{
  "llm": {
    "conf": 0.4993351,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "outcome": "benign",
    "interpretation": "Legitimate NuGet package metadata"
  },
  "ml": {
    "v": "7",
    "eng": "2.4.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.2847644,
        "rte": "az",
        "prob": 0.2847644
      },
      {
        "cls": 0,
        "raw": 0.0014123917,
        "rte": "az/nupkg",
        "prob": 0.0014123917
      }
    ],
    "prob": 0.2847644,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.2847644090652466,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001142422388511477,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001241763402504148,
        "type": "text"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012566645636979956,
        "type": "markdown"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001428524683433352,
        "type": "png"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.27977636456489563,
        "type": "pe"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013142824172973633,
        "type": "xml"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012248754501342773,
        "type": "xml"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000019530454665073194,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-28T04:02:13Z"
  },
  "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MRVv}=(zt@={0{000Sk000xb003wDwO=Ave]\u003eJtBcI!)y63a7m=g?nKAV]j7{cZRRk1?5S=3-\u0026YFx:tkJCqsYdT\u003can?4aPieu$(=6IG\u003cUNq!-.pMshIzK(K9iwQAE:l+.-*qQY}4:jRhH4ppnBkQ",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "e74e5ac338c5753583daeafc517718bb9d041edad7efa94e6f6970be87f148af",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg",
        "risk": 4,
        "size": 35651,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 35651.0,
              "entropy": 7.91,
              "size_bytes": 35651.0
            },
            "binary": {
              "overall_entropy": 7.91,
              "peak_region_bytes": 32768.0,
              "peak_region_entropy": 7.84
            },
            "archive": {
              "file_count": 10.0,
              "member_count": 10.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 5.04,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 34253.0,
              "compression.ratio": 0.77,
              "hidden_file_count": 2.0,
              "total_uncompressed": 44289.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 10.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 4.0,
              "timing.mtime_unique_ratio": 0.4,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 25172.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.4,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 9.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Soenneker.DataTables.Dtos.ServerResponse",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/soenneker/soenneker.datatables.dtos.serverresponse",
              "kind": "homepage",
              "source": "nupkg.project_url"
            },
            {
              "url": "https://github.com/soenneker/soenneker.datatables.dtos.serverresponse",
              "kind": "repository",
              "source": "nupkg.repository_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Jake Soenneker",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "4.0.20",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Soenneker.DataTables.Dtos.ServerResponse",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Hardcoded network URL with domain name",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 768,
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 530.0,
              "entropy": 5.14,
              "size_bytes": 530.0
            },
            "binary": {
              "overall_entropy": 5.14,
              "peak_region_bytes": 530.0,
              "peak_region_entropy": 5.14
            }
          }
        },
        "id": 1,
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!_rels/.rels",
        "pid": 0,
        "sha": "e47faf67f3969105093d0ba64429c607a7db850fdc4f2965e8a3a760bfc6cd2b",
        "size": 530,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj{\u003cz\u003evpK7YxjSigzes9hjTaMYBz%n]flpSpwO\u003e\u003c%e]trjA=l2qw]]Unz/4dDvpK7Yxk8l@fetjoga$stfk+]NAaJJiCYNytj{\u0026zPjz!UKvpS!*vlL2varR^?x\u003efzaz!i*7wOU\u003c$e\u003c%b\u0026vn{VAy?mVum09u*e(Mt4C4CX(wPI*ezGxwKfkj@X3lQDlauT*UA=U@kzAY)ffFkamjtg\u003e?A=U@kzAXyIarR^?vrDW9z/P[.n)#HDax9h\u0026zF\u003c33wPx)^vrDW9z/P[.3lQDlauTEOv}xL0wGV8uAaIfRwQ5fmwPI{bz/c:.o?wqDfkLujwO#N2j{\u0026zParS^.x\u003e7Z(B7Fu(y^8JOBz#pZfe4cQv}xL0wPGFwB.toce]L=yfhk2qjtgI+v}xL0wMr+!j{\u0026zParS^Xv@DlGx\u003e870e]UYvjtgzUz/d-CarR^HjAt1wwnL)wqBJ(to*{WKwiqI=wNPa^wJ*CzarR^?Ab](iwN/*ZA+){MBAzFyiXJd0x([3hvLheez7/%GwO#x%yH}JtB8LSczE)P{AXp)hByxo1vR/Q%e[x6xB1RJBA=#2mA+frhz/fScjtgU]z!-\u0026[Bx9u$j{\u0026zParS^SwPIv4x(Ffdz/d:8avGg8azbLjaARTjzGxS5BzkVhazC.nzY\u003cdgvR/P#w]zZbvrsa:fjXTnv@=p5BzkVhj{\u0026zParS^!wO+{^B7F9+By/ISqE%Y-C4z!rxKL^]B1R0mC04A#wO+{^B7F9+By/IS3lQDlauTdLAcVFrxj#xJlVl{?A+Pf1BrFD1atLSah7ZNqgbZmEvqxA%q/uk+zE)P{AY=0+z/x#xx\u003eIa3j{\u0026zParS^*vp%TBwmoN*BywS{wPF#8Bz(jyB7GxnwPz*5B8V5nB7DF8vrt}1vpB4:aAIamC4CXpA+frhz/fScay]Ojay[]5vrt{!y?mW0A=#2mA+frhz/fScaA7.7wN/*8v@(r(A=rdiz//(dBrC6ratdLyBuzi#vp%TB3lQDlauTWQAbP/iBz(hBaAR)FwJ.kIx(\u003eKwB-IpYb4#7uAc15[fk20vxMW=pv@DiqB8LSczE)P{AXzGLwO#x%yH}JswmoN*BywS{wPGFmBz(jMB7GxnwPz*5B8V5nB7DKrvSC){v}X1Hzddc@a%pxlzeB0ejT8*Bi5\u0026/Qf/rA2iC6%4wIE:Ig=e=6vpRi6w\u0026Kpgwmw$3f/RcDwJ7!QffPZ=arR^?wmYZ\u003ezE^r@v}/H}j{\u0026zParR^HjzeXMB-nEBvrc0(BvHpVzdN{fA+^/Zzu",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 47,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1108.0,
              "entropy": 4.95,
              "size_bytes": 1108.0
            },
            "binary": {
              "overall_entropy": 4.95,
              "peak_region_bytes": 1024.0,
              "peak_region_entropy": 4.96
            }
          }
        },
        "id": 2,
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!Soenneker.DataTables.Dtos.ServerResponse.nuspec",
        "pid": 0,
        "risk": 1,
        "sha": "59d571872c9ef108c9399605fe2e971de6bdd51a6fd13eb87a818ca42c20190e",
        "size": 1108,
        "traits": [
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                47
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                42,
                915
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1074,
              "entropy": 5.12
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 5.12
            }
          }
        },
        "id": 3,
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!LICENSE",
        "pid": 0,
        "risk": 1,
        "sha": "b62828e034a362e03609738a440f8f486ffcce4970f0f1eb958cbd99be8c8a7b",
        "size": 1074,
        "traits": [
          {
            "id": "metadata/permission/prose::permission-permission-term-english",
            "conf": 0.9,
            "crit": 2,
            "desc": "Permission or access term",
            "spans": [
              [
                51,
                0
              ]
            ]
          }
        ],
        "type": "text"
      },
      {
        "id": 4,
        "sha": "dc625d7ed09ddf6c76d59602663e6a606ffb8fb4e9b6164a14f4b64c5ac5af25",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!README.md",
        "size": 1153,
        "type": "markdown",
        "depth": 1
      },
      {
        "id": 5,
        "sha": "93511e8937b27717eb154ee90eaf1655d4dbbad2865ecfc5a7d0bd794c945c49",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!icon.png",
        "size": 16083,
        "type": "png",
        "depth": 1
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}*f4[s",
            "n": [
              {
                "c": 2,
                "d": "PE contains exactly one resource entry",
                "i": "metadata/binary/resource::pe-single-version-resource",
                "o": 0,
                "z": 24,
                "cf": 1.0
              }
            ],
            "ln": 0
          },
          {
            "b": "000000000000000kMy^J00000000000000000000LR8}o00000nb@R\u00260SSx703IsxtNQPj0rr91000000000000000000000000000000000000000000000000000000000000000009S*V?000cKa{4\u003c{0rr95dJOUr0SSi6dK1]@Ef6xG1s+C]DJKlF1s+O%1apmK00B+)0^+4I00B+}0T0\u0026N000cK9S*V(000cKa{4\u003c{1POJ9dJOUr1][SadK1]@EfGVK1s*A)4/=Olb)4#^000iH18!qx00T.LzW3gw1%\u003cB\u003e2MK\u0026eb[p5@3\u0026*nidPgr#000iH0=Fbu00T.KzWDEA1$yU}c\u003e=NX3mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCntM+3bbyPQ):ohFy!c2:Kbu5Y8x(mN800000OcYe}1onA4bumUxPA$O#5c8Xgbs+:9l\u0026Wh!UN7pfTo5w4bsli+vGlxd000000SSi3r#)}m2(\u003c@90qVZL02tLm0rr916Awak0SSi21][S64/=Of4fcwd6951j0rr91d/YLH0rr911][S63\u0026*nc0rr910SSi2002Q[0rr91000i6Bol{{1{1G3E/]@Qz2\u003eER4/\u0026j8000i6.#Q[Y1{0P-*xdSWaoHp11]$+b*xdSWklxNw1{0DW*xdSW}t]sM1]%\u003e?*xdSWLl6zu1]{Q-*xdSWtMPxT1]#ZCE/]@QFDpl61]#7mCln3HquqmI3im7bYAncl",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 768,
                "z": 4,
                "cf": 1.0
              },
              {
                "c": 1,
                "d": "PE standard code/data section",
                "i": "metadata/binary/section/names::pe-code-data-standard-section",
                "o": 512,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 480
          },
          {
            "b": "vqC{kvqfJTq/uk+zE)P{AXo:*BywcSvR/Q%e\u003c%/1B1Qy5A=#2mqE%]*z/fSce[w^m08[e:By/p?xjVf(lVl\u003c:x(n64BzkVhrbVL-zua-?BydyNzGGPgBZYxaz/eJ)yH}w-v@Dmbx(n64BzkVhrbVL-zu9QXB97#ge(VzbBs{gbz/dgawPzG[y?Xi7BzkVh08[e:By/qwqE%DRwN/*@z/bLND2[7sz7X!0CYUMgB8L{@xjVf(mriA!ASye(BydESA=k%#e[o0wASx3-B97#ge\u003c%zZxkRTeBzkla0b2\u003e+uSp@=vqFzEy\u0026\u003clewN[XIv@Dx#A@Zn)Bye0=Byw#Px(4)5A+e=VwN/U0wod--wPRoUz//A7qE%uRA+6j\u003eB7GD2rbV\u003e!y/j?Oz/Pxf08[e:By/qwqGV(0",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 3040,
                "z": 18,
                "cf": 0.75
              },
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 2979,
                "z": 17,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "System.Text.Json library reference",
                "i": "micro-behaviors/data/serialize/json::json-system",
                "o": 2948,
                "z": 16,
                "cf": 0.8500000238418579
              },
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 2874,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 2826
          },
          {
            "b": "e(1\u0026mlVm0Rl2Z=]r+lq)x(v(LB$\u003eW6fAzeM4IRxMvqPO1z/PRYx(!lfvr\u003eQRzdK2apdnb8f!+jl8ux*MxMOunB2\u003e%cB8LSczE)P{AXp\u003cuz2:LA0rrv5wO+{^B7CsKdGGI}lVl{?A+Pf1BrFD1atLSah7ZNqgbZmEvqxA%q/uk+zE)P{ASu7\u003e0rsJlavGg8azbLjaARTjzGxS5BzkVhazC.nzY\u003cdgvR/P#w]zZbvrsa401w@e2Sad/e\u00262akfAq8f0rs=fe?![kfA",
            "n": [
              {
                "c": 3,
                "d": "Hardcoded network URL with domain name",
                "i": "micro-behaviors/communications/http/url/domain::http-url-binary",
                "o": 3475,
                "z": 21,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "Copyright notice",
                "i": "metadata/package/license::copyright-word",
                "o": 3515,
                "z": 9,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 3411
          },
          {
            "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026su(\u0026^\u003c]+U:0000000000\u003c]^Hv00341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*600031000c4000Yk000c4000Ykkl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 4702,
                "z": 15,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 4608,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 4576
          },
          {
            "b": "001hC00031fAr^bfAr^bfAr{fvGn7Z003:ldf6wGlJz38z2!zMwDlPFBo3vZ002p+aoj!fq#/X]aol0NzVB!TaolG-ASxIFzua.TyYE(zBo31PzVBUPaol9Qzua+UzVy)WBo2.HvGpiAwDi?Mw=M-HASx}Rve$xHe=U\u003eK002W)761vnlJz38z2!IPve$fBC(QOtve$cAwDhYg003WjBo3y.z#:}ViSH/kf934[zVBtGzuaLOwDlGCwDl-Je=YwYzVBRO004rBdf6wGmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$zVBtGzuaLOwDlGCwDl-Je=Xotve$xHve%mbve%:pyYF2DA@W/)l\u0026.rezVB?Ue=X/IwDl-JB]V7NASw#qwDl=Kz#:!Rzua.TwDhYg001+O2(\u003c#amGvc5yYF2DrSDXhASydXx-J5Kzu6Up001?Qe=WN9e=WTbfArZ9fAq7M004rBeDt!KnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$zVBtGzuaLOwDlGCwDl-Je=Xotve$xHve%mbve%:pyYF2DA@W/)l\u0026.rezVB?Ue=X/IwDl-JB]V7NASw#qwDl=Kz#:!Rzua.TwDjs.wb{ACyYBCn003)pb(^@CoAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO002v^zVB.RC(R\u003c+x-I=CxAibOaonwvaojd%fAr\u003cdh2]idg5%0dg5%ijaok1lve$6ywDi?MqVH.owDlPFzuakFyxd]CASu7t004PJeDt!Kpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$zVBtGzuaLOwDlGCwDl-Je=Xotve$xHve%mbve%:pyYF2DA@W/)l\u0026.rezVB?Ue=X/IwDl-JB]V7NASw#qwDl=Kz#:!Rzua.T",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes CompanyName",
                "i": "metadata/package/versioning::pe-companyname-field",
                "o": 5030,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 5106,
                "z": 15,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 5230,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 5282,
                "z": 12,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 5518,
                "z": 16,
                "cf": 0.699999988079071
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 4922,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE version company name populated",
                "i": "metadata/package/versioning::pe-company-name-populated",
                "o": 5056,
                "z": 21,
                "cf": 0.8500000238418579
              },
              {
                "c": 1,
                "d": "PE FileDescription field is populated",
                "i": "metadata/package/versioning::pe-file-description-present",
                "o": 5140,
                "z": 40,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE LegalCopyright field is populated",
                "i": "metadata/package/versioning::pe-legal-copyright-present",
                "o": 5436,
                "z": 37,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE FileVersion value is present",
                "i": "metadata/package/versioning::version-info-file-version-present",
                "o": 5256,
                "z": 8,
                "cf": 0.949999988079071
              }
            ],
            "ln": 4890
          },
          {
            "b": "ASvJ*0rt{@ASy1Twb{-Lv/QPJp5[Y5z2!bE00000qVH.owDlPFzuakFyxd]CASvY(l\u0026ZS}Bo2.Hq#*tbvGpiAwDl=Ke=XotBo3jVA@W/)qVHweASym.wDl-JqugndA@ZdVzVBUPA@Y+K00000GA9Xa0rt{@ASy1Twb{-Lv/QPJrSDXhASydXx-J5Kzu6UpgYPcdfArZ9g5%0dd/.Hdirh2sh#\u003e\u0026ph#\u003eVkh2}7=irh5tw=KH+gYR7!f-U++fAr{fgYR7!h#)v!wb[B^ve%)th#)B*v/Q3tvGo*pfAr*ch#\u003e]rfAtU:hVJ*TiSGD^0rty=A@ZmYwDlMEvGpiAC(O@!rSDXhASydXx-J5Kzu6UpgYPcdfArZ9g5%0de=WN900000000000000000000000000000",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 5766,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE ProductVersion has SemVer git hash",
                "i": "metadata/package/versioning::pe-productversion-semver-git-hash",
                "o": 5796,
                "z": 47,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 5898,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE ProductName field is populated",
                "i": "metadata/package/versioning::pe-product-name-present",
                "o": 5676,
                "z": 40,
                "cf": 0.949999988079071
              }
            ],
            "ln": 5644
          },
          {
            "b": "00000000000000000000000000000000000000000000000000000000000003zmw3\u0026*ncV{1D\u002600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 6144,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 6096
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              4096,
              5.13,
              "r-x"
            ],
            [
              ".rsrc",
              4608,
              1536,
              3.0,
              "r--"
            ],
            [
              ".reloc",
              6144,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "clr.is_il_only": 1.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 55700.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "clr.is_32bit_required": 0.0,
              "bss_like_section_count": 0.0,
              "clr.is_32bit_preferred": 0.0,
              "clr.strong_name_signed": 0.0,
              "section_overflow_count": 0.0,
              "clr.is_native_entrypoint": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 3.99,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.1
            },
            "file": {
              "size": 6656.0,
              "entropy": 4.29,
              "size_bytes": 6656.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.13,
              "string_count": 101.0,
              "overall_entropy": 4.29,
              "entropy_variance": 4.28,
              "avg_string_length": 21.34,
              "max_string_length": 112.0,
              "peak_region_bytes": 1024.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.47,
              "string_length_stddev": 15.69,
              "largest_section_ratio": 0.62,
              "sentence_string_count": 5.0,
              "sentence_string_ratio": 0.05,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 4096.0,
              "entropy_max": 5.13,
              "entropy_mean": 2.74,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 6,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!lib/net10.0/Soenneker.DataTables.Dtos.ServerResponse.dll",
        "pid": 0,
        "risk": 4,
        "sha": "d3f39de278c92dc57736a28d2217bc428a853a8d6e5a1a2702b70027e4d41479",
        "size": 6656,
        "traits": [
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                4702,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash",
            "spans": [
              [
                5796,
                47
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                5106,
                15
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                5766,
                14
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                5230,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                5282,
                12
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                768,
                4
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "spans": [
              [
                5030,
                11
              ]
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Hardcoded network URL with domain name",
            "spans": [
              [
                3475,
                21
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                768,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "id": 7,
        "sha": "f6bf0e8598bbbe19a5673d3a6547492b7daabe85ff2542a2eb4bbb5c950ae94d",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!lib/net10.0/Soenneker.DataTables.Dtos.ServerResponse.xml",
        "size": 3213,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 8,
        "sha": "63feef730c8c6225c83eeeb608a1575fcac22006897782d889c10c4310523657",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!![Content_Types].xml",
        "size": 712,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 9,
        "sha": "4156429a3e13db01f70bae866cfe06e09a6cc0a22a89117e9a67fbc62fbf2d80",
        "path": "Soenneker.DataTables.Dtos.ServerResponse.4.0.20.nupkg!!package/services/metadata/core-properties/0b9c40245caf40a3bfabece51ff95aa9.psmdcp",
        "size": 777,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 10,
        "mol": "Md",
        "sha": "276b75f9e433a30c22d33a620acc8e48e2054449cf78569be9273954c4398cc6",
        "path": "Soenneker.DataTables.Dtos.ServerResponse@4.0.20.registry.json",
        "risk": 1,
        "size": 996,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 6,
    "rev": "01566",
    "v": "8"
  }
}