{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 1.0,
        "class": 2
      }
    ],
    "prob": 1.0,
    "class": 2,
    "models": [
      {
        "m": "az",
        "prob": 0.6687533,
        "class": 0
      },
      {
        "m": "az/documents",
        "prob": 0.93333334,
        "class": 2
      },
      {
        "m": "az/pdf",
        "prob": 1.0,
        "class": 2
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961373,
      0.9998425
    ],
    "analyzed_at": "2026-05-13T18:37:16Z"
  },
  "path": "RANDInfo.pdf",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "H(Db)Md(Pd)",
        "k": {
          "header.version": "1.4",
          "actions[0].kind": "uri",
          "actions[1].kind": "uri",
          "shape.encrypted": true,
          "shape.eof_count": 2,
          "filter_chains[0]": "FlateDecode",
          "filter_chains[1]": "Standard",
          "filter_chains[2]": "FlateDecode",
          "filter_chains[3]": "FlateDecode",
          "filter_chains[4]": "FlateDecode",
          "filter_chains[5]": "FlateDecode",
          "filter_chains[6]": "FlateDecode",
          "filter_chains[7]": "FlateDecode",
          "filter_chains[8]": "FlateDecode",
          "filter_chains[9]": "FlateDecode",
          "shape.linearized": true,
          "actions[0].source": "object:38",
          "actions[1].source": "object:39",
          "filter_chains[10]": "FlateDecode",
          "filter_chains[11]": "FlateDecode",
          "actions[0].snippet": "(�Y`\u0019�#��\tmص�����,\u001e\u0003��\u0003N����~���c\\(\u00119��O,\u001b�d�)",
          "actions[1].snippet": "(ħ3[C\u001b*4\u0012[7m\u001dQ�\u0016������q)",
          "shape.object_count": 40,
          "form_fields[0].name": "37565",
          "header.header_count": 1,
          "shape.trailer_count": 2,
          "shape.startxref_count": 2,
          "embedded_files[0].filename": "������\u00028mF\u0002\u0015�T�\u000b\u001c\u0001s���\u0002�*?��d�\u0017�T��li�YІ����8�\u0007v|�\u0011{\u0018���#J����",
          "catalog.embedded_file_count": 1,
          "form_fields[1].value_length": 1
        },
        "x": 37,
        "id": 0,
        "ms": {
          "pdf": {
            "font_count": 3.0,
            "page_count": 1.0,
            "action_count": 2.0,
            "object_count": 40.0,
            "stream_count": 12.0,
            "trailer_count": 2.0,
            "xobject_count": 1.0,
            "metadata_count": 1.0,
            "startxref_count": 2.0,
            "annotation_count": 2.0,
            "form_field_count": 2.0,
            "uri_action_count": 2.0,
            "embedded_file_count": 1.0,
            "risky_feature_score": 25.0,
            "annotations_per_page": 2.0,
            "uri_actions_per_page": 2.0,
            "visible_object_count": 40.0,
            "trailing_bytes_after_eof": 1.0,
            "unreferenced_object_count": 17.0
          },
          "file": {
            "size": 37822.0
          }
        },
        "sz": 37822,
        "ts": [
          {
            "c": 0.8999999761581421,
            "d": "PDF contains multiple trailers",
            "e": [
              "pdf.trailer_count = 2.00"
            ],
            "i": "metadata/document/pdf/properties::pdf-multiple-trailers",
            "l": 4
          },
          {
            "c": 0.75,
            "d": "PDF chained stream filter array",
            "e": [
              "/Filter["
            ],
            "i": "micro-behaviors/data/encode/custom::pdf-multi-filter",
            "l": 3
          },
          {
            "a": "T1566.001",
            "c": 0.8600000143051147,
            "d": "PDF annotation object",
            "e": [
              "/Subtype/Link"
            ],
            "i": "objectives/execution/lure/document::pdf-annotation-object",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "PDF URI action present",
            "e": [
              "uri"
            ],
            "i": "metadata/document/pdf/properties::pdf-action-uri",
            "l": 3
          },
          {
            "c": 0.8999999761581421,
            "d": "PDF is encrypted",
            "e": [
              "true"
            ],
            "i": "metadata/document/pdf/properties::pdf-encrypted",
            "l": 3
          }
        ],
        "sha": "305ee0799b80cbb58f8b4087b4bf69dca04ed1197206fdff3ce2624280fa3aa4",
        "path": "/data/samples/bad/datasets/various/contagio/Dropped Randinfo/RANDInfo.pdf",
        "type": "pdf"
      }
    ],
    "tv": "1f252"
  }
}