{
  "ml": {
    "v": "7",
    "eng": "2.0.1-rc.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000007838011,
        "rte": "az",
        "prob": 0.000007838011
      },
      {
        "cls": 0,
        "raw": 0.00001180172,
        "rte": "az/scripts",
        "prob": 0.00001180172
      },
      {
        "cls": 0,
        "raw": 0.022570768,
        "rte": "az/shell",
        "prob": 0.022570768
      }
    ],
    "prob": 0.000007838011,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000007838010787963867,
        "type": "shell"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-15T06:11:48Z"
  },
  "path": "order",
  "raw": {
    "v": "7",
    "tv": "061e3",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "a": 0,
            "b": "boXZHx(kOkvrl8",
            "l": 1,
            "n": [
              {
                "c": 2,
                "d": "Bash shell shebang line",
                "i": "metadata/lang/shebang::bash",
                "o": 0,
                "z": 11
              }
            ]
          },
          {
            "a": 12,
            "b": "Cw7YbwGV28vpQGIpc?PyavPa5lR7e",
            "l": 2
          },
          {
            "a": 36,
            "b": "wn.",
            "l": 3
          }
        ],
        "sha": "04a0417eb324e000b0d71ea0813b34a5d3326099af892003d24ab0ca1a96b032",
        "fact": {
          "id": "shell",
          "imp": [
            [
              "",
              "read"
            ],
            [
              "",
              "read"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "date"
            ],
            [
              "",
              "date"
            ]
          ],
          "met": {
            "ast": {
              "max_depth": 9.0,
              "call_count": 3.0,
              "node_count": 37.0,
              "identifier_count": 8.0
            },
            "file": {
              "size": 92.0,
              "entropy": 4.9,
              "size_bytes": 92.0
            },
            "text": {
              "tab_count": 1.0,
              "space_count": 10.0,
              "total_lines": 5.0,
              "char_entropy": 4.9,
              "unique_chars": 37.0,
              "avg_line_length": 17.4,
              "max_line_length": 40.0,
              "last_line_length": 11.0,
              "whitespace_ratio": 0.17,
              "most_common_ratio": 0.07,
              "identifier_density": 2.8,
              "line_length_stddev": 13.12,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 101.0,
              "normalized_unique_identifiers": 3.45
            },
            "calls": {
              "count": 3.0
            },
            "binary": {
              "overall_entropy": 4.9
            },
            "comments": {
              "chars": 10.0,
              "lines": 1.0,
              "total": 1.0,
              "to_code_ratio": 0.25
            },
            "identifiers": {
              "count": 8.0,
              "total": 14.0,
              "avg_length": 3.75,
              "max_length": 6.0,
              "min_length": 1.0,
              "avg_entropy": 1.74,
              "reuse_ratio": 0.57,
              "unique_count": 8.0,
              "length_stddev": 1.48,
              "single_char_count": 1.0,
              "single_char_ratio": 0.13,
              "all_lowercase_ratio": 0.5,
              "all_uppercase_ratio": 0.25
            }
          },
          "tgt": [
            "date",
            "echo",
            "read"
          ],
          "val": {
            "file.stem": "order",
            "file.basename": "order",
            "source.shebang": "/bin/bash",
            "source.language": "bash",
            "source.imports[0]": "date",
            "source.imports[1]": "echo",
            "source.imports[2]": "read",
            "source.has_imports": true
          }
        },
        "find": [
          {
            "id": "metadata/file/text/metrics::file-under-12-lines",
            "conf": 0.800000011920929,
            "crit": 1,
            "desc": "Very short file (under 12 lines)"
          },
          {
            "id": "metadata/lang/shebang::bash",
            "conf": 1.0,
            "crit": 2,
            "desc": "Bash shell shebang line"
          },
          {
            "id": "objectives/evasion/masquerade/extension/shebang::bash-shebang-first-line",
            "atk": "T1036.008",
            "mbc": "F0008",
            "conf": 0.949999988079071,
            "crit": 1,
            "desc": "File starts with"
          }
        ],
        "path": "order",
        "risk": 1,
        "size": 92,
        "type": "shell"
      }
    ]
  }
}