added urls property to malware