{
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000014613072,
        "rte": "az",
        "prob": 0.000014613072
      },
      {
        "cls": 0,
        "raw": 0.00020975868,
        "rte": "az/zip",
        "prob": 0.00020975868
      }
    ],
    "prob": 0.000014613072,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014613072380598169,
        "type": "zip"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012050072655256372,
        "type": "text"
      },
      {
        "id": 6,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001181165407615481,
        "type": "text"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000014026959433977026,
        "type": "text"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-18T01:13:09Z"
  },
  "path": "ibm-plex-sans-hebrew.zip",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "O(As)Md",
        "sha": "d7d490b8a767b972a7f361055fdcf60ad7cb7c270b38ff1bf859562a021369fd",
        "path": "/tmp/promoter-3064021366/d7d490b8a767b972a7f361055fdcf60ad7cb7c270b38ff1bf859562a021369fd/ibm-plex-sans-hebrew.zip",
        "risk": 2,
        "size": 1706978,
        "type": "zip",
        "facts": {
          "metrics": {
            "file": {
              "size": 1706978,
              "entropy": 8
            },
            "binary": {
              "peak_region_bytes": 1691648,
              "peak_region_entropy": 7.85
            },
            "archive": {
              "file_count": 60,
              "member_count": 79,
              "script_count": 0,
              "zip_bomb_ratio": 8.2,
              "compressed_size": 1688142,
              "directory_count": 19,
              "executable_count": 1,
              "extra_field_size": 1896,
              "noise_file_count": 0,
              "compression.ratio": 0.73,
              "hidden_file_count": 0,
              "uncompressed_size": 2309506,
              "crc_collision_count": 4,
              "entry_comment_count": 0,
              "max_filename_length": 76,
              "rtlo_filename_count": 0,
              "format.regular_count": 60,
              "nested_archive_count": 0,
              "path_traversal_count": 0,
              "symlink_escape_count": 0,
              "security.setgid_count": 0,
              "security.setuid_count": 0,
              "security.sticky_count": 0,
              "double_extension_count": 0,
              "duplicate_member_count": 0,
              "format.directory_count": 19,
              "security.symlink_count": 0,
              "unicode_filename_count": 0,
              "homoglyph_filename_count": 0,
              "security.encrypted_count": 0,
              "timing.mtime_unique_count": 1,
              "timing.mtime_unique_ratio": 0.01,
              "misplaced_executable_count": 0,
              "timing.mtime_dominant_count": 79,
              "timing.mtime_spread_seconds": 0,
              "timing.sentinel_mtime_count": 0,
              "security.world_writable_count": 0,
              "timing.mtime_dominant_fraction": 1,
              "compression.method_counts.stored": 19,
              "compression.method_counts.deflate": 60
            }
          }
        },
        "traits": [
          {
            "id": "objectives/anti-static/obfuscation/payload/container::named-function-declaration-in-noncode",
            "atk": "T1027.003",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Named function in non-source container",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 15
              }
            ]
          },
          {
            "id": "metadata/file/data-blob::near-maximum-entropy-file",
            "conf": 0.9,
            "crit": 3,
            "desc": "File has near-maximum entropy"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1597,
              "entropy": 4.89
            },
            "binary": {
              "peak_region_bytes": 1597,
              "peak_region_entropy": 4.88
            }
          }
        },
        "id": 5,
        "path": "/tmp/promoter-3064021366/d7d490b8a767b972a7f361055fdcf60ad7cb7c270b38ff1bf859562a021369fd/ibm-plex-sans-hebrew.zip!!ibm-plex-sans-hebrew/scss/index.scss",
        "pid": 0,
        "risk": 1,
        "sha": "8bb7b1438f8a5fa313f9eeaf0046a286dcc01ad00f9ce36b7485e27059875d9a",
        "size": 1597,
        "traits": [
          {
            "id": "metadata/file/extension/identity::css-preprocessor-extension",
            "conf": 1.0,
            "crit": 2,
            "desc": "CSS preprocessor stylesheet source extension"
          }
        ],
        "type": "text"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 535,
              "entropy": 5.1
            },
            "binary": {
              "peak_region_bytes": 535,
              "peak_region_entropy": 5.1
            }
          }
        },
        "id": 6,
        "path": "/tmp/promoter-3064021366/d7d490b8a767b972a7f361055fdcf60ad7cb7c270b38ff1bf859562a021369fd/ibm-plex-sans-hebrew.zip!!ibm-plex-sans-hebrew/scss/semibold/_index.scss",
        "pid": 0,
        "risk": 1,
        "sha": "6e7146b5d5fae887de63c33205849f98495184b9369f70305cf20cef8d409679",
        "size": 535,
        "traits": [
          {
            "id": "metadata/file/extension/identity::css-preprocessor-extension",
            "conf": 1.0,
            "crit": 2,
            "desc": "CSS preprocessor stylesheet source extension"
          }
        ],
        "type": "text"
      },
      {
        "ctx": [
          {
            "b": "kY}cVaszksB8%xVvq)OQ3jo4gB-7Yhx(v(iwO${=y?mc9bXy$jBs?YFx\u003eIa3B1wBVCv+G3xMLWCDKp6Ax\u003ewG8vq)\u0026jvrj2owQbWHw]zNeeQ7=uxj#ydefDiZwOC^\u003cBswtV3jd27A+funA=91pvq)\u0026iwPPsCw]zNeeQ7=uxj#ydefDiZwOC^\u003cBsxoU34ic!kYQBTB-Ivxw)]H%",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 168,
              "entropy": 4.83
            },
            "binary": {
              "peak_region_bytes": 168,
              "peak_region_entropy": 4.83
            }
          }
        },
        "id": 7,
        "mol": "O(As)",
        "path": "/tmp/promoter-3064021366/d7d490b8a767b972a7f361055fdcf60ad7cb7c270b38ff1bf859562a021369fd/ibm-plex-sans-hebrew.zip!!ibm-plex-sans-hebrew/scss/tools/_index.scss",
        "pid": 0,
        "risk": 1,
        "sha": "7508c2d7532e2fa7b1a3b5d6dbb769a6efe5ebb317eb599bc2883552330fbe61",
        "size": 168,
        "traits": [
          {
            "id": "objectives/anti-static/obfuscation/payload/container::named-function-declaration-in-noncode",
            "atk": "T1027.003",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Named function in non-source container",
            "spans": [
              [
                19,
                17
              ]
            ]
          }
        ],
        "type": "text"
      }
    ],
    "rev": "e86a6",
    "v": "8"
  }
}