{
  "ml": {
    "v": "7",
    "eng": "2.11.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000014464061,
        "rte": "az",
        "prob": 0.000014464061
      },
      {
        "cls": 0,
        "raw": 0.0000036458175,
        "rte": "az/documents",
        "prob": 0.0000036458175
      }
    ],
    "prob": 0.000014464061,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014464060768659692,
        "type": "pptx"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-16T09:17:42Z"
  },
  "path": "8085ce0eb0d0a7c435f25ce274ddba9f70c74403fe2f5582c8d2cd87312610cc.ppam",
  "raw": {
    "v": "8",
    "rev": "e86a6",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "mWwHz^o6:hodUqFr)v:{{8u?30%xqr1][]e001exx.VXy0%5x4\u0026So8W3JHCluVGZ]B1Yd^wO=AgQ67JCPA22[0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
            "ln": 489
          },
          {
            "b": "!V6+Je@QvQ+5qnp1E\u003c!N(\u003erh*0%xqr1][]e001ex@TR\u0026k9S=rwr15:b6AwakAbY[LAb]JhwO#P#BzkVhe{IkH)3DK*Qa^q4)(cUUxNh:W5jw=cpo}F^/#cRe\u003eSz9nJ.le.^PfDj(g.L=vbbMN55oi-\u003eIL[3j57q4]sr(w1x7I):F/a}Ruxp[7P2+%]Mv+=c6P?5m8sa1aFP-H",
            "ln": 1658
          },
          {
            "b": "0iY@L+2OJy0hP.%01/hh00000000000001eTPeuiz^#Q:z/x+Jv@Dy0e{IkHp!H@@00000bMG7\u0026y6$1w[uh/(000",
            "ln": 47914
          }
        ],
        "mol": "Md(Pd₂)",
        "sha": "8085ce0eb0d0a7c435f25ce274ddba9f70c74403fe2f5582c8d2cd87312610cc",
        "path": "8085ce0eb0d0a7c435f25ce274ddba9f70c74403fe2f5582c8d2cd87312610cc.ppam",
        "risk": 1,
        "size": 47984,
        "type": "pptx",
        "facts": {
          "metrics": {
            "file": {
              "size": 47984,
              "entropy": 7.83
            },
            "binary": {
              "peak_region_bytes": 38912,
              "peak_region_entropy": 7.83
            },
            "office": {
              "macro_count": 1,
              "vba_project_size": 22016,
              "ooxml.entry_count": 36,
              "ooxml.max_entry_size": 22016,
              "is_macro_enabled_extension": 1,
              "ooxml.declares_vba_project": 1
            },
            "archive": {
              "file_count": 36,
              "member_count": 36,
              "script_count": 0,
              "zip_bomb_ratio": 7.19,
              "compressed_size": 41754,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 108,
              "noise_file_count": 0,
              "compression.ratio": 0.37,
              "hidden_file_count": 1,
              "uncompressed_size": 114136,
              "crc_collision_count": 10,
              "entry_comment_count": 0,
              "max_filename_length": 45,
              "rtlo_filename_count": 0,
              "format.regular_count": 36,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 4,
              "timing.mtime_unique_ratio": 0.11,
              "misplaced_executable_count": 0,
              "timing.mtime_outlier_count": 3,
              "timing.mtime_dominant_count": 33,
              "timing.mtime_spread_seconds": 1329902742,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 0.92,
              "compression.method_counts.deflate": 36
            }
          }
        },
        "ident": {
          "trust": "unsigned",
          "authors": [
            {
              "name": "Microsoft account",
              "role": "author",
              "source": "office.creator"
            }
          ],
          "producer": {
            "value": "Microsoft Office PowerPoint",
            "source": "office.application",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/document/office/macro::macro-enabled-extension",
            "conf": 0.99,
            "crit": 3,
            "desc": "Office macro-enabled filename extension"
          },
          {
            "id": "metadata/document/office/macro::ooxml-vba-nonstandard-part",
            "conf": 0.96,
            "crit": 3,
            "desc": "VBA part not named vbaProject.bin"
          },
          {
            "id": "metadata/document/office/macro::ppt-vba-declared-macro",
            "conf": 0.98,
            "crit": 3,
            "desc": "PowerPoint archive declares a VBA part"
          },
          {
            "id": "metadata/document/office/properties::office-application-microsoft-office",
            "conf": 0.9,
            "crit": 3,
            "desc": "Document application is Microsoft Office"
          },
          {
            "id": "metadata/document/office/properties::office-creator-microsoft",
            "conf": 0.9,
            "crit": 3,
            "desc": "Document creator claims Microsoft"
          }
        ]
      }
    ]
  }
}