{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.0000140070915,
        "rte": "az",
        "prob": 0.0000140070915
      },
      {
        "cls": 0,
        "raw": 0.000010261933,
        "rte": "az/documents",
        "prob": 0.000010261933
      }
    ],
    "prob": 0.0000140070915,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014007091522216797,
        "type": "xlsx"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-09T18:22:09Z"
  },
  "path": "Purchase Order_PO YRS00262602092026.xlam.xlsx",
  "raw": {
    "v": "8",
    "rev": "52359",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awgm2MO%adp0G!sFyVN002d=000Vj5DD35z/fVdzGGk+D2Ntot}Qwsy/KBz00?u-P\u003e-A!P\u003e-A!P\u003eZY]=RtAl5xsg7C..M/xZHDPS.:Dv4v*lXyiUniDY\u003e]eky5=XYNv*t*5(7Xp}k\u003ebj[B9p[P-SGYrcq41#B{HiX={B",
            "ln": 0
          },
          {
            "b": "R4eS\u003eiwdDel8O-fbKZT$905(e0%xqr0SSGaBt$ZPL@txk9rDivHxEOS4/^gwCX/3Sz/PS5z/ozzCX}m%r1e*j?uoJ!?uoJ!?uoJ!T^0afN\u003eLLh)\u003cEG!aM1L]1L9Zfrl-E\u003cnk\u0026Jhx$GqUioy^N{\u003edminI]?H)/oca!%/p$4l=Yj\u0026EfP[M%MzX[v\u003cKWt=S*p.*)08N9Jm@xxiH)Awe-hBYvE4xAYnlGc/cQ{Ws$Hz4nUf",
            "ln": 1026
          },
          {
            "b": "Aw[m9CX/3Sz/PSmxK$:%B1Z)vwO=AvB7/b@Btky)zep?BwO=A/r0rmb?uoJ!p!H@@000003\u0026*XoHYWRSO\u0026v8T000",
            "ln": 736246
          }
        ],
        "mol": "Md(Pd₂)",
        "sha": "2f2b3bdb7985fbad154cc45d4f3400dfc208172ef8013525aa44c94f9267f2c8",
        "path": "Purchase Order_PO YRS00262602092026.xlam.xlsx",
        "risk": 1,
        "size": 736316,
        "type": "xlsx",
        "facts": {
          "metrics": {
            "file": {
              "size": 736316,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 735232,
              "peak_region_entropy": 7.85
            },
            "office": {
              "embedded_count": 1,
              "ooxml.entry_count": 12,
              "ooxml.max_entry_size": 1035264,
              "is_macro_enabled_extension": 0
            },
            "archive": {
              "file_count": 12,
              "member_count": 12,
              "script_count": 0,
              "zip_bomb_ratio": 4.5,
              "compressed_size": 734582,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 108,
              "noise_file_count": 0,
              "compression.ratio": 0.7,
              "hidden_file_count": 1,
              "uncompressed_size": 1050760,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 35,
              "rtlo_filename_count": 0,
              "format.regular_count": 12,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.08,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 12,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 12
            }
          }
        },
        "ident": {
          "trust": "unsigned",
          "authors": [
            {
              "name": "Xadmin",
              "role": "author",
              "source": "office.creator"
            }
          ],
          "producer": {
            "value": "Microsoft Excel",
            "source": "office.application",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/document/office/markup::ooxml-embedded-ole-object",
            "conf": 0.95,
            "crit": 3,
            "desc": "OOXML embeds OLE object relationship"
          },
          {
            "id": "metadata/document/office/markup::ooxml-embedded-ole2-object",
            "conf": 0.95,
            "crit": 3,
            "desc": "OOXML embeds OLE2 object"
          },
          {
            "id": "metadata/document/office/markup::ooxml-large-embedded-ole-object",
            "conf": 0.95,
            "crit": 3,
            "desc": "Large embedded OLE object"
          },
          {
            "id": "metadata/document/office/properties::office-application-microsoft-office",
            "conf": 0.9,
            "crit": 3,
            "desc": "Document application is Microsoft Office"
          }
        ]
      }
    ]
  }
}