{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9538323283195496,
        "class": 0
      },
      {
        "id": 1,
        "prob": 0.9483782649040222,
        "class": 0
      }
    ],
    "prob": 0.9538323,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-04-30T17:52:19Z"
  },
  "path": "color.jpg",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O(As)H(Cm)Md",
        "x": 41,
        "id": 0,
        "sz": 117683,
        "ts": [
          {
            "c": 0.8999999761581421,
            "d": "Android media embeds external endpoint",
            "e": [
              "55.232.219.78:13143",
              "128.184.233.166:4677"
            ],
            "i": "micro-behaviors/communications/ip::external-ipv4-port-android-media",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 0.949999988079071,
            "d": "Gzip-compressed data blob",
            "e": [
              "1f 8b"
            ],
            "i": "objectives/anti-static/obfuscation/payload/data-file::gzip-magic-data-blob",
            "l": 1,
            "m": "F0001"
          },
          {
            "a": "T1036.005",
            "c": 1.0,
            "d": "File extension claims Jpeg but content is Gz",
            "e": [
              "expected=Jpeg, actual=Gz"
            ],
            "i": "metadata/file-extension-mismatch",
            "l": 4
          }
        ],
        "sha": "ab2c7938a6c5c229fb655ffe3c7dc0b83e62b6fa890d2ec1983a3c0b90a6c5a4",
        "path": "/data/samples/good/macOS_Tahoe-26.3/usr/share/cups/ipptool/color.jpg",
        "type": "gz"
      },
      {
        "f": "H(Cm)",
        "x": 1,
        "dp": 1,
        "id": 1,
        "ms": {
          "jpeg": {
            "exif_size": 622.0
          },
          "image": {
            "width": 512.0,
            "height": 768.0,
            "channels": 3.0,
            "b_entropy": 7.19,
            "g_entropy": 7.1,
            "r_entropy": 7.43,
            "edge_density": 0.01,
            "pixel_entropy": 7.66,
            "histogram_flatness": 0.96
          },
          "binary": {
            "file_size": 118528.0,
            "overall_entropy": 7.97
          }
        },
        "ss": [
          [
            6,
            "JFIF"
          ],
          [
            140,
            "Canon"
          ],
          [
            146,
            "Canon EOS D60"
          ],
          [
            176,
            "2015:10:20 18:11:34"
          ],
          [
            242,
            "0220"
          ],
          [
            386,
            "0100"
          ],
          [
            542,
            "2003:09:24 10:22:35"
          ],
          [
            648,
            "XICC_PROFILE"
          ],
          [
            676,
            "mntrRGB XYZ"
          ],
          [
            700,
            "acspMSFT"
          ],
          [
            712,
            "IEC sRGB"
          ],
          [
            807,
            "3desc"
          ],
          [
            904,
            "vued"
          ],
          [
            916,
            "view"
          ],
          [
            940,
            "meas"
          ],
          [
            999,
            "text"
          ],
          [
            1008,
            "Copyright (c) 1998 Hewlett-Packard Company"
          ],
          [
            1064,
            "sRGB IEC61966-2.1"
          ],
          [
            1272,
            "IEC http://www.iec.ch"
          ],
          [
            1383,
            ".IEC 61966-2.1 Default RGB colour space - sRGB"
          ],
          [
            1519,
            ",Reference Viewing Condition in IEC61966-2.1"
          ],
          [
            1744,
            "CRT curv"
          ],
          [
            4200,
            "K2AKZ"
          ],
          [
            5005,
            "CCM6"
          ],
          [
            5095,
            "l70m"
          ],
          [
            5205,
            "Sxqi"
          ],
          [
            5443,
            "`#m`"
          ],
          [
            6234,
            "9LRW"
          ],
          [
            8259,
            "JD5S"
          ],
          [
            9508,
            "/OAjH"
          ],
          [
            9615,
            "EE3L"
          ],
          [
            9648,
            "EY2Y"
          ],
          [
            11152,
            "UZiyuRSg"
          ],
          [
            11663,
            "RJS1"
          ],
          [
            13604,
            "yzit0"
          ],
          [
            14036,
            "Rqzk"
          ],
          [
            14088,
            "by1u"
          ],
          [
            21176,
            "YSYAU"
          ],
          [
            21366,
            "B8MN"
          ],
          [
            22529,
            "CP7Q"
          ],
          [
            23853,
            "Bmvq"
          ],
          [
            24328,
            "B_RA"
          ],
          [
            25404,
            "Zsia"
          ],
          [
            27158,
            "7RJH"
          ],
          [
            27875,
            "E_99"
          ],
          [
            28205,
            "IE0R"
          ],
          [
            28364,
            "55.232.219.78:13143"
          ],
          [
            28390,
            "VJJ5"
          ],
          [
            29766,
            "JQOB"
          ],
          [
            30482,
            "KS74"
          ],
          [
            34126,
            "GZPZV"
          ],
          [
            37144,
            "Cmzk"
          ],
          [
            37815,
            "QR4X9"
          ],
          [
            40186,
            "R_P9B"
          ],
          [
            40826,
            "n7@7.L"
          ],
          [
            40943,
            "M916"
          ],
          [
            41924,
            "79ma"
          ],
          [
            43107,
            "J718"
          ],
          [
            44916,
            "AADH0A"
          ],
          [
            49575,
            "p59y"
          ],
          [
            50786,
            "128.184.233.166:4677"
          ],
          [
            55397,
            "zpq-uqCS"
          ],
          [
            57388,
            "Uyqb"
          ],
          [
            57864,
            "YD5R"
          ],
          [
            61487,
            "7qje"
          ],
          [
            63913,
            "64mi"
          ],
          [
            66014,
            "U9HF"
          ],
          [
            67030,
            "Mkyu"
          ],
          [
            67184,
            "..bh"
          ],
          [
            70664,
            "\u003c\u003cfT"
          ],
          [
            70999,
            "2n3ko"
          ],
          [
            71438,
            "Ga.ck"
          ],
          [
            71933,
            "Vjre"
          ],
          [
            72588,
            "6BIR"
          ],
          [
            73495,
            "Q7RI"
          ],
          [
            75229,
            "MH4I"
          ],
          [
            77145,
            "UAYI"
          ],
          [
            77204,
            "GHUT"
          ],
          [
            79426,
            "L-welz"
          ],
          [
            79961,
            "TJHI"
          ],
          [
            81212,
            "Z6I0"
          ],
          [
            92939,
            "Rl.b"
          ],
          [
            94557,
            "94KS"
          ],
          [
            96260,
            "he jDxn"
          ],
          [
            97314,
            "Grpk"
          ],
          [
            98683,
            "4O4BH"
          ],
          [
            106072,
            "Y23D"
          ],
          [
            114419,
            "Ukkh"
          ],
          [
            114473,
            "Rmmw"
          ],
          [
            114799,
            "RAQ6"
          ],
          [
            115112,
            "Wj.hj"
          ],
          [
            115649,
            "!|4N2\u003e\\"
          ],
          [
            117909,
            "/xVs"
          ],
          [
            117922,
            "/\tNY"
          ]
        ],
        "sz": 118528,
        "ts": [
          {
            "c": 0.8999999761581421,
            "d": "Android media embeds external endpoint",
            "e": [
              "55.232.219.78:13143",
              "128.184.233.166:4677"
            ],
            "i": "micro-behaviors/communications/ip::external-ipv4-port-android-media",
            "l": 3
          }
        ],
        "sha": "fb858bad5febad17bd75631b951279628bfad3e88bff93d93d45e53f72c9b110",
        "path": "/data/samples/good/macOS_Tahoe-26.3/usr/share/cups/ipptool/color.jpg!!color",
        "type": "jpeg"
      }
    ],
    "tv": "3f787"
  }
}