{
  "llm": {
    "conf": 0.31921875,
    "error": "LLM endpoint http://10.9.8.149:8000/v1 did not become healthy within 120s",
    "model": "Qwen/Qwen3.6-27B",
    "review": false,
    "outcome": "benign"
  },
  "ml": {
    "v": "7",
    "eng": "2.2.0-beta.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.29699558,
        "rte": "az",
        "prob": 0.29699558
      },
      {
        "cls": 0,
        "raw": 0.04635647,
        "rte": "az/nupkg",
        "prob": 0.04635647
      }
    ],
    "prob": 0.31921875,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.3192187547683716,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011483828529890161,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000017642974853515625,
        "type": "markdown"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.3192187547683716,
        "type": "pe"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013142824172973633,
        "type": "xml"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012248754501342773,
        "type": "xml"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012814998626708984,
        "type": "xml"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-29T12:04:48Z"
  },
  "path": "Universal.MoonshotAI.Client.1.0.0.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MTG%@AG{?M75\u0026@000rb000xb003wDwO=Ave]\u003eJtBcR)hyqR.pmFzJnGu#/By:UJE\u0026!l1",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "f436c40cd62e44daa1b060e08b52e607d1642c32b76192d6bcc16c62dc75b8d6",
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg",
        "risk": 4,
        "size": 39914,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 39914.0,
              "entropy": 7.93,
              "size_bytes": 39914.0
            },
            "binary": {
              "overall_entropy": 7.93,
              "peak_region_bytes": 35840.0,
              "peak_region_entropy": 7.83
            },
            "archive": {
              "file_count": 8.0,
              "member_count": 8.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 6.66,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 38746.0,
              "compression.ratio": 0.39,
              "hidden_file_count": 2.0,
              "total_uncompressed": 100478.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 8.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 4.0,
              "timing.mtime_unique_ratio": 0.5,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 61136.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.5,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 7.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Universal.MoonshotAI.Client",
            "source": "nupkg.title",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "Andrew Ong",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "1.0.0",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Universal.MoonshotAI.Client",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm::assistant-role-marker",
            "conf": 0.7200000286102295,
            "crit": 1,
            "desc": "LLM assistant-role value",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::readasstringasync",
            "conf": 0.8399999737739563,
            "crit": 3,
            "desc": ".NET asynchronous HTTP response body read",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-file-version-ipv4-shape",
            "conf": 0.9200000166893005,
            "crit": 1,
            "desc": "PE FileVersion resembles IPv4"
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-product-version-ipv4-shape",
            "conf": 0.9200000166893005,
            "crit": 1,
            "desc": "PE ProductVersion resembles IPv4"
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/binary/debug::pdb-visual-studio",
            "crit": 3,
            "desc": "Visual Studio PDB build path"
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 6368,
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 521.0,
              "entropy": 5.18,
              "size_bytes": 521.0
            },
            "binary": {
              "overall_entropy": 5.18,
              "peak_region_bytes": 521.0,
              "peak_region_entropy": 5.18
            }
          }
        },
        "id": 1,
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!!_rels/.rels",
        "sha": "5cb462d5de422a6e758466cc9ea2d130fb2e3aa174df9b9c3b606ee01422dbb6",
        "size": 521,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj]",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 34,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "jAa.syHH\u003c!aB4:tzGv@+xMOuniXJdcv}YB\u003cvrj5rx\u003e8g4B8LVje[n*pfk$ufyHH\u003c\u0026zF7QTfFLvpfF$I3B-RIkv\u003eJ1EwfKh",
            "n": [
              {
                "c": 2,
                "d": "NuGet package declares dependencies",
                "i": "metadata/package/files/nuget::nuspec-dependencies",
                "o": 43,
                "z": 1132,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 2,
            "addr": 43
          },
          {
            "b": "arS^-wPRu\u003evrt{w",
            "ln": 3,
            "addr": 120
          },
          {
            "b": "arR^Hjzws\u0026rC(I]wPz\u003c2y+wC2z/fSfz/!ope\u003c\u003cC?wO#PLfkj@X",
            "ln": 4,
            "addr": 134
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1320.0,
              "entropy": 5.03,
              "size_bytes": 1320.0
            },
            "binary": {
              "overall_entropy": 5.03,
              "peak_region_bytes": 1320.0,
              "peak_region_entropy": 5.02
            }
          }
        },
        "id": 2,
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!!Universal.MoonshotAI.Client.nuspec",
        "risk": 1,
        "sha": "f3c2de75904a86aa1171fa64fe4fd137a20d931f77cf9ab3713bc8cd92c1627d",
        "size": 1320,
        "traits": [
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                43,
                653
              ]
            ]
          },
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                34
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-dependencies",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares dependencies",
            "spans": [
              [
                43,
                1132
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "boQ07x)a6dB75(qo(B@/B7/Glk$JW@y?WD#Bn",
            "ln": 1,
            "addr": 0
          },
          {
            "b": "",
            "ln": 2,
            "addr": 30
          },
          {
            "b": "k{gk.ze:r5atczTr3kW!x\u003eqg7az++3A::0lazbLjawD=)zGxGfBrA\u003evcVZy$xKM09lVl*Xy?mZ5z/fRsk#pb}c}!n\u003ex=}nhwmYN#dj=P.B-qqrA==2kxcqnqA+eV@x(mMmaARKuy\u0026.cIvqYP#B98CBv@#\u003clwN({4B-.OBBAo5",
            "n": [
              {
                "c": 2,
                "d": "Contains common English function words",
                "i": "metadata/file/profile/language::lang-english",
                "o": 60,
                "z": 3,
                "cf": 0.800000011920929
              }
            ],
            "ln": 3,
            "addr": 31
          },
          {
            "b": "",
            "ln": 4,
            "addr": 167
          },
          {
            "b": "bo[sdB.Lu3ax9w\u003cA=.",
            "ln": 5,
            "addr": 168
          },
          {
            "b": "bo[scA+e\u0026%CPYv(zGGPgBZYxaz/cWCp*[x^x\u003c\u003e*2o(BMNdf",
            "ln": 93,
            "addr": 2660
          },
          {
            "b": "",
            "ln": 94,
            "addr": 2698
          },
          {
            "b": "o(B@/B7/GlePU(xv}/K?v(+-vAbYxawftq#ayPtjx(!x8zGE1rwPI{3xjSifx([2hu@goLBzkf1auZ\u0026?A=\u003e@3aARJAxKM6}aARpdaz(4cwO-G0z/fVhzGPIkw].*baARp9BrC7izGGDcBn",
            "n": [
              {
                "c": 1,
                "d": "LLM assistant-role value",
                "i": "micro-behaviors/data/llm::assistant-role-marker",
                "o": 2728,
                "z": 17,
                "cf": 0.7200000286102295
              }
            ],
            "ln": 95,
            "addr": 2699
          },
          {
            "b": "A::66wPw]nxKL^3B97\u0026hBzkS9ayMy8A+fr9aAR:DzxHuse[V^VBz\u0026plz/Pu0ayMykwPI*ezGxwiBz\u0026pqwO2*6xk.H4xcpR{By/FnvR6m\u003excpYbBrCHlw?k6yAV/ExaAIa9wft#cwGV5ovrcC",
            "ln": 96,
            "addr": 2813
          },
          {
            "b": "z!pb2ay/t2wGUC#z!0MiiS",
            "ln": 97,
            "addr": 2929
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 10683.0,
              "entropy": 4.9,
              "size_bytes": 10683.0
            },
            "text": {
              "digit_ratio": 0.01,
              "space_count": 1696.0,
              "total_lines": 277.0,
              "char_entropy": 4.9,
              "unique_chars": 91.0,
              "avg_line_length": 37.57,
              "high_byte_ratio": 0.0,
              "max_line_length": 169.0,
              "non_ascii_ratio": 0.0,
              "empty_line_ratio": 0.17,
              "last_line_length": 114.0,
              "whitespace_ratio": 0.18,
              "most_common_ratio": 0.09,
              "line_length_stddev": 41.46,
              "repeated_char_sequences": 25.0,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 11.0,
              "most_common_char_codepoint": 101.0
            },
            "binary": {
              "overall_entropy": 4.9,
              "peak_region_bytes": 9659.0,
              "peak_region_entropy": 5.02
            }
          }
        },
        "id": 3,
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!!Package.md",
        "risk": 1,
        "sha": "65ed6c3e5648ee7c33f3f3e5edbd368bb280cadd606e7fda9dafde9a861a5703",
        "size": 10683,
        "traits": [
          {
            "id": "metadata/file/extension/identity::doc-or-config-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "File uses a document or configuration extension",
            "spans": [
              [
                0,
                10
              ]
            ]
          },
          {
            "id": "metadata/file/extension/identity::markdown-file-basename",
            "conf": 1.0,
            "crit": 1,
            "desc": "Markdown document file extension",
            "spans": [
              [
                0,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/llm::assistant-role-marker",
            "conf": 0.7200000286102295,
            "crit": 1,
            "desc": "LLM assistant-role value",
            "spans": [
              [
                2728,
                17
              ]
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "Contains common English function words",
            "spans": [
              [
                60,
                3
              ]
            ]
          }
        ],
        "type": "markdown"
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/M",
            "n": [
              {
                "c": 3,
                "d": "PE has no signature record",
                "i": "metadata/binary/layout::pe-no-signature-record",
                "o": 0,
                "z": 1,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          },
          {
            "b": "00000000000000000000AgN4f00000nb@R\u00260SSx7\u00265gMnl$MA00rr91000000000000",
            "n": [
              {
                "c": 1,
                "d": "PE standard code/data section",
                "i": "metadata/binary/section/names::pe-code-data-standard-section",
                "o": 512,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 496
          },
          {
            "b": "Evpco1s+C]c)wS\u003e3mV2Qlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCn",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 6368,
                "z": 4,
                "cf": 1.0
              }
            ],
            "ln": 6352
          },
          {
            "b": "oeny9jwx:8B.\u003eRM07PxRq*ACawO\u003c4\u003epxk3sBye0=A8lKQwPRoUz/wIMq#*MxByd%RxK#3?00",
            "n": [
              {
                "c": 2,
                "d": ".NET core namespace reference",
                "i": "metadata/lang/compiler/managed::system-namespace",
                "o": 19724,
                "z": 9,
                "cf": 0.800000011920929
              }
            ],
            "ln": 19708
          },
          {
            "b": "zC$T$wNPB\u0026zF8mRD2v9(qE%oEl32$DA+PA7l34r?v/PzrvpRVBq/)4\u003evqOqKD2v9(lVM:DBy^*Tze:r5Bn",
            "n": [
              {
                "c": 3,
                "d": ".NET asynchronous HTTP response body read",
                "i": "micro-behaviors/communications/http/client/managed::readasstringasync",
                "o": 20090,
                "z": 17,
                "cf": 0.8399999737739563
              }
            ],
            "ln": 20074
          },
          {
            "b": "z/oJmxM4#UnIiwDx\u003eqg7e[w^m090(PyYF9VByd%*A+eV@0cqZ[uSh5!wNPAQxjVf(",
            "n": [
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 24007,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 23991
          },
          {
            "b": "zz1\u003e0A+O@#x)Kifx(v\u003e?pgXS\u003ez/fSmw]]T$B8L}Gq!o#-vqGU7vruj4zua-?BydsRBzbPkx)Kifx(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zuarXBydHWzEW^5z/bL@wPRoGB-7Yhx(v\u003e?lVl*XyY",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 24266,
                "z": 17,
                "cf": 0.699999988079071
              },
              {
                "c": 2,
                "d": "Newtonsoft.Json library reference",
                "i": "micro-behaviors/data/serialize/json::json-newtonsoft",
                "o": 24218,
                "z": 15,
                "cf": 0.8500000238418579
              }
            ],
            "ln": 24202
          },
          {
            "b": "B75(qlVl*Uz/dg1B8L{@pgXS\u003ez/fSmw]]T$B8L{@qE%oEn][]*09shPBy!6=z/bL/wPRoGx(mTaxI@y",
            "n": [
              {
                "c": 2,
                "d": "Newtonsoft.Json library reference",
                "i": "micro-behaviors/data/serialize/json::json-newtonsoft",
                "o": 24575,
                "z": 15,
                "cf": 0.8500000238418579
              }
            ],
            "ln": 24559
          },
          {
            "b": "Byd%*z/tX$wPRoTBz(9#q*ACawO\u003c4{wPPK}BAzE4rC(I]wPz\u003c2y+w7[zeBiee(2#1e\u003ey8az#-TACxv+vB8LVje\u003eQh6zz1Q%zGbU?wPRoOB.$P0ASye(Byd^=zdm6%08)#WwD",
            "n": [
              {
                "c": 2,
                "d": ".NET core namespace reference",
                "i": "metadata/lang/compiler/managed::system-namespace",
                "o": 24695,
                "z": 10,
                "cf": 0.800000011920929
              },
              {
                "c": 2,
                "d": "Newtonsoft.Json library reference",
                "i": "micro-behaviors/data/serialize/json::json-newtonsoft",
                "o": 24737,
                "z": 15,
                "cf": 0.8500000238418579
              }
            ],
            "ln": 24679
          },
          {
            "b": "v}YB\u003cvmjWFv@=p5Bz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?SAx\u003e8g4B8LVje\u003c:5:e\u003cTM7zEVmQBy/G8vpJ\u003e\u00260a#",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 25204,
                "z": 18,
                "cf": 0.75
              }
            ],
            "ln": 25188
          },
          {
            "b": "k4F2cgYNJaMJm6!08#%wpgXS\u003ez/fSmw]]T$B8L}Gpiyw?r://!wK{lEwnC%$xdLf2wP@lmzGx-dBs{gbz/d9Gr+lq)x(v(Lf/7Boe?![iefEr5y\u0026\u003c/uwJ:{xB-.Ujy+cY9BZ/f3v[QxUrbVL-",
            "n": [
              {
                "c": 2,
                "d": "IPv4-like .NET assembly version",
                "i": "metadata/lang/compiler/managed::dotnet-ipv4-like-version",
                "o": 31621,
                "z": 16,
                "cf": 0.8500000238418579
              },
              {
                "c": 2,
                "d": "Newtonsoft.Json library reference",
                "i": "micro-behaviors/data/serialize/json::json-newtonsoft",
                "o": 31569,
                "z": 15,
                "cf": 0.8500000238418579
              }
            ],
            "ln": 31553
          },
          {
            "b": "00)BMB8$=5wPE?K8ux*MzddV@v@Dj6y?mZ5z/e{7z!\u0026{4A@VgQ0rrZzA+flkwO#16uVoN]vqH4h000De00)yVx8",
            "n": [
              {
                "c": 1,
                "d": "LLM completion-token count field",
                "i": "micro-behaviors/communications/http/llm::llm-token-usage-json--rx-5",
                "o": 32026,
                "z": 21,
                "cf": 0.6499999761581421
              }
            ],
            "ln": 32010
          },
          {
            "b": "wDhYp0rrmrwO2/X01]qj4rcuaze:P7Bz\u003e@azGt^T76ayEv@Dj6y?mZ5z/e{7z!\u0026{4A@VgL0rrKIz//A7uVZj4wO#L?01]qj4p-*RxK$ZYBz\u003e@azGt^T3JQkiB7n({zd9",
            "n": [
              {
                "c": 1,
                "d": "LLM total-token count field",
                "i": "micro-behaviors/communications/http/llm::llm-token-usage-json--rx-10",
                "o": 32500,
                "z": 12,
                "cf": 0.6499999761581421
              },
              {
                "c": 1,
                "d": "LLM completion-token count field",
                "i": "micro-behaviors/communications/http/llm::llm-token-usage-json--rx-5",
                "o": 32478,
                "z": 17,
                "cf": 0.6499999761581421
              },
              {
                "c": 1,
                "d": "LLM prompt-token count field",
                "i": "micro-behaviors/communications/http/llm::llm-token-usage-json--rx-8",
                "o": 32458,
                "z": 13,
                "cf": 0.6499999761581421
              }
            ],
            "ln": 32442
          },
          {
            "b": "nnKCTIetk:-N\u003ex(0rr91lPOELB7GxktYjH)vqYsrz!0{bwO#QhtVCVQC4CYnvqEL\u003cz/oJmxM4#UnNbnkx)a6dB75(qo(B@/B7/Glk$JW@y?WD#Bx\u0026-[yfTUFy?m3@wN6a:BAqLjzE^f@whk+\u003etVCVQC4CYnvqEL\u003cz/oJmxM4#UnIiwDx\u003eqg7e]Uug08(AOgbQ@\u0026b9P]GnnKB)nO{D0-N\u003ex(ETSYcWbTCV",
            "n": [
              {
                "c": 3,
                "d": "Visual Studio PDB build path",
                "i": "metadata/binary/debug::pdb-visual-studio",
                "o": 32656,
                "z": 132,
                "cf": 0.5
              }
            ],
            "ln": 32640
          },
          {
            "b": "00000000000000000000000000000000000000315c8Xg7YTL^00000000000000000",
            "n": [
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 33280,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 33264
          },
          {
            "b": "0000000000008S[gYNHQrSD4#uJsabmf3i=qVGw?pxjb\u0026uJrT$p5)--pxgv{006Xn[brp!0rr910rr9",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 33374,
                "z": 15,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 33358
          },
          {
            "b": "nDr/ie=U\u003eK001[S3JHhclJz38z2!IPve$fBC(QOtve$cAwDhYg002p+zuahEASxUJCk@-=pxknjx8?]i003yb8#{0tmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up00310zuawJB]V7NASyd",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes CompanyName",
                "i": "metadata/package/versioning::pe-companyname-field",
                "o": 33730,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 33786,
                "z": 15,
                "cf": 0.699999988079071
              }
            ],
            "ln": 33714
          },
          {
            "b": "x-IYAzua+U001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001.Ne=WN9e=WN9e=WN9003ybaohAxnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE00310zuawJB]V7NASydXve$9z",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 33882,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 33930,
                "z": 12,
                "cf": 0.699999988079071
              },
              {
                "c": 1,
                "d": "PE FileVersion resembles IPv4",
                "i": "metadata/package/versioning::pe-file-version-ipv4-shape",
                "o": 33908,
                "z": 7,
                "cf": 0.9200000166893005
              }
            ],
            "ln": 33866
          },
          {
            "b": "pxknjx8?]i003WjaohAxpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE00310zuawJB]V7NASydX",
            "n": [
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 34086,
                "z": 16,
                "cf": 0.699999988079071
              }
            ],
            "ln": 34070
          },
          {
            "b": "x-IYAzua+U001?Q2MK(9pYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001.Ne=WN9e=WN9e=WN9001$U2MK(9k(+%aA@Y+Kz2!2ByYF.Xao",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 34278,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 1,
                "d": "PE ProductVersion resembles IPv4",
                "i": "metadata/package/versioning::pe-product-version-ipv4-shape",
                "o": 34308,
                "z": 7,
                "cf": 0.9200000166893005
              }
            ],
            "ln": 34262
          },
          {
            "b": "000000000000000000000fvfX3\u0026*ncKuJTA000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 34816,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 34800
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              32768,
              5.9,
              "r-x"
            ],
            [
              ".rsrc",
              33280,
              1536,
              2.49,
              "r--"
            ],
            [
              ".reloc",
              34816,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 36258.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "bss_like_section_count": 0.0,
              "section_overflow_count": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 4.21,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.06
            },
            "file": {
              "size": 35328.0,
              "entropy": 5.71,
              "size_bytes": 35328.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.9,
              "string_count": 521.0,
              "overall_entropy": 5.71,
              "entropy_variance": 5.71,
              "avg_string_length": 18.67,
              "max_string_length": 132.0,
              "peak_region_bytes": 2048.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.7,
              "string_length_stddev": 15.6,
              "largest_section_ratio": 0.93,
              "sentence_string_count": 7.0,
              "sentence_string_ratio": 0.01,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 32768.0,
              "entropy_max": 5.9,
              "entropy_mean": 2.82,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 4,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!!lib/netstandard2.0/Universal.MoonshotAI.Client.dll",
        "risk": 4,
        "sha": "a6c8b789d03002c0fc7aa506d1954c05cf95681d92e9ad9c118438916f1a0cf2",
        "size": 35328,
        "traits": [
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/binary/debug::pdb-visual-studio",
            "crit": 3,
            "desc": "Visual Studio PDB build path",
            "spans": [
              [
                32656,
                132
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                33930,
                12
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-file-version-ipv4-shape",
            "conf": 0.9200000166893005,
            "crit": 1,
            "desc": "PE FileVersion resembles IPv4",
            "spans": [
              [
                33908,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                33786,
                15
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                33374,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                34278,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-companyname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes CompanyName",
            "spans": [
              [
                33730,
                11
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                33882,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-product-version-ipv4-shape",
            "conf": 0.9200000166893005,
            "crit": 1,
            "desc": "PE ProductVersion resembles IPv4",
            "spans": [
              [
                34308,
                7
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                6368,
                4
              ]
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "micro-behaviors/communications/http/client/managed::readasstringasync",
            "conf": 0.8399999737739563,
            "crit": 3,
            "desc": ".NET asynchronous HTTP response body read",
            "spans": [
              [
                20090,
                17
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                6368,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 38289.0,
              "entropy": 4.58,
              "size_bytes": 38289.0
            },
            "binary": {
              "overall_entropy": 4.58,
              "peak_region_bytes": 37265.0,
              "peak_region_entropy": 4.76
            }
          }
        },
        "id": 5,
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!!lib/netstandard2.0/Universal.MoonshotAI.Client.xml",
        "sha": "b49ffa4b7e13d70681242e9ebc093690d0035e08c6d567f086062a8fd5cf2c36",
        "size": 38289,
        "traits": [
          {
            "id": "metadata/file/extension/identity::doc-or-config-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "File uses a document or configuration extension",
            "spans": [
              [
                0,
                31
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "id": 6,
        "sha": "53789202a7a62de78987becbf3ade1d56e9cb6e6fd525e8db9d2f1d352cb0425",
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!![Content_Types].xml",
        "size": 590,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 7,
        "sha": "2663bcead7f00dea210a4c9b0efbe4754952a2c1d02b9f6b79121e6d7b3abad9",
        "path": "Universal.MoonshotAI.Client.1.0.0.nupkg!!package/services/metadata/core-properties/0792c714028e4e83a3e7a907f5c55176.psmdcp",
        "size": 762,
        "type": "xml",
        "depth": 1
      }
    ],
    "omitted_files": 2,
    "rev": "6a958",
    "v": "8"
  }
}