use strict;
use warnings;
[download]

These are your friends. They will tell you that %mhash must have an explicit package name, which tells you that you aren't referencing the same "myhash" thingy that you built above.