{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000016411146,
        "rte": "az",
        "prob": 0.000016411146
      },
      {
        "cls": 0,
        "raw": 0.0000030994415,
        "rte": "az/documents",
        "prob": 0.0000030994415
      }
    ],
    "prob": 0.000016411146,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000016411146134487353,
        "type": "xlsx"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-11T11:04:33Z"
  },
  "path": "PurchaseXOrder.xlam",
  "raw": {
    "v": "8",
    "rev": "b3dc8",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "p!H([6Awgm2MSN+d{ZPmXw0$7002m/000Vj5DD35z/fVdzGGk+D2Ntot}Qwsy/KBz00?SKQIw]RQIw]RQIu]}o(F=u42jiM{8:YG3RPZ]*C3OkQ3W\u003eSFhFf!LQjsDQC4BtN^wT!A\u003eirHRoa*9y/]=}j}{C3DBTu@sWLGwvKGE.",
            "ln": 0
          },
          {
            "b": "R4eS\u003eiwdDel8O-fbKZT$905(e0%xqr0SSGa*fMpnL@txk9rDivHxEOS4/^gwCX/3Sz/PS5z/ozzCX}m%r1e*j\u003c)eWR\u003c)eWR\u003c)eWRT^0afN\u003eLLh)\u003cEG!aM1L]1L9Zfrl-E\u003cnk\u0026Jhx$GqUioy^N{\u003edminI]?H)/oca!%/p$4l=Yj\u0026EfP[M%MzX[v\u003cKWt=S*p.*)08N9Jm@xxiH)Awe-hBYvE4xAYnlGc/cQ{Ws$Hz4nUf",
            "ln": 1030
          },
          {
            "b": "=*IhvCX/3Sz/PSmxK$:%B1Z)vwO=AvB7/b@Btky)zep?BwO=A/r0rmb\u003c)eWRp!H@@000003\u0026*XoIVS}V0R3G%000",
            "ln": 717916
          }
        ],
        "mol": "Md(Pd₂)",
        "sha": "c382fb1b093a0ff937c806afdcf96045f82f27f5bd0ba3602a1a162db8754444",
        "path": "PurchaseXOrder.xlam",
        "risk": 1,
        "size": 717986,
        "type": "xlsx",
        "facts": {
          "metrics": {
            "file": {
              "size": 717986,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 716800,
              "peak_region_entropy": 7.86
            },
            "office": {
              "embedded_count": 1,
              "ooxml.entry_count": 12,
              "ooxml.max_entry_size": 1021952,
              "is_macro_enabled_extension": 1
            },
            "archive": {
              "file_count": 12,
              "member_count": 12,
              "script_count": 0,
              "zip_bomb_ratio": 4.5,
              "compressed_size": 716246,
              "directory_count": 0,
              "executable_count": 0,
              "extra_field_size": 108,
              "noise_file_count": 0,
              "compression.ratio": 0.69,
              "hidden_file_count": 1,
              "uncompressed_size": 1037475,
              "crc_collision_count": 0,
              "entry_comment_count": 0,
              "max_filename_length": 35,
              "rtlo_filename_count": 0,
              "format.regular_count": 12,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.08,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 12,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.deflate": 12
            }
          }
        },
        "ident": {
          "trust": "unsigned",
          "authors": [
            {
              "name": "Xadmin",
              "role": "author",
              "source": "office.creator"
            }
          ],
          "producer": {
            "value": "Microsoft Excel",
            "source": "office.application",
            "verified": false
          },
          "organization": {
            "value": "ITP-Solutions GmbH",
            "source": "office.company",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/document/office/markup::ooxml-embedded-ole-object",
            "conf": 0.95,
            "crit": 3,
            "desc": "OOXML embeds OLE object relationship"
          },
          {
            "id": "metadata/document/office/markup::ooxml-embedded-ole2-object",
            "conf": 0.95,
            "crit": 3,
            "desc": "OOXML embeds OLE2 object"
          },
          {
            "id": "metadata/document/office/markup::ooxml-large-embedded-ole-object",
            "conf": 0.95,
            "crit": 3,
            "desc": "Large embedded OLE object"
          },
          {
            "id": "metadata/document/office/properties::office-application-microsoft-office",
            "conf": 0.9,
            "crit": 3,
            "desc": "Document application is Microsoft Office"
          }
        ]
      }
    ]
  }
}