{
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000022530556,
        "rte": "az",
        "prob": 0.000022530556
      },
      {
        "cls": 0,
        "raw": 0.000000029802322,
        "rte": "az/text",
        "prob": 0.000000029802322
      }
    ],
    "prob": 0.000022530556,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000022530555725097656,
        "type": "text"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-22T13:40:16Z"
  },
  "path": "e6b0cc33011b9665e154690175287c665b808ea28e00cec72a7721ddbc6e1f1c.url",
  "raw": {
    "v": "8",
    "rev": "75c9b",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "ts\u0026ZOwPzW1Bw(\u003c\u003eA=+/lBx]s.rz(HNw[=6)iXJcjhAr6wmi%\u0026Fb@WO9hz(^sf^O+mb@NRbgdiADl)T-Gb@OdqhBX#Kg9[?sb@NRbh.#:nl)T=Fb@Ojshz#\u003cug:L4nb@NF7hBw=GlNsGQb@OdqhzDHpi3*sGb@WUbh.(WrivcNtb@OaphBX#Kh6\u0026",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "mol": "O(C)",
        "sha": "e6b0cc33011b9665e154690175287c665b808ea28e00cec72a7721ddbc6e1f1c",
        "path": "e6b0cc33011b9665e154690175287c665b808ea28e00cec72a7721ddbc6e1f1c.url",
        "risk": 1,
        "size": 301,
        "type": "text",
        "facts": {
          "metrics": {
            "file": {
              "size": 301,
              "entropy": 4.45
            },
            "binary": {
              "peak_region_bytes": 301,
              "peak_region_entropy": 4.45
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.text_as_unknown": 1
            }
          }
        },
        "traits": [
          {
            "id": "objectives/command-and-control/dropper/delivery/url-shortcut::internet-shortcut-header",
            "atk": "T1105",
            "conf": 0.95,
            "crit": 3,
            "desc": "Windows InternetShortcut file",
            "spans": [
              [
                0,
                18
              ]
            ]
          },
          {
            "id": "objectives/command-and-control/dropper/delivery/url-shortcut::url-shortcut-basename",
            "atk": "T1105",
            "conf": 0.95,
            "crit": 3,
            "desc": "URL shortcut file extension"
          }
        ]
      }
    ]
  }
}