{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.1363406479358673,
        "class": 0
      }
    ],
    "prob": 0.13634065,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.13634065,
        "class": 0
      },
      {
        "m": "az/scripts",
        "prob": 0.11840075,
        "class": 0
      },
      {
        "m": "az/perl",
        "prob": 0.02386297,
        "class": 0
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961138,
      0.99909174
    ],
    "analyzed_at": "2026-05-09T23:12:54Z"
  },
  "path": "75f2ff0bfc6d7a33fc48460c69761428",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(AsLa)H(Os)Md(Pt)",
        "k": {
          "source.shebang": "/usr/bin/perl",
          "source.strings[0]": "$bin\\n",
          "source.strings[1]": "${var}=\\\"${val}\\\"\\n",
          "source.strings[2]": "Content-type: text/plain; charset=iso-8859-1\\n\\n"
        },
        "x": 2,
        "id": 0,
        "ms": {
          "file": {
            "size": 349.0
          },
          "text": {
            "tab_count": 4.0,
            "digit_ratio": 0.02,
            "space_count": 29.0,
            "total_lines": 15.0,
            "char_entropy": 5.34,
            "unique_chars": 58.0,
            "string_density": 0.4,
            "avg_line_length": 22.33,
            "max_line_length": 66.0,
            "empty_line_ratio": 0.07,
            "last_line_length": 1.0,
            "most_common_char": "n",
            "whitespace_ratio": 0.13,
            "most_common_ratio": 0.06,
            "line_length_stddev": 18.6,
            "normalized_string_count": 1.55,
            "max_inline_whitespace_run": 2.0
          },
          "strings": {
            "total": 6.0,
            "avg_length": 24.33,
            "max_length": 48.0,
            "avg_entropy": 3.35,
            "total_bytes": 146.0,
            "entropy_stddev": 0.89
          },
          "comments": {
            "chars": 81.0,
            "lines": 4.0,
            "total": 4.0,
            "to_code_ratio": 0.36
          },
          "functions": {},
          "identifiers": {}
        },
        "ss": [
          [
            96,
            "Content-type: text/plain; charset=iso-8859-1\\n\\n"
          ],
          [
            97,
            "Content-type: text/plain; charset=iso-8859-1\\n\\n"
          ],
          [
            207,
            "$bin\\n"
          ],
          [
            208,
            "$bin\\n"
          ],
          [
            325,
            "${var}=\\\"${val}\\\"\\n"
          ],
          [
            326,
            "${var}=\\\"${val}\\\"\\n"
          ]
        ],
        "sz": 349,
        "ts": [
          {
            "a": "T1082",
            "c": 0.6000000238418579,
            "d": "printenv command",
            "e": [
              "printenv"
            ],
            "i": "micro-behaviors/os/env/vars/access::printenv",
            "l": 3
          },
          {
            "c": 0.8799999952316284,
            "d": "Untyped Perl ENV hash dereference",
            "e": [
              "$ENV{"
            ],
            "i": "metadata/lang/scripted::env-hash-deref",
            "l": 2
          },
          {
            "c": 0.8799999952316284,
            "d": "Untyped Perl foreach sigil loop",
            "e": [
              "foreach $var ("
            ],
            "i": "metadata/lang/scripted::foreach-sigil-loop",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Perl shebang line",
            "e": [
              "#!/usr/bin/perl"
            ],
            "i": "metadata/lang/shebang::perl",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 1.0,
            "d": "Comment-heavy source context",
            "e": [
              "comments.to_code_ratio = 0.36"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/strings::comment-heavy-source",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1210",
            "c": 0.8600000143051147,
            "d": "Redis KEYS command",
            "e": [
              "keys"
            ],
            "i": "objectives/lateral-movement/exploit/container::redis-keys-command",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Untyped Perl source syntax",
            "e": [
              "$ENV{",
              "foreach $var ("
            ],
            "i": "metadata/lang/scripted::source-syntax-untyped",
            "l": 2
          }
        ],
        "sha": "638ccfbd9bbf9a7c633dddb09a8c21082cfd3d585ab077310dfbf99df1881685",
        "path": "75f2ff0bfc6d7a33fc48460c69761428",
        "type": "perl"
      }
    ],
    "tv": "87c42"
  }
}