 } ], "ln": 10158 }, { "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae?#-@V0000000000?#+!o00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000312lj-7000002lj-700000kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 11358, "z": 15, "cf": 0.8999999761581421 }, { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 11264, "z": 5, "cf": 0.8999999761581421 } ], "ln": 11232 }, { "b": "000#v00031fAr^bfAr^bfAr{fvGn7Z005C/k(Z]=lJz38z2!zMwDlPFBo3vZ003ZkC(R%!eDxw.ASxIFz2!bECk#KYASx\u003ePeDx}]h2]Vqaokgql\u0026ZS}Bo2.Haoi[(aoj[i", "n": [ { "c": 1, "d": "Several short title-cased resource strings", "i": "metadata/binary/resource::short-titlecase-resource-words", "o": 11578, "z": 8, "cf": 0.800000011920929 } ], "ln": 11546 }, { "b": "Bo31Pz2!bEaol0NASxIFz2!bECk#KYASx\u003ePaol0NzVB!Taoj1]p5)Y.q#!3vf-S)ce=U\u003eK001RK2lj=8lJz38z2!IPve$fBC(QOtve$cAwDhYg003ZkC(R%!yYE(zvGlxd0024W2(\u003c#amGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002N\u003cC(R%!e=Xotve$xHve{oc001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001XMe=W*ge=WN9e=WN90024W4fczenDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002N\u003cC(R%!e=Xotve$xHve}[Wwb{ACyYBCn002Q\u003e6954koAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002v^zVB.RC(R\u003c+x-I=CxAibOaonwvaol9QC(R%!yYE(zvGlxd002s=4fczepxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002N\u003cC(R%!e=Xotve$xHve}[Wwb{ACyYBCn002s=5Dz?ipYLIozVBqFBPt[KBo25ove$cAwDhYg002N\u003cC(R%!aoj\u003ehASxIFz2!bECk#KYASx\u003ePaolM+h2)QR004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001XMe=W*ge=WN9d/.s8wb[Q\u0026g5%olgYPAlf-UU.gYQ$+f-UU.wb{cuhukVofAs6jw=MxxvGna.hukPmg5$[^wDliugYPGngYPlgh2}4+irg(ov/OH?fAq7M001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001XMe=W*ge=WN9e=WN9000000000000000000000000000000", "n": [ { "c": 3, "d": "PE CompanyName metadata field", "i": "metadata/package/versioning::pe-companyname-field", "o": 11734, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE FileDescription metadata field", "i": "metadata/package/versioning::pe-filedescription-field", "o": 11782, "z": 15, "cf": 0.699999988079071 }, { "c": 3, "d": "PE FileVersion metadata field", "i": "metadata/package/versioning::pe-fileversion-field", "o": 11842, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE InternalName metadata field", "i": "metadata/package/versioning::pe-internalname-field", "o": 11890, "z": 12, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductName metadata field", "i": "metadata/package/versioning::pe-productname-field", "o": 12094, "z": 11, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion metadata field", "i": "metadata/package/versioning::pe-productversion-field", "o": 12162, "z": 14, "cf": 0.699999988079071 }, { "c": 3, "d": "PE ProductVersion has SemVer git hash", "i": "metadata/package/versioning::pe-productversion-semver-git-hash", "o": 12192, "z": 46, "cf": 0.8999999761581421 }, { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 12026, "z": 16, "cf": 0.699999988079071 }, { "c": 1, "d": "PE version company name populated", "i": "metadata/package/versioning::pe-company-name-populated", "o": 11760, "z": 6, "cf": 0.8500000238418579 }, { "c": 1, "d": "PE FileDescription field is populated", "i": "metadata/package/versioning::pe-file-description-present", "o": 11816, "z": 8, "cf": 0.949999988079071 }, { "c": 1, "d": "PE LegalCopyright field is populated", "i": "metadata/package/versioning::pe-legal-copyright-present", "o": 11980, "z": 19, "cf": 0.949999988079071 }, { "c": 1, "d": "PE ProductName field is populated", "i": "metadata/package/versioning::pe-product-name-present", "o": 12120, "z": 16, "cf": 0.949999988079071 }, { "c": 1, "d": "PE FileVersion value is present", "i": "metadata/package/versioning::version-info-file-version-present", "o": 11868, "z": 7, "cf": 0.949999988079071 } ], "ln": 11670 }, { "b": "00000000000000000000000000000000000000000000000000000000000006*I:3\u0026*ncBt%m200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 12800, "z": 6, "cf": 0.8999999761581421 } ], "ln": 12752 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 10752, 5.73, "r-x" ], [ ".rsrc", 11264, 1536, 2.55, "r--" ], [ ".reloc", 12800, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "clr.is_il_only": 1.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 75968.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "clr.is_32bit_required": 0.0, "bss_like_section_count": 0.0, "clr.is_32bit_preferred": 0.0, "clr.strong_name_signed": 0.0, "section_overflow_count": 0.0, "clr.is_native_entrypoint": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.12, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.07 }, "file": { "size": 13312.0, "entropy": 5.21, "size_bytes": 13312.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.73, "string_count": 223.0, "overall_entropy": 5.21, "entropy_variance": 5.34, "avg_string_length": 16.9, "max_string_length": 97.0, "peak_region_bytes": 5120.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.47, "string_length_stddev": 11.58, "largest_section_ratio": 0.81, "sentence_string_count": 6.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 10752.0, "entropy_max": 5.73, "entropy_mean": 2.79, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 4, "mol": "H₂(DbPo₂)Md(Pa)", "path": "Iyu.Data.0.7.0.nupkg!!lib/net10.0/Iyu.Data.dll", "pid": 0, "risk": 3, "sha": "3b84dca849aa34d4c3558a6bef96b3f344160aeb2bb373c381921142a9f0bc46", "size": 13312, "traits": [ { "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5", "conf": 0.699999988079071, "crit": 1, "desc": "Code entropy is 7.5 or lower", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR header (COM descriptor)" }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE ProductVersion metadata field", "spans": [ [ 12162, 14 ] ] }, { "id": "metadata/package/versioning::pe-companyname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE CompanyName metadata field", "spans": [ [ 11734, 11 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "System.Linq namespace reference", "spans": [ [ 7582, 11 ], [ 8317, 11 ] ] }, { "id": "micro-behaviors/data/db/linq::system-linq-expressions", "conf": 0.6000000238418579, "crit": 3, "desc": "System.Linq.Expressions namespace reference", "spans": [ [ 8317, 23 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE FileVersion metadata field", "spans": [ [ 11842, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::methodbase-class", "conf": 0.75, "crit": 3, "desc": ".NET MethodBase class reference", "spans": [ [ 6398, 10 ] ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET metadata root signature (BSJB)", "spans": [ [ 2856, 4 ] ] }, { "id": "metadata/package/versioning::pe-productname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE ProductName metadata field", "spans": [ [ 12094, 11 ] ] }, { "id": "metadata/build/reproducible::pe-reproducible-build", "conf": 1.0, "crit": 2, "desc": "Built with /Brepro (deterministic)" }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 11358, 15 ] ] }, { "id": "metadata/package/versioning::pe-filedescription-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE FileDescription metadata field", "spans": [ [ 11782, 15 ] ] }, { "id": "metadata/package/versioning::pe-internalname-field", "conf": 0.699999988079071, "crit": 3, "desc": "PE InternalName metadata field", "spans": [ [ 11890, 12 ] ] }, { "id": "metadata/package/versioning::pe-productversion-semver-git-hash", "conf": 0.8999999761581421, "crit": 3, "desc": "PE ProductVersion has SemVer git hash", "spans": [ [ 12192, 46 ] ] }, { "id": "micro-behaviors/process/interpreter/reflection/runtime::activator", "conf": 0.800000011920929, "crit": 3, "desc": ".NET Activator type reference", "spans": [ [ 7890, 9 ] ] }, { "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp", "conf": 0.949999988079071, "crit": 2, "desc": "PE compile timestamp far in future" }, { "id": "micro-behaviors/process/interpreter/reflection/resolve::get-fields-call", "conf": 0.7200000286102295, "crit": 3, "desc": ".NET GetFields reflection method reference", "spans": [ [ 8034, 9 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET managed assembly", "spans": [ [ 2856, 4 ] ] } ], "type": "pe" }, { "id": 5, "sha": "7fa75e3e35c2840fce671ab0543d8dd089d00d3832923363829ed47717927a8a", "path": "Iyu.Data.0.7.0.nupkg!!lib/net10.0/Iyu.Data.xml", "size": 6251, "type": "xml", "depth": 1 }, { "id": 6, "sha": "70b483c5066b0f062f2102cd8f0c4b2fde9e919b5a9204689dd67e64b0cc518e", "path": "Iyu.Data.0.7.0.nupkg!![Content_Types].xml", "size": 582, "type": "xml", "depth": 1 }, { "id": 7, "sha": "0f5163a4a314319ac2d440096947a44915b038818cb49ee7a8c12efa403e7140", "path": "Iyu.Data.0.7.0.nupkg!!package/services/metadata/core-properties/61a65360d6da4dacbbf9dcf257bb4995.psmdcp", "size": 685, "type": "xml", "depth": 1 }, { "id": 8, "mol": "Md", "sha": "46a24a78d4c2ca30067e99d169ff2c77ee25f6b9cc0b273dc5e449a6ea28309b", "path": "Iyu.Data@0.7.0.registry.json", "risk": 1, "size": 923, "type": "registry", "depth": 1 } ], "omitted_files": 4, "v": "8" } }