{
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.2",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.23512165,
        "rte": "az",
        "prob": 0.23512165
      },
      {
        "cls": 0,
        "raw": 0.025675317,
        "rte": "az/zip",
        "prob": 0.025675317
      }
    ],
    "prob": 0.23512165,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.23512165248394012,
        "type": "zip"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000018964210539706983,
        "type": "zip"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00002000729182327632,
        "type": "makefile"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013689200386579614,
        "type": "pdf"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013689200386579614,
        "type": "pdf"
      },
      {
        "id": 8,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013689200386579614,
        "type": "pdf"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016043582945712842,
        "type": "pdf"
      },
      {
        "id": 12,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000020454326659091748,
        "type": "pdf"
      },
      {
        "id": 13,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001233816146850586,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-10-09T08:27:39Z"
  },
  "path": "beamerswitch-1.9-1.src.rock",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "O(Xe)H₂(F₂Os)Md₃(PaPd)",
        "sha": "25cdda840064f0f032f8b57c2bd7b703c125750893300cbe92b99ef7311f7672",
        "path": "beamerswitch-1.9-1.src.rock",
        "risk": 8,
        "size": 329465,
        "type": "zip",
        "facts": {
          "metrics": {
            "file": {
              "size": 329465,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 328704,
              "peak_region_entropy": 7.87
            },
            "archive": {
              "file_count": 2,
              "member_count": 2,
              "script_count": 0,
              "zip_bomb_ratio": 2.04,
              "compressed_size": 329123,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 72,
              "noise_file_count": 0,
              "compression.ratio": 0.99,
              "hidden_file_count": 0,
              "uncompressed_size": 331184,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 27,
              "rtlo_filename_count": 0,
              "format.regular_count": 2,
              "nested_archive_count": 1,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.5,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 2,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 2
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.archive_as_unknown": 1
            }
          }
        },
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/execution/lure/document::pdf-dense-link-annotations",
            "atk": "T1566.001",
            "conf": 0.88,
            "crit": 3,
            "desc": "PDF averages four-plus links per page"
          },
          {
            "id": "micro-behaviors/fs/delete/file/command::rm-local-payload-file",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.88,
            "crit": 3,
            "desc": "Removes a locally named file"
          },
          {
            "id": "micro-behaviors/os/privilege/elevation::sudo-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command invokes sudo"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "objectives/execution/lure/document::pdf-many-link-annotations",
            "atk": "T1566.001",
            "conf": 0.85,
            "crit": 3,
            "desc": "PDF carries twenty or more link annotations"
          },
          {
            "id": "metadata/file/naming::archive-member-over-200kb",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive has member larger than 200 KB"
          },
          {
            "id": "metadata/file/naming::archive-member-under-10kb",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive has a sub-10KB member"
          },
          {
            "id": "metadata/file/archive::archive-at-least-10-members",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive contains at least ten members",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/document/pdf/action::pdf-http-uri-action",
            "conf": 0.92,
            "crit": 3,
            "desc": "PDF action targets HTTP(S) URL"
          },
          {
            "id": "metadata/document/pdf/action::pdf-action-uri",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "metadata/file/string/file::tmp",
            "conf": 0.2,
            "crit": 1,
            "desc": "tmp keyword"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/archive-member::archive-nested-zip-member",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive member is a nested ZIP"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 329882,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 328704,
              "peak_region_entropy": 7.87
            },
            "archive": {
              "file_count": 10,
              "member_count": 10,
              "script_count": 0,
              "zip_bomb_ratio": 9.65,
              "compressed_size": 327906,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 240,
              "noise_file_count": 0,
              "compression.ratio": 0.69,
              "hidden_file_count": 0,
              "uncompressed_size": 472942,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 45,
              "rtlo_filename_count": 0,
              "format.regular_count": 10,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.1,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 10,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 10
            }
          }
        },
        "id": 2,
        "ident": {
          "name": {
            "value": "beamerswitch",
            "source": "file.basename",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "v1.9",
            "source": "file.basename",
            "verified": false
          }
        },
        "mol": "O(Xe)H₂(F₂Os)Md₂(Pd)",
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip",
        "pid": 0,
        "risk": 7,
        "sha": "77abe3d1897cb43e8b74886a560ece45336e21a61615c3531e00209ad42f45fa",
        "size": 329882,
        "traits": [
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\""
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\""
          },
          {
            "id": "objectives/execution/lure/document::pdf-many-link-annotations",
            "atk": "T1566.001",
            "conf": 0.85,
            "crit": 3,
            "desc": "PDF carries twenty or more link annotations"
          },
          {
            "id": "micro-behaviors/os/privilege/elevation::sudo-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command invokes sudo"
          },
          {
            "id": "micro-behaviors/fs/delete/file/command::rm-local-payload-file",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.88,
            "crit": 3,
            "desc": "Removes a locally named file"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\""
          },
          {
            "id": "metadata/document/pdf/action::pdf-action-uri",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\""
          },
          {
            "id": "metadata/file/string/file::tmp",
            "conf": 0.2,
            "crit": 1,
            "desc": "tmp keyword"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\""
          },
          {
            "id": "metadata/document/pdf/action::pdf-http-uri-action",
            "conf": 0.92,
            "crit": 3,
            "desc": "PDF action targets HTTP(S) URL"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\""
          },
          {
            "id": "objectives/execution/lure/document::pdf-dense-link-annotations",
            "atk": "T1566.001",
            "conf": 0.88,
            "crit": 3,
            "desc": "PDF averages four-plus links per page"
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\""
          },
          {
            "id": "metadata/file/archive::archive-at-least-10-members",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive contains at least ten members"
          },
          {
            "id": "metadata/file/naming::archive-member-over-200kb",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive has member larger than 200 KB"
          },
          {
            "id": "metadata/file/naming::archive-member-under-10kb",
            "conf": 0.9,
            "crit": 3,
            "desc": "Archive has a sub-10KB member"
          }
        ],
        "type": "zip"
      },
      {
        "ctx": [
          {
            "b": "pc?PyarS/\u0026vR5$+wPz\u003cox()\u0026#3r6F:oIuM(ayX=2xBmNql)9P{jS(0#B7/c3y-)Xvwgm\u003c+mnlP3iZ1Phd066ky?$khyJKc8A3c-yat4WTBzU$HsxFWcsxFWcsxE0Vr76qQarS/\u0026bQ=RXo\u00269n(bQ=zNo*{GrrZ/[+arS/\u0026bQ^.EwO=f9y\u0026\u003c]lx(4u{zF0/feP@lZc@965mjx\u003c1BA/kwoIX2woDVFvbQ^.EwO=f9yJauaCw7Y2xDO(UC42zyC42ifwGT@vswqmUpEvAwdgf6OqBK1%jS(0#B7/c3y-)IjB7GMex\u003e7*0eIhcOAXhDyy\u0026%qir7f[-mO3rHmjwMJe(k8mpfxR2v@bZ+zxJF7B97]dwNPE0x(n0lazC.mByx04aA.NozGx[xB-7]hB97\u0026by-[4rA3eUjvqVzVvqG:v2{Z]]k$%=%e]Uukas5vgk$%=%eOffnze:r5e]Uukay/k0vqVzUkXkgOBrAmAbQ=zNo*{G-v@ciebQ=zNo*{G.wQ4T2Abo8rBy/XTas5vgk$%=%e[x6G3jg/=CPXOLzGGDgvpKy[z/dZEvru0)zeS@@as5vgk$%=%e[x6Gau?C?wP/.AB.\u003e\u003e3bQ=zNo*{G-AaAMwas5vgk$%=%e[x6G3jgJ\u003evqGv]wQ2sHB7/c3y+ojtv{%s/at4RBv@Dx#wPw[Bx(n37A:-E1x(v(LvQTv*xL?V#wGSlDpc?Pydk2dMCPYg6wmY{qzGP=i3jgAUax]%uw/@uEpc?Pydk2mHzY\u0026sEaARpdzxJ!8yH}i$wmZ0dePz)+B0bady\u0026p}uB95JRzY*qNpc?Pydk2mHB08.Rpc?Pydk2mHz-Y7Nx:Le.vru79zegmCB7]D4zGE0MAaAM%BZVyAB7/c3y+ojtv{%s/at4qBBy/G3v@#B6zARDqByP03z!9A4bQ=zNo*{G-wor5sj$*CTB$W-Qy?%C7c@965mjx*1CWUDdy?kkrwm=@fc@965mjx*1CWUDdy?khuA:-\u003cbe]Uukas5vgk$%=%eOffnze:r5eOFNgwn=Qje]Uukas5vgk$%=%eOffnze:r5eN-Wwx\u003e7%\u003ce]UukiV]W@pc?Pydk2aDB08.Rpc?Pydj]aQvqP$1wIe7oCNs:[vru79zegmCB7]D4zGE0MAaAM%BZVyAB7/c3y+ojtv{%s/at4qBBy/G3v@#B6zARDqByP03z!9A4bQ=zNo*{G.wQ4T2Abo8rBy/Xtj$*CTB$W-Qy?%C*y?m3)iTMglz6gAxas5vgk$%=%DN{:WCWUDdy?kdHwQ4T2Abo8qvrcE7v@bZceOffnze:r5eOFNgwn=Qjeg\u003eBTvqP$1wI51AvqZdme{?2HCR0rky+f49w?mzcxdNOiv\u003eqk5vQA}WBy/YlyB\u003c7lB1y%uz.bKqB1z0nennTtenn{keno0jenP3wBzkS9enPlqen!)ten]VMeok(Je{IkHeotYCeou8Ov@#pbe[YFYByO^4wO(xqBz\u003eUuC5?5u3jg-\u0026at4RCayw#1zGGD2eHh-tk$%=%3s)\u003c(ByPb#vqXaGv@bZ+zvcX\u003cz6gAxas5vgk$%=%e{?LFw?mUlB1y*qBa2eRc@965mjx*1CWUDdy?kkCBy/XFAaANeas5vgk$%=%eOffnze:r5eQH]DBzkl3wH}I6zE^WdBs.JOvqZdme]Uuk3tBy0BugKMy?%B+zeiV@AV=@Mas5vnr8MdNdkc3\u0026wQ2+Ez/{8gwH}wgv%{1Dvru79fc?@vk$%=%3jgiYas5vgk$%=%e[x6Gas5vgk$%=%e[]iAas5vnr8MdNdkb:XB-H#6fkL6swQ2\u003cNc@965mjwMIv@JLoc@965mjx\u003c0y\u0026ZZAc@\u003ckAmmwTUBy/XIy*?A%CRpr\u003cpc?Pydgcw\u003eA3czOpc?Pydk2NIw/@uEpc?Pydj]aQvqP$1wIesKwQ2+Bwm*ljbQ=zNo*{G.wQ4T2Abo8qBAg/cB1RAxw/@uEpc?Pydj]aQvqP$1wI4O7zE^WdBs}Jyw/@uEpc?Pydj]aQvqP$1wI4thBzkl3wId}jw/%#uk$1Boe]tbwbQ=U(qBK26fjY0hfkL6swQ2\u003cNc@965mjwMIzejl8CX?Cw3uZl2zGx[X3jg-\u0026at4QRbQ=U(qBK26fmd!LCR0]OB-H#6em-WeEj]zBBy/XIbQ=zNo*{Gr32KE1wQ53jATDI#B97\u0026by=SXEy?%B+B9h2iaz\u003e[8x(UsFA3czOoIX2woERSwBy/XFB8Mhwv}vi4z!1hGy*?A%CRpr\u003cpc?Pydgcx5B.2zkv@JLoc@965mjx\u003c1BA!]Nc@965mjx\u003c6zGu{Cc})A7k$\u0026ZXB8Mhwv}vrfvru79fc?@vk$%=%3jg=@wn-P2A3czOpc?Pydk2aDB08.RoIX2woERSpwQ2\u003eAvru79fc?@vk$%=%3jg=@wn-P2A3czOpc?Pydk2NIw/@uEpc?Pydj]aQvqP$1wId}jw/@uEpc?Pydj]aQvqP$1wI51AvqZcsAaAM6bQ=zNo*{G.wQ4T2Abo8qxKL^?z/{dOAaAM6bQ=zNo*{G.wQ4T2Abo8qvrcE7v@bZeAaAM6qBJ(to*{WKwfrcCoIX2woERS9z^$Cpvru79fc?@vk$%=%3jgM+By/YkB8?RgzFs0fByx04iTMgmB.2zkA+#{JAV=RQoIX2woERSwBy/XFB8Mhwv}vi4z!1hGy*?A%CRpr\u003cpc?Pydgcw#yJKcjy\u0026:R7DtdsVayP853jgM+wnc6bbQ=RWnM3#A31E]%bQ=zNo*{G-DViIcem-\u003cEEio^-pc?Pydj]aQvqP$1wIesKwQ2+Bwm*ljbQ=zNo*{G.wQ4T2Abo8qBAg/cB1RAxw/@uEpc?Pydj]aQvqP$1wI4O7zE^WdBs}Jyw/@uEpc?Pydj]aQvqP$1wI4thBzkl3wId}jw/@uEpc?Pydk2aDB0avHk$1Boe]tbwo\u003c}*Gw[=6)as5vml}Ho93jgiMas5vmmnlPcj0n\u0026-A3c-2A=AiEc@r#kdk8}{pc?Pydj(![rZ/[+dk2{XA3czOpc?PydgfNbvqXaGvqG-!32KD*x(Uswc@-PaqyI}Vv@JLoc@965mjx\u003coAaAMiwor6Aas5vgk$%=%eOffnze:r5e]Uukas5vgk$%=%eOffnze:r5eP=2wzGvBHwm=@fc@965mjx*1CWUDdy?khivqYQ]B-YlPwm=@fc@965mjx*1CWUDdy?khbA==29y?kkrwm=@Zml%somj@B/awDoWwObT)wGSlDr76qQdgcw\u003ewfrcCr7fITdlwU#x(CgDl#)n\u0026bQ=F\u003cl[6=mc@965mjx/lc@@=mqZ\u003ctBx(Cguc@965mjwM",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 2,
        "facts": {
          "funcs": [
            [
              "anonymous",
              268
            ],
            [
              "anonymous",
              332
            ],
            [
              "anonymous",
              384
            ],
            [
              "anonymous",
              480
            ],
            [
              "anonymous",
              755
            ],
            [
              "anonymous",
              983
            ],
            [
              "anonymous",
              1209
            ],
            [
              "anonymous",
              1325
            ],
            [
              "anonymous",
              1657
            ],
            [
              "anonymous",
              1722
            ],
            [
              "anonymous",
              2071
            ],
            [
              "anonymous",
              2144
            ],
            [
              "anonymous",
              2394
            ]
          ],
          "metrics": {
            "ast": {
              "max_depth": 6,
              "call_count": 5,
              "node_count": 707
            },
            "file": {
              "size": 2627,
              "entropy": 5.28
            },
            "text": {
              "lines": 52,
              "top_char": 101,
              "tab_count": 30,
              "max_ws_run": 3,
              "digit_ratio": 0,
              "space_count": 166,
              "char_entropy": 5.28,
              "unique_chars": 66,
              "top_char_null": 0,
              "top_char_ratio": 0.06,
              "avg_line_length": 49.52,
              "max_line_length": 194,
              "empty_line_ratio": 0.04,
              "last_line_length": 56,
              "long_token_count": 1,
              "whitespace_ratio": 0.09,
              "identifier_density": 4.29,
              "line_length_stddev": 47.67,
              "repeated_char_sequences": 1,
              "normalized_unique_identifiers": 5.79
            },
            "binds": {
              "count": 8
            },
            "binary": {
              "peak_region_bytes": 2627,
              "peak_region_entropy": 5.19
            },
            "source": {
              "function_count": 10
            },
            "functions": {
              "count": 10
            },
            "identifiers": {
              "count": 223,
              "unique": 33,
              "avg_length": 7.09,
              "max_length": 20,
              "min_length": 3,
              "avg_entropy": 2.43,
              "reuse_ratio": 0.15,
              "length_stddev": 4.49,
              "high_entropy_count": 3,
              "high_entropy_ratio": 0.09,
              "all_lowercase_ratio": 0.27,
              "all_uppercase_ratio": 0.24
            }
          }
        },
        "id": 3,
        "mol": "H₂(F₂Os)",
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip!!beamerswitch/Makefile",
        "pid": 2,
        "risk": 3,
        "sha": "b4d551f1ec2f1eda98d29b55b60fefaaa5fdaf57f5f1708995d279c36dfb26ea",
        "size": 2627,
        "traits": [
          {
            "id": "metadata/file/string/file::tmp",
            "conf": 0.2,
            "crit": 1,
            "desc": "tmp keyword",
            "spans": [
              [
                84,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/delete/file/command::rm-local-payload-file",
            "atk": "T1070.004",
            "mbc": "C0047",
            "conf": 0.88,
            "crit": 3,
            "desc": "Removes a locally named file",
            "spans": [
              [
                1185,
                15
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/privilege/elevation::sudo-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Shell command invokes sudo",
            "spans": [
              [
                1735,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command",
            "spans": [
              [
                1335,
                49
              ],
              [
                2153,
                14
              ]
            ]
          }
        ],
        "type": "makefile"
      },
      {
        "depth": 2,
        "id": 6,
        "ident": {
          "title": {
            "value": "A demonstration of the beamerswitch class: Testing features",
            "source": "pdf.info.title",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "Alex Ball",
              "role": "author",
              "source": "pdf.info.author"
            }
          ],
          "producer": {
            "value": "LuaTeX-1.15.0",
            "source": "pdf.info.producer",
            "verified": false
          }
        },
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip!!beamerswitch/beamerswitch-example-article.pdf",
        "pid": 2,
        "risk": 1,
        "sha": "41d7d24e3e598c81f6f78264b829a6bb3bb23dc54a86b3eb02a63c9449fece59",
        "size": 20110,
        "type": "pdf"
      },
      {
        "depth": 2,
        "id": 7,
        "ident": {
          "title": {
            "value": "A demonstration of the beamerswitch class: Testing features",
            "source": "pdf.info.title",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "Alex Ball",
              "role": "author",
              "source": "pdf.info.author"
            }
          ],
          "producer": {
            "value": "LuaTeX-1.15.0",
            "source": "pdf.info.producer",
            "verified": false
          }
        },
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip!!beamerswitch/beamerswitch-example-handout.pdf",
        "pid": 2,
        "risk": 1,
        "sha": "fe605bf5703fc9421785412c4a8b2d05307016d8f2ef22f9ec203d3a6b449b8d",
        "size": 22397,
        "type": "pdf"
      },
      {
        "id": 8,
        "sha": "3f17fa3d13f867248b92b11ec3cfb72f687ab343111d7dbf44c6cd915cf3ea2c",
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip!!beamerswitch/beamerswitch-example-trans.pdf",
        "risk": 1,
        "size": 22994,
        "type": "pdf",
        "depth": 2
      },
      {
        "id": 9,
        "mol": "O(Xe)",
        "sha": "028a368a43c1eb1c26bdf66b10fbd8116ab653697ab43315dc90a1b0c3201d4c",
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip!!beamerswitch/beamerswitch-example.pdf",
        "risk": 1,
        "size": 36621,
        "type": "pdf",
        "depth": 2
      },
      {
        "ctx": [
          {
            "b": "Bx*HNfMOV@lVM:DBz(gFoKQ[isrI*4Bz8!gD2NtnA+e\u0026ifh2(4Cw?IjB0@EWfhMXcwozx[AV==7BZXlXss(lWf/pNqdiHohA+eW3x(v(Svru66c}39KfFUyqi5ioAgbpWuhy*EocONk4diHorz!8mABy=Nyl])7SgbpKygbyTugbHWyd\u003e\u0026X9fFB\u003e6atlYmvq{e",
            "ln": 202131
          }
        ],
        "depth": 2,
        "facts": {
          "metrics": {
            "pdf": {
              "eof_count": 1,
              "font_count": 14,
              "page_count": 43,
              "action_count": 95,
              "header_count": 1,
              "object_count": 72,
              "objstm_count": 7,
              "stream_count": 71,
              "trailer_count": 0,
              "startxref_count": 1,
              "annotation_count": 316,
              "uri_action_count": 95,
              "xref_stream_count": 1,
              "flate_filter_count": 71,
              "risky_feature_score": 20,
              "annotations_per_page": 7.35,
              "uri_actions_per_page": 2.21,
              "visible_object_count": 72,
              "signature_object_count": 0,
              "trailing_bytes_after_eof": 1,
              "unreferenced_object_count": 71,
              "stream_bad_delimiter_count": 0,
              "leading_bytes_before_header": 0,
              "stream_invalid_length_count": 0,
              "stream_missing_length_count": 0,
              "stream_length_mismatch_count": 0,
              "stream_missing_endstream_count": 0,
              "object_stream_inner_object_count": 678
            },
            "file": {
              "size": 208134,
              "entropy": 7.99
            },
            "binary": {
              "peak_region_bytes": 206848,
              "peak_region_entropy": 7.84
            }
          }
        },
        "id": 12,
        "ident": {
          "trust": "unsigned",
          "producer": {
            "value": "LuaTeX-1.15.0",
            "source": "pdf.info.producer",
            "verified": false
          }
        },
        "mol": "O(Xe)Md(Pd)",
        "path": "beamerswitch-1.9-1.src.rock!!beamerswitch-v1.9.zip!!beamerswitch/beamerswitch.pdf",
        "pid": 2,
        "risk": 2,
        "sha": "dc8ce395d702b18d34219d4f745c4cb6f74c028505214c37ec2bf2f5f5164bc6",
        "size": 208134,
        "traits": [
          {
            "id": "metadata/document/pdf/action::pdf-action-uri",
            "conf": 0.9,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "metadata/document/pdf/action::pdf-http-uri-action",
            "conf": 0.92,
            "crit": 3,
            "desc": "PDF action targets HTTP(S) URL"
          },
          {
            "id": "objectives/execution/lure/document::pdf-dense-link-annotations",
            "atk": "T1566.001",
            "conf": 0.88,
            "crit": 3,
            "desc": "PDF averages four-plus links per page"
          },
          {
            "id": "objectives/execution/lure/document::pdf-many-link-annotations",
            "atk": "T1566.001",
            "conf": 0.85,
            "crit": 3,
            "desc": "PDF carries twenty or more link annotations"
          }
        ],
        "type": "pdf"
      },
      {
        "id": 13,
        "sha": "5e02e273e73d2d295950446efb9e1d7e7868eca41867fcc8083df4cf84cb545c",
        "path": "beamerswitch@1.9-1.registry.json",
        "size": 748,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 3,
    "rev": "c1ea9",
    "v": "8"
  }
}