{ "ml": { "v": "7", "eng": "2.2.0-beta.2", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.14156578, "rte": "az", "prob": 0.14156578 }, { "cls": 0, "raw": 0.25803378, "rte": "az/zip", "prob": 0.25803378 } ], "prob": 0.6753887, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.6753886938095093, "type": "nupkg" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000010261933311994653, "type": "xml" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00004094839096069336, "type": "xml" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000013063351616438013, "type": "markdown" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000013381242752075195, "type": "png" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.6753886938095093, "type": "pe" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000011652708053588867, "type": "xml" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000012079874977644067, "type": "text" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00001012285520118894, "type": "xml" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.00001095732022804441, "type": "xml" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00001085797975974856, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-06-27T02:55:20Z" }, "path": "Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg", "raw": { "files": [ { "id": 0, "mol": "O(Al)H₂(CmDb)", "sha": "f2c2aaf4b6d3584608d70e11706d4eaa54230577f631418bc6da4745f499276f", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg", "risk": 4, "size": 74655, "type": "nupkg", "facts": { "metrics": { "file": { "size": 74655.0, "entropy": 7.98, "size_bytes": 74655.0 }, "binary": { "overall_entropy": 7.98, "peak_region_bytes": 71680.0, "peak_region_entropy": 7.84 }, "archive": { "file_count": 10.0, "member_count": 10.0, "script_count": 0.0, "zip_bomb_ratio": 3.81, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 73293.0, "compression.ratio": 0.41, "hidden_file_count": 2.0, "total_uncompressed": 177460.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 81.0, "rtlo_filename_count": 0.0, "format.regular_count": 10.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 4.0, "timing.mtime_unique_ratio": 0.4, "misplaced_executable_count": 1.0, "timing.mtime_dominant_count": 4.0, "timing.mtime_spread_seconds": 25138.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 0.4, "compression.method_counts.stored": 1.0, "compression.method_counts.deflate": 9.0 } } }, "ident": { "name": { "value": "Shiny.DocumentDb.AspNetCore.OData", "source": "nupkg.title", "verified": false }, "urls": [ { "url": "https://shinylib.net/", "kind": "homepage", "source": "nupkg.project_url" }, { "url": "https://github.com/shinyorg/DocumentDb", "kind": "repository", "source": "nupkg.repository_url" } ], "trust": "unsigned", "authors": [ { "name": "aritchie", "role": "author", "source": "nupkg.authors" }, { "name": "ShinyLib", "role": "author", "source": "nupkg.authors" } ], "version": { "value": "10.0.0-beta-0003", "source": "nupkg.version", "verified": false }, "identifier": { "value": "Shiny.DocumentDb.AspNetCore.OData", "source": "nupkg.id", "verified": false } }, "traits": [ { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "LINQ query operations", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/fs/path/extension::dll-dup", "crit": 2, "desc": ".dll extension reference", "from": [ { "file": 5 } ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "conf": 1.0, "crit": 3, "desc": "JSON polymorphism runtime marker", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/server/managed::http-context", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET HttpContext", "from": [ { "file": 5 } ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET Metadata Root (BSJB)", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/server/managed::http-context-item-setter", "conf": 0.8500000238418579, "crit": 3, "desc": "Modification of HTTP context items", "from": [ { "off": 13439, "file": 5 } ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET Assembly (mscoree.dll)", "from": [ { "file": 5 } ] }, { "id": "metadata/binary/metrics/pe-details::dotnet-code-entropy-normal", "conf": 0.699999988079071, "crit": 1, "desc": ".NET code entropy in unpacked range", "from": [ { "file": 5 } ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE FileVersion metadata field", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/server/managed::http-item-setter", "conf": 1.0, "crit": 1, "desc": "Modification of HTTP context items", "from": [ { "file": 5 } ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE ProductVersion metadata field", "from": [ { "file": 5 } ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR runtime header present (COM descriptor)" }, { "id": "micro-behaviors/communications/http/server/managed::http-request-get", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET Request object", "from": [ { "file": 5 } ] } ] }, { "depth": 1, "facts": { "metrics": { "file": { "size": 523.0, "entropy": 5.19, "size_bytes": 523.0 }, "binary": { "overall_entropy": 5.19, "peak_region_bytes": 523.0, "peak_region_entropy": 5.19 } } }, "id": 1, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!_rels/.rels", "sha": "61c862b19b38883c3b65cf065ecd2397b7fa3366a5072050603fde566f33f267", "size": 523, "type": "xml" }, { "ctx": [ { "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]", "n": [ { "c": 2, "d": "NuGet nuspec manifest file", "i": "metadata/build/manifest::nuspec-file", "o": 0, "z": 40, "cf": 0.9800000190734863 } ], "ln": 1, "addr": 0 }, { "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh", "ln": 2, "addr": 42 }, { "b": "arS^-wPRu\u003evrt{w", "ln": 3, "addr": 118 }, { "b": "arR^HjAt1HwNPT\u003eph+k=B3snVBz#pZfe4xWx(nijx\u003c@YjwPPOCwO+{^B7D}vz//Mijtg.^y?m3@wLNe=wPH3", "ln": 13, "addr": 676 }, { "b": "arR^HjAL1AB3sIMvrt{2wn+$2zdNQbwmuV\u0026B8V2dByPlfwGU-ez/cXnz/Y]maAIjgzH0vAB.bPsjtg!+xlcl", "ln": 14, "addr": 744 }, { "b": "arR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026IA+)(.xMOunB2\u003e%cxk8E3BZ=$kz/4dGxLzvfz/PFzl#MNTzdNQbl$dt.vSC){v}X1HA+e\u003c7fka{9wofzEf!:^]v@Dj3x((GZvpJ!RwNNqMg=F(4fFN8[vQ}nOvk?WKiw\u0026*ah8m0EhFcxagH\u003c%7a%nK5", "n": [ { "c": 2, "d": "NuGet package declares repository", "i": "metadata/package/files/nuget::nuspec-repository", "o": 816, "z": 99, "cf": 0.8999999761581421 } ], "ln": 15, "addr": 812 }, { "b": "arR^Hjy\u00262xwO#3\u0026zEWx(B3o", "n": [ { "c": 2, "d": "NuGet package declares dependencies", "i": "metadata/package/files/nuget::nuspec-dependencies", "o": 965, "z": 276, "cf": 0.8999999761581421 } ], "ln": 16, "addr": 961 }, { "b": "arR^HarS^VA=l8taAR4jxjVfOA:-/@Cw?IqjTa=PBtkE4fD@W", "ln": 17, "addr": 980 }, { "b": "arR^HarR^Hjy\u00262xwO#3\u0026zEW@mx\u003efvJq!P(.C}IH6v%8T1zGFoQe(a(zByuvoC4CYnx(v(La#7=7fFk4hvR6T\u0026eIF\u003ejgA)@MCW\u003eMjwmW[FluN0UwgQ2:vqHjnwPz\u0026oatk[", "ln": 18, "addr": 1020 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1549.0, "entropy": 5.12, "size_bytes": 1549.0 }, "binary": { "overall_entropy": 5.12, "peak_region_bytes": 1549.0, "peak_region_entropy": 5.12 } } }, "id": 2, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!Shiny.DocumentDb.AspNetCore.OData.nuspec", "risk": 1, "sha": "9d2a0d2690060c695f07521e87570bdbc37b4264a1870bb73fa3c41a16d01910", "size": 1549, "traits": [ { "id": "metadata/build/manifest::nuspec-file", "conf": 0.9800000190734863, "crit": 2, "desc": "NuGet nuspec manifest file", "spans": [ [ 0, 40 ] ] }, { "id": "metadata/package/files/nuget::nuspec-dependencies", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares dependencies", "spans": [ [ 965, 276 ] ] }, { "id": "metadata/package/files/nuget::nuspec-repository", "conf": 0.8999999761581421, "crit": 2, "desc": "NuGet package declares repository", "spans": [ [ 816, 99 ] ] } ], "type": "xml" }, { "ctx": [ { "b": "toNiCBW{1+t{%xdBz#pZfe43Rxd!msx\u003eq9\u003eB1RfBfk+]BwPPOGfh(K#zH0\u003c5z!0{bwO#PTvLgC%y?m3)B1RJSxfQivvR6vspJyn.vqZcnt{%xdBz#pZfe4J[Cp)=QxjVfqz/PFzAa9l(vp%d)fh(K#zH0\u003c5z!0{bwO#PTvLgC%y?m3)B1X%", "ln": 17, "addr": 2114 }, { "b": "", "ln": 18, "addr": 2258 }, { "b": "k{f#Txj#yhwOC^\u003cBsXLKB.(elePt-GC4\u003eF#AV![hv%8T1zGE1xBz(hhazbLjatczTr3lo@vrrSlB-IwvaAz4fvruj4zEEu7wmoN*vQTs?B0bgmBz\u0026pgaAI4awO\u003e\u003ccw].D]awbNdp9s7=v%8T1zGE1ivrt{!vrl05Cwhejawtv4q6o\u003e3wPA6gzF7HyB8UMfx\u003c\u003e*hxjV07ADL\u0026kx\u003equpayPd#azb+jy-(2tr4\u0026ulx(dZ3zF78kB-qqrA=-]Rq*04#z/P@vasX\u003ctqa$XCwHYeXasX\u003ctqa%t\u003eAa\u0026*6dK(L?wO#0#D2N\u003epwfs/FoLFPWdj=O\u003edOKL#wKF\u003cmdL8X(dNOb}zeTF-lmKDoasX\u003cnz/fial{-vMefDz(m0i0Pl{-vMefDz(nP56ICX7zNlmKDcc{?-UDt^*Ds3Y+Vdj=O\u003edOUg!qa@C?efDz(q=cjhq!o#)wPxmIefDz(p\u0026yz%xl4MZqa@C?efFwswfruKpJx(Ny?k7Ce=", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 2304, "z": 3, "cf": 0.800000011920929 } ], "ln": 19, "addr": 2259 }, { "b": "", "ln": 20, "addr": 2653 }, { "b": "dK[T\u003cz!0{bwO#P#BzkVht{%xdBz#pZfe4xWx(nijx\u003c@YjwPPODACPuhwI4Chv}o3$dK\u003e", "ln": 21, "addr": 2654 }, { "b": "eG=I)t4I.)aAI4awO\u003e\u003cbaBmQtzY\u0026[hxl4B5x(v)gdK(O2FrRf$Bz(hhaz2Cjx(W=cz^)D)v@@\u0026aA:-{2B08(GwPI%8wft/1ygQ)%B1wCzxLzo[ay/tay?m9#x(v)gdiJ5uawbNdp9s7=v%8T1zGG}LawM?$u{^*Xk#Zn}r6-\u0026AmpmU?zF{U9k$\u003elDqxO}8lqf*QefF?GawbB3pie2", "ln": 25, "addr": 2723 }, { "b": "eG=I)o)7n]x(E)1ay[]5vpAU^wGU@jz*2\u00269wPz\u0026wdJ)-3LPU9\u0026wGT]GoLFPWazbLjaz(4ax(4ulwO\u003e)/wmPmZefES2By^\u003cbazbLjazbt7wI4w1B7F(8ph:6doE}qNz/Y=lB3@tqz/M%{z/fial{-2dz/M$gy\u0026sDbfhuB:qa@9Rz/PSfz^^f$efEu6v@1F0azbLjayPd@y\u003cybpv{%f@Cw?Iqy\u0026r-)B1wC9zE^s6wN[g}azbLjavo)MDt^*Ds7L\u0026bB8$]fvR*rvaA8oyo)GVmoE}q+qa@9hwPz%9AX5tfz/Z2kA+efDoE}qZA:-D]wGUP6AV/BmA=#2maA}:AyIW]$wofvCq^\u003cJOave*}efG1xzdK?-nLSb9wQ5fmwPI{bz/fREay]g#w[u0]zGE1gvpK7:zE+v", "ln": 26, "addr": 2891 }, { "b": "eG=I)mR)iUzGE1vB.bPsayYFcy?d9$dK(O2FrRf:B98tvwIc\u00265wPA5UrDz.(j$4\u003cjs7(e=wHIWzjW70he\u003cTbYau*]7fEXRIA+5:4lu%#4au.[hBUlA$zdLdGp*[0JzEES#c[)g{gb7dfrbUDAB95/Vu)6VcBz8!eB.\u003e\u003epoI4#Raz2!pA+frkx(v(iB9hCvz/P}xw]zYjzE))hwN({5A=k]dA==2bB1wCwl2H@@dpsXHu{!\u003cPzGEoQu[rBwBAh8kxcq55BzbP6B1wCKB.\u003e\u003epv}YB-yJz3HvqYP#v{%s#B-I57aA?glx\u003c\u003eE!wPGE", "n": [ { "c": 1, "d": "Defensive collector captured fields", "i": "well-known/tool/detection/security-scanner::evidence-collector-captured-fields", "o": 3451, "z": 8, "cf": 0.8999999761581421 } ], "ln": 27, "addr": 3219 }, { "b": "eG=I)nP5P*wN/*8BzbkdxjU%(A::63wft(mwPA5CdJ)-3LPTvPBz(hhe(u+5A^o=EB7GwQc[c=IxK#i}d0lT}j%j#2l1::Kj%hTndk1OrqfuC\u003cC#F*9x(mMidpsoswPS6nzGu}xxK@q+qa@8Xz/M%{z/fial{-1.q+{dqaARpdaAqKnA^n=SCw?RuwgwZxB-5-MCwhejazC}saAg+fvqPN$wPw]pvqH6$B1wB-dTbPGxM53naz2!ev%8)czF78aBsF:.\u0026^^mow]zYjwmYj)xj\u003e{@xcpS2wftYbxj\u003e{@xd+r8wO+^%x(v($y-)Xqz*2\u00269wPz\u0026mvqYP#lVm3.z/W4wwPS6nzxI\u003ePoDU\u0026dAa9=}zdN*2A=Tq+o(B]Zz:V]mA+funA=b}vBzbkdA+fc0wPzu)avo15p9sd.y\u0026\u003clej0mjhBy^\u003cbfg*4(wQ4=%l{-2rxMw3nayE@.Bw)s3AbP=swN[kOv}xR3x(v(%e=", "ln": 28, "addr": 3471 }, { "b": "eG=I)q!6lLvr9G5B-7Yhx(v(iBAg/cB8kobx(v(ic$c}daAhvtC4\u003eF#A=SVVdJ)-3LPTvnxK#i}u)6AewN]H+vru74aARTjzGxS5By=O6az++3A::0laA7\u003cmw{503BzkVhB0bNyaz1$\u003exDQ+)v@2T[wg8BvzEET3C4z!dz/PXQaAITBx(mMaw{503BzkVhB08(srbUDGCv+/5fjm:$rD8[*A:QBvu}+cHxlm/{efFt1A+Pw#efFt0BZ/AlA+PA7u[rBdqE%/-vpJ\u003eRefFs(zE^s6pI9#=ayGnjA+PA7e\u003eHaVB.\u003e\u003e\u0026AZ:?:BA}myefFs{vrufndQTwEu{Omyu[rBdqG3X}wmc@hu{!Hty?W^1u[rBdmR)0YA:QBvu@I5=BylTxu@g==u[rBdq!Y(Zu[0SHwmoN\u003eePtcsBrC14v}x.5efDz(w]7)*eOe*xz6i}iB98EMdJ*cECRh*7A=2JiB7]MgB1Q0(B4f$OxdcO/A=2JiB7]MgB1QKmx()]nu)5(}wftndCPXsQw]7)*diH=pazbB#xj9etayPd#aAh1jzE){7v\u003c2\u00267vrb\u003c\u003eaA?EcayEPQv%8T1zGFu\u003czEW^5z/fRGq/u!@wmZ0le?O+9u[JN1wO+^%x(v($y-)Xqz*2\u00269wPz\u0026mwO(d6az$Rfx)a5gq=cjhc$2wkr6:nEu)6x9awW2^v@bZ9j0mmozF9(QllHz(wPF#4bXqjtA:Q1rd\u003cejBvRG}9l2pvowPRrej0l[eB8t\u0026pl{-2sB7GznzEET3C4z^\u003ez=oIbazb+lv@#B6zGv(ZoLFPWl{-K#zE^s6wN[g}aAzQxazCZBzdNN5A^onWqE%GPB97#lay/LnBz(1sBAg/cB8kobx(v)gaA}KwxDQXSvq[XUzEW^5z/eJ{vqZd5vruj4zyva\u0026e?7fXavpi+y\u0026*!rzxJvgB7/05wN)tmk#gDiB75V(aAqKnA^n^0qxNxfxK@rgxM4Y#aAqKnA^n^GB-I85v}u=%B0b7nwO005w/$FICYmXmB8#5lzz1p{ze:i9wHG0ndj$", "ln": 29, "addr": 3857 }, { "b": "eG=I)ra]?=B7GxavqGU7wN({cA+PSbawbNdp9sE)aARpdazC.nwPzo(Acc2say/tcBy/YsdK(O2FrRf\u003czGxJ5wGUwLl#MNTzdNQbnP5SYA:@W1Bz(gLls\u003c+EA+er)x()]]aAz44wftn\u0026BA/AdwPQK=z/c%Lu)49Bu$jq6e\u003eoF{n][]*l#MNTzdNQbc[eKDBz\u0026pywO00axK@q$CWU97awbNdp9r$Oz/{dABz\u0026phwGU@6A=U@oBy!#9d0fclaAITyA+cRtaA8EwaA8jvx(v)gfjmy[z/eK1AaIQUw]z6day!?\u0026xK$Z9azC.pvqGT*vru6\u003eazCBgvqWi0vrcf#wPw]czGGDgv}xR3z/M$vwPhD]v}xZ7Bzbkdwn+$2zdNQbdj#-kwO#71vqG+9aA.:pw{4]jw]zYjvrD9{BzkS9efF$Awmn$\u0026x(v(iv}YB-yJz3HvqYP#z/{ehz/]@day!\u00260BAIRnj0nlVcVZzLxK@r9A+Px8Bzk]faARpdayFbYx(nhGl#MNTzdNQbl$d=vB8L}{v}YB\u003cvpgj3vqGT*vruj4zxJ[bv@2H=wGUD8x(4s3aA8cI", "ln": 51, "addr": 13345 }, { "b": "eG=I)lsB$CxDR2bB7GxldK(O2FrRf:B98tvwIcqTByO#QzGxxfBsp\u003cBwO(Gqu)6f3B7GxlB0a)lv@Dg1wN/*@z/cXizxJvgB7]J8y?j-hA:-\u003cbvpKy[z/cXwx([2hAb]Jevrb{\u0026ay/tbzddr)aAz4oB7D%Dl3mo/eOwTjwPzj3wPF$=l#%FVzE:(gz!%lhayX+?yAN5cz/6h#vqG+9aA8cuw)]y\u0026B-I4C", "ln": 52, "addr": 13806 }, { "b": "eG=I)lsB$CxDRCpB7Gxlatj\u003cWAaAy0wGSSGA+f9aC4AcMaMv{oayGnjz/PzwlsB$CxJo1)wPz(vx(){6B17GFayGnjz/PzwlsB$CxJo1Zvru6ex(){6B17GFayPd#ayGnjz/PzwlsB$CxI@zUz*2XOr6zZAwofhcayPkdy\u003cvduvqZukCxdztwPF#5B0byswGV59BrCHvwPzj3x(v(i\u0026^^movixS9zF9=%az(mqBzisEz*9sinLShMqDa^#FtKC+p9q]1pdv]GlSvCowmYs\u003eeP26txjSi7zxI\u003ePoLFPWfgo})yEyGuaA8deayEJUy?)9)x()]]fjmgVy?mZ1o\u003c}{+u)6x9awD=(xkZg8efF[uA:-^2wO-GfwPq\u003c7B95KGvrMj6aA8culVm3.z/WDLvqYP#vixS9zF9=%ayEPaoHR]HaMv{Gaw2rJdb]=Odpsogz/M$dlsB$CxI@zUz*2Y1aA8cuwP?T9C{4csy*?B1z/f01aAhvtC4\u003eF#AXnF2y?$XwAXhfEBzbxaxf4eSxK@q#x(XopaA?spB7]Mgay/tcw]8f\u003eBrCQxy\u00261enBzbkdCw7]hwGUC\u003cByO#bvQS+Ze=", "n": [ { "c": 2, "d": "Benign application or testing context", "i": "well-known/tool/detection/security-scanner::multi-app-stealer-benign-context", "o": 14179, "z": 6, "cf": 0.8999999761581421 } ], "ln": 53, "addr": 13987 }, { "b": "eG=I)q/De!x\u003c\u003e*2fcB[szY\u003c4xwPzG@B1eTZ\u0026^^mou@}5:xLzuZvpT7{B6{Kwu@}5:xLzuJz/]@dx(mMIz*kUvayPd#ayE@Qvrb}2BwuyYxj$:)A=URhzdN*5z!9]iCwhejayEYJz+$v^zGGneB9hCvz/P}Lax8chx()]eB-Rbnaw%W*A+e/8C4\u003e#sBZY8eBywS{wPG{QlVm3.z/XrkaA.:pB0bveBzk]fayFbEuQNE:r6:nDmpm=Rq=Ea9nMnkLpgbW%lVl\u003cOx\u003eINewGVhhBz8!8o\u003c@0tAa9\u003c5vqF+Xz/xodBA]#Fj$7T#jW70ke\u003e*g[vruj4zyF%C", "ln": 54, "addr": 14461 }, { "b": "eG=I)r+k=.z/M%Nave:$aAIa5A:@=jdJ)-3LPTvdvq]mUv@#Tfp\u0026ZF[wPz)rjxaG)CPYdkaB2Iczdm6!wnb{]efFFqzdNQax(v)giV{dmgD3W\u0026as!NxB98tvwIc\u00265wPA5Ur6zYVe(2$^A+frlr+k=.z/P[EADL\u0026kC%#NVwN]s=zF7HyyDrN)fEZxLw]zYjv@=HeB1IuKz*2\u00269wPw[Vpeh{IC4CXpu@yMAwkv8VC$?\u003c!z/Qa=w]8x]BuT7PwO\u003e)/wmPy(xlbWFp\u0026ZF$x\u003eg^}ePb0sx)a5gx(mD)CX7}SaAg$pwN/?2AV==bz/Z2kA+efDoERInu@/Y-r8lz0l}HrRk#6^ou)3\u003c@qa@9hwPz%9AV^a\u003egbQg.zE:\u003e=A:-D]wGS-:vqdewavG{+yE7Y\u003casGP}B8t\u0026pl{-sNayDErwN/?2A-lKTA:@=\u003casG%5zF9(QllFNoy*?xlefFtzB8$.ic}5h/yEyGrefFtwACPuhwI57pv{*Acq=ck5By=)Navy6*x(mG8fcAYav@b\u003c\u0026wNPE0fcAV3BwN0@wozy7az2.cA^q\u003exwPzuzav]{Tze0)2aA8cuAa:u9v@#Tfe*9#hwI4Idy\u0026\u003cleaA?EcayFn:wPzuge?O+9u)6VbwPzu8BzbkdwO#c{zE\u003c@iB-qqrA==vBx(\u003e%Il3mo/eOe^dwN({9wQ5qtAb](owPz)bwPF#jzxJUhB7GxlaA?EcayFbYx(nhGl#MNTzdNQbl$d=qCYWImB7]MgB1P:Iu)*1ru{O{Sz:!ILwN[OOnP5PXA=:Ayk42HDz/ozld\u003cej]x\u003e8g4B8LVje\u003e72bwO#N6z/fRGk$JX2mqVHBwmPy(xgDJJwPzj3z/Pkr", "ln": 55, "addr": 14726 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 126893.0, "entropy": 5.19, "size_bytes": 126893.0 }, "text": { "digit_ratio": 0.01, "space_count": 16005.0, "total_lines": 2280.0, "char_entropy": 5.19, "unique_chars": 106.0, "lines_over_200": 130.0, "lines_over_500": 27.0, "ascii_art_lines": 3.0, "avg_line_length": 54.65, "high_byte_ratio": 0.01, "lines_over_1000": 5.0, "max_line_length": 1584.0, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.25, "last_line_length": 148.0, "long_token_count": 15.0, "whitespace_ratio": 0.14, "most_common_ratio": 0.09, "line_length_stddev": 111.24, "repeated_char_sequences": 9.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 24.0, "most_common_char_codepoint": 101.0 }, "binary": { "overall_entropy": 5.19, "peak_region_bytes": 121773.0, "peak_region_entropy": 5.26 } } }, "id": 3, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!readme.md", "risk": 1, "sha": "da2ec2bf11cbe9b27dfc0ead890be4c5a1ba923ab538cc830c2bec6fb92ce03c", "size": 126893, "traits": [ { "id": "metadata/file/extension/identity::markdown-file-basename", "conf": 1.0, "crit": 1, "desc": "Markdown document file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "Document or config file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "English language detection", "spans": [ [ 2304, 3 ] ] } ], "type": "markdown" }, { "id": 4, "sha": "075d6875a700e4baa76a7ea1a7800f29723a6be9c157184c4bee107618597f4e", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!icon.png", "size": 5687, "type": "png", "depth": 1 }, { "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(00", "n": [ { "c": 3, "d": "HTTP fingerprinting evasion campaign", "i": "objectives/command-and-control/infrastructure/user-agent::http-fingerprinting-campaign", "o": 0, "z": 34, "cf": 0.8999999761581421 } ], "ln": 0 }, { "b": "00000000000000000000KyFm\u003c00000nb@R\u00260SSx72RD8Si5yQn0rr91000000000000", "n": [ { "c": 1, "d": "PE standard code/data section", "i": "metadata/binary/section/names::pe-code-data-standard-section", "o": 512, "z": 5, "cf": 0.8999999761581421 } ], "ln": 496 }, { "b": "huFn]000udd7GrT3mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn", "n": [ { "c": 3, "d": "Benign PE anti-analysis context", "i": "objectives/anti-analysis/debugger-detect/combined-checks::evasion-aware-benign-pe-context", "o": 4104, "z": 4, "cf": 1.0 } ], "ln": 4088 }, { "b": "e(a(zBytenwmOF7vrt]Tq*ACawO\u003c50wQ5qHn][]*e(Mt4x\u003c\u003e*(Dsp]fz/dg4wPRu\u003evrt]Tq!P(.C}IH6", "n": [ { "c": 3, "d": "JSON polymorphism runtime marker", "i": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "o": 8762, "z": 16, "cf": 1.0 } ], "ln": 8746 }, { "b": "l340uwPQpTA+c\u003e0l$7gCe[w^m090SLz*a=+piyw?08mfqA=l2qw]]U3l$7gCe\u003e6q/08NYOvR/Q)0cqZ[uRbuJz2^yvBzaP:y?m9#nPXJX07zcKvqYQ!wklMRx\u003eH\u003c@x-", "n": [ { "c": 3, "d": "Modification of HTTP context items", "i": "micro-behaviors/communications/http/server/managed::http-context-item-setter", "o": 10931, "z": 8, "cf": 0.8500000238418579 }, { "c": 3, "d": "References Windows executable or script", "i": "objectives/execution/interpreter/script/shell::windows-executable-ref", "o": 10886, "z": 4, "cf": 0.6000000238418579 } ], "ln": 10870 }, { "b": "zE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh07*4gwPA5-z!%l3v/", "n": [ { "c": 2, "d": "Benign high-entropy PE context", "i": "metadata/package/quality/false-positives::benign-high-entropy-pe-context", "o": 11208, "z": 17, "cf": 0.949999988079071 } ], "ln": 11192 }, { "b": "p\u0026ye:v%HH/v}xR3x(v\u003e?q*ACawO\u003c50wQ5qHn][]*08)#Wx(mMJz/6D4A+PPkzu8$kwk^hWxkzd3z/bL]", "n": [ { "c": 2, "d": "System.Text.Json library reference", "i": "micro-behaviors/data/serialize/json::json-system", "o": 11558, "z": 16, "cf": 0.8500000238418579 } ], "ln": 11542 }, { "b": "Bvf$!wIcI}Bz}j[BAzE4q*ACawO\u003c4[x(m[\u003crbUYSA+PA7l2Hj2y?m3}07*a2A=#ebwL^z=C4\u003eE", "n": [ { "c": 3, "d": "LINQ query operations", "i": "micro-behaviors/data/db/linq::linq-queries", "o": 11712, "z": 11, "cf": 0.699999988079071 } ], "ln": 11696 }, { "b": "wN[.YA+PA7nmuyDy?mR!q*ACawO\u003c4!z!9AEz/49]z/6Dcy?mR!xjVf(mq^iYBA{k(zGGr3zE)?*nKWfbmq^iYBA{j", "n": [ { "c": 3, "d": ".NET dynamic code generation capability", "i": "metadata/lang/compiler/managed::dotnet-dynamic-code", "o": 11977, "z": 23, "cf": 0.8500000238418579 } ], "ln": 11961 }, { "b": "z/6Dcy?mS=wPz%dv}xYYxjVf(qE%\u0026\u003cwPI@(wPz%dv}xYYB7Gxnx\u003e7Z}0b#\u003c)x\u003e8A:C4CYmx\u003eg^@07pycB.tu3zF8WZwmY/Zq*ACawO\u003c50wQ5qHn][]*e(3s}wPE\u0026Cx\u003e8g4B8LVje\u003cTL$pgXJmz/Pzwnow@)", "n": [ { "c": 3, "d": "Access to ASP.NET Request object", "i": "micro-behaviors/communications/http/server/managed::http-request-get", "o": 12288, "z": 11, "cf": 1.0 }, { "c": 2, "d": "System.Text.Json library reference", "i": "micro-behaviors/data/serialize/json::json-system", "o": 12348, "z": 16, "cf": 0.8500000238418579 } ], "ln": 12272 }, { "b": "lVm9+Bo3k#Bo2lYvrcC\u0026xjVf(qE%\u0026\u003cwPI}[now@)qE%\u0026\u003cwPI}[xjVf(nn\u0026M\u003e08mxPwLM/YBo1\u003cNBz%P=zGGDmBo298vrt{PB.bPslVl\u003c:wQ5p%xjVf(ra]\u0026Xlu@MzwD", "n": [ { "c": 3, "d": "Access to ASP.NET HttpContext", "i": "micro-behaviors/communications/http/server/managed::http-context", "o": 13439, "z": 11, "cf": 1.0 }, { "c": 3, "d": "Access to ASP.NET Request object", "i": "micro-behaviors/communications/http/server/managed::http-request-get", "o": 13397, "z": 11, "cf": 1.0 } ], "ln": 13381 }, { "b": "01yNYzVBqFve$xHve{oFkMCZ5wb{3rBo2.He=YwYzVBUPBo2\u003eLCMq*=02Eo*bMIVYwDh", "n": [ { "c": 3, "d": "OData query marker", "i": "micro-behaviors/communications/http/oauth::odata-query-marker", "o": 13974, "z": 6, "cf": 0.7200000286102295 } ], "ln": 13958 }, { "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000", "n": [ { "c": 1, "d": "PE resource section", "i": "metadata/binary/section/names::pe-resource-section", "o": 17920, "z": 5, "cf": 0.8999999761581421 } ], "ln": 17904 }, { "b": "0000000000001FLgYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr913ig5", "n": [ { "c": 3, "d": "Benign context for timing checks", "i": "objectives/anti-analysis/timing/evasion::timing-anti-debug-benign-context", "o": 18014, "z": 15, "cf": 0.949999988079071 } ], "ln": 17998 }, { "b": "pxjt]e=U\u003eK002y!5=.}jlJz38z2!IPve$fBC(QOtve$cAwDhYg003BcASx!NBo2!JxAh-DwDj^", "n": [ { "c": 2, "d": "PE CompanyName metadata field", "i": "metadata/package/versioning::pe-companyname-field", "o": 18602, "z": 11, "cf": 0.699999988079071 } ], "ln": 18586 }, { "b": "C(QIrx-IPx003*na]?SzmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002{$xAh-Dzua}Ze=Xo", "n": [ { "c": 2, "d": "PE FileDescription metadata field", "i": "metadata/package/versioning::pe-filedescription-field", "o": 18670, "z": 15, "cf": 0.699999988079071 } ], "ln": 18654 }, { "b": "l\u0026ZS}Bo2.H001RK2lj=8mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001.NfArZ9fArZ9fAq7M003*ncia5DnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002{$xAh-Dzua}Ze=XotzVBnE", "n": [ { "c": 3, "d": "Dotted-quad PE version metadata context", "i": "objectives/command-and-control/infrastructure/ip::ipv4-version-metadata-context", "o": 18778, "z": 11, "cf": 0.9399999976158142 }, { "c": 2, "d": "PE InternalName metadata field", "i": "metadata/package/versioning::pe-internalname-field", "o": 18826, "z": 12, "cf": 0.699999988079071 } ], "ln": 18762 }, { "b": "xAibO001bw0049vcia5Dpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002{$xAh-Dzua}Ze=Xot", "n": [ { "c": 2, "d": "PE OriginalFilename metadata field", "i": "metadata/package/versioning::pe-originalfilename-field", "o": 18974, "z": 16, "cf": 0.699999988079071 } ], "ln": 18958 }, { "b": "e=YzZyYFnK003Kfa]?SzpYLIozVBqFBPt[KBo25ove$cAwDhYg002{$xAh-Dzua}Ze=XotzVBn", "n": [ { "c": 2, "d": "PE ProductName metadata field", "i": "metadata/package/versioning::pe-productname-field", "o": 19090, "z": 11, "cf": 0.699999988079071 } ], "ln": 19074 }, { "b": "l\u0026ZS}Bo2.H0034182%WqpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001.NfArZ9fArZ9fArW8vGl", "n": [ { "c": 2, "d": "PE version resource metadata", "i": "metadata/package/versioning::version-resource-metadata", "o": 19190, "z": 14, "cf": 0.8999999761581421 } ], "ln": 19174 }, { "b": "000000000000000000000ak^b3\u0026*ncURMmV000000000000000000000000000000000", "n": [ { "c": 2, "d": "PE .reloc section presence", "i": "metadata/binary/section/names::reloc-section-presence", "o": 19456, "z": 6, "cf": 0.8999999761581421 } ], "ln": 19440 } ], "depth": 1, "facts": { "imp": [ [ "mscoree", "CorDllMain" ] ], "sec": [ [ ".text", 512, 17408, 5.88, "r-x" ], [ ".rsrc", 17920, 1536, 3.15, "r--" ], [ ".reloc", 19456, 512, 0.08, "r--" ] ], "metrics": { "pe": { "checksum": 0.0, "checksum_valid": 0.0, "resource_count": 1.0, "has_version_info": 1.0, "checksum_stripped": 1.0, "computed_checksum": 31412.0, "reloc_overhang_bytes": 500.0, "reloc_overhang_ratio": 0.98, "bss_like_section_count": 0.0, "section_overflow_count": 0.0, "misaligned_section_count": 0.0, "version.identity_entropy": 4.39, "base_relocation_block_count": 1.0, "base_relocation_entry_count": 1.0, "version.identity_symbol_ratio": 0.08 }, "file": { "size": 19968.0, "entropy": 5.58, "size_bytes": 19968.0 }, "binary": { "is_pie": 1.0, "code_entropy": 5.88, "string_count": 377.0, "overall_entropy": 5.58, "entropy_variance": 5.62, "avg_string_length": 17.91, "max_string_length": 172.0, "peak_region_bytes": 2048.0, "code_to_data_ratio": 1.0, "peak_region_entropy": 5.97, "string_length_stddev": 15.96, "largest_section_ratio": 0.87, "sentence_string_count": 13.0, "sentence_string_ratio": 0.03, "high_entropy_string_count": 0.0 }, "imports": { "count": 1.0 }, "sections": { "count": 3.0, "code_size": 17408.0, "entropy_max": 5.88, "entropy_mean": 3.04, "name_entropy": 3.03, "writable_count": 0.0, "executable_count": 1.0, "nonstandard_count": 0.0, "executable_writable_count": 0.0 }, "dependencies": { "count": 1.0 } } }, "id": 5, "mol": "O(Al)H₂(CmDb)", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!lib/net10.0/Shiny.DocumentDb.AspNetCore.OData.dll", "risk": 4, "sha": "f40a4f328dd27fbc921ad7d3eef752c22b822e828cd75add5600ffa4e4eca272", "size": 19968, "traits": [ { "id": "micro-behaviors/communications/http/server/managed::http-item-setter", "conf": 1.0, "crit": 1, "desc": "Modification of HTTP context items", "spans": [ [ 10931, 8 ] ] }, { "id": "metadata/binary/framework::clr-runtime-header", "conf": 1.0, "crit": 2, "desc": "PE CLR runtime header present (COM descriptor)" }, { "id": "metadata/binary/metrics/pe-details::dotnet-code-entropy-normal", "conf": 0.699999988079071, "crit": 1, "desc": ".NET code entropy in unpacked range", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/versioning::pe-fileversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE FileVersion metadata field", "spans": [ [ 18778, 11 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::http-context", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET HttpContext", "spans": [ [ 13439, 11 ] ] }, { "id": "micro-behaviors/fs/path/extension::dll-dup", "crit": 2, "desc": ".dll extension reference", "spans": [ [ 10886, 4 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::http-request-get", "conf": 1.0, "crit": 3, "desc": "Access to ASP.NET Request object", "spans": [ [ 12288, 11 ], [ 13397, 11 ] ] }, { "id": "objectives/anti-analysis/self-modify/runtime::json-polymorphism-runtime-ref", "conf": 1.0, "crit": 3, "desc": "JSON polymorphism runtime marker", "spans": [ [ 8762, 16 ] ] }, { "id": "metadata/package/versioning::pe-version-resource", "conf": 0.800000011920929, "crit": 2, "desc": "PE version resource structure", "spans": [ [ 18014, 15 ] ] }, { "id": "metadata/binary/framework::dotnet-metadata", "conf": 1.0, "crit": 2, "desc": ".NET Metadata Root (BSJB)", "spans": [ [ 4104, 4 ] ] }, { "id": "metadata/package/versioning::pe-productversion-field", "conf": 0.699999988079071, "crit": 2, "desc": "PE ProductVersion metadata field", "spans": [ [ 19190, 14 ] ] }, { "id": "micro-behaviors/data/db/linq::linq-queries", "conf": 0.699999988079071, "crit": 3, "desc": "LINQ query operations", "spans": [ [ 11712, 11 ] ] }, { "id": "micro-behaviors/communications/http/server/managed::http-context-item-setter", "conf": 0.8500000238418579, "crit": 3, "desc": "Modification of HTTP context items", "spans": [ [ 10931, 8 ], [ 13439, 11 ] ] }, { "id": "metadata/binary/framework::dotnet-assembly", "conf": 1.0, "crit": 2, "desc": ".NET Assembly (mscoree.dll)", "spans": [ [ 4104, 4 ] ] } ], "type": "pe" }, { "id": 6, "sha": "5c8b36642a7857aa4972d2691246ecf03f9720fcd99c9f4eadb36b5a02f4df06", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!lib/net10.0/Shiny.DocumentDb.AspNetCore.OData.xml", "size": 5983, "type": "xml", "depth": 1 }, { "ctx": [ { "b": "A=-B5xLzvf3n0?YeIeLaeIeLaeIeLaeIeKYs7(q:wGT]+x(nhsx(+zeA+e/8vqYP#Cwg(fay/tcBzkSnwGV8kayX[8B8JPLzddc@By/t#zEWl2vqYP#B9hCvz/P}xByw@@B0a)lxK$Q}C{4iEy?$kjzxK1yB97\u00268zEE0*y?X0pe*9.$aBd)FaA8oyD2E?Cay/tbAa9TfazthbwGV8dwGV28B8Mhwv}xZjaAhddvrl05v@Dmax\u003eg^}ayX[(z/6iaxcpR9m})6oBZ=E(AbPSnz/NDMm})6oBZ=E(AbPSnz/P]jx(FboxK#10aARJAzddi\u003eawV@/zxI\u003e@BP", "ln": 187, "col": 11, "line": 10 }, { "b": "wnb{]aA8cuD2E?Cax9k$zGx-pB7/obaxi5^AX5tUz/)gtvr\u0026#7y\u0026:IqxjVfcvpJ!UB8@ECzY\u003catzdK\u00265A+eW3ayX]1wObT#B0bysax9k$zGx-pavy6+zE)s1asH]BBz#pZfe4x=z/fSmA:%39zE)s1e[wKpdiJtxv@co#x(mMA3n0x1xK@q+AbPSnz/L", "ln": 492, "col": 6, "line": 14 }, { "b": "mNo(U3nA$Lq*04#z/P}Xax8@/zH0vsB0b1cB98CpvS=^7wfu2jwmY^7Bzbkdo?wqboLF0FzGxwiBzbxfaz\u003eW#zGu{Ak#O)$qZ9+ns4MvZpGpvps3Y.Zk#7xZawUDHk#7M9og.(De*9.$aBd)FaAz4kB.L(cay/t2wGU/2C4CFjB9hCvz/P}JayPq2xLzN1v@#\u003clvqE60", "ln": 794, "col": 11, "line": 22 }, { "b": "v}vhlz/M$gB-RUyz6iqgx(4s3aA7\u003cmq!P(.C}p7Sy?m3@wGV28vpJ%[z/{dABz\u0026pgy\u00260J$e]\u003eVFv}YN/kXB}xx(2ziz/3RszY\u0026+iADL#owGUz\u003cz/{dAmq^iUA=u5kB7DFnB-qqrA=-BxAcb/jzGvAq3nK4MlVl*UB-7]nC{34dAbY-oBugKmx(()*vJYxaB9h5nayPq4az#ataARpdaAhd9v}u^8zY\u0026FfyANRtwPI%cz/fREaARpdB7DF5A+cwlwPIB6C4Chbw]zYjw[ty)B-I4oA+flkwPI%mayPd#az+R4x([6avru66vS=raA+fidA==vPax-S9ayPq4azbU9wGV8kayPtbaAqKnB98bmzGu}szxI(1vpK6}pJ*q\u0026w]8yfaztV", "ln": 959, "col": 161, "line": 24 }, { "b": "B0bysaARpdaz\u003eL3zxI\u003e\u003ex(nhsA+fide*9.$aBd)FaAIa9ayMyjB.bSox(v(iBzb98aBd)FazU\u003ekCoz0vwGUA0B9zhoaARJAAbo8]B7DFkvr\u0026#fBrCglA^7@jwftq#wftL%y\u0026yInBzblaay]5bwO=p7wPz\u0026mBzb98az\u003eLjazM4uBrC47aAITkA==2k", "ln": 1393, "col": 314, "line": 26 }, { "b": "x(!urwGVhhy?$k6wGUG0z/YG2e*9-6ayO!\u003ex([6czxK4taARphB0a}6x(mMaA+flkx(W=}ayYQsBzbkdq!P(.C{4iuvqNLrBzbxfazC)tyisPtazkRhwftD9x(OobBAz7pw]zYjvqZukpJf(.ax9i3A:@V6Ab](iwN/*mavfKGx([6czEEu$C{4rxayPtb", "ln": 2003, "col": 409, "line": 28 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 2315, "entropy": 4.66 }, "binary": { "peak_region_bytes": 2048, "peak_region_entropy": 4.84 } } }, "id": 7, "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!readme.txt", "pid": 0, "risk": 1, "sha": "b6ab16d03921be14d259798e59dd6fb23feaf872fcdd0d71e9049afe96055c4f", "size": 2315, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 353, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 235, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 1441, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 348, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1171, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 854, 0 ] ] }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "spans": [ [ 1023, 10 ] ] } ], "type": "text" }, { "id": 8, "sha": "41b2504c35f2786ca8ed03f27764ec98a4e4b9aa14de9c936eeb046dd93fbbc9", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!![Content_Types].xml", "size": 706, "type": "xml", "depth": 1 }, { "id": 9, "sha": "51abb498ada6908d9f739314cbfb97bfceea8c8caedb7d64c7c4ebcb676d27b1", "path": "/data/samples/unknown/foraged/dotnet/nuget.org/_/Shiny.DocumentDb.AspNetCore.OData/Shiny.DocumentDb.AspNetCore.OData.10.0.0-beta-0003.nupkg!!package/services/metadata/core-properties/fa2acf342ee44696865424d17297490e.psmdcp", "size": 853, "type": "xml", "depth": 1 }, { "id": 10, "sha": "d05f067f23dd581315f3c8b730bb1863374cb349b03206e018406bde1bdad3ad", "path": "Shiny.DocumentDb.AspNetCore.OData@10.0.0-beta-0003.registry.json", "size": 962, "type": "registry", "depth": 1 } ], "omitted_files": 5, "rev": "af11a", "v": "8" } }