{
  "ml": {
    "v": "7",
    "eng": "2.1.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.0000084837275,
        "rte": "az",
        "prob": 0.0000084837275
      }
    ],
    "prob": 0.000009149313,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009149312973022461,
        "type": "apk_alpine"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008811553016130347,
        "type": "systemd"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000009149312973022461,
        "type": "systemd"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00000671545649311156,
        "type": "text"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-23T17:38:10Z"
  },
  "path": "avahi-systemd-0.9_rc4-r1.apk",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy8000000T3{24[J!\u003enkh=HeH]u63?!Yp^*DIa!jX1m:JNrco?u{f=2H?Deg@xa3GU*X",
            "ln": 0
          }
        ],
        "sha": "9c6cf4fd90373ac4e412be3b159138631372ed034edfd7d297e237a92b403513",
        "path": "avahi-systemd-0.9_rc4-r1.apk",
        "risk": 1,
        "size": 2762,
        "type": "apk_alpine",
        "facts": {
          "metrics": {
            "file": {
              "size": 2762.0,
              "entropy": 7.89,
              "size_bytes": 2762.0
            },
            "parse": {
              "error_count": 1.0
            },
            "binary": {
              "overall_entropy": 7.89
            }
          }
        },
        "traits": [
          {
            "id": "objectives/persistence/system/service/systemd::exec-start-expected-system",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 2,
            "desc": "ExecStart from system library path"
          },
          {
            "id": "objectives/persistence/system/service/systemd::bus-name-exists",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 2,
            "desc": "Service BusName= exists"
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-basename",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package info file"
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-version-field",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package version field",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-package-field",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package name field",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::systemd-service",
            "conf": 1.0,
            "crit": 2,
            "desc": "Systemd service file extension",
            "from": [
              {
                "file": 1
              }
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package origin field",
            "from": [
              {
                "file": 3
              }
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "boP%0x(+zex(4u6x(+zovrcDjz!pb2C425#e=",
            "n": [
              {
                "c": 2,
                "d": "Systemd service file extension",
                "i": "metadata/file/extension/identity::systemd-service",
                "o": 0,
                "z": 22,
                "cf": 1.0
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "bl",
            "ln": 2,
            "addr": 30
          },
          {
            "b": "boQArvq6u$x(+zeA+e/8B8LVjCvtJ6j0n/!BS+g5zxJ$hwncabA+P09By=OeBrC1fwg}\u003ewaz(4cx\u003ezSkx(\u003c",
            "ln": 3,
            "addr": 32
          },
          {
            "b": "tt]9NC4\u003eC$t(",
            "ln": 23,
            "addr": 853
          },
          {
            "b": "rc-B]j-+sOAbo7",
            "ln": 24,
            "addr": 863
          },
          {
            "b": "mr\u0026xNq/(C*BuIp1B8\u0026{PvRGZkvrM6)x!r\u003ekB7ocaw[i2oA@",
            "n": [
              {
                "c": 1,
                "d": "ExecStart directive (extracted strings)",
                "i": "micro-behaviors/os/service/config::exec-start-text",
                "o": 875,
                "z": 9,
                "cf": 1.0
              }
            ],
            "ln": 25,
            "addr": 875
          },
          {
            "b": "",
            "ln": 26,
            "addr": 913
          },
          {
            "b": "ts\u0026ZNByx04t(",
            "ln": 27,
            "addr": 914
          },
          {
            "b": "s7b#*wN[bMj-bsTBzisHB7GwAByxi5wPN",
            "n": [
              {
                "c": 3,
                "d": "WantedBy autostart-enrollment directive",
                "i": "objectives/persistence/system/service/systemd::wanted-by-target",
                "o": 924,
                "z": 26,
                "cf": 1.0
              }
            ],
            "ln": 28,
            "addr": 924
          },
          {
            "b": "",
            "ln": 29,
            "addr": 951
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 951.0,
              "entropy": 5.03,
              "size_bytes": 951.0
            },
            "binary": {
              "overall_entropy": 5.03,
              "peak_region_bytes": 951.0,
              "peak_region_entropy": 5.03
            }
          }
        },
        "id": 1,
        "path": "avahi-systemd-0.9_rc4-r1.apk!!usr/lib/systemd/system/avahi-dnsconfd.service",
        "risk": 1,
        "sha": "38f40d7f2d4a73bddf8ba55b11718c9b92dc5bc2e2df7c88aedd114f1b564a63",
        "size": 951,
        "traits": [
          {
            "id": "metadata/file/extension/identity::systemd-service",
            "conf": 1.0,
            "crit": 2,
            "desc": "Systemd service file extension",
            "spans": [
              [
                0,
                22
              ]
            ]
          },
          {
            "id": "objectives/persistence/system/service/systemd::exec-start-expected-system",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 2,
            "desc": "ExecStart from system library path"
          },
          {
            "id": "objectives/persistence/system/service/systemd::requires-exists",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 2,
            "desc": "Unit Requires= exists"
          }
        ],
        "type": "systemd"
      },
      {
        "ctx": [
          {
            "b": "boP%0x(+zex(4u6x(+zovrcDjz!pb2C425#e=",
            "n": [
              {
                "c": 2,
                "d": "Systemd service file extension",
                "i": "metadata/file/extension/identity::systemd-service",
                "o": 0,
                "z": 20,
                "cf": 1.0
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "bl",
            "ln": 2,
            "addr": 30
          },
          {
            "b": "boQArvq6u$x(+zeA+e/8B8LVjCvtJ6j0n/!BS+g5zxJ$hwncabA+P09By=OeBrC1fwg}\u003ewaz(4cx\u003ezSkx(\u003c",
            "ln": 3,
            "addr": 32
          },
          {
            "b": "tt]9NC4\u003eC$t(",
            "ln": 22,
            "addr": 799
          },
          {
            "b": "luNuAvqPNsz/PFyw].D]wmY*$Bz(aJl3uWIx-",
            "ln": 23,
            "addr": 809
          },
          {
            "b": "mr\u0026xNq/(C*BuIp1B8\u0026{PvRGZkvrM6)x!r\u003e7wO(v6at4T",
            "n": [
              {
                "c": 1,
                "d": "ExecStart directive (extracted strings)",
                "i": "micro-behaviors/os/service/config::exec-start-text",
                "o": 839,
                "z": 9,
                "cf": 1.0
              }
            ],
            "ln": 24,
            "addr": 839
          },
          {
            "b": "mr\u0026xNqE%V.vpRIOB-RNRB7e\u003c3fjx3jxLx5evp:p]zxHJK",
            "ln": 25,
            "addr": 875
          },
          {
            "b": "oMaARp?sV*z/f01x([R-D1z3",
            "ln": 26,
            "addr": 912
          },
          {
            "b": "",
            "ln": 47,
            "addr": 1419
          },
          {
            "b": "ts\u0026ZNByx04t(",
            "ln": 48,
            "addr": 1420
          },
          {
            "b": "s7b#*wN[bMj-bsTBzisHB7GwAByxi5wPN",
            "n": [
              {
                "c": 3,
                "d": "WantedBy autostart-enrollment directive",
                "i": "objectives/persistence/system/service/systemd::wanted-by-target",
                "o": 1430,
                "z": 26,
                "cf": 1.0
              }
            ],
            "ln": 49,
            "addr": 1430
          },
          {
            "b": "l2pQXjZ\u0026IxxLx5evp:p]zz30Gv@2T$",
            "ln": 50,
            "addr": 1457
          },
          {
            "b": "l2pmzB3j5yB-PcMA+v1pA+e/)wPITez/vr{C425#e]$PAC4\u003eC$",
            "ln": 51,
            "addr": 1482
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1523.0,
              "entropy": 5.12,
              "size_bytes": 1523.0
            },
            "binary": {
              "overall_entropy": 5.12,
              "peak_region_bytes": 1523.0,
              "peak_region_entropy": 5.07
            }
          }
        },
        "id": 2,
        "path": "avahi-systemd-0.9_rc4-r1.apk!!usr/lib/systemd/system/avahi-daemon.service",
        "risk": 1,
        "sha": "988b9dad84bf4790af9be130ef699a317df6f851ea2df70b4c6382cd3196cd95",
        "size": 1523,
        "traits": [
          {
            "id": "objectives/persistence/system/service/systemd::bus-name-exists",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 2,
            "desc": "Service BusName= exists"
          },
          {
            "id": "metadata/file/extension/identity::systemd-service",
            "conf": 1.0,
            "crit": 2,
            "desc": "Systemd service file extension",
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "objectives/persistence/system/service/systemd::exec-start-expected-system",
            "atk": "T1543.002",
            "conf": 1.0,
            "crit": 2,
            "desc": "ExecStart from system library path"
          }
        ],
        "type": "systemd"
      },
      {
        "ctx": [
          {
            "b": "boPG/zE)\u0026%By!#9vTf88vS=y3wfrVXf/Q^tuVGThePJJ",
            "ln": 1,
            "addr": 0
          },
          {
            "b": "boRbIx(mMaw)]E^A=k(raA?spB7]MgatCG8h.D\u0026",
            "ln": 2,
            "addr": 36
          },
          {
            "b": "Abf97vqPM#jS[fRvq6vbB9R?GwO\u003e@",
            "ln": 3,
            "addr": 68
          },
          {
            "b": "Abf9fwPw[RattAduVGTkePJM",
            "ln": 4,
            "addr": 92
          },
          {
            "b": "Abf8%wPIu7jS[P:y\u0026\u003cx3vrlJzB-7]6vrlJkl@3Vjq:.:uA:-/@Cw?IqasIqRB97#gwftF#y?mVp",
            "ln": 5,
            "addr": 112
          },
          {
            "b": "B-IpvjS[AWBz#pZfe4J[Cp)rEvq6vcz/PFz",
            "ln": 6,
            "addr": 173
          },
          {
            "b": "B7]@iauZ\u00266gC?5",
            "ln": 9,
            "addr": 283
          },
          {
            "b": "vrb\u003c\u003eauZ\u0026+z^^V@xA",
            "ln": 10,
            "addr": 295
          },
          {
            "b": "z/PM8x(k4RayPC4xLv",
            "ln": 11,
            "addr": 309
          },
          {
            "b": "v@Dj3x(\u003eEXatV2lf/JVNh.WiGgb7K{whDn2gb--0wmELUgb}iFw\u0026scNhz^fAf-",
            "ln": 12,
            "addr": 324
          },
          {
            "b": "zddc@Byw)3wPw[RawMu!vqYH+y-(8-Aa6\u003eKzEWQ7vl!mqAa%i3y?W^fCRi]PxfD",
            "ln": 13,
            "addr": 374
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 593.0,
              "entropy": 5.24,
              "size_bytes": 593.0
            },
            "binary": {
              "overall_entropy": 5.24
            }
          }
        },
        "id": 3,
        "path": "avahi-systemd-0.9_rc4-r1.apk!!.PKGINFO",
        "risk": 1,
        "sha": "c349be98027f7f4bb3ca90d6105fa202f9982af83eb8d74ae0b3e308306898a0",
        "size": 593,
        "traits": [
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-basename",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package info file"
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-version-field",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package version field",
            "spans": [
              [
                92,
                19
              ]
            ]
          },
          {
            "id": "metadata/package/files/system-package::arch-pkgver-field",
            "conf": 0.9399999976158142,
            "crit": 1,
            "desc": "Arch pkgver metadata field",
            "spans": [
              [
                92,
                19
              ]
            ]
          },
          {
            "id": "metadata/package/files/system-package::arch-pkgname-field",
            "conf": 0.9399999976158142,
            "crit": 1,
            "desc": "Arch pkgname metadata field",
            "spans": [
              [
                68,
                23
              ]
            ]
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-package-field",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package name field",
            "spans": [
              [
                68,
                23
              ]
            ]
          },
          {
            "id": "metadata/package/files/system-package::alpine-pkginfo-origin-field",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Alpine/Wolfi package origin field",
            "spans": [
              [
                309,
                14
              ]
            ]
          },
          {
            "id": "metadata/package/files/system-package::alpine-apk-pkginfo",
            "conf": 0.9700000286102295,
            "crit": 2,
            "desc": "Alpine/Wolfi package info metadata",
            "spans": [
              [
                68,
                23
              ],
              [
                92,
                19
              ],
              [
                309,
                14
              ]
            ]
          }
        ],
        "type": "text"
      }
    ],
    "rev": "b520a",
    "v": "8"
  }
}