{
  "ml": {
    "v": "7",
    "eng": "2.11.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.00001707673,
        "rte": "az",
        "prob": 0.00001707673
      },
      {
        "cls": 0,
        "raw": 0.0000054935613,
        "rte": "az/documents",
        "prob": 0.0000054935613
      }
    ],
    "prob": 0.00001707673,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000017076730728149414,
        "type": "docx"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-16T04:14:35Z"
  },
  "path": "461e1057fcb66e15536d92acf0da35546ecc6d9c0db677b0dfb0bc23fc2bbe88.doc",
  "raw": {
    "v": "8",
    "files": [
      {
        "id": 0,
        "mol": "Md(Ag)",
        "sha": "461e1057fcb66e15536d92acf0da35546ecc6d9c0db677b0dfb0bc23fc2bbe88",
        "path": "461e1057fcb66e15536d92acf0da35546ecc6d9c0db677b0dfb0bc23fc2bbe88.doc",
        "risk": 1,
        "size": 888038,
        "type": "docx",
        "facts": {
          "metrics": {
            "file": {
              "size": 888038,
              "entropy": 7.99
            },
            "binary": {
              "peak_region_bytes": 837632,
              "peak_region_entropy": 7.84
            },
            "office": {
              "macro_count": 1,
              "vba_project_size": 34304,
              "ooxml.entry_count": 27,
              "ooxml.max_entry_size": 1089630,
              "ooxml.image_part_count": 1,
              "is_macro_enabled_extension": 0,
              "ooxml.declares_vba_project": 1,
              "ooxml.is_word_vba_document": 1,
              "ooxml.declares_macro_enabled": 1
            },
            "archive": {
              "file_count": 27,
              "member_count": 27,
              "script_count": 0,
              "zip_bomb_ratio": 7.81,
              "compressed_size": 883886,
              "directory_count": 0,
              "executable_count": 1,
              "extra_field_size": 0,
              "noise_file_count": 0,
              "compression.ratio": 0.49,
              "hidden_file_count": 1,
              "uncompressed_size": 1816183,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 30,
              "rtlo_filename_count": 0,
              "format.regular_count": 27,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 2,
              "timing.mtime_unique_ratio": 0.07,
              "misplaced_executable_count": 1,
              "timing.mtime_outlier_count": 5,
              "timing.mtime_dominant_count": 22,
              "timing.mtime_spread_seconds": 1348682212,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 0.81,
              "compression.method_counts.stored": 1,
              "compression.method_counts.deflate": 26
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.document_as_document": 1
            }
          }
        },
        "ident": {
          "trust": "unsigned",
          "producer": {
            "value": "Microsoft Office Word",
            "source": "office.application",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/format/macro::ooxml-has-vba",
            "atk": "T1059.005",
            "conf": 1.0,
            "crit": 3,
            "desc": "OOXML document contains VBA macros (0 modules: )"
          }
        ]
      }
    ]
  }
}