{
  "llm": {
    "conf": 0.5153251,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "outcome": "benign",
    "interpretation": "Legitimate NuGet package metadata"
  },
  "ml": {
    "v": "7",
    "eng": "2.4.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.19876361,
        "rte": "az",
        "prob": 0.19876361
      },
      {
        "cls": 0,
        "raw": 0.031909674,
        "rte": "az/nupkg",
        "prob": 0.031909674
      }
    ],
    "prob": 0.3076073,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.3076072931289673,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000073909759521484375,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000006983677394600818,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007410844318656018,
        "type": "text"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007232030384329846,
        "type": "markdown"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007927417755126953,
        "type": "png"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.3076072931289673,
        "type": "pe"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007271766662597656,
        "type": "xml"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00000712275505065918,
        "type": "xml"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000073909759521484375,
        "type": "xml"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009655952453613281,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-28T09:11:45Z"
  },
  "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MMw2@9i84*1v$U000]s000xb003wDwO=Ave]\u003eJtBcI*iy63a7H4*1MKIaj$-ZzzsghN=qdP*42?NLADcQe\u003eN)aW\u003cxoo\u0026y*Cv$$X=C#ta=VQAUJlcrC^$d(#^1ca{(Uy*\u003c?dPAEI[w=?2C3\u0026#x(ur",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "ca6bd63ea9265cf0fd054ee7a8e41c17774cd09253b7aac4f5186adcee5e1f5e",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg",
        "risk": 4,
        "size": 35949,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 35949.0,
              "entropy": 7.91,
              "size_bytes": 35949.0
            },
            "binary": {
              "overall_entropy": 7.91,
              "peak_region_bytes": 30720.0,
              "peak_region_entropy": 7.84
            },
            "archive": {
              "file_count": 10.0,
              "member_count": 10.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 4.04,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 34503.0,
              "compression.ratio": 0.78,
              "hidden_file_count": 2.0,
              "total_uncompressed": 44064.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 10.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 4.0,
              "timing.mtime_unique_ratio": 0.4,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 25172.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.4,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 9.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Soenneker.AutoFaker.Overrides.Documents.Document",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/soenneker/soenneker.autofaker.overrides.documents.document",
              "kind": "homepage",
              "source": "nupkg.project_url"
            },
            {
              "url": "https://github.com/soenneker/soenneker.autofaker.overrides.documents.document",
              "kind": "repository",
              "source": "nupkg.repository_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Jake Soenneker",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "4.0.1104",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Soenneker.AutoFaker.Overrides.Documents.Document",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Hardcoded network URL with domain name",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 760,
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 6
              }
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 538.0,
              "entropy": 5.16,
              "size_bytes": 538.0
            },
            "binary": {
              "overall_entropy": 5.16,
              "peak_region_bytes": 538.0,
              "peak_region_entropy": 5.16
            }
          }
        },
        "id": 1,
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!_rels/.rels",
        "pid": 0,
        "sha": "bc3b61c940f08073242c54b5a032939f6aef40dba7e21504137884d0e7ff3a28",
        "size": 538,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj{\u003cz\u003evpK7YxjSigzes9hjTaMYBz%n]flpSpwO\u003e\u003c%e]trjA=l2qw]]Unz/4dDvpK7Yxk8l@fetjogCpBtfk+]NAaJJiCYNytj{\u0026zPjz!UKvpS!*vlL2varR^?x\u003efzaz!i*7wOU\u003c$e\u003cTS4z:[eJwPxz0C4CYmx\u003eg^@e\u003c%R/B.$YcBAo65z!0{bwO#PLfkj@X3lQDlauT*UA=U@kzAY)ffFk7mfF\u003e)BC4CYnx(v(M3lQDlauT7PBzbPkB3ri8yH[R!z!i*7wOU\u003c$jtgb=BzbPkB3o{NarR^?y?Wx\u003czGxwiBA}?pjTaDZAb]JhB7]Mgb0FZ)r6h*Ix\u003e7Z(B7EJxarR^HjzX.wwO#N2rDq[txMOunB2\u003e%cy?Wx\u003czGxxge]C/AwPPLyA+v41nMm/9y?Wx\u003czGxw?A+)]DarR^HjzwqzzA.=Az/dgDzF86+x\u003e870j{\u0026zParS^!wNPa^wJ\u003c0Xk$1Boe]tbYflgSjwnL)w3lQDlauTQ-z!-\u0026[Bx9u$k4]4WAc15[fk20vxMW=pv@DiqB8LSczE)P{AXzGLwO#x%yH}JsvrDWgw)]E^AXqoNwPz*9wmY*mwn+$2zdNQbB1R0wv%8T1zGE#]Ab](iwN/*ZA+)]DarR^Hjy\u00262Av@=p5BzkVhk0:6el3mo/mQZ7zAV=+@B-.K*z!BildiJLLwPz*9wmV(}z/M$xxK@q}vrl05l#MNTzdNQbaA7.7wN/*AfjXTnv@=p5BzkVhj{\u0026zParS^!wO+{^B7F9+By/ISrD8FSBy=O9wPhi#wmYT*C{347wO#x%yH}Jsl#MNTzdNQbB1P\u003e0v%8T1zGE1yzY*\u003e?fFkash-z\u003ccbqz8hgatssA+f5#vrl0Pz//Mij{\u0026zParS^Rz/x#xx\u003eIa3k0%mcD2^RixMLxlSur@IgbHNrfFUKen)#HDax9h\u0026zF\u003c33wPx)^v@DsiA+Pf1BuQ3OarR^?Byw*6k4eOQz!rA[wPw]iC4CYmx\u003eg^@ay]z2B.$YcBAnNnz!0{bwO#Pjwoq-jze0(gz^)D)v@@\u00264B-.Lhz!Bilazb4$wPw]7z!0{bwO#QdC4CYmx\u003eg=$v@(r(A=rdiz//(dBrC6ratdLyBuzi#vp%TB3lQDlauTWQAbP/iBz(hBaAR)FwJ.kIx(\u003eKwB-IpYb4#7uAc15[fk20vxMW=pv@DiqB8LSczE)P{AXzGLwO#x%yH}JsvrDWgw)]E^AXqoNwPz*9wmY*mwn+$2zdNQbB1R0wv%8T1zGE6BvSC){v}X1Hzddc@a%pxlzeB0ejT8*ugC?6DgH-f@i5$L7fL9aMwhVzSvL}QJiajZ8wIt]Hw\u00260\u003cHgbf%}ffPZ=arR^?wmYZ\u003ezE^r@v}/H}j{\u0026zParR^HjzeXMB-nEBvrc0(BvHpVzdN{fA+^/Zzu",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 55,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1413.0,
              "entropy": 5.05,
              "size_bytes": 1413.0
            },
            "binary": {
              "overall_entropy": 5.05,
              "peak_region_bytes": 1413.0,
              "peak_region_entropy": 4.98
            }
          }
        },
        "id": 2,
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!Soenneker.AutoFaker.Overrides.Documents.Document.nuspec",
        "pid": 0,
        "risk": 1,
        "sha": "83f84fee762e19eaf9ebfc6ab15855847b223438b23a89f7ddc93c163561d039",
        "size": 1413,
        "traits": [
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                55
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                42,
                1007
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "o?wqboLF0FzGxv@3pw-JD2^RixMLvBv\u003c@JQfFUEpgb7Evawc6TwGT]\u0026wO#x%yH}I[3q+qOze16jx(v(ix(+zgwPzu\u003eC{3:uvqZf#wgO\u003cnA+e/8z!pb4xKL{]wH[%CzY\u0026FaC{46qA=VepaA7.hvqfQ[zF782ay/teC)XF4aARphB0bKxw]@l9A+cw4zE:\u003e#B8#nfx\u003c(9{wftA3v%8T1zGGrex(v(iw[=6)B08(MxK@qgq/un\u0026CvtJ6a$k5=Bz\u0026pjwNPxZx(k5nxK@q+z!s9nvrb{4Cwhejz/{dAA+frlA+P39x(v(uazC.6y\u0026%o5zF78ox([3bB-X:xx(dNavruj4zxK4mwGV2cxj}",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "z/f91BzkVhB2\u003cTnra]?=vpBd#wGUG3AcVFrxj#xfzF%Shv}u=\u003ezE:(ixLzJgAaK6bx(!ufz/cXnz//Y6wGV5cvqG:5vR3V@zEWH9wmYo]x(k54y?%C*z/xA4B0bywaAIWmB97\u0026dBzkf1aAhmtBzkVhB0bykaARpdax9h\u003cBA.elwIaq%r7GC2q+]\u003eZs3Y.Mav#",
            "ln": 475,
            "col": 47,
            "line": 10
          },
          {
            "b": "l)bD8axg)2axH\u003cbqBa5SnKVM2pEVE3mn=Gzk#7xBlp\u003c\u003cxr9p:VmOcMOmn)bcmO=]8k{e#\u0026qDcjPrzkXRaw=6op!$1Uave:\u003cawLZcnLR-MnLR=Ao*}/Re*9.XawLYPmoh\u0026Lr3kagk$\u003c@{r7GB+k#*(PpF$alpF@r5pF+g(nK(rJav]p4l}70LavnG",
            "ln": 723,
            "col": 34,
            "line": 16
          },
          {
            "b": "r7GCQs4MsVefEkRnMehQm\u003c7o0pFAwEpGpvppEVE5qxOLaavw}1pdmJHnL-87s4MvZaxg)2ax869r98v-miCx7axg)2axqueawU(TpGf\u003eNqxOv@k$\u003c\u003cBm]HK4p9rIbmg8%?mPrCPqBJhB",
            "ln": 964,
            "col": 55,
            "line": 19
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1076,
              "entropy": 5.13
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 5.13
            }
          }
        },
        "id": 3,
        "mol": "K(Te)",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!LICENSE",
        "pid": 0,
        "risk": 1,
        "sha": "00792f4b9c7e6a8c02c3b3cc74051318b8e7e6b278dd8c776c98494bef7e468d",
        "size": 1076,
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                183,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                147,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                771,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                1012,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                133,
                0
              ]
            ]
          },
          {
            "id": "well-known/tool/development/vcs/github-web::github-repo-fetched-path",
            "conf": 0.98,
            "crit": 3,
            "desc": "Fetched github.com repository artifact"
          }
        ],
        "type": "text"
      },
      {
        "id": 4,
        "sha": "72e1231a92b4243029a8b0483a8118ed0e5c2b22c032563e7024560c3fc091a7",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!README.md",
        "size": 1255,
        "type": "markdown",
        "depth": 1
      },
      {
        "id": 5,
        "sha": "93511e8937b27717eb154ee90eaf1655d4dbbad2865ecfc5a7d0bd794c945c49",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!icon.png",
        "size": 16083,
        "type": "png",
        "depth": 1
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}8VPV}0000000000",
            "n": [
              {
                "c": 2,
                "d": "PE contains exactly one resource entry",
                "i": "metadata/binary/resource::pe-single-version-resource",
                "o": 0,
                "z": 24,
                "cf": 1.0
              }
            ],
            "ln": 0
          },
          {
            "b": "000000000000000kMy^J000000000000000000003[?OX00000nb@R\u00260SSx7{-GLp+NsEK0rr91000000000000000000000000000000000000000000000000000000000000000009S^-7000uQ9S^-7000uQ9S*V?000cKiSZYz000uc1apgI00B=P18![O01d6\u00260003F761swzX\u0026xN3mV2Q6efH*q#=)#0rr9i18/1R019\u0026=0003C18/4S019S.000vA8VP\u003cB3LAHt790qO0De}T019S+000uLc2T?8019S^000uOaohxG3mb){aPIGH26g%*019S?000uQ9S^-n000uQlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn/Ah9NbyPQ)l\u003c9F\u0026u\u003ccJgbu5Y8x(mN800000QZm231onA4bumUxS0JC75c8Xgbs+:9l\u0026Wh!XcScn6AXsnbsli+vGlxd000000SSi3r#4Co2)pkd0qVZL02tLm0rr91aPIGx1POJ50rr912lj-70@@r3bME/A7YTKo0rr910rr910rr910rr910SSi20rr911onA40rr910049y0rr91000i6Nf9l/1]].E}Vv35EGwTm4/^KK000i6=h*=A1][\u0026fY8@lqdGWi:1{06MY8@lqnDMHa1{0/!Y8@lq1oMgq1]#gnY8@lqQYF7f1]{vUY8@lqw=?\u0026i1]}0[Srit8w=X\u003ek1]{BYSrit8K]+BZ1{12(}Vv35",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 760,
                "z": 4,
                "cf": 1.0
              },
              {
                "c": 1,
                "d": "PE standard code/data section",
                "i": "metadata/binary/section/names::pe-code-data-standard-section",
                "o": 512,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 480
          },
          {
            "b": "q/uk+zE)P{AXoU2Bz\u003cSSyH}JspJ*q\u0026A+P5}B1P\u003e0v%8T1zGG}Ll#MNTzdNQbe[w^m08[e:By/p?xjVf(qEKDNz/2FMD2[7sz7XZ$w]83*BzkVh0b2\u003e+uQ!EtwPv=GvqYQ]ze1rcASv.4Bz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGD2[7sz7X.ezGGPfwIct*ze:i9wPyZXA=#ebwPE\u0026twNY^{xk8l@o(BMNA@YcSwO#x%yH}Jsm}DM\u003cmq^l+r://!wPE\u0026qBAzLqvS=^7raf/WwPR$[q/uk+zE\u0026",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 2852,
                "z": 18,
                "cf": 0.75
              },
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 2807,
                "z": 17,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 2784,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 2736
          },
          {
            "b": "e(1\u0026mlVm0Rl2Z=]r+lq)x(v(LB$\u003eW6fAzeM4IRxMvqPO1z/PRYx(!lfvr\u003eQRzdK2apdnb8f!+jl8ux*MxMOunB2\u003e%cB8LSczE)P{AXp\u003cuz2:LA0rrv5wO+{^B7CsKdGGI}lVl{?A+Pf1BrFD1atLSag+yEpgbZmEvqxA%q/uk+zE)P{ASu8b0rtqHzxIk/Bz\u003cSSyH}Jec{.#$z:FwPB-O#Oz*2YjA+P5}azbLjaARpdayX=2wGTxVv%8T1zGE1tvRPE:Bn#pK0r",
            "n": [
              {
                "c": 3,
                "d": "Hardcoded network URL with domain name",
                "i": "micro-behaviors/communications/http/url/domain::http-url-binary",
                "o": 3546,
                "z": 21,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "Copyright notice",
                "i": "metadata/package/license::copyright-word",
                "o": 3586,
                "z": 9,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 3482
          },
          {
            "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026su(\u0026^uiHre0000000000uiJd=00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*600031000c4002*#000c4002*#kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 4702,
                "z": 15,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 4608,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 4576
          },
          {
            "b": "005C\u003c00031fAr^bfAr^bfAr{fvGn7Z005q+kl7Y:lJz38z2!zMwDlPFBo3vZ002p+zu7^Vk(=3cBo3jVmGu\u0026%yxd]CASviZc\u0026=KkBPuH-zVA97zVBzIBPuE.df7E\u003czVB}XwDl-JASx!Nwb{fvaol0NzVB!TaolG-xAhPzaok\u003cJve$uGwDi?Ml\u0026.c9v/QSKz2!bEzua+UaolrWvGpcywDliuBn#pv002W)761vnlJz38z2!IPve$fBC(QOtve$cAwDhYg003WjBo3y.z#:}ViSH/kf934[zVBtGzuaLOwDlGCwDl-Je=YwYzVBRO004(Rf-RjOmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$zVBtGzuaLOwDlGCwDl-Je=XfqBPuH-zVAlbve$6ywDl-Je=XVEB]V7NASyaWx-IVzwDl=Ke=XotzVBnEBPumUwDlPFBo3vZe=XotzVBnEBPumUwDlPFBn#pv001[S3JHhcmGvc5yYF2DrSDXhASydXx-J5Kzu6Up001?Qe=WN9e=WQaf-S)cgYPcdfAq7M004(Rh2)TSnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$zVBtGzuaLOwDlGCwDl-Je=XfqBPuH-zVAlbve$6ywDl-Je=XVEB]V7NASyaWx-IVzwDl=Ke=XotzVBnEBPumUwDlPFBo3vZe=XotzVBnEBPumUwDlPFBo0][wb{ACyYBCn003)pb(^@CoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002v^zVB.RC(R\u003c+x-I=CxAibOaonwvaojd%fAr\u003cdgYP9cg5%0dg5%ijaok1lve$6ywDi?MqVH.owDlPFzuakFyxd]CASu7t005eZh2)TSpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$zVBtGzuaLOwDlGCwDl-Je=XfqBPuH-zVAlbve$6ywDl-Je=XVEB]V7NASyaWx-IVzwDl=Ke=XotzVBnEBPumUwDlPFBo3vZ",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes CompanyName",
                "i": "metadata/package/versioning::pe-companyname-field",
                "o": 5074,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 5150,
                "z": 15,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 5290,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 5346,
                "z": 12,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 5598,
                "z": 16,
                "cf": 0.699999988079071
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 4922,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE version company name populated",
                "i": "metadata/package/versioning::pe-company-name-populated",
                "o": 5100,
                "z": 21,
                "cf": 0.8500000238418579
              },
              {
                "c": 1,
                "d": "PE FileDescription field is populated",
                "i": "metadata/package/versioning::pe-file-description-present",
                "o": 5184,
                "z": 48,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE LegalCopyright field is populated",
                "i": "metadata/package/versioning::pe-legal-copyright-present",
                "o": 5516,
                "z": 37,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE FileVersion value is present",
                "i": "metadata/package/versioning::version-info-file-version-present",
                "o": 5316,
                "z": 10,
                "cf": 0.949999988079071
              }
            ],
            "ln": 4890
          },
          {
            "b": "F=EI90rt{@ASy1Twb{-Lv/QPJp5[Y5z2!bE00000qVH.owDlPFzuakFyxd]CASvY(k(=3cBo3jVmGu\u0026%yxd]CASvY(pxkLrwDl-JASx!Nwb{fvA@W/)l\u0026.c9v/QSKz2!bEzua+UA@W/)l\u0026.c9v/QSKz2!bEzua+U00000HYxgg0rt{@ASy1Twb{-Lv/QPJrSDXhASydXx-J5Kzu6UpgYPcdfArZ9f-S{dfAr{fd/.Hdg5%9ggYPGng5%9gvGnj+g5%oliriQ\u003cfAr^bwDjN/wDllvhukYpv/P%rh2}7=gxoxmve@g=h#)H\u0026fAr)evGp0ugxp?-fAr\u003cdf-RgNj]+@\u003c0rty=A@ZmYwDlMEvGpiAC(O@!rSDXhASydXx-J5Kzu6UpgYPcdfArZ9f-S{dfAr{fe=WN900000000000000000000000",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 5878,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE ProductVersion has SemVer git hash",
                "i": "metadata/package/versioning::pe-productversion-semver-git-hash",
                "o": 5908,
                "z": 49,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 6014,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE ProductName field is populated",
                "i": "metadata/package/versioning::pe-product-name-present",
                "o": 5772,
                "z": 48,
                "cf": 0.949999988079071
              }
            ],
            "ln": 5740
          },
          {
            "b": "00000000000000000000000000000000000000000000000000000000000003zmw3\u0026*ncei:am00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 6144,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 6096
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              4096,
              5.33,
              "r-x"
            ],
            [
              ".rsrc",
              4608,
              1536,
              3.27,
              "r--"
            ],
            [
              ".reloc",
              6144,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "clr.is_il_only": 1.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 50120.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "clr.is_32bit_required": 0.0,
              "bss_like_section_count": 0.0,
              "clr.is_32bit_preferred": 0.0,
              "clr.strong_name_signed": 0.0,
              "section_overflow_count": 0.0,
              "clr.is_native_entrypoint": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 4.13,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.1
            },
            "file": {
              "size": 6656.0,
              "entropy": 4.5,
              "size_bytes": 6656.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.33,
              "string_count": 106.0,
              "overall_entropy": 4.5,
              "entropy_variance": 4.66,
              "avg_string_length": 22.15,
              "max_string_length": 128.0,
              "peak_region_bytes": 1024.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.66,
              "string_length_stddev": 17.73,
              "largest_section_ratio": 0.62,
              "sentence_string_count": 5.0,
              "sentence_string_ratio": 0.05,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 4096.0,
              "entropy_max": 5.33,
              "entropy_mean": 2.89,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 6,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!lib/net10.0/Soenneker.AutoFaker.Overrides.Documents.Document.dll",
        "pid": 0,
        "risk": 4,
        "sha": "66d7551ef8abad57738027b07c86641fcffcb65b78f460ad45776960729c491a",
        "size": 6656,
        "traits": [
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                4702,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash",
            "spans": [
              [
                5908,
                49
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                5290,
                11
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "spans": [
              [
                5074,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                5150,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                5878,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                5346,
                12
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                760,
                4
              ]
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Hardcoded network URL with domain name",
            "spans": [
              [
                3546,
                21
              ]
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                760,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "id": 7,
        "sha": "8075db72cd889354d2370cbfa2a4362c782b484cb0b3ad8c2ad0fcc761a76aa0",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!lib/net10.0/Soenneker.AutoFaker.Overrides.Documents.Document.xml",
        "size": 2543,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 8,
        "sha": "63feef730c8c6225c83eeeb608a1575fcac22006897782d889c10c4310523657",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!![Content_Types].xml",
        "size": 712,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 9,
        "sha": "e9691767f924e586f0540dd7f16260f6b719e8b74a4acd90523f16e9604fd56c",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document.4.0.1104.nupkg!!package/services/metadata/core-properties/ca75615b51034106bac260ec5591cc74.psmdcp",
        "size": 804,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 10,
        "mol": "Md",
        "sha": "5ca85e39699fb9e4ad33311358cd83bedbd1defca9d2a17b3eb187d8057c5df1",
        "path": "Soenneker.AutoFaker.Overrides.Documents.Document@4.0.1104.registry.json",
        "risk": 1,
        "size": 1049,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 6,
    "rev": "488c9",
    "v": "8"
  }
}