{
  "ml": {
    "v": "7",
    "id": 11261,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000019381443053134717,
    "type": "zip",
    "version": "v18.18",
    "analyzed_at": "2026-09-06T22:25:05Z"
  },
  "path": "executable@v0.82.0",
  "raw": {
    "rev": "479f3",
    "files": [
      {
        "id": 11261,
        "ctx": [
          {
            "b": "p!H([6Awys2MK\u00268000000000000000002K\u0026003UCBzb/ae[n*pfgok\u003cvmk3DfjXHkvpTp?eN-p6zGEKJyIbqyBzkLAwQ4=@B-.53y?k\u003ePfFksue?!}Bry]\u003eLe[emnwO/OP.ew0",
            "ln": 0
          }
        ],
        "mol": "H₂(FPo)Md(Pa)",
        "pid": 11,
        "rel": "fetched",
        "sha": "e1ee96d6464745409bdc2d322b07b4f511e34513be392c5f14919e6b5965e3a2",
        "via": "https://proxy.golang.org/github.com/!data!dog/datadog-agent/pkg/util/executable/@v/v0.82.0.zip",
        "path": "pkg:golang/github.com/DataDog/datadog-agent/pkg/util/executable@v0.82.0",
        "risk": 3,
        "size": 10479,
        "type": "zip",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 10479,
              "entropy": 7.86
            },
            "binary": {
              "peak_region_bytes": 9216,
              "peak_region_entropy": 7.81
            },
            "archive": {
              "file_count": 6,
              "member_count": 6,
              "script_count": 0,
              "zip_bomb_ratio": 7.66,
              "compressed_size": 9051,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 0,
              "noise_file_count": 0,
              "compression.ratio": 0.26,
              "hidden_file_count": 0,
              "uncompressed_size": 35260,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 79,
              "rtlo_filename_count": 0,
              "format.regular_count": 6,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 6,
              "timing.sentinel_mtime_count": 6,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 6
            }
          }
        },
        "ident": {
          "name": {
            "value": "v0",
            "source": "file.basename",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "82.0",
            "source": "file.basename",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/process/info/selfpath::os-executable",
            "conf": 0.7,
            "crit": 3,
            "desc": "Go queries own executable path",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/stat::go-os-stat-missing-check",
            "conf": 0.9,
            "crit": 3,
            "desc": "Go tests missing path with os.Stat",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-2",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-func-test",
            "conf": 0.8,
            "crit": 2,
            "desc": "Go test function name",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::go-testing-t",
            "conf": 0.7,
            "crit": 2,
            "desc": "Go test uses a testing.T parameter",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-1",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::go-test-file",
            "conf": 0.7,
            "crit": 2,
            "desc": "Go test file suffix",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/manager::go-module-source-archive",
            "conf": 0.99,
            "crit": 3,
            "desc": "Go module source archive layout"
          }
        ]
      }
    ]
  }
}