{
  "llm": {
    "conf": 0.49988133,
    "grade": "suspicious",
    "model": "Qwen/Qwen3.6-27B",
    "review": true,
    "outcome": "suspicious",
    "interpretation": "SHA256-named archive with PDFs"
  },
  "ml": {
    "v": "7",
    "eng": "2.2.0-rc.1",
    "lvl": 250,
    "conf": 80,
    "mods": [
      {
        "cls": 2,
        "raw": 0.99976265,
        "rte": "az",
        "prob": 0.99976265
      }
    ],
    "prob": 0.49988133,
    "files": [
      {
        "id": 0,
        "lvl": 250,
        "conf": 80,
        "prob": 0.4998813271522522,
        "type": "rar"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0059928297996521,
        "type": "pdf"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0059928297996521,
        "type": "pdf"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.007284998893737793,
        "type": "pdf"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.020855069160461426,
        "type": "pdf"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-30T13:46:59Z"
  },
  "path": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764.rar",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "k-F@/X4Jz45+uWbY83NEWu]3TtqhaEGDB?=\u003c\u003cwi*9HQZl.)/5cmQO\u003cn4H^9/e=%Bc?T#bSTGx\u003c0nUqU5D*}o2006P\u003efW.2q!Y[Hwm@G+PdvNXQ614\u0026O(3PtF\u003eO/:9",
            "n": [
              {
                "c": 4,
                "d": "SHA256-named high-entropy file",
                "i": "metadata/file/metrics::sha256-named-high-entropy-file",
                "o": 0,
                "z": 68,
                "cf": 0.800000011920929
              }
            ],
            "ln": 0
          }
        ],
        "mol": "Md₂(Pd)",
        "sha": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764",
        "path": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764.rar",
        "risk": 33,
        "size": 3962052,
        "type": "rar",
        "facts": {
          "metrics": {
            "file": {
              "size": 3962052.0,
              "entropy": 8.0,
              "size_bytes": 3962052.0
            },
            "binary": {
              "overall_entropy": 8.0,
              "peak_region_bytes": 3960832.0,
              "peak_region_entropy": 7.86
            }
          }
        },
        "traits": [
          {
            "id": "metadata/document/pdf/properties::pdf-has-openaction",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF catalog has OpenAction"
          },
          {
            "id": "metadata/document/pdf/properties::pdf-info-creator-libreoffice",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF info.producer claims LibreOffice"
          },
          {
            "id": "metadata/document/pdf/properties::pdf-action-uri",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF URI action present"
          },
          {
            "id": "metadata/file/metrics::near-maximum-entropy-file",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "File has near-maximum entropy",
            "spans": [
              [
                0,
                29
              ]
            ]
          },
          {
            "id": "metadata/file/metrics::sha256-hex-basename",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "SHA256-like hex filename",
            "spans": [
              [
                0,
                68
              ]
            ]
          },
          {
            "id": "metadata/file/metrics::sha256-named-high-entropy-file",
            "conf": 0.800000011920929,
            "crit": 4,
            "desc": "SHA256-named high-entropy file",
            "spans": [
              [
                0,
                29
              ]
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "b#v00eIO\u003en",
            "n": [
              {
                "c": 3,
                "d": "PDF catalog has OpenAction",
                "i": "metadata/document/pdf/properties::pdf-has-openaction",
                "o": 0,
                "z": 1,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "cbohG@R",
            "ln": 2,
            "addr": 9
          },
          {
            "b": "f/.3jfD+pyy5",
            "ln": 3,
            "addr": 15
          },
          {
            "b": "wO#3%vRL",
            "ln": 2169,
            "addr": 433170
          },
          {
            "b": "hAh*kaA7.7",
            "ln": 2170,
            "addr": 433177
          },
          {
            "b": "juK-tl3mo.z/M%GdiHohA+eW3x(v(Svru66c}39KfFUKuf!+KvfF$*CiA^\u003cOfgf+\u003evruBdasG](raPeOCwhejazu4twPz*5w*[\u0026Qoj-x)z/PxfasFVYfhlv}l$7gGasGSsgb7EwfFLmuf!+EAgDwR/atlL\u003cmozfiB.\u003e(6vqY%]AV==fxLzJgx(+zowm!!Lss+N}wPz\u003caz/cWNe?]gqh90AIh8u*te\u0026Cpoe\u0026kmmgb*sXc@:+WawuG)wGS-ZgbSq=azU}8Bzb-bvix-8A=U@kzxH?\u0026g+HHiatlMiz!a02wPw[wAaAMWwMQJse\u0026kmmgb*T8fh)15ygQ)%asFVYfh#Ucy?j.qdiHoyA:-{awN(]pmQZaOwGTf2",
            "n": [
              {
                "c": 2,
                "d": "PDF contains producer metadata tag",
                "i": "metadata/document/pdf/properties::has-producer",
                "o": 433415,
                "z": 11,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 2171,
            "addr": 433186
          },
          {
            "b": "wO#3%vRL",
            "ln": 2172,
            "addr": 433483
          },
          {
            "b": "hAq)laA7.7",
            "ln": 2173,
            "addr": 433490
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "pdf": {
              "eof_count": 1.0,
              "page_count": 20.0,
              "header_count": 1.0,
              "object_count": 91.0,
              "objstm_count": 6.0,
              "stream_count": 68.0,
              "trailer_count": 0.0,
              "startxref_count": 1.0,
              "xref_stream_count": 2.0,
              "flate_filter_count": 68.0,
              "risky_feature_score": 20.0,
              "annotations_per_page": 0.0,
              "visible_object_count": 91.0,
              "signature_object_count": 0.0,
              "trailing_bytes_after_eof": 1.0,
              "unreferenced_object_count": 69.0,
              "stream_bad_delimiter_count": 0.0,
              "leading_bytes_before_header": 0.0,
              "stream_invalid_length_count": 0.0,
              "stream_missing_length_count": 0.0,
              "stream_length_mismatch_count": 0.0,
              "stream_missing_endstream_count": 0.0,
              "object_stream_inner_object_count": 510.0
            },
            "file": {
              "size": 434918.0,
              "entropy": 7.98,
              "size_bytes": 434918.0
            },
            "binary": {
              "overall_entropy": 7.98,
              "peak_region_bytes": 428032.0,
              "peak_region_entropy": 7.86
            }
          }
        },
        "id": 1,
        "mol": "Md(Pd)",
        "path": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764.rar!!Quantalytics_Report.pdf",
        "risk": 1,
        "sha": "99f23562b9e1f823e3fed0451f54b595eeffb47756b33c6b3b2ef965b3254ea5",
        "size": 434918,
        "traits": [
          {
            "id": "metadata/document/pdf/properties::pdf-has-openaction",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF catalog has OpenAction"
          }
        ],
        "type": "pdf"
      },
      {
        "ctx": [
          {
            "b": "b#v00eIO\u003em3mjf!(eq$7ats{RvRMljjtfVFBzLIhc\u0026",
            "n": [
              {
                "c": 3,
                "d": "PDF URI action present",
                "i": "metadata/document/pdf/properties::pdf-action-uri",
                "o": 0,
                "z": 1,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 0
          },
          {
            "b": "ax8YXvrc6nh8vfzgD3V?fhMXcwozx[AV==eyIvigp^^+}z80\u003ecdgdZ}A+eW3x(v(Svru66c}38",
            "n": [
              {
                "c": 2,
                "d": "PDF contains producer metadata tag",
                "i": "metadata/document/pdf/properties::has-producer",
                "o": 242,
                "z": 11,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 226
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "pdf": {
              "eof_count": 1.0,
              "font_count": 8.0,
              "page_count": 17.0,
              "action_count": 37.0,
              "header_count": 1.0,
              "object_count": 679.0,
              "stream_count": 32.0,
              "trailer_count": 1.0,
              "xobject_count": 6.0,
              "startxref_count": 1.0,
              "annotation_count": 41.0,
              "uri_action_count": 37.0,
              "flate_filter_count": 32.0,
              "risky_feature_score": 20.0,
              "annotations_per_page": 2.41,
              "uri_actions_per_page": 2.18,
              "visible_object_count": 679.0,
              "signature_object_count": 0.0,
              "trailing_bytes_after_eof": 1.0,
              "unreferenced_object_count": 2.0,
              "stream_bad_delimiter_count": 0.0,
              "leading_bytes_before_header": 0.0,
              "stream_invalid_length_count": 0.0,
              "stream_missing_length_count": 0.0,
              "stream_length_mismatch_count": 0.0,
              "stream_missing_endstream_count": 0.0
            },
            "file": {
              "size": 2674877.0,
              "entropy": 7.98,
              "size_bytes": 2674877.0
            },
            "binary": {
              "overall_entropy": 7.98,
              "peak_region_bytes": 2546688.0,
              "peak_region_entropy": 7.85
            }
          }
        },
        "id": 2,
        "mol": "Md(Pd)",
        "path": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764.rar!!Gold 2026 Midyear Outlook_ A tug-of-war between tactical and structural momentum.pdf",
        "risk": 1,
        "sha": "29eea0cd2ecc4d1d047afb627c79e354b5c36e566ffaa1880a1b8dce6e42f90c",
        "size": 2674877,
        "traits": [
          {
            "id": "metadata/document/pdf/properties::pdf-action-uri",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF URI action present"
          }
        ],
        "type": "pdf"
      },
      {
        "ctx": [
          {
            "b": "b#v00eIO\u003eo3miP=.[r)}.\u003edn\u003eats{RvRMljjtfxtzu",
            "n": [
              {
                "c": 3,
                "d": "PDF catalog has OpenAction",
                "i": "metadata/document/pdf/properties::pdf-has-openaction",
                "o": 0,
                "z": 1,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 0
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "pdf": {
              "eof_count": 1.0,
              "font_count": 4.0,
              "page_count": 10.0,
              "header_count": 1.0,
              "object_count": 89.0,
              "stream_count": 18.0,
              "trailer_count": 1.0,
              "startxref_count": 1.0,
              "flate_filter_count": 18.0,
              "risky_feature_score": 20.0,
              "annotations_per_page": 0.0,
              "visible_object_count": 89.0,
              "signature_object_count": 0.0,
              "trailing_bytes_after_eof": 1.0,
              "unreferenced_object_count": 2.0,
              "stream_bad_delimiter_count": 0.0,
              "leading_bytes_before_header": 0.0,
              "stream_invalid_length_count": 0.0,
              "stream_missing_length_count": 0.0,
              "stream_length_mismatch_count": 0.0,
              "stream_missing_endstream_count": 0.0
            },
            "file": {
              "size": 70635.0,
              "entropy": 7.76,
              "size_bytes": 70635.0
            },
            "binary": {
              "overall_entropy": 7.76,
              "peak_region_bytes": 57344.0,
              "peak_region_entropy": 7.83
            }
          }
        },
        "id": 3,
        "mol": "Md(Pd)",
        "path": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764.rar!!Complete-Trading-System-2026.pdf",
        "risk": 1,
        "sha": "3006db7b492cc305f149ee0dadb5d4cbc89f5c383f29e38735516aea644621c4",
        "size": 70635,
        "traits": [
          {
            "id": "metadata/document/pdf/properties::pdf-info-creator-libreoffice",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF info.producer claims LibreOffice"
          },
          {
            "id": "metadata/document/pdf/properties::pdf-has-openaction",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "PDF catalog has OpenAction"
          }
        ],
        "type": "pdf"
      },
      {
        "ctx": [
          {
            "b": "b#v00eIO\u003eo4jg2]=^Jsgg=NGKats{RvRMumjtffryY",
            "n": [
              {
                "c": 2,
                "d": "PDF has AcroForm",
                "i": "metadata/document/pdf/properties::pdf-has-acroform",
                "o": 0,
                "z": 1,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 0
          },
          {
            "b": "z/PY6BuQ3OarR^HarR^HjAa?yi-6\u003cnwozx[AY#^1z^)o2p^^+}oLE%RvrcSof/yTre\u0026L)CAaAMwp\u0026ZF+BZ]06j{\u0026zParR^HarR^",
            "n": [
              {
                "c": 2,
                "d": "PDF generated by Adobe Acrobat",
                "i": "metadata/document/pdf/properties::adobe-acrobat",
                "o": 906580,
                "z": 17,
                "cf": 0.8999999761581421
              },
              {
                "c": 2,
                "d": "PDF contains producer metadata tag",
                "i": "metadata/document/pdf/properties::has-producer",
                "o": 906566,
                "z": 14,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 906550
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "pdf": {
              "eof_count": 1.0,
              "header_count": 1.0,
              "object_count": 70.0,
              "objstm_count": 17.0,
              "stream_count": 54.0,
              "trailer_count": 0.0,
              "xobject_count": 4.0,
              "metadata_count": 5.0,
              "startxref_count": 1.0,
              "xref_stream_count": 1.0,
              "flate_filter_count": 47.0,
              "risky_feature_score": 5.0,
              "visible_object_count": 70.0,
              "signature_object_count": 0.0,
              "trailing_bytes_after_eof": 1.0,
              "unreferenced_object_count": 50.0,
              "stream_bad_delimiter_count": 0.0,
              "leading_bytes_before_header": 0.0,
              "stream_invalid_length_count": 0.0,
              "stream_missing_length_count": 0.0,
              "stream_length_mismatch_count": 0.0,
              "stream_missing_endstream_count": 0.0,
              "object_stream_inner_object_count": 375.0
            },
            "file": {
              "size": 947389.0,
              "entropy": 7.99,
              "size_bytes": 947389.0
            },
            "binary": {
              "overall_entropy": 7.99,
              "peak_region_bytes": 904192.0,
              "peak_region_entropy": 7.84
            }
          }
        },
        "id": 4,
        "path": "4e9ff7fbbcfeb03eeb922914ed71c8356de8dd0f21c74416fcdc28a800bee764.rar!!A-Complete-Day-Trading-System-Chapter6.pdf",
        "risk": 1,
        "sha": "91e317757536c2c742c313e61a12134834cb58f994e664f533667ee6839be3b3",
        "size": 947389,
        "traits": [
          {
            "id": "metadata/document/pdf/properties::adobe-acrobat",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "PDF generated by Adobe Acrobat",
            "spans": [
              [
                906580,
                17
              ]
            ]
          },
          {
            "id": "metadata/document/pdf/properties::has-producer",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "PDF contains producer metadata tag",
            "spans": [
              [
                906566,
                14
              ]
            ]
          },
          {
            "id": "metadata/document/pdf/properties::pdf-has-acroform",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "PDF has AcroForm"
          }
        ],
        "type": "pdf"
      }
    ],
    "v": "8"
  }
}