{
  "llm": {
    "conf": 0.5097344,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "outcome": "benign",
    "interpretation": "Legitimate NuGet package metadata"
  },
  "ml": {
    "v": "7",
    "eng": "2.4.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.23929046,
        "rte": "az",
        "prob": 0.23929046
      },
      {
        "cls": 0,
        "raw": 0.0013464093,
        "rte": "az/nupkg",
        "prob": 0.0013464093
      }
    ],
    "prob": 0.2996206,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.2996205985546112,
        "type": "nupkg"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012834866538469214,
        "type": "xml"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011483828529890161,
        "type": "xml"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.2996205985546112,
        "type": "pe"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000010828177437360864,
        "type": "xml"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012248754501342773,
        "type": "xml"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012814998626708984,
        "type": "xml"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000019530454665073194,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-28T08:37:10Z"
  },
  "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awak2MMeL}=)+U[pAB%0018x000xb003wDwO=Ave]\u003eJtBcI*wy63a3k\u0026qJ$KOv[yo%X.S6(^CaRo\u003e8:KJ(7NP{(AY6-E]bqbx(UEvM7lM[{K59peHP5r(T!-*!-wZ?IWzh}i8s}[1p-+Qo.OJ4b!n^:\u003c88",
            "n": [
              {
                "c": 2,
                "d": "Archive contains an executable member",
                "i": "metadata/file/metrics::archive-contains-executable-member",
                "o": 0,
                "z": 31,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "H(Cm)Md₂(BiPa)",
        "sha": "f6a956e818acf1e3833a269f9e0e1d2851beefe16beb80a529f755438028dc26",
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg",
        "risk": 4,
        "size": 31600,
        "type": "nupkg",
        "facts": {
          "metrics": {
            "file": {
              "size": 31600.0,
              "entropy": 7.89,
              "size_bytes": 31600.0
            },
            "binary": {
              "overall_entropy": 7.89,
              "peak_region_bytes": 28672.0,
              "peak_region_entropy": 7.82
            },
            "archive": {
              "file_count": 8.0,
              "member_count": 8.0,
              "script_count": 0.0,
              "zip_bomb_ratio": 2.68,
              "directory_count": 0.0,
              "executable_count": 1.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 30192.0,
              "compression.ratio": 0.62,
              "hidden_file_count": 2.0,
              "total_uncompressed": 48672.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 81.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 8.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 3.0,
              "timing.mtime_unique_ratio": 0.38,
              "misplaced_executable_count": 1.0,
              "timing.mtime_dominant_count": 4.0,
              "timing.mtime_spread_seconds": 53208.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.5,
              "compression.method_counts.stored": 1.0,
              "compression.method_counts.deflate": 7.0
            }
          }
        },
        "ident": {
          "name": {
            "value": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ",
            "source": "nupkg.title",
            "verified": false
          },
          "urls": [
            {
              "url": "https://gitlab.kayicloud.com/kayi-cloud-enterprise/dotnet/kayisoft",
              "kind": "homepage",
              "source": "nupkg.project_url"
            },
            {
              "url": "https://gitlab.kayicloud.com/kayi-cloud-enterprise/dotnet/kayisoft",
              "kind": "repository",
              "source": "nupkg.repository_url"
            }
          ],
          "trust": "unsigned",
          "authors": [
            {
              "name": "virtual",
              "role": "author",
              "source": "nupkg.authors"
            }
          ],
          "version": {
            "value": "5.2.8",
            "source": "nupkg.version",
            "verified": false
          },
          "identifier": {
            "value": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ",
            "source": "nupkg.id",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash"
          },
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "from": [
              {
                "off": 1984,
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Hardcoded network URL with domain name",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "from": [
              {
                "file": 3
              }
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 543.0,
              "entropy": 5.18,
              "size_bytes": 543.0
            },
            "binary": {
              "overall_entropy": 5.18,
              "peak_region_bytes": 543.0,
              "peak_region_entropy": 5.18
            }
          }
        },
        "id": 1,
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg!!_rels/.rels",
        "pid": 0,
        "sha": "3fd7832eba47808391c98f2119949bc53cf71a32decdf8545959b05aa0c31ee9",
        "size": 543,
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "[4ls%kx}3YaA?spB7]MgjT8QkfD}SJzEWP}x(mMDb6w0teJs}sj{\u003cz\u003evpK7YxjSigzes9hjTaMYBz%n]flpSpwO\u003e\u003c%e]trjA=l2qw]]Unz/4dDvpK7Yxk8l@fetjogCpBtfk+]NAaJJiCYNytj{\u0026zPjz!UKvpS!*vlL2varR^?x\u003efz2vr(Ndz!s8zl1j^=l${dHz9@kUAb]JhB7]Mge(lFcBvf$-Ab]JhB8M7KqEK3zx()6DjtgzVj{\u0026zParS^\u0026wPz\u003caz/d-@e\u002624sjtg\u003e?A=U@kzAXyIarR^?vrDW9z/P[.C4\u003e#sBZY8Gfjx0BxM4{jj{\u0026zParS^=A=kY7v@$Z\u003ey^8JOBz#pZfe3%LBzLw{e]a)vx\u003e7%$B.0amz/4dyvr(Msv@c7awg.wgBy/GiA+PPafjY0yzE)]yyHIH5B8LVjjtgU]z!-\u0026[Bx9u$j{\u0026zParS^SwPIv4x(Ffdz/d:ivr(Ndz!s8ll${dHz9@kUAb]JhB7]MgawD=+B.\u003eRKfjXTnv@=p5BzkVhj{\u0026zParS^*vp%TBojr9WB8LVjavfEQeP%)2CYU6uA:-/@Cw?Iqjtg!+xlclzarR^HjAt1Lz/YSmz/QaCBA}?pjTaJMBrR\u0026IA+)(.xMOunB2\u003e%cxk8E7vpy\u003c8vr(M%y\u0026sDbe[n*pfkC0wx!r?hz/]OxwO#Q3A=u5kB7E1nz//(dBt4ArD1?trw]]jtv@Dj3x((GZggr0$f\u003eAv7iwrxJgD4lKvL{86i5-\u0026Rg?6(Jggr9%v(Dn8hAiB5a%nK53lQDlauTgCAaJ]$wO#0(wPH3xarR^HarS^VA=l8taAR4jxjVfOA:-/@Cw?IqjTa=PBu7%cb0DtRarR^HarR^?wmYZ\u003ezE^r@v%Ghhwizbfvr(Ndz!s8zl1j^=l${dHz9@kUAb]JhB7]Mge(lFcBvf$-Ab]JhB8M7yaA?spB7]MgjT8:oga\u003eKgaz2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj{\u0026zParR^HarS^SwPhi#wmYT*C{3*ijT9*rvrcrMvSi}=vSi}]vrlG?A:-\u003cbx(\u003e$9vpAXWBwkQRaA?spB7]MgjT8Znh.D)gaz2!cy\u0026%o1jT9jnx(4rhl2HaED3T4xB0q.Wj{\u0026zParR^Hjtgt/zV",
            "n": [
              {
                "c": 2,
                "d": "NuGet nuspec manifest file",
                "i": "metadata/build/manifest::nuspec-file",
                "o": 0,
                "z": 60,
                "cf": 0.9800000190734863
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 953.0,
              "entropy": 5.17,
              "size_bytes": 953.0
            },
            "binary": {
              "overall_entropy": 5.17,
              "peak_region_bytes": 953.0,
              "peak_region_entropy": 5.17
            }
          }
        },
        "id": 2,
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg!!Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.nuspec",
        "pid": 0,
        "risk": 1,
        "sha": "0faa21e44279a8d9910196c49fe5c22d33a119dba11ca6cdb283ab15f4a95a70",
        "size": 953,
        "traits": [
          {
            "id": "metadata/package/files/nuget::nuspec-dependencies",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares dependencies",
            "spans": [
              [
                42,
                767
              ]
            ]
          },
          {
            "id": "metadata/build/manifest::nuspec-file",
            "conf": 0.9800000190734863,
            "crit": 2,
            "desc": "NuGet nuspec manifest file",
            "spans": [
              [
                0,
                60
              ]
            ]
          },
          {
            "id": "metadata/package/files/nuget::nuspec-repository",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "NuGet package declares repository",
            "spans": [
              [
                42,
                529
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "ctx": [
          {
            "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000Fb/MH4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000p^\u003eu:oAtj}83FiJ0000000000?#B@z3J",
            "n": [
              {
                "c": 2,
                "d": "PE contains exactly one resource entry",
                "i": "metadata/binary/resource::pe-single-version-resource",
                "o": 0,
                "z": 24,
                "cf": 1.0
              }
            ],
            "ln": 0
          },
          {
            "b": "000000000000000kMy^J00000000000000000000b1zRk00000nb@R\u00260SSx7Z:e%X+Pu/+0rr9100000000000000000000000000000000000000000000000000000000000000000L5?in00T.JEgleR1sjd#4GDFi@SS#n00WGP000uO5c8XqdGxCG6efH*r@-j20000018!+K017a!000vD0rraszXA9J3mC]P04R$5000vDcJBc=8/DF(017n60!7KT00BP17BBOi000f31{L5c26gNX017353\u0026*ngc\u0026%wGd\u003c#nn017g%0W[@!017hdA%hKz27MZO00B+)0W[#/017gQ6efN\u0026]-k3)0000018/dV019=/000uLAYBa1AbM=$0172)Ee\u003cm^zYX@V3mgc5000cFeF/:.0rr95@SSPc00WG!000uLFc2YJ1AbB-017330@@r7b}P]WEGoAG1PwPh000jAa]?PIc4D6$00Ei+000uLEGPSJ1skSocvL%}00Jo92(\u003c@fB0H.=3mgi9000dub(^]LzZCC:3iLh^000vE9rl6Dc34lg0b#\u0026$000uLAU!-RAbM/#017331POJ9b}P]WEGoAG1PwPj000jAaohxGc4Dd000Ei-000uLEG/=L1skSocvL%}00Jo93JHehB0pO:3mgib000dubldYJc4l7000BP17BBOi000f31}gFi26h3\u0026017352lj-bzZtw-3u4l\u003e015*DcJBbNB0}1*3mfZM003$R",
            "n": [
              {
                "c": 1,
                "d": "No section reaches compression-grade entropy",
                "i": "metadata/binary/metrics/threshold::no-compression-grade-section",
                "o": 512,
                "z": 512,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 480
          },
          {
            "b": "c(Sc^3mW}o0^+\u003c^00Ej4000uQ9S^-e000uQn=\u003ctV000cFeDNmG18*p4017gQlq{Gy0rrc2000003\u0026*ncB#g*9e\u0026bgqf/Yjl000f5yYBCnKo\u003e)!byPQ)@0ru6i1t]*bu5Y8x(mN800000g-ch)z#/}sbumUxQ.%dj5c8Xgbs+:9l\u0026Wh!V(5\u0026z7Zo%u",
            "n": [
              {
                "c": 2,
                "d": ".NET metadata root signature (BSJB)",
                "i": "metadata/binary/framework::dotnet-metadata",
                "o": 1984,
                "z": 4,
                "cf": 1.0
              }
            ],
            "ln": 1936
          },
          {
            "b": "xjR6wByxiiq/)d)C%=H!Ab]JhB7]Mgo\u003ewx!vp%cKnP5Y\u0026yH)GivSk4WwozZ107pKhz/4\u003cWze:JbB8#5lzCUm)Bvf$-Ab]JhB8M7%vpAXWBwl:Hz!a0bwDk29A7%+ZB5S",
            "n": [
              {
                "c": 1,
                "d": "References the .NET Invoke member name",
                "i": "micro-behaviors/process/interpreter/reflection/runtime::invoke-token",
                "o": 5940,
                "z": 6,
                "cf": 0.6600000262260437
              }
            ],
            "ln": 5908
          },
          {
            "b": "z!s8zl1j^=l${dHz9@kUAb]JhB7]Mge(lFcBvf$-Ab]JhB8M7KqEK3zx()6De[w^m08[e:By/p?o\u003e!9Tz/Y\u0026eBs{1bBy/uhx(v)ge\u003c\u003cL{w[+[2A::67z/bLHvrlG?A:-\u003cbx(\u003e%{z/ff3xlwl6BzkVh07/K@zF0P}B-H]jx(v\u003e?qEK3zx()6?p\u0026ZF+",
            "n": [
              {
                "c": 2,
                "d": ".dll extension reference",
                "i": "micro-behaviors/fs/path/extension::dll-dup",
                "o": 6752,
                "z": 4,
                "cf": 0.5
              }
            ],
            "ln": 6704
          },
          {
            "b": "wN/*@z/bLHx\u003e8g4B8LVje\u003e72bwO#N6z/fRGl$HsGzE^r@v%HT-ygQ)%x(v\u003e?q*ACawO\u003c4$wOb:\u0026v@#B6zu9mbwPz%dv}w2Cy\u00260V)BzkVh08)#Wx(mMJz/6D4A+PPkzuarXByd\u003c+z*2\u00269wPv=Bx\u003e8g4B8LVje\u003e72bwO#N6z/fRGlVl\u003cOx\u003eINevruj4zz1m\u0026zE^s007gWxw=",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Reflection namespace reference",
                "i": "metadata/lang/compiler/managed::reflection-namespace",
                "o": 6991,
                "z": 17,
                "cf": 0.699999988079071
              }
            ],
            "ln": 6943
          },
          {
            "b": "z/L?HqEK3zx()6?luNusvpKy$A^p2\u003czF0P}B-H]jz/L?gv@#Tf04}+\u003eBz(g1q*ACawO\u003c4/x\u003c\u003eT(z/Z2mv@?S.wPRoTwPz%dv}xYYp\u0026Zbmz/ff3xlwlaq!o#)x\u003e7Z}08[e:By/qwqGV(0x(dAllVl*Xx(4v3q!o#)x\u003e7Z}07pycB.tu3zF8WZwmY/Zju+PeuVY%}A@Yc:B94",
            "n": [
              {
                "c": 2,
                "d": ".NET System.Diagnostics namespace reference",
                "i": "metadata/lang/compiler/managed::diagnostics-namespace",
                "o": 7486,
                "z": 18,
                "cf": 0.75
              }
            ],
            "ln": 7438
          },
          {
            "b": "e\u003cS@=e\u003c%z-z/4\u003cWze:JbB8#5lzz1+7B96=/ze:JbB8#nue(Da!vRG{Uq2*O@0rrNbwPhNex([olC#X)3ltgE.Ac15[fk20vy**^9yHIH5v@c7awg?wgz7/WkD1!\u003cuy\u0026sDbeOe*wwPz:gx(^\u0026swn=NcwPPOvvr(Ndz!s7\u003e00Jx60rr9b0rrf300001004NN0rrf3004LTojr9WB8LVje\u003cS@=e\u003c%z-z/4\u003cWze:JbB8#5lzz1+7B96=/ze:JbB8#nue\u003c%z-z/4\u003cWze:JbB8#5lzu",
            "n": [
              {
                "c": 3,
                "d": "Hardcoded network URL with domain name",
                "i": "micro-behaviors/communications/http/url/domain::http-url-binary",
                "o": 9674,
                "z": 29,
                "cf": 0.699999988079071
              }
            ],
            "ln": 9610
          },
          {
            "b": "efEO]D1?trw]]T\u003evSi}/x\u003e86#lVl*XA+frkx(v(wp\u0026yz%lVl*XA+frkz/NxKr+lq)x(v(Lh7*Tpi4=)oavyo/BAIRnj-j?NBAg/aefE=ivR/:*oj-xFz!\u0026{4j-kyUy\u003ed)KxKL}2l1j^=l1j^=o\u003c@9:rb#z+B7].GqEK3zx()6De\u003cS@=o\u003c@9:rb#z+B7].]vpAXWBwl:Hz!a0bwH[%5xKL}2l1j^=l1j^=o\u003c@9:rb#z+B7].GqEK3zx()6DefE#8A=U@kzAP*eh.D)sfF1tlB.(exA+dyKwP-9nvqEFqp\u003c3k-x\u003e6!EC#OY$wO%UGB.\u003e\u003c]00Ar5000o901e=b000000000005p-\u0026?V9WKpYZQ%0oTsZ0n{oC0n]j800000000000096100",
            "n": [
              {
                "c": 2,
                "d": "IPv4-like .NET assembly version",
                "i": "metadata/lang/compiler/managed::dotnet-ipv4-like-version",
                "o": 9899,
                "z": 15,
                "cf": 0.8500000238418579
              }
            ],
            "ln": 9851
          },
          {
            "b": "0000000000000000000000000000000000000000000000000000000000315c8Xg7YTL^000000000000000000310rr91fAq960000000000000000003100000nb@R\u0026syqae5cI$k00000000005cK/\u002600341qVHe8rSCL*qufR}nDqJ^p5[S3nDqG=mGui:00000Y-^*6000310SSx7000o80SSx7000o8kl7V-000001onA40SSi2000000000000000l\u0026Wh!0rud2ve$rFmGvc5yYF2DnDrSdw=",
            "n": [
              {
                "c": 2,
                "d": "PE version resource metadata",
                "i": "metadata/package/versioning::version-resource-metadata",
                "o": 10846,
                "z": 15,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "PE resource section",
                "i": "metadata/binary/section/names::pe-resource-section",
                "o": 10752,
                "z": 5,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 10720
          },
          {
            "b": "002W{00031fAr^bfAr^bfAr{fvGn7Z003g5aPIJylJz38z2!zMwDlPFBo3vZ002T(ve$MMx-JhOzVBwHBo0A-l\u0026Z{3v/QAEz2={6zVBROz#:[UwDl=KA@Y[OzVBUPaokaozVBqFBPujTwDhYg005k-hui:TmGvc5yYF2Dl\u0026Z=#A@YXIASx!Nz#:$Wx-J5Kzu6Up002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2={6zVBROz#:[UwDl=KA@Y[OzVBUPe=XYFzVB?UBo1VdzVBROz#:[UwDl=KA@ZaUASvY(qugb9vGo\u003cqx-JkPo-O2\u003c001XM2MK(9mGvc5yYF2DrSDXhASydXx-J5Kzu6Up001\u003eRe=WTbe=W\u003che=WN9005k-iSGfXnDrSdBo2\u003eLASx$Sve$9zp5[Y5z2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2={6zVBROz#:[UwDl=KA@Y[OzVBUPe=XYFzVB?UBo1VdzVBROz#:[UwDl=KA@ZaUASvY(qugb9vGo\u003cqx-JkPo-O2\u003ce=YzZyYFnK001zE0SSl3oAnS7x8(uuyYD*5zVB.RC(R\u003c+x-I=CxAibO001bw005I?iSGfXpxkznx-I=Cx-J2Jve$9zmGvc5yYF2Dzua8Bz2!bE002T(ve$MMx-JhOzVBwHBo0][k(+u]z#.G\u003cl\u0026Z{3v/QAEz2={6zVBROz#:[UwDl=KA@Y[OzVBUPe=XYFzVB?UBo1VdzVBROz#:[UwDl=KA@ZaUASvY(qugb9vGo\u003cqx-JkPo-O2\u003ce=YzZyYFnK004PJf8#1MpYLIozVBqFBPt[KBo2twwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W\u003chd/.s8ve@a:hukDiwDjZ\u003chVL\u0026rfAs3ihVLSlhuk-qhumg^h2]MnhVL/qhVL\u0026rhVLVmvGo*ph2]xive@j^g5$!:hVLYnh#\u003e\u0026ph#\u003eVkwDhYg001$U2MK(9k(+%aA@Y+Kz2!2ByYF.XaokBxwDl-JA@Y[OzVBUP001\u003eRe=WTbe=W\u003che=WN9000000000000000000000000000000",
            "n": [
              {
                "c": 3,
                "d": "PE version metadata includes FileDescription",
                "i": "metadata/package/versioning::pe-filedescription-field",
                "o": 11158,
                "z": 15,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes FileVersion",
                "i": "metadata/package/versioning::pe-fileversion-field",
                "o": 11306,
                "z": 11,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes InternalName",
                "i": "metadata/package/versioning::pe-internalname-field",
                "o": 11354,
                "z": 12,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE version metadata includes ProductVersion",
                "i": "metadata/package/versioning::pe-productversion-field",
                "o": 11698,
                "z": 14,
                "cf": 0.699999988079071
              },
              {
                "c": 3,
                "d": "PE ProductVersion has SemVer git hash",
                "i": "metadata/package/versioning::pe-productversion-semver-git-hash",
                "o": 11728,
                "z": 46,
                "cf": 0.8999999761581421
              },
              {
                "c": 2,
                "d": "PE OriginalFilename metadata field",
                "i": "metadata/package/versioning::pe-originalfilename-field",
                "o": 11542,
                "z": 16,
                "cf": 0.699999988079071
              },
              {
                "c": 1,
                "d": "Several short title-cased resource strings",
                "i": "metadata/binary/resource::short-titlecase-resource-words",
                "o": 11066,
                "z": 8,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "PE FileDescription field is populated",
                "i": "metadata/package/versioning::pe-file-description-present",
                "o": 11192,
                "z": 53,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE LegalCopyright field is populated",
                "i": "metadata/package/versioning::pe-legal-copyright-present",
                "o": 11532,
                "z": 1,
                "cf": 0.949999988079071
              },
              {
                "c": 1,
                "d": "PE FileVersion value is present",
                "i": "metadata/package/versioning::version-info-file-version-present",
                "o": 11332,
                "z": 7,
                "cf": 0.949999988079071
              }
            ],
            "ln": 11034
          },
          {
            "b": "00000000000000000000000000000000000000000000000000000000000006*I:3\u0026*ncl]L8C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "n": [
              {
                "c": 2,
                "d": "PE .reloc section presence",
                "i": "metadata/binary/section/names::reloc-section-presence",
                "o": 12288,
                "z": 6,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 12240
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "mscoree",
              "CorDllMain"
            ]
          ],
          "sec": [
            [
              ".text",
              512,
              10240,
              5.7,
              "r-x"
            ],
            [
              ".rsrc",
              10752,
              1536,
              2.66,
              "r--"
            ],
            [
              ".reloc",
              12288,
              512,
              0.08,
              "r--"
            ]
          ],
          "metrics": {
            "pe": {
              "checksum": 0.0,
              "checksum_valid": 0.0,
              "clr.is_il_only": 1.0,
              "resource_count": 1.0,
              "has_version_info": 1.0,
              "checksum_stripped": 1.0,
              "computed_checksum": 71791.0,
              "reloc_overhang_bytes": 500.0,
              "reloc_overhang_ratio": 0.98,
              "clr.is_32bit_required": 0.0,
              "bss_like_section_count": 0.0,
              "clr.is_32bit_preferred": 0.0,
              "clr.strong_name_signed": 0.0,
              "section_overflow_count": 0.0,
              "clr.is_native_entrypoint": 0.0,
              "misaligned_section_count": 0.0,
              "version.identity_entropy": 4.2,
              "base_relocation_block_count": 1.0,
              "base_relocation_entry_count": 1.0,
              "version.identity_symbol_ratio": 0.08
            },
            "file": {
              "size": 12800.0,
              "entropy": 5.19,
              "size_bytes": 12800.0
            },
            "binary": {
              "is_pie": 1.0,
              "code_entropy": 5.7,
              "string_count": 179.0,
              "overall_entropy": 5.19,
              "entropy_variance": 5.27,
              "avg_string_length": 26.51,
              "max_string_length": 206.0,
              "peak_region_bytes": 1024.0,
              "code_to_data_ratio": 1.0,
              "peak_region_entropy": 5.63,
              "string_length_stddev": 23.91,
              "largest_section_ratio": 0.8,
              "sentence_string_count": 5.0,
              "sentence_string_ratio": 0.03,
              "high_entropy_string_count": 0.0
            },
            "imports": {
              "count": 1.0
            },
            "sections": {
              "count": 3.0,
              "code_size": 10240.0,
              "entropy_max": 5.7,
              "entropy_mean": 2.81,
              "name_entropy": 3.03,
              "writable_count": 0.0,
              "executable_count": 1.0,
              "nonstandard_count": 0.0,
              "executable_writable_count": 0.0
            },
            "dependencies": {
              "count": 1.0
            }
          }
        },
        "id": 3,
        "mol": "H(Cm)Md₂(BiPa)",
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg!!lib/net9.0/Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.dll",
        "pid": 0,
        "risk": 4,
        "sha": "86e8af9d5911ce553c0dde704d4b1bfe424a7b190950de1077f429bbac2a7fd4",
        "size": 12800,
        "traits": [
          {
            "id": "metadata/package/versioning::pe-version-resource",
            "conf": 0.800000011920929,
            "crit": 2,
            "desc": "PE version resource structure",
            "spans": [
              [
                10846,
                15
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-semver-git-hash",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PE ProductVersion has SemVer git hash",
            "spans": [
              [
                11728,
                46
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::clr-runtime-header",
            "conf": 1.0,
            "crit": 2,
            "desc": "PE CLR header (COM descriptor)"
          },
          {
            "id": "metadata/package/versioning::pe-filedescription-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileDescription",
            "spans": [
              [
                11158,
                15
              ]
            ]
          },
          {
            "id": "metadata/binary/metrics/entropy::code-entropy-at-most-7-5",
            "conf": 0.699999988079071,
            "crit": 1,
            "desc": "Code entropy is 7.5 or lower",
            "spans": [
              [
                0,
                26
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-productversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes ProductVersion",
            "spans": [
              [
                11698,
                14
              ]
            ]
          },
          {
            "id": "metadata/build/reproducible::pe-reproducible-build",
            "conf": 1.0,
            "crit": 2,
            "desc": "Built with /Brepro (deterministic)"
          },
          {
            "id": "metadata/package/versioning::pe-fileversion-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes FileVersion",
            "spans": [
              [
                11306,
                11
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::pe-internalname-field",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PE version metadata includes InternalName",
            "spans": [
              [
                11354,
                12
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET metadata root signature (BSJB)",
            "spans": [
              [
                1984,
                4
              ]
            ]
          },
          {
            "id": "metadata/binary/layout::pe-no-signature-record",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "PE has no signature record"
          },
          {
            "id": "metadata/binary/anomaly/provenance::pe-far-future-timestamp",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "PE COFF timestamp encodes a future date"
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::http-url-binary",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "Hardcoded network URL with domain name",
            "spans": [
              [
                9674,
                29
              ]
            ]
          },
          {
            "id": "metadata/binary/framework::dotnet-assembly",
            "conf": 1.0,
            "crit": 2,
            "desc": ".NET managed assembly",
            "spans": [
              [
                1984,
                4
              ]
            ]
          }
        ],
        "type": "pe"
      },
      {
        "ctx": [
          {
            "b": "ju[7cy-)[jA=U@kzAPf#e?!Flj{\u003cz.z^$%rarR^HjyJqLwO\u003e))C%hMTarR^HarR^?zEEx[k1/sfx(!i8Bs]\u003c*A4TK)v@DiKz/6DlwPI{bz/dg7z/Z1/z/6DlwPI{hAXpl#vQ:4[o\u0026j2azEEx[j{\u0026zPao",
            "n": [
              {
                "c": 1,
                "d": "File uses a document or configuration extension",
                "i": "metadata/file/extension/identity::doc-or-config-extension",
                "o": 0,
                "z": 57,
                "cf": 1.0
              }
            ],
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 170.0,
              "entropy": 4.58,
              "size_bytes": 170.0
            },
            "binary": {
              "overall_entropy": 4.58,
              "peak_region_bytes": 170.0,
              "peak_region_entropy": 4.58
            }
          }
        },
        "id": 4,
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg!!lib/net9.0/Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.xml",
        "pid": 0,
        "sha": "37f48d05a2979494f8d5bce2c72ef75af0c5ac89f6102fdb2ee64884c47eb5ed",
        "size": 170,
        "traits": [
          {
            "id": "metadata/file/extension/identity::doc-or-config-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "File uses a document or configuration extension",
            "spans": [
              [
                0,
                57
              ]
            ]
          }
        ],
        "type": "xml"
      },
      {
        "id": 5,
        "sha": "9a2ad7955f0bde8d3f7b1091dc6884e5eb3945dee6abcbf53864fdc16496a4ed",
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg!![Content_Types].xml",
        "size": 583,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 6,
        "sha": "b9fca5498e112ad7dadade75fa2e29e0ed1eaa6af08ce621ffbc705942f273e0",
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.5.2.8.nupkg!!package/services/metadata/core-properties/7db61f41414d472f910b34cbcd47a96c.psmdcp",
        "size": 706,
        "type": "xml",
        "depth": 1
      },
      {
        "id": 7,
        "mol": "Md",
        "sha": "090344e04b565789a7773a6b6c02e35b302cb88f8ff0a68be2a5d32f52b10964",
        "path": "Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ@5.2.8.registry.json",
        "risk": 1,
        "size": 987,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 3,
    "rev": "b3b11",
    "v": "8"
  }
}