{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.11276102066040039,
        "class": 0
      }
    ],
    "prob": 0.11276102,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.060943644,
        "class": 0
      },
      {
        "m": "az/source",
        "prob": 0.11276102,
        "class": 0
      },
      {
        "m": "az/c",
        "prob": 0.034566402,
        "class": 0
      }
    ],
    "version": "v17.17",
    "thresholds": [
      0.999503,
      0.9998882
    ],
    "analyzed_at": "2026-05-25T19:47:52Z"
  },
  "path": "internel.h",
  "raw": {
    "v": "5",
    "fs": [
      {
        "f": "O(Er)",
        "x": 1,
        "ff": {
          "m": {
            "ast": {
              "max_depth": 11.0,
              "call_count": 0.0,
              "node_count": 402.0,
              "target_count": 0.0
            },
            "file": {
              "size": 1807.0,
              "entropy": 4.3,
              "size_bytes": 1807.0
            },
            "text": {
              "digit_ratio": 0.0,
              "space_count": 422.0,
              "total_lines": 68.0,
              "char_entropy": 4.3,
              "unique_chars": 48.0,
              "avg_line_length": 25.57,
              "max_line_length": 73.0,
              "empty_line_ratio": 0.04,
              "last_line_length": 2.0,
              "whitespace_ratio": 0.27,
              "most_common_ratio": 0.07,
              "identifier_density": 1.28,
              "line_length_stddev": 16.67,
              "repeated_char_sequences": 3.0,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 116.0,
              "suspicious_identifier_ratio": 0.03,
              "normalized_unique_identifiers": 12.81
            },
            "source": {
              "class_count": 24.0
            },
            "imports": {
              "count": 1.0,
              "unique_modules": 1.0,
              "third_party_count": 1.0,
              "third_party_ratio": 1.0
            },
            "comments": {
              "chars": 190.0,
              "lines": 6.0,
              "total": 3.0,
              "to_code_ratio": 0.1
            },
            "functions": {
              "count": 24.0
            },
            "identifiers": {
              "total": 87.0,
              "avg_length": 8.17,
              "max_length": 21.0,
              "min_length": 1.0,
              "avg_entropy": 2.56,
              "reuse_ratio": 0.9,
              "unique_count": 78.0,
              "length_stddev": 4.2,
              "has_digit_ratio": 0.01,
              "sequential_names": 2.0,
              "single_char_count": 1.0,
              "single_char_ratio": 0.01,
              "high_entropy_count": 3.0,
              "high_entropy_ratio": 0.04,
              "all_lowercase_ratio": 0.99,
              "numeric_suffix_count": 1.0
            }
          },
          "s": [
            [
              22,
              "u8",
              "\u003clinux/proc_fs.h\u003e"
            ]
          ],
          "v": {
            "source.language": "c",
            "source.strings[0]": "\u003clinux/proc_fs.h\u003e"
          },
          "id": "c"
        },
        "id": 0,
        "sz": 1807,
        "ts": [
          {
            "c": 0.699999988079071,
            "d": "file_operations struct",
            "e": [
              "file_operations"
            ],
            "i": "objectives/evasion/kernel-hide/module::file-operations",
            "l": 1
          },
          {
            "c": 0.699999988079071,
            "d": "inode_operations struct",
            "e": [
              "inode_operations"
            ],
            "i": "objectives/evasion/kernel-hide/module::inode-operations",
            "l": 3
          },
          {
            "a": "T1106",
            "c": 0.8500000238418579,
            "d": "d_reclen field access",
            "e": [
              "d_reclen"
            ],
            "i": "micro-behaviors/os/syscall/invoke::d-reclen-field",
            "l": 1
          },
          {
            "a": "T1106",
            "d": "d_name field access",
            "e": [
              "d_name"
            ],
            "i": "micro-behaviors/os/syscall/invoke::d-name-field",
            "l": 2
          }
        ],
        "sha": "2e5588599e6851bd371ebbe92923703818b6bec05d53ac12d70b46f59298033b",
        "path": "internel.h",
        "type": "c"
      }
    ],
    "tv": "cf883"
  }
}