{ "ml": { "v": "5", "fs": [ { "id": 0, "prob": 0.8911781907081604, "class": 0, "threshold": 0.9987763166427612 } ], "prob": 0.8911782, "class": 0, "level": 3, "models": [ { "m": "az", "prob": 0.8911782, "class": 0 }, { "m": "az/media", "prob": 0.63240707, "class": 0 }, { "m": "az/jpeg", "prob": 0.75, "class": 0 } ], "version": "v17.17", "threshold": 0.9987763, "analyzed_at": "2026-05-31T16:19:41Z" }, "path": "leitstelle_play.jpg", "raw": { "v": "5", "fs": [ { "f": "O(As)Md", "x": 29, "ff": { "m": { "file": { "size": 182295.0, "entropy": 7.13, "size_bytes": 182295.0 }, "jpeg": { "com_count": 0.0, "dht_count": 1.0, "dqt_count": 1.0, "exif_size": 114485.0, "soi_count": 1.0, "comment_bytes": 0.0, "segment_count": 17.0, "appended_bytes": 0.0, "maker_note_bytes": 0.0, "app_segment_count": 8.0 }, "image": { "width": 320.0, "height": 180.0, "channels": 3.0, "b_entropy": 5.9, "g_entropy": 5.81, "r_entropy": 5.93, "edge_density": 0.14, "pixel_entropy": 6.37, "histogram_flatness": 0.8 }, "binary": { "overall_entropy": 7.13 } }, "s": [ [ 6, "u8", "JFIF" ], [ 24, "u8", "Exif" ], [ 144, "u8", "Adobe Photoshop CS4 Windows" ], [ 172, "u8", "2011:05:13 11:37:15" ], [ 355, "u8", "Adobe_CM" ], [ 370, "u8", "Adobe" ], [ 649, "u8", "b34r" ], [ 721, "u8", "7GWgw" ], [ 809, "u8", "dEU6te" ], [ 2352, "u8", "i/kKYel" ], [ 6322, "u8", "Photoshop 3.0" ], [ 6336, "u8", "8BIM" ], [ 6453, "u8", "x8BIM" ], [ 6512, "u8", "73.77.3.245:14402" ], [ 6780, "u8", "73.77.4.8:14402" ], [ 6981, "u8", "null" ], [ 6993, "u8", "boundsObjc" ], [ 7025, "u8", "Top long" ], [ 7041, "u8", "Leftlong" ], [ 7057, "u8", "Btomlong" ], [ 7073, "u8", "Rghtlong" ], [ 7089, "u8", "slicesVlLs" ], [ 7103, "u8", "Objc" ], [ 7117, "u8", "slice" ], [ 7130, "u8", "sliceIDlong" ], [ 7149, "u8", "groupIDlong" ], [ 7168, "u8", "originenum" ], [ 7181, "u8", "ESliceOrigin" ], [ 7197, "u8", "autoGenerated" ], [ 7215, "u8", "Typeenum" ], [ 7226, "u8", "ESliceType" ], [ 7345, "u8", "urlTEXT" ], [ 7362, "u8", "nullTEXT" ], [ 7380, "u8", "MsgeTEXT" ], [ 7398, "u8", "altTagTEXT" ], [ 7418, "u8", "cellTextIsHTMLbool" ], [ 7441, "u8", "cellTextTEXT" ], [ 7462, "u8", "horzAlignenum" ], [ 7480, "u8", "ESliceHorzAlign" ], [ 7499, "u8", "default" ], [ 7509, "u8", "vertAlignenum" ], [ 7527, "u8", "ESliceVertAlign" ], [ 7557, "u8", "bgColorTypeenum" ], [ 7576, "u8", "ESliceBGColorType" ], [ 7597, "u8", "None" ], [ 7604, "u8", "topOutsetlong" ], [ 7625, "u8", "leftOutsetlong" ], [ 7647, "u8", "bottomOutsetlong" ], [ 7672, "u8", "rightOutsetlong" ], [ 7730, "u8", "73.77.4.12:14402" ], [ 13880, "u8", "http://ns.adobe.com/xap/1.0/" ], [ 13909, "u8", "\u003c?xpacket begin=\"" ], [ 13929, "base64", "\u0010\u0010\u0010\u0010\u0010\u0014\u0011\u000f\u0011\u0011\u0011\u0011\u000f\u0011\u0011\u0017\u001a\u001a\u001a\u0017\u0011\u001f!!!!\u001f+---+2222222222\u0001\u000b\t\t\u000e\f\u000e\u001f\u0017\u0017\u001f+#\u001d#" ], [ 39211, "u8", "http://ns.adobe.com/xmp/extension/" ], [ 39246, "u8", "9D823EAF6B7BAC0F00270ACE0E1F86CB" ], [ 104764, "u8", "xEvt:softwareAgent=\"Adobe InDesign 6.0\" stEvt:changed=\"/;/metadata\"/\u003e \u003crdf:li stEvt:action=\"saved\" stEvt:instanceID=\"xmp.iid:038" ], [ 122081, "u8", "XICC_PROFILE" ], [ 122100, "u8", "HLino" ], [ 122109, "u8", "mntrRGB XYZ" ], [ 122133, "u8", "acspMSFT" ], [ 122145, "u8", "IEC sRGB" ], [ 122240, "u8", "3desc" ], [ 122337, "u8", "vued" ], [ 122349, "u8", "view" ], [ 122373, "u8", "meas" ], [ 122432, "u8", "text" ], [ 122441, "u8", "Copyright (c) 1998 Hewlett-Packard Company" ], [ 122497, "u8", "sRGB IEC61966-2.1" ], [ 122705, "u8", "IEC http://www.iec.ch" ], [ 122816, "u8", ".IEC 61966-2.1 Default RGB colour space - sRGB" ], [ 122952, "u8", ",Reference Viewing Condition in IEC61966-2.1" ], [ 123177, "u8", "CRT curv" ], [ 125550, "u8", "DTsEF7Gc(UVW" ], [ 125583, "u8", "u*9:HIJXYZghijvwxyz" ], [ 125744, "u8", "UeuV7" ], [ 125809, "u8", "9IYiy" ], [ 127685, "u8", "fI4wj" ], [ 127890, "u8", "kUSdz" ], [ 128189, "u8", "Ti5uBH" ], [ 129929, "u8", "u.ka" ], [ 130635, "u8", "sedvuM" ], [ 131276, "u8", "L66x2" ], [ 133064, "u8", "nlEf" ], [ 133700, "u8", "nIjh" ], [ 134008, "u8", "mG[)" ], [ 134561, "u8", "MuxLs" ], [ 134964, "u8", "Kkaq" ], [ 136563, "u8", "KEGS" ], [ 136695, "u8", "MmDUU1" ], [ 137091, "u8", "RRIPJLX" ], [ 138867, "u8", "qwgOm" ], [ 139178, "u8", "xc()" ], [ 139741, "u8", "GA6sq" ], [ 140199, "u8", "KWGM" ], [ 140374, "u8", "RGES" ], [ 140830, "u8", "Mb9kj" ], [ 141463, "u8", "hj mp" ], [ 141518, "u8", "STWP" ], [ 144219, "u8", "t6wrK" ], [ 144251, "u8", "tNvo" ], [ 144521, "u8", "MMMG" ], [ 146251, "u8", "RCIF" ], [ 147310, "u8", "/S5fWqe2uU" ], [ 147534, "u8", "%QIOIII]5" ], [ 150494, "u8", "iwNRc" ], [ 151323, "u8", "iQZTt" ], [ 151623, "u8", "EbZG4" ], [ 151665, "u8", "voZu" ], [ 152237, "u8", "oZiiU" ], [ 152547, "u8", "qt4gol" ], [ 153547, "u8", "eqegqkK" ], [ 156544, "u8", "SRCUS" ], [ 156780, "u8", "hh56" ], [ 156887, "u8", "HMDxi" ], [ 157246, "u8", "AYIUOS" ], [ 158061, "u8", "3W6Y" ], [ 158480, "u8", "yewa" ], [ 159114, "u8", "IJ_P" ], [ 159747, "u8", "Umji" ], [ 160363, "u8", "/7ytM" ], [ 160803, "u8", "ktdUuA" ], [ 161071, "u8", "WOv7V" ], [ 161433, "u8", "AUZR" ], [ 161605, "u8", "{c}w" ], [ 161833, "u8", "o1Ymq" ], [ 162868, "u8", "EVIUC" ], [ 163350, "u8", "lGov" ], [ 163707, "u8", "C{)o" ], [ 163801, "u8", "ESYW" ], [ 166659, "u8", "AG6A" ], [ 168085, "u8", "Udis" ], [ 168222, "u8", "nnniB" ], [ 169805, "u8", "weug" ], [ 173237, "u8", "XeRd |" ], [ 174063, "u8", "MEEeu" ], [ 174083, "u8", "5Gcol" ], [ 174814, "u8", "/acC4F" ], [ 175452, "u8", "iwNW5" ], [ 176256, "u8", "IUYO" ], [ 178098, "u8", "ZZhi1" ], [ 178478, "u8", "766z" ] ], "v": { "file.stem": "leitstelle_play", "file.basename": "leitstelle_play.jpg", "jpeg.features[0]": "exif", "jpeg.features[1]": "photoshop_irb", "jpeg.features[2]": "iptc", "jpeg.features[3]": "xmp", "jpeg.features[4]": "icc", "jpeg.exif.datetime": "2011:05:13 11:37:15", "jpeg.exif.software": "Adobe Photoshop CS4 Windows", "jpeg.adobe.color_transform": 1 }, "id": "jpeg" }, "id": 0, "sz": 182295, "ts": [ { "a": "T1027.003", "c": 0.699999988079071, "d": "Unusually large EXIF block", "e": [ "jpeg.exif_size = 114485.00" ], "i": "objectives/anti-static/obfuscation/steganography/image::jpeg-large-exif", "l": 4, "m": "B0032.001" }, { "a": "T1036.008", "c": 0.8600000143051147, "d": "Photoshop JPEG metadata", "e": [ "Adobe Photoshop CS4 Windows", "…0\" stEvt:softwareAgent=\"Adobe Photoshop CS4 Windows\" stEvt:chan…" ], "i": "objectives/evasion/masquerade/extension-mismatch::photoshop-jpeg-as-png", "l": 1, "el": [ "0x90", "0x1993c" ] }, { "c": 0.8999999761581421, "d": "Encoded payload detected: base64", "e": [ "\u003cbinary data\u003e \u003cbase64\u003e" ], "i": "metadata/encoded-payload/base64", "l": 3, "el": [ "offset:13929" ] } ], "sha": "06717dd3fdec34a03d140ca564528469e990088c3b2d6fe30e21c3164932f7f9", "path": "/data/samples/good/datasets/digital_corpora/www.stadt-zuerich.ch/content/dam/stzh/vbz/Deutsch/Ueber das Departement/Audio und Video/leitstelle_play.jpg", "type": "jpeg" } ], "tv": "176d6" } }