{
  "llm": {
    "conf": 0.2529066,
    "error": "LLM endpoint http://10.9.8.149:8000/v1 did not become healthy within 120s",
    "model": "Qwen/Qwen3.6-27B",
    "review": false,
    "outcome": "benign"
  },
  "ml": {
    "v": "7",
    "eng": "2.2.0-beta.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.2529066,
        "rte": "az",
        "prob": 0.2529066
      },
      {
        "cls": 0,
        "raw": 0.001367271,
        "rte": "az/nupkg",
        "prob": 0.001367271
      }
    ],
    "prob": 0.2529066,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.25290659070014954,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001142422388511477,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008761882781982422,
        "type": "text"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012566645636979956,
        "type": "markdown"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001428524683433352,
        "type": "png"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.24538755416870117,
        "type": "pe"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013142824172973633,
        "type": "xml"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012248754501342773,
        "type": "xml"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-29T22:48:58Z"
  },
  "path": "Soenneker.Utils.Directory.4.0.887.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MT=z@AMwyr^(j[00095000xb003wDwO=Ave]\u003eJtBcI*OyqIUwm/N/Ia]/!*ThXOkzMx#",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "eae9840e88ca4d25c2285a8a461df72a09651acefeb943842948db33fd5a1406",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg",
        "risk": 4,
        "size": 48857,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 48857.0,
              "entropy": 7.95,
              "size_bytes": 48857.0
            },
            "binary": {
              "overall_entropy": 7.95,
              "peak_region_bytes": 44032.0,
              "peak_region_entropy": 7.84
            },
            "archive": {
              "file_count": 10.0,
              "member_count": 10.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 5.15,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 47549.0,
              "compression.ratio": 0.59,
              "hidden_file_count": 2.0,
              "total_uncompressed": 81051.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 10.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 5.0,
              "timing.mtime_unique_ratio": 0.5,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 25170.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.4,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 9.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Soenneker.Utils.Directory",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/soenneker/soenneker.utils.directory",
              "kind": "homepage",
              "source": "nupkg.project_url"
            },
            {
              "url": "https://github.com/soenneker/soenneker.utils.directory",
              "kind": "repository",
              "source": "nupkg.repository_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "Jake Soenneker",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "4.0.887",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Soenneker.Utils.Directory",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 8932,
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash"
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Embedded HTTP or WebSocket URL",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/data/string/library::dotnet-append-method-token",
            "conf": 0.7200000286102295,
            "crit": 1,
            "desc": "Append method-name token",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type",
            "conf": 0.8600000143051147,
            "crit": 2,
            "desc": ".NET StringBuilder type reference",
            "from": [
              {
                "file": 6
              }
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 515.0,
              "entropy": 5.17,
              "size_bytes": 515.0
            },
            "binary": {
              "overall_entropy": 5.17,
              "peak_region_bytes": 515.0,
              "peak_region_entropy": 5.17
            }
          }
        },
        "id": 1,
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!_rels/.rels",
        "sha": "99b6d532fe394c97920b94b84828d0a9495edea30acd2e6fc58e981c7d59d211",
        "size": 515,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 32,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh",
            "n": [
              {
                "c": 2,
                "d": "NuGet package declares repository",
                "i": "metadata/package/files/nuget::nuspec-repository",
                "o": 42,
                "z": 902,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 2,
            "addr": 42
          },
          {
            "b": "arS^-wPRu\u003evrt{w",
            "ln": 3,
            "addr": 118
          },
          {
            "b": "arR^Hjzws\u0026q/uk+zE)P{AXpvlx(4\u0026yl${WMv@#TfC%0-]wiG",
            "ln": 4,
            "addr": 131
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1527.0,
              "entropy": 5.06,
              "size_bytes": 1527.0
            },
            "binary": {
              "overall_entropy": 5.06,
              "peak_region_bytes": 1527.0,
              "peak_region_entropy": 5.03
            }
          }
        },
        "id": 2,
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!Soenneker.Utils.Directory.nuspec",
        "risk": 1,
        "sha": "cf1579f531b295858b5f7afd4757b3be84c6bc77d18c11293cddac086412b59c",
        "size": 1527,
        "traits": [
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                42,
                902
              ]
            ]
          },
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                32
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1076,
              "entropy": 5.13
            },
            "binary": {
              "peak_region_bytes": 1024,
              "peak_region_entropy": 5.13
            }
          }
        },
        "id": 3,
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!LICENSE",
        "pid": 0,
        "risk": 1,
        "sha": "f7982c6d623a596f15d5597575e5f6cde25dec380c4fb8da31cd721ea4c088b2",
        "size": 1076,
        "traits": [
          {
            "id": "metadata/permission/prose::permission-permission-term-english",
            "conf": 0.9,
            "crit": 2,
            "desc": "Permission or access term",
            "spans": [
              [
                53,
                0
              ]
            ]
          }
        ],
        "type": "text"
      },
      {
        "ctx": [
          {
            "b": "toNiRc$)ZAAc15[fkkooe]$YuwO+)#e[]kSzGPP6Bt4!\u003cq/uk+zE)P{AXpvlx(4\u0026yl${WMv@#TfC}KeYxfQDVD2d4Pw]zYwBzbkqvQS!WwHQ[kxMOunB2\u003e%cCxXl-zGPP6Bs}GLxd[jjv@2H=wPGI6z!i*7wOU\u003c$e(^1cy\u0026.i%x(W={Bz(hBfdvljaZnk2xMOunB2\u003e%cx(dGnB7/o0y?dPtx(tT",
            "ln": 0,
            "col": 1,
            "line": 1
          },
          {
            "b": "wOU\u003c$flq5yzF\u003c33wPxzCBzkMje[wWpwN/?2A^orDv@#B6zGvEPz/PS9y\u0026sJsfjO{hwPqJsD2mvD3jn12aZnk2xMOunB2\u003e%cB-RbmeOP6gxjVcpxk8E3BZ/GmwPzp0zGGDcBs}6wz7^.5g+**CfFtgpg=d6Eh8WcuiwC8QgI7bReOl\u003c{fFbang+*N\u003ciaK=@gIgbJiwSuAh8c*ve]UYvdiIMcwO#x%yH}JsrDI}\u003eB1P\u003c{A+e:5z/Qagbo[AQk{gq(x(4H9C{3{qvSC)$C{3Wov{%s$B.\u003eGdx(mMaC42A9z/{azwnc6}v@#TfC{3%nBzbP6A%-m0boPM}B97\u0026by*?B1z/b)?u%)vHwn=NcwPP56wmM*4vpK7Y",
            "ln": 691,
            "col": 166,
            "line": 4
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1020,
              "entropy": 5.04
            },
            "text": {
              "lines": 13,
              "top_char": 101,
              "max_ws_run": 1,
              "digit_ratio": 0.05,
              "space_count": 13,
              "char_entropy": 5.04,
              "unique_chars": 57,
              "top_char_null": 0,
              "lines_over_200": 2,
              "top_char_ratio": 0.09,
              "avg_line_length": 77.46,
              "max_line_length": 230,
              "empty_line_ratio": 0.23,
              "last_line_length": 3,
              "long_token_count": 5,
              "whitespace_ratio": 0.03,
              "line_length_stddev": 84.14
            },
            "binary": {
              "peak_region_bytes": 1020,
              "peak_region_entropy": 5.04
            }
          }
        },
        "id": 4,
        "mol": "H(Db)",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!README.md",
        "pid": 0,
        "risk": 2,
        "sha": "f7a94b030f2aba873beac0cb7a4d21c61f67d7933a55a135776671f2d218a776",
        "size": 1020,
        "traits": [
          {
            "id": "metadata/file/profile/language::lang-english--atom-1",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                76,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                72,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/format/html::markdown-remote-image-source",
            "conf": 0.9,
            "crit": 3,
            "desc": "Markdown references a remote image",
            "spans": [
              [
                755,
                104
              ]
            ]
          }
        ],
        "type": "markdown"
      },
      {
        "id": 5,
        "sha": "93511e8937b27717eb154ee90eaf1655d4dbbad2865ecfc5a7d0bd794c945c49",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!icon.png",
        "size": 16083,
        "type": "png",
        "depth": 1
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(",
            "n": [
              {
                "c": 3,
                "d": "PE has no signature record",
                "i": "metadata/binary/layout::pe-no-signature-record",
                "o": 0,
                "z": 1,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          },
          {
            "b": "00000000000000000000\u003e8GAw00000nb@R\u00260SSx7\u003cuJXB\u003eU7%R0rr91000000000000",
            "n": [
              {
                "c": 1,
                "d": "PE standard code/data section",
                "i": "metadata/binary/section/names::pe-code-data-standard-section",
                "o": 512,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 496
          },
          {
            "b": "huFmO000c7d7]PX3mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 8932,
                "z": 4,
                "cf": 1.0
              }
            ],
            "ln": 8916
          },
          {
            "b": "A5N+Vj#\u0026Q9o(BM+y?k^gq*ACawO\u003c4\u003epxj/6vGnIOv/PCMB97#ge\u003c\u003cL[y?m9#x(v)ge\u003eoF\u003cwD",
            "n": [
              {
                "c": 2,
                "d": ".NET core namespace reference",
                "i": "metadata/lang/compiler/managed::system-namespace",
                "o": 18418,
                "z": 9,
                "cf": 0.800000011920929
              }
            ],
            "ln": 18402
          },
          {
            "b": "yHpBnvpK7!zF8BMwO+(Sl2Z^OzE--qwPQEKB7^{VwmU:ZwPRoNz!9zVmRMWIo(BMN0ab",
            "n": [
              {
                "c": 2,
                "d": ".NET StringBuilder Append use",
                "i": "micro-behaviors/data/string/library::dotnet-stringbuilder-append",
                "o": 19063,
                "z": 6,
                "cf": 0.8600000143051147
              }
            ],
            "ln": 19047
          },
          {
            "b": "e(^1cy\u0026.i%x(W={Bz(hBe[w^m07HWswM9X\u003ewNPAQq*ACawO?Alz/oD6vqV6hB5N3^",
            "n": [
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 20727,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 20711
          },
          {
            "b": "zE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh08)DqA:@=UAcb/jzu",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 20991,
                "z": 17,
                "cf": 0.699999988079071
              }
            ],
            "ln": 20975
          },
          {
            "b": "B8aGYBzbP6luN0UwmY=Yq/)4]zF8pUx(4r\u003eASwi=Byex:B.LV5wPv=xoMaMRwPv=-wPRoMz!AY]AS",
            "n": [
              {
                "c": 2,
                "d": ".NET StringBuilder type reference",
                "i": "micro-behaviors/data/string/library::dotnet-stringbuilder-type",
                "o": 21378,
                "z": 13,
                "cf": 0.8600000143051147
              }
            ],
            "ln": 21362
          },
          {
            "b": "z/L?gv@#Tf04}+\u003eBz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SGD2[7sz7X.ezGGPfwIcz@v}xR3x(v(/wPz%dv}t",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 21662,
                "z": 18,
                "cf": 0.75
              }
            ],
            "ln": 21646
          },
          {
            "b": "wQ5p%ra{q\u003cCk%{HA::j[m}D^hCX7xcBzkS9l349Uzdmsb07QQxl2pv9x(W={Bz(hlwPH:Xv%8*kx)a67C(QJR",
            "n": [
              {
                "c": 2,
                "d": ".NET current assembly lookup",
                "i": "micro-behaviors/process/info/current::dotnet-getexecutingassembly-token",
                "o": 23005,
                "z": 20,
                "cf": 0.8799999952316284
              }
            ],
            "ln": 22989
          },
          {
            "b": "zdK2apdnb8f!+jl8ux*MxMOunB2\u003e%cB8LSczE)P{AXp\u003cuz2:LA0rrv5wO+{^B7CsKdGGI}lVl{?A+Pf1BrFD1atLSagC7vogbZmEvqxA%q/uk+zE)P{ASu860r",
            "n": [
              {
                "c": 3,
                "d": "Embedded HTTP or WebSocket URL",
                "i": "micro-behaviors/communications/http/url/domain::http-url-binary",
                "o": 28072,
                "z": 21,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "Copyright notice",
                "i": "metadata/package/license::copyright-word",
                "o": 28112,
                "z": 9,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 28056
          },
          {
            "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000",
            "n": [
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 29184,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 29168
          },
          {
            "b": "0000000000004@XgYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr911onA",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 29278,
                "z": 15,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 29262
          },
          {
            "b": "xAh@Jwb{VJ002W)761vnlJz38z2!IPve$fBC(QOtve$cAwDhYg003WjBo3y.z#:}ViSH/kf934",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes CompanyName",
                "i": "metadata/package/versioning::pe-companyname-field",
                "o": 29638,
                "z": 11,
                "cf": 0.699999988079071
              }
            ],
            "ln": 29622
          },
          {
            "b": "e=YwYzVBRO003m78uo^rmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$zVBtGzuaLOwDlG",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 29714,
                "z": 15,
                "cf": 0.699999988079071
              }
            ],
            "ln": 29698
          },
          {
            "b": "Bo3jVASyv+001?Q3ig8bmGvc5yYF2DrSDXhASydXx-J5Kzu6Up001?Qe=WN9e=W\u003chh#\u003e(qe=WN9003m79SMivnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$zVBtGzuaLOwDlGCwDl-J",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 29806,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 29858,
                "z": 12,
                "cf": 0.699999988079071
              }
            ],
            "ln": 29790
          },
          {
            "b": "yxd]CASu7t003Kf9SMivpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$zVBtGzuaLOwDlGC",
            "n": [
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 30062,
                "z": 16,
                "cf": 0.699999988079071
              }
            ],
            "ln": 30046
          },
          {
            "b": "Bo3jVASyv+004-Nf-RjOpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001?Qe=WN9e=W\u003chh#\u003e(qd/:5Vh2]Mnv/OB/h2}j*hVNy?g5%3ev/Q3tv/Om:h2]Ajve@m!vGnd-iriT\u003ev/Os=vGnj+gYRa/humg^gxm",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 30246,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE ProductVersion has SemVer git hash",
                "i": "metadata/package/versioning::pe-productversion-semver-git-hash",
                "o": 30276,
                "z": 48,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 30230
          },
          {
            "b": "000000000000000000000dU4H3\u0026*nc2Tnp?000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 30720,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 30704
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              28672,
              5.79,
              "r-x"
            ],
            [
              ".rsrc",
              29184,
              1536,
              2.9,
              "r--"
            ],
            [
              ".reloc",
              30720,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 62184.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "bss_like_section_count": 0.0,
              "section_overflow_count": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 3.99,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.11
            },
            "file": {
              "size": 31232.0,
              "entropy": 5.59,
              "size_bytes": 31232.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.79,
              "string_count": 381.0,
              "overall_entropy": 5.59,
              "entropy_variance": 5.43,
              "avg_string_length": 18.66,
              "max_string_length": 82.0,
              "peak_region_bytes": 3072.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.63,
              "string_length_stddev": 12.49,
              "largest_section_ratio": 0.92,
              "sentence_string_count": 30.0,
              "sentence_string_ratio": 0.08,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 28672.0,
              "entropy_max": 5.79,
              "entropy_mean": 2.92,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 6,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!lib/net10.0/Soenneker.Utils.Directory.dll",
        "risk": 4,
        "sha": "c674c2326189ed1db535089bab9d53405ab1b60a5afccbf29a87b49910459eb1",
        "size": 31232,
        "traits": [
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                29858,
                12
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                29714,
                15
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/library::dotnet-stringbuilder-type",
            "conf": 0.8600000143051147,
            "crit": 2,
            "desc": ".NET StringBuilder type reference",
            "spans": [
              [
                21378,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/library::dotnet-append-method-token",
            "conf": 0.7200000286102295,
            "crit": 1,
            "desc": "Append method-name token",
            "spans": [
              [
                19063,
                6
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                29278,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                30246,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "spans": [
              [
                29638,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash",
            "spans": [
              [
                30276,
                48
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                29806,
                11
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                8932,
                4
              ]
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Embedded HTTP or WebSocket URL",
            "spans": [
              [
                28072,
                21
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                8932,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "id": 7,
        "sha": "4260cbb61e5ec98bb17618d3361c5e269455ae083e8302ba9af39d345b3690e7",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!lib/net10.0/Soenneker.Utils.Directory.xml",
        "size": 15165,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 8,
        "sha": "63feef730c8c6225c83eeeb608a1575fcac22006897782d889c10c4310523657",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!![Content_Types].xml",
        "size": 712,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 9,
        "sha": "12882e9c66e911534f7a3704496e84c775a83b67bc17c38f30bf77f78450fc85",
        "path": "Soenneker.Utils.Directory.4.0.887.nupkg!!package/services/metadata/core-properties/c88bc3aae23344dbba408e7eb13f1108.psmdcp",
        "size": 738,
        "type": "xml",
        "depth": 1
      }
    ],
    "omitted_files": 4,
    "rev": "6a958",
    "v": "8"
  }
}