The file "legitvirus.docx.lnk" is a malicious Windows shortcut often used in phishing campaigns, utilizing a double extension to masquerade as a document while executing hidden PowerShell or CMD commands [2, 5]. Frequently used in cybersecurity training, it can be safely analyzed by inspecting its "Target" property, using ExifTool, or uploading it to VirusTotal [3, 4, 6].