{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 1.0,
        "class": 2
      }
    ],
    "prob": 1.0,
    "skip": [
      {
        "m": "az/xlsx",
        "why": "uncalibrated"
      }
    ],
    "class": 2,
    "models": [
      {
        "m": "az",
        "prob": 0.9997545,
        "class": 1
      },
      {
        "m": "az/documents",
        "prob": 1.0,
        "class": 2
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9983558,
      0.99991804
    ],
    "analyzed_at": "2026-05-18T23:47:17Z"
  },
  "path": "4a86e240dc22f793b930bb71dbb11add61abda5dd6735b5606b6f47633303b35.xlsm",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "Md(Ag)",
        "k": {
          "core.created": "2025-09-30T13:14:54Z",
          "core.creator": "Angela Camargo",
          "core.modified": "2025-12-04T15:04:59Z",
          "core.application": "Microsoft Excel",
          "core.last_modified_by": "Angela Camargo"
        },
        "x": 40,
        "id": 0,
        "ms": {
          "file": {
            "size": 171932.0
          },
          "office": {
            "ooxml": {
              "entry_count": 38.0,
              "image_part_count": 2.0,
              "declares_vba_project": true,
              "declares_macro_enabled": true
            },
            "doc_type": "xlsm",
            "is_macro_enabled_extension": true
          }
        },
        "sz": 171932,
        "ts": [
          {
            "a": "T1059.005",
            "c": 1.0,
            "d": "OOXML document contains VBA macros (0 modules: )",
            "i": "metadata/format/macro::ooxml-has-vba",
            "l": 4
          }
        ],
        "sha": "4a86e240dc22f793b930bb71dbb11add61abda5dd6735b5606b6f47633303b35",
        "path": "/data/samples/bad/datasets/various/datalake.abuse.ch/2025-12/4a86e240dc22f793b930bb71dbb11add61abda5dd6735b5606b6f47633303b35.xlsm",
        "type": "xlsx"
      }
    ],
    "tv": "012f9"
  }
}