{
  "ml": {
    "l": -1,
    "v": "6",
    "fs": [
      {
        "l": -1,
        "id": 0,
        "prob": 0.000024984279662021436
      }
    ],
    "prob": 0.00002498428,
    "models": [
      {
        "m": "az",
        "raw": 0.00002498428,
        "prob": 0.00002498428,
        "class": 0
      },
      {
        "m": "az/source",
        "raw": 0.000081032515,
        "prob": 0.000081032515,
        "class": 0
      },
      {
        "m": "az/go",
        "raw": 0.000022351742,
        "prob": 0.000022351742,
        "class": 0
      }
    ],
    "version": "v17.17",
    "analyzed_at": "2026-06-08T02:59:40Z"
  },
  "path": "dllfuncs.go",
  "raw": {
    "v": "6",
    "fs": [
      {
        "f": "H(Ds)",
        "x": 2,
        "ff": {
          "i": [
            [
              "",
              "makeInitialSettings"
            ],
            [
              "",
              "Run"
            ],
            [
              "",
              "makeInitialSettings"
            ],
            [
              "",
              "Run"
            ]
          ],
          "m": {
            "ast": {
              "max_depth": 8.0,
              "call_count": 4.0,
              "node_count": 72.0,
              "identifier_count": 7.0,
              "string_literal_count": 1.0
            },
            "file": {
              "size": 262.0,
              "entropy": 4.92,
              "size_bytes": 262.0
            },
            "text": {
              "tab_count": 4.0,
              "space_count": 19.0,
              "total_lines": 18.0,
              "char_entropy": 4.92,
              "unique_chars": 44.0,
              "string_density": 0.06,
              "avg_line_length": 13.56,
              "max_line_length": 37.0,
              "empty_line_ratio": 0.28,
              "last_line_length": 1.0,
              "whitespace_ratio": 0.16,
              "most_common_ratio": 0.08,
              "identifier_density": 0.72,
              "line_length_stddev": 13.11,
              "normalized_string_count": 0.24,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 116.0,
              "normalized_unique_identifiers": 1.68
            },
            "calls": {
              "count": 4.0
            },
            "binary": {
              "overall_entropy": 4.92
            },
            "source": {
              "function_count": 2.0
            },
            "imports": {
              "count": 1.0,
              "unique_modules": 1.0,
              "third_party_count": 1.0,
              "third_party_ratio": 1.0
            },
            "strings": {
              "total": 1.0,
              "avg_length": 1.0,
              "max_length": 1.0,
              "avg_entropy": 0.0,
              "total_bytes": 1.0
            },
            "comments": {
              "chars": 71.0,
              "lines": 3.0,
              "total": 3.0,
              "to_code_ratio": 0.2
            },
            "functions": {
              "count": 2.0,
              "length_stddev": 0.5,
              "avg_name_length": 11.5,
              "no_params_count": 2.0,
              "avg_length_lines": 4.5,
              "max_length_lines": 5.0,
              "min_length_lines": 4.0,
              "high_entropy_names": 1.0,
              "density_per_100_lines": 11.11,
              "code_in_functions_ratio": 0.5
            },
            "identifiers": {
              "count": 7.0,
              "total": 13.0,
              "avg_length": 8.29,
              "max_length": 19.0,
              "min_length": 1.0,
              "avg_entropy": 2.29,
              "reuse_ratio": 0.54,
              "unique_count": 7.0,
              "length_stddev": 6.09,
              "single_char_count": 1.0,
              "single_char_ratio": 0.14,
              "high_entropy_count": 1.0,
              "high_entropy_ratio": 0.14,
              "all_lowercase_ratio": 0.43,
              "all_uppercase_ratio": 0.14,
              "underscore_prefix_count": 1.0
            }
          },
          "s": [
            [
              59,
              "u8",
              "C"
            ],
            [
              60,
              "u8",
              "C"
            ]
          ],
          "v": {
            "file.stem": "dllfuncs",
            "file.basename": "dllfuncs.go",
            "source.language": "go",
            "source.imports[0]": "Run",
            "source.imports[1]": "makeInitialSettings",
            "source.has_imports": true,
            "source.functions[0]": "OnProcessAttach",
            "source.functions[1]": "VoidFunc"
          },
          "ct": [
            "Run",
            "makeInitialSettings"
          ],
          "id": "go"
        },
        "id": 0,
        "sz": 262,
        "ts": [
          {
            "c": 0.75,
            "d": "Uses CGo for C interoperability",
            "e": [
              "\nimport \"C\""
            ],
            "i": "objectives/supply-chain/trojanized/library/source::cgo-usage",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Go Cgo native interface",
            "e": [
              "import \"C\""
            ],
            "i": "micro-behaviors/dylib/load/ffi::go-cgo-import",
            "l": 3
          }
        ],
        "sha": "19e0b5a3935193d57500b34d51e82fdad618c7ccc120777224911a1bcb68ecf1",
        "path": "/data/samples/bad/projects/reverse_ssh/cmd/client/dllfuncs.go",
        "type": "go"
      }
    ],
    "tv": "8e9ac"
  }
}