{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9333333373069763,
        "class": 2
      }
    ],
    "prob": 0.93333334,
    "class": 2,
    "models": [
      {
        "m": "az",
        "prob": 0.6687533,
        "class": 0
      },
      {
        "m": "az/documents",
        "prob": 0.93333334,
        "class": 2
      },
      {
        "m": "az/pdf",
        "prob": 0.6638565,
        "class": 2
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961373,
      0.9998425
    ],
    "analyzed_at": "2026-05-13T10:07:32Z"
  },
  "path": "9c1c43c47e31a90a517a7ece508a62fe150708b5a3e2175769e8c44778b4db09.pdf",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "H(Db)Md(Pd)",
        "k": {
          "header.version": "1.7",
          "actions[0].kind": "javascript",
          "actions[1].kind": "javascript",
          "shape.eof_count": 2,
          "filter_chains[0]": "FlateDecode",
          "filter_chains[1]": "FlateDecode",
          "filter_chains[2]": "Standard",
          "filter_chains[3]": "FlateDecode/ASCIIHexDecode",
          "filter_chains[4]": "FlateDecode",
          "filter_chains[5]": "FlateDecode",
          "filter_chains[6]": "FlateDecode",
          "filter_chains[7]": "FlateDecode",
          "shape.linearized": true,
          "actions[0].source": "openaction",
          "actions[1].source": "object:12",
          "actions[0].snippet": "O���\t�yȓGw��!�\u001e�!��+��C\u001f�\u0007dڦ#A\u0012�;�k�`y�U?��\u0010󃲃蟻Z\f!J�*�M\u0001�N,�\u0015y(BZ|W�\u0011(ѥ�9Rߪ6\u000b-u\u000fS{1id6hL߀e#~��كT#����RK:\u0004��C��:[�Z��zS��^m[�t�e��c��Ƀ��TZ�\u000e�ʔ�3�Ω�f\u0004@��է��\u0018��-\b9Kt�����\u003c�pC�u�\u001a�\u000e\"g\u001f�Yd�RR��Qرذ#:�r\u0007ʶȉ�\u0012%�-*�\u000e�]�G\t\u0026�M�#��fі��\u001f�\u0011Nۚ\u0003\u0015�@\u0002~�Z�l\u003cZ嶆Wڮ����\n!�ãx�.\u0014qɄ�0���H��\u0012�bcq����",
          "actions[1].snippet": "O���\t�yȓGw��!�\u001e�!��+��C\u001f�\u0007dڦ#A\u0012�;�k�`y�U?��\u0010󃲃蟻Z\f!J�*�M\u0001�N,�\u0015y(BZ|W�\u0011(ѥ�9Rߪ6\u000b-u\u000fS{1id6hL߀e#~��كT#����RK:\u0004��C��:[�Z��zS��^m[�t�e��c��Ƀ��TZ�\u000e�ʔ�3�Ω�f\u0004@��է��\u0018��-\b9Kt�����\u003c�pC�u�\u001a�\u000e\"g\u001f�Yd�RR��Qرذ#:�r\u0007ʶȉ�\u0012%�-*�\u000e�]�G\t\u0026�M�#��fі��\u001f�\u0011Nۚ\u0003\u0015�@\u0002~�Z�l\u003cZ嶆Wڮ����\n!�ãx�.\u0014qɄ�0���H��\u0012�bcq����",
          "shape.object_count": 13,
          "form_fields[0].name": "10436",
          "header.header_count": 1,
          "shape.startxref_count": 2,
          "catalog.has_openaction": true,
          "form_fields[1].value_length": 1
        },
        "x": 39,
        "id": 0,
        "ms": {
          "pdf": {
            "page_count": 1.0,
            "action_count": 2.0,
            "object_count": 13.0,
            "objstm_count": 3.0,
            "stream_count": 8.0,
            "metadata_count": 1.0,
            "startxref_count": 2.0,
            "form_field_count": 2.0,
            "xref_stream_count": 2.0,
            "risky_feature_score": 66.0,
            "visible_object_count": 13.0,
            "javascript_action_count": 2.0,
            "trailing_bytes_after_eof": 1.0,
            "unreferenced_object_count": 8.0
          },
          "file": {
            "size": 10743.0
          }
        },
        "sz": 10743,
        "ts": [
          {
            "c": 0.75,
            "d": "PDF chained stream filter array",
            "e": [
              "/Filter["
            ],
            "i": "micro-behaviors/data/encode/custom::pdf-multi-filter",
            "l": 3
          },
          {
            "a": "T1059.007",
            "c": 0.949999988079071,
            "d": "PDF JavaScript action present",
            "e": [
              "javascript"
            ],
            "i": "metadata/document/pdf/properties::pdf-action-javascript",
            "l": 4
          },
          {
            "c": 0.8999999761581421,
            "d": "PDF catalog has OpenAction",
            "e": [
              "true"
            ],
            "i": "metadata/document/pdf/properties::pdf-has-openaction",
            "l": 3
          }
        ],
        "sha": "9c1c43c47e31a90a517a7ece508a62fe150708b5a3e2175769e8c44778b4db09",
        "path": "9c1c43c47e31a90a517a7ece508a62fe150708b5a3e2175769e8c44778b4db09.pdf",
        "type": "pdf"
      }
    ],
    "tv": "92e78"
  }
}