{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9961373209953308,
        "class": 1
      }
    ],
    "prob": 0.9961373,
    "class": 1,
    "oprob": 0.69427526,
    "models": [
      {
        "m": "az",
        "prob": 0.69427526,
        "class": 0
      }
    ],
    "oclass": 0,
    "version": "v16.16",
    "thresholds": [
      0.9961373,
      0.9998425
    ],
    "analyzed_at": "2026-05-17T04:34:43Z"
  },
  "path": "5f0ff028fe981ee258397cb0a1bbefc065126d4bf5d7a80d5fe78720f1179d4e.lnk",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O(C)Th",
        "x": 70,
        "id": 0,
        "ms": {
          "lnk": {
            "icon_index": 11.0,
            "target_size": 101.0,
            "has_exp_icon": true,
            "has_arguments": false,
            "has_link_info": true,
            "has_exp_string": true,
            "has_working_dir": true,
            "has_icon_location": true,
            "target_attributes": 32.0,
            "target_is_on_network": true,
            "enable_target_metadata": true,
            "has_link_target_id_list": false,
            "has_property_store_data": true,
            "args_excessive_whitespace": false,
            "has_icon_environment_data": true,
            "has_environment_variable_data": true
          },
          "file": {
            "size": 2763.0
          }
        },
        "ss": [
          [
            0,
            "\\\\ACHIEVEMENTS-PLATES-STATION-GAMING.TRYCLOUDFLARE.COM@SSL\\DAVWWWROOT\\32\\DE.wsh"
          ],
          [
            0,
            "\\\\achievements-plates-station-gaming.trycloudflare.com@SSL\\DavWWWRoot\\32"
          ],
          [
            0,
            "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe"
          ],
          [
            0,
            "\\\\achievements-plates-station-gaming.trycloudflare.com@SSL\\DavWWWRoot\\32\\DE.wsh"
          ],
          [
            0,
            "%ProgramFiles(x86)%\\Microsoft\\Edge\\Application\\msedge.exe"
          ],
          [
            124,
            "\\\\ACHIEVEMENTS-PLATES-STATION-GAMING.TRYCLOUDFLARE.COM@SSL\\DAVWWWROOT"
          ],
          [
            549,
            "%ProgramFiles(x86)%\\Microsoft\\Edge\\Application\\msedge.exe"
          ],
          [
            1722,
            "\\\\achievements-plates-station-gaming.trycloudflare.com@SSL\\DavWWWRoot"
          ],
          [
            1792,
            "Web Client Network"
          ],
          [
            1979,
            "\\\\achievements-plates-station-gaming.trycloudflare.com@SSL\\DavWWWRoot\\32\\DE.wsh"
          ]
        ],
        "sz": 2763,
        "ts": [
          {
            "a": "T1204.002",
            "c": 0.699999988079071,
            "d": "LNK references Microsoft Edge executable",
            "e": [
              "msedge.exe"
            ],
            "i": "objectives/command-and-control/dropper/lnk/target::msedge-target",
            "l": 1
          },
          {
            "a": "T1187",
            "c": 0.800000011920929,
            "d": "LNK references WebDAV client service name",
            "e": [
              "Web Client Network"
            ],
            "i": "objectives/command-and-control/dropper/lnk/heuristic::lnk-webclient-service",
            "l": 4
          },
          {
            "a": "T1204.002",
            "c": 0.8500000238418579,
            "d": "LNK references WebDAV path",
            "e": [
              "DAVWWWROOT"
            ],
            "i": "objectives/command-and-control/dropper/lnk/heuristic::lnk-webdav-path",
            "l": 4
          },
          {
            "a": "T1204.002",
            "c": 0.800000011920929,
            "d": "LNK references .wsh/.wsf/.sct extension",
            "e": [
              ".wsh"
            ],
            "i": "objectives/command-and-control/dropper/lnk/heuristic::lnk-script-ext-wsh",
            "l": 4
          },
          {
            "c": 0.8999999761581421,
            "d": "Identifies scripting artefacts in shortcut (LNK) files.",
            "e": [
              "$",
              ".wsh"
            ],
            "i": "third_party/bartblaze/generic/LNK_Ruleset/script_in_lnk",
            "l": 4
          },
          {
            "c": 0.8999999761581421,
            "d": "Identifies WebDAV in shortcut (LNK) file.",
            "e": [
              "$",
              "\\DavWWWRoot\\"
            ],
            "i": "third_party/bartblaze/generic/LNK_Ruleset/webdav_in_lnk",
            "l": 4
          }
        ],
        "sha": "5f0ff028fe981ee258397cb0a1bbefc065126d4bf5d7a80d5fe78720f1179d4e",
        "path": "5f0ff028fe981ee258397cb0a1bbefc065126d4bf5d7a80d5fe78720f1179d4e.lnk",
        "type": "lnk"
      }
    ],
    "tv": "529a0"
  }
}