{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000013609727,
        "rte": "az",
        "prob": 0.000013609727
      },
      {
        "cls": 0,
        "raw": 0.0000026126702,
        "rte": "az/documents",
        "prob": 0.0000026126702
      }
    ],
    "prob": 0.000013609727,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013609726920549292,
        "type": "doc"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-12T17:30:18Z"
  },
  "path": "Trojan-Dropper.MSWord.Agent.cj",
  "raw": {
    "v": "8",
    "rev": "c7f7e",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "^9ArZP%kJ{00000000000000000000j]+V+@@io81][S600000000000@@r3zuf.q0000001Ybgz#/}s0rr91@@r2#00000yxjznyYKIoz2\u003cRp%nSc0%nSc0%nSc0%nSc0%nSc0%nSc0%nSc0%nS9",
            "ln": 0
          }
        ],
        "mol": "Md(Pd₂)",
        "sha": "947ed0b41a05229dadd09f26214841c4faaf6fcf9568c9d79a7621ed5b7514bc",
        "path": "Trojan-Dropper.MSWord.Agent.cj",
        "risk": 1,
        "size": 238581,
        "type": "doc",
        "facts": {
          "metrics": {
            "file": {
              "size": 238581,
              "entropy": 7.47
            },
            "binary": {
              "peak_region_bytes": 166912,
              "peak_region_entropy": 7.83
            },
            "office": {
              "stream_count": 7,
              "ole.char_count": 18,
              "ole.page_count": 1,
              "ole.word_count": 3,
              "ole.stream_count": 6,
              "ole.storage_count": 1,
              "ole.revision_number": 2,
              "is_macro_enabled_extension": 0,
              "ole.total_edit_time_minutes": 1
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.document_as_unknown": 1
            }
          }
        },
        "ident": {
          "title": {
            "value": " ",
            "source": "office.title",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "xp",
              "role": "author",
              "source": "office.creator"
            },
            {
              "name": "admin",
              "role": "last_modified_by",
              "source": "office.last_modified_by"
            }
          ],
          "producer": {
            "value": "Microsoft Office Word",
            "source": "office.application",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/document/office/container::compobj-claims-word",
            "conf": 0.95,
            "crit": 3,
            "desc": "CompObj declares Word document"
          },
          {
            "id": "metadata/document/office/properties::office-application-microsoft-office",
            "conf": 0.9,
            "crit": 3,
            "desc": "Document application is Microsoft Office"
          }
        ]
      }
    ]
  }
}