{"report_id":"3c9b12d7-43a3-46ef-8298-c2b93b3888a0","version":6,"status":"done","tags":[],"date":"2024-07-23T07:35:57Z","url":{"schema":"http","addr":"github.com/Nekiplay/ImGUI-RakSamp-Lite/releases/download/1.0.0/Overlay.zip","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.4","port":0,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T08:37:23Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-22 18:12:14","alert_count":0,"request_count":8,"received_data":7097,"sent_data":2616,"comment":"","tags":null,"fingerprints":null},{"fqdn":"github.com","ip":{"addr":"140.82.121.4","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"domain_registered":"2007-10-09","domain_rank":1423,"first_seen":"2016-07-13 12:28:22","last_seen":"2024-07-22 19:13:57","alert_count":0,"request_count":1,"received_data":4100,"sent_data":528,"comment":"","tags":null,"fingerprints":null},{"fqdn":"objects.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":134060,"first_seen":"2021-11-01 22:34:29","last_seen":"2024-07-22 12:47:39","alert_count":0,"request_count":1,"received_data":4817130,"sent_data":992,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0d9ab36ab2f9a890cbd34a2a9bdb4fc6","sha1":"ef3c81a411ab39388eddf86c9c78bf179024c34f","sha256":"365c5eb378f553351587b991c99b051d8c89489ee51497b5d4b43a3c8a04cf23","sha512":"55f5a5de950e3e218b37c40c1f1d56ef0f65936037cccf812242c7371050ce72540716002721194d13ffb9b9027c80bf931b32f8abcc582289ec4ab60542fb29","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":4816324,"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/750362349/381df603-1a38-4cb7-b5b6-9aa2d592957b?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20240723%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20240723T073529Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=5575f7ec0fa36686a0ea1f9e29dbfa8535453b654d7eeb2e575745435c049a0f\u0026X-Amz-SignedHeaders=host\u0026actor_id=0\u0026key_id=0\u0026repo_id=750362349\u0026response-content-disposition=attachment%3B%20filename%3DOverlay.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":[{"path":"SixLabors.ImageSharp.dll","filename":"SixLabors.ImageSharp.dll","modified":"","Modified":"2024-01-01T08:46:38+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":2087936,"md5":"372c4d1944e40a8b24b6b9d29999f784","sha1":"16b49c881d9c264354806b50b18cb4ae40fcbb95","sha256":"b5cb27d2fc6e2e8f720066f9bcf7026b2f3272c3e6420379135e7e18b5108f14","sha512":"9a6673bfa365487f998beccce67f585a46f17c2b2fb45ccd9660ff08e0656901c16e83bb48de47d0406ceb3f25bf5df28581006021545242db16f2c95d866f01","alerts":{"urlquery":null,"analyzer":null}},{"path":"TextCopy.dll","filename":"TextCopy.dll","modified":"","Modified":"2022-12-16T06:22:50+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":30720,"md5":"e61e96793215c73767ad52734949408a","sha1":"76b64fa9cb59178eada28625ec0d36165b7eca0c","sha256":"170f20ce2d323efe7bc9e71a75f75634ec159e90dced4215a2dc74ed5919765a","sha512":"5f34d77428588308e71789c9b388731db807dc051714e90185827c7cc030549d2b9587a78f4870285a8c1777a9aee521ba8c13a41632276c8258b714b96f8fd2","alerts":{"urlquery":null,"analyzer":null}},{"path":"Vortice.D3DCompiler.dll","filename":"Vortice.D3DCompiler.dll","modified":"","Modified":"2023-10-13T19:55:32+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":23040,"md5":"9f9bd8a478a32acd54fa28fb435059f3","sha1":"a0f733eff0db68001f7a7202e97db16bc6e3ead6","sha256":"dcd66322a7905b363a2b7e8473450ed397726fdca39a6bad1bf5fb2924a3739c","sha512":"0e5bbaef079d6a00d9772e8ffe92bab8a19b3a1d78f34619c4c0c32bbbab954ec779d3625e3685d5afdb9f62acc390c361262bc051582e4a5d56e2cf97c5e1c5","alerts":{"urlquery":null,"analyzer":null}},{"path":"Vortice.Direct3D11.dll","filename":"Vortice.Direct3D11.dll","modified":"","Modified":"2023-10-13T19:56:36+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":347648,"md5":"1493e19815f9358b27ac95a125d233a6","sha1":"f56d8dd0bd647063a1cd20c0e3d95e86d666d7bc","sha256":"42f869c0cf15f1fb0ce34207228a718bb061583a6853a406a5cecf0a586a7fb0","sha512":"69642d9622e75fe70f506987badb321dc5e8d79b46bf16b10aa8e7942e4912e1bfe3daaa3705b25f6edc743970e3c1651fd4cfe2f7b686d3ca20415995d6aa22","alerts":{"urlquery":null,"analyzer":null}},{"path":"Vortice.DirectX.dll","filename":"Vortice.DirectX.dll","modified":"","Modified":"2023-10-13T19:53:32+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":267264,"md5":"382c8e9cb8a173a5939cef2face4915e","sha1":"5481bb1c1bde5dc07dace9ac76d68fcff895e43f","sha256":"014a4ba7a806ce7e9cffd5cbe7184c9e6ac70e14c23391f829bbb9603c4c6bf1","sha512":"3baf7555bfa33c39e17658175bb2385ef76f783fc06623724e492cba0d6beab8c3bfb2b390a52293e221e87a5b04f0652d7a96be2fb4098676467636510bc51f","alerts":{"urlquery":null,"analyzer":null}},{"path":"Vortice.DXGI.dll","filename":"Vortice.DXGI.dll","modified":"","Modified":"2023-10-13T19:56:12+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":90112,"md5":"1b5e08292968af0c319bc791152ce574","sha1":"93dea84f9c7dd715c27722d84ae0e99c5a77bf68","sha256":"dd342fbf3091e73f2ef285b34a80c3723a31182b64a2d86bfeb40da37bbf8f90","sha512":"933d14e5d9958ef3408ecaa671fb1463017b74f61f3a089b192321381bd54e752a5bd623fa2d07769d1d407826148ec2c3a925217dc731691c49192962c89e69","alerts":{"urlquery":null,"analyzer":null}},{"path":"Vortice.Mathematics.dll","filename":"Vortice.Mathematics.dll","modified":"","Modified":"2023-09-18T21:00:58+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":118272,"md5":"ab2a9f369c1a0de7eef90a4b910c32a1","sha1":"2e3c000a5e361615c8e05b04a6ebee68c6868673","sha256":"3d3302d888d95ac3962483e48e3529abba98e0c9a5ef5a964be3b4d700fc1c7e","sha512":"bfcceda799c370eaa7197570b98fd9fa246b79caf5bad88f7a43813abd5e479503b01a36d1c265fec4b74837738b0022b9a2b437e7bc8067d522c0cf890ba551","alerts":{"urlquery":null,"analyzer":null}},{"path":"runtimes/linux-x64/native/libcimgui.so","filename":"libcimgui.so","modified":"","Modified":"2024-01-13T10:46:12+05:00","magic":"ELF 64-bit LSB shared object, x86-64, version 1 (SYSV)","size":1456400,"md5":"e5fac064e700677db5f4fe52f8c18523","sha1":"e34e8b633cd6b793512a57acc20b61443a474d20","sha256":"2d6b1126fa97b59d3809914fe21589c2ac59d49d1d5e2f092915b8d9f77c5fd0","sha512":"1673e43f2d4d199468f8afe1fbb5b8240cb1221fb92dfd444b2739b951834c6a43744135261b8feda1293c05e4f54fe7ed7bee2bac037754d2003ee2fa424fa8","alerts":{"urlquery":null,"analyzer":null}},{"path":"runtimes/osx/native/libcimgui.dylib","filename":"libcimgui.dylib","modified":"","Modified":"2024-01-13T10:46:12+05:00","magic":"Mach-O universal binary with 2 architectures: [x86_64:\n- Mach-O 64-bit x86_64 dynamically linked shared library, flags:\u003cNOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS\u003e] [\n- arm64:\n- Mach-O 64-bit arm64 dynamically linked shared library, flags:\u003cNOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS\u003e]","size":2577449,"md5":"9fe5532692bc2d5629c771c2be346471","sha1":"fa7ba528eb86ca9ec0768ec81d82e2727eae3666","sha256":"83739ebbfa94c8edcb08b69ce4341253ee791026ce81a9d21e20ad5336f16e2c","sha512":"1e57a9a9240b983817d2a08b71bce691ab8c00d143679f0c5c038bc5c4078b40c3a0e54e2b9492e97272931d7bf1defcf55ccfeb01ad8aa0cf481729cd2bfe96","alerts":{"urlquery":null,"analyzer":null}},{"path":"runtimes/win-arm64/native/cimgui.dll","filename":"cimgui.dll","modified":"","Modified":"2024-01-13T10:46:12+05:00","magic":"PE32+ executable (DLL) (console) Aarch64, for MS Windows, 6 sections","size":1068032,"md5":"8653fb569d92913e122b556710e0c6a8","sha1":"84a8dc69499d7907538e9cf9420bb536c0b74061","sha256":"61525a892f04f5ed485f0d951043b2d88821c9d36674160afdba0787405abfec","sha512":"2411346c8da69ee4fd4c342087cab04dbf5088bd73145e9bc07cc1577f06d05dd4d1a6c5d71e90e907bad66a8b241f7619ecf0bec8632dc04347c3baea38b1a4","alerts":{"urlquery":null,"analyzer":null}},{"path":"runtimes/win-x64/native/cimgui.dll","filename":"cimgui.dll","modified":"","Modified":"2024-01-13T10:46:12+05:00","magic":"PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections","size":1208832,"md5":"1389e96a800ae0928dd9f541d7a26a66","sha1":"d874b3cb80db2913d30f85385804ea01b426da77","sha256":"6224a823a4603d4087c1113de0a3128708bbecfe25f1d73b519c107779bed731","sha512":"05de13ceedb0f1168ef66146ac27144e07b58b9a64d5f2bf4de56b3f5ea2afc2366d0eb1bb7c8ef6a45c6eb9fe861f35fac846b2d0ce82dc5e7a0d2b566ff282","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-15","alert":"Scan result 1/73","trigger":"6224a823a4603d4087c1113de0a3128708bbecfe25f1d73b519c107779bed731","verdict":"suspicious","severity":"","comment":"suspicious - 1/73","link":"https://www.virustotal.com/gui/file/6224a823a4603d4087c1113de0a3128708bbecfe25f1d73b519c107779bed731","meta":null}]}},{"path":"runtimes/win-x86/native/cimgui.dll","filename":"cimgui.dll","modified":"","Modified":"2024-01-13T10:46:12+05:00","magic":"PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections","size":1068032,"md5":"c0c3c07ed43f4c34c4388f432b088bab","sha1":"c05de514ee8ab0daea54d63bd78157f85f27c7e8","sha256":"196a70f4b1ccb0d96a8530f92910a1719287a66138257ffa083919c4f28ee3ea","sha512":"456c2290bb3c11c56ed049639bbe481a26035c94efc4918e5cac5640347964310ec1920248c10cb9c4db0ead46528aa47d0feb5e23fc536e215ca2be5ec2fd1c","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-06-15","alert":"Scan result 1/74","trigger":"196a70f4b1ccb0d96a8530f92910a1719287a66138257ffa083919c4f28ee3ea","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/196a70f4b1ccb0d96a8530f92910a1719287a66138257ffa083919c4f28ee3ea","meta":null}]}},{"path":"ClickableTransparentOverlay.dll","filename":"ClickableTransparentOverlay.dll","modified":"","Modified":"2024-01-13T11:06:22+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":48128,"md5":"4ae16e94ff31e76ded060a0d3ec12e00","sha1":"529e79eb2be83841d5d378c83089c7687fb3f49b","sha256":"0323d1bd724c104b9b693be11d57b80ea58f1d9c9c6b4bf9d4e8035ee9e9ea20","sha512":"fe2e1118d546119c43f244607461bc0c6b3849cf2c1b7c167c2314c6e2bfdb61fe8f0c7bd25bed9bd7e03f7363457471ebffb0160c19c8d330521ddd72dea8af","alerts":{"urlquery":null,"analyzer":null}},{"path":"ImGUI RakSamp.deps.json","filename":"ImGUI RakSamp.deps.json","modified":"","Modified":"2024-01-30T18:50:13+05:00","magic":"JSON text data","size":11528,"md5":"93010cf314c2a058aa07e7b2abdc4fa3","sha1":"967b5ceb9725c8a5a074a34a8b123d269b63f220","sha256":"89bca06610bfa54ad2f57678dc1ceaffa6df5ece8b03afdde0890862bbb2b4c4","sha512":"95abe2f7a1ab8fe3590f1469f93c17ad5c56cfeee0b052bb146c0cda58f1bacc6a7255da235afe6971e2a00d2792c4ea51918d4b6717a76f75eed97e10cebd72","alerts":{"urlquery":null,"analyzer":null}},{"path":"ImGUI RakSamp.dll","filename":"ImGUI RakSamp.dll","modified":"","Modified":"2024-01-30T18:58:40+05:00","magic":"PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":14336,"md5":"cd9e256a16462bb0dcaafa0aa12d1dcc","sha1":"25c4d5021551a11134a8ae474706bfd4553c05a0","sha256":"4bc1d7b020ac37d495bdbb93e9d6a6ff44b2093c4ccc0f8e9ef6fbfcff54ad4d","sha512":"ad639acc5e4afe8ef2afe6add44f90c63995c33b9d21bef30f5eaaa48fa54166a86b9d45c9ab491439ffbf6bea452261f834321cdc61447288bfae93b00e0751","alerts":{"urlquery":null,"analyzer":null}},{"path":"ImGUI RakSamp.exe","filename":"ImGUI RakSamp.exe","modified":"","Modified":"2024-01-30T18:58:40+05:00","magic":"PE32 executable (console) Intel 80386, for MS Windows, 5 sections","size":113152,"md5":"4669312a307b63b172506f71678eefb4","sha1":"ce21b36bab45059d6f3c43ca254a6430da712c23","sha256":"3463d9e579b18ff5932afae660de49fc75fb79d10ca443f05f60df4468b01cfc","sha512":"7e3a3ee08f6e3208c9d951dc64e173b7e834c3e9f4361682cc6615de7904b146d5f2db33c63d31134c17ef513d1c916d2ff2848158f0e66a92bb131bc77ce52e","alerts":{"urlquery":null,"analyzer":null}},{"path":"ImGUI RakSamp.runtimeconfig.json","filename":"ImGUI RakSamp.runtimeconfig.json","modified":"","Modified":"2024-01-30T18:50:13+05:00","magic":"JSON text data","size":268,"md5":"9fcdf880f73e74cf6347f8194b9f3509","sha1":"ab571c7ed4920129c89c7e083f3c9f22597198bc","sha256":"162d81f468bec570ec15e527433f4de5d5729ffe338ab79b22671f38760d34bd","sha512":"23ea2a78914aeec443bded1e6dddb1fce61f0445c53e0428e97353dcc25e9ee80a98603069de336d57c1d12b00eb14ad59847137387df330a3925bd763f4fde1","alerts":{"urlquery":null,"analyzer":null}},{"path":"ImGui.NET.dll","filename":"ImGui.NET.dll","modified":"","Modified":"2024-01-13T10:49:38+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":306688,"md5":"b3c8b6098becd30384d7a23e4b74daa8","sha1":"7d6bbff6454478f2d549506a8a1b18bc11f652ff","sha256":"25442cfbafcf87a5d6693685a7212391d922c68d13ad028c2f565c4e80363923","sha512":"9ee3c89b40efecaeb232b14f5395c9e3665ff6e01e6fc1f2d557919e39754bdc5a8c18f2695981f30cf1b356d8f3536d5a401ea1737e24b86a46f48826ae38b7","alerts":{"urlquery":null,"analyzer":null}},{"path":"Memory.dll","filename":"Memory.dll","modified":"","Modified":"2023-09-13T22:15:08+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":46592,"md5":"c34f4a629fda50ac05436fd320d056a8","sha1":"a48aec891c2692c4a192dccb7af0dcd4aeaf788c","sha256":"7c6f41d8a0f1017e9327e81ac1e4ac5c27719addc5ed1b8d04e5d8cb45e14c53","sha512":"835c66a481d8baa6b210fb09e06a4ed1a4fcbf84c09ab41bde4598b66c2472659c0c72900459070424ed80018904acfe51a85fe92f9429bbee10f6a273ee5436","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-04-04","alert":"Scan result 33/71","trigger":"7c6f41d8a0f1017e9327e81ac1e4ac5c27719addc5ed1b8d04e5d8cb45e14c53","verdict":"malicious","severity":"","comment":"malicious - 33/71","link":"https://www.virustotal.com/gui/file/7c6f41d8a0f1017e9327e81ac1e4ac5c27719addc5ed1b8d04e5d8cb45e14c53","meta":null}]}},{"path":"Microsoft.Extensions.DependencyInjection.Abstractions.dll","filename":"Microsoft.Extensions.DependencyInjection.Abstractions.dll","modified":"","Modified":"2022-10-18T21:15:02+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":43656,"md5":"e8d86c8ea27425bfa8b59619ca0ca7d9","sha1":"8880eb2a9d3ba942ae476c0fda723a5e2a0f1e0b","sha256":"8eb026fb7d26716a08e7886c5133abf9130ecc722afb33bc66e44156b06f0a8a","sha512":"a3e4f3200dee2ab6a15e60baefeca86c40f0993adf958118b5349d9c85fdd0a1a8cff39d016758e600084e2e879a6c6ed37505e76da7520c424d9716288a64bb","alerts":{"urlquery":null,"analyzer":null}},{"path":"Process.NET.dll","filename":"Process.NET.dll","modified":"","Modified":"2016-12-04T19:14:56+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":139776,"md5":"fd7407a44637e7f9ad6320c933962090","sha1":"0a29cba7f7e49be1d8494dcf0cebe3f47bed57aa","sha256":"13106e268a999c50e9a1a8a250625f2c2aa19ef2681c32cac70e0a4fb8bdfba4","sha512":"68d76df308e5773b8ab72fad77bc79c7439fc16008b97bf9167371fecf2a2cd61f9360203c160513066b543fe2ffad8659d1ba078751f89065a523da2bb54fc6","alerts":{"urlquery":null,"analyzer":null}},{"path":"SharpGen.Runtime.COM.dll","filename":"SharpGen.Runtime.COM.dll","modified":"","Modified":"2023-10-09T12:26:14+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":168960,"md5":"ea2735bc076f447ef9d5715e50895a4b","sha1":"667f5b2e0e57e8042670b9142db192bd0d0fe368","sha256":"1e3eb1ce01aabf1b72eca7a78f6ebab7b99cd722188ab5f547b7e4f7148a2919","sha512":"eab423f69ba126a159f42d68a2d4073dddc9966c994b567b9931df8caf148209ef53635a3257ca70d3619a73047fb129338a60fc8fa57ca0a32c53a45ed7e7c1","alerts":{"urlquery":null,"analyzer":null}},{"path":"SharpGen.Runtime.dll","filename":"SharpGen.Runtime.dll","modified":"","Modified":"2023-10-09T12:25:20+05:00","magic":"PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":77824,"md5":"ce9406c7630bf4f9f0485066ff659404","sha1":"cccdbd68acc7150159759edf534903e2a7364ccf","sha256":"2e9cba36e67c4ea4f107427d2c7c33689f0d175ff23114e5280c6d6cf8cd9e7b","sha512":"8395fb23668f1d5b7bddf29ebcb21389cd0df6343ffb334011b0a6589548133960b27b756a948bda02312d39c9c0e9fb8972634fe92913831a4719cf07014fb2","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:29.139254954Z","timestamp":1721720129139,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"FB270CF16706247ADDE7EFD430FE667555CB37EE35EAE763593424A17C624BCD\"\r\nLast-Modified: Sat, 20 Jul 2024 19:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13131\r\nExpires: Tue, 23 Jul 2024 11:14:20 GMT\r\nDate: Tue, 23 Jul 2024 07:35:29 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"f58a4b489ef65eff7896802c87e363e7","sha1":"e7287b89b56c66407955bf95bd03133d2e5945d1","sha256":"fb270cf16706247adde7efd430fe667555cb37ee35eae763593424a17c624bcd","sha512":"c065e9f7dd5fe8977e62fc53b2f8f282b9822e5b2da8f892a233a215b0084cb15dcfab72538f71c8b0abfb53fca418c8387e9881640f5d7ec16e245ded101811","ssdeep":"","tlshash":"f5f00548132ebac0bf3d1a261694d5182d24fdfe140828f1ddd441e235e6f993a5c416","first_seen":"2024-07-20T23:43:01Z","last_seen":"2024-08-19T16:14:35.910582Z","times_seen":17507,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:29.193374388Z","timestamp":1721720129193,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"778D02DECABF7DFF03BF5EC4C4EB0F03AC789E89BCFE58353C266C9D66C08834\"\r\nLast-Modified: Sat, 20 Jul 2024 19:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3027\r\nExpires: Tue, 23 Jul 2024 08:25:56 GMT\r\nDate: Tue, 23 Jul 2024 07:35:29 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2f796f6340ac7eef4fa2891ac8f8aa1a","sha1":"27bbc7bb6314b31dcab89f198bc258b040593aa7","sha256":"778d02decabf7dff03bf5ec4c4eb0f03ac789e89bcfe58353c266c9d66c08834","sha512":"332ad8103818d77a6436e42ee756dd6f241b844dc98a7a67b52d01d5541c140e9d3ddabc315afe1c9ea0e094ffa1873c666c65f61ad0a938ca34950b4c0ef429","ssdeep":"","tlshash":"c5f0754600d4bc047fa4051b45e0c2391a30aff84e423fc039d849f1d800f796c8894d","first_seen":"2024-07-21T00:49:07Z","last_seen":"2024-08-19T16:14:10.849697Z","times_seen":22664,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:29.582615671Z","timestamp":1721720129582,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"60C84BB6C568871D3FEBE1E58C6AEDF398FA06F5F7AFC3E6087200BE0A25AD3F\"\r\nLast-Modified: Sat, 20 Jul 2024 19:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2723\r\nExpires: Tue, 23 Jul 2024 08:20:52 GMT\r\nDate: Tue, 23 Jul 2024 07:35:29 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"85a291090b5db764a5b5f1487dcb958f","sha1":"9dadf7a0a7d6be86e491a10bbbc72c84f798cab9","sha256":"60c84bb6c568871d3febe1e58c6aedf398fa06f5f7afc3e6087200be0a25ad3f","sha512":"54d2b0b7b54d879ca308df969971761efbe43c7f3ac4178738778d17c9dd8181afcacde6e9a392d04028e09823c1e47026a4585f64276592308190948173eba4","ssdeep":"","tlshash":"f9f00e170bf63d4077712a42e7e2c27e0b24ddabf801963e649442a66418bfa2fc8099","first_seen":"2024-07-21T01:22:15Z","last_seen":"2024-08-19T16:13:52.205448Z","times_seen":22689,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:29.762500129Z","timestamp":1721720129762,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"951AE19E1EB066355BF55FF2163F6D14B689088FA3DD443FB01D889BB28FE095\"\r\nLast-Modified: Sat, 20 Jul 2024 19:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6503\r\nExpires: Tue, 23 Jul 2024 09:23:52 GMT\r\nDate: Tue, 23 Jul 2024 07:35:29 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"41b470cfcb4d809b7689783076e07c76","sha1":"919b05dba2523cc4b8e9a6e873fe777fd753ee1b","sha256":"951ae19e1eb066355bf55ff2163f6d14b689088fa3dd443fb01d889bb28fe095","sha512":"dce19fad3a25686ec442ada5c3d462174a63f1fc17cf331d3690797222d4adb87c567235eda21ab6512379198277a0b73584283849c33439892ee919e093005d","ssdeep":"","tlshash":"eaf0054185d97f803760081a7ed5e1083e309f6ca4910fd4819046c72062bca5b940d8","first_seen":"2024-07-21T05:06:08Z","last_seen":"2024-08-19T16:13:24.436694Z","times_seen":17054,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"github.com/Nekiplay/ImGUI-RakSamp-Lite/releases/download/1.0.0/Overlay.zip","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.4","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-23T07:35:29.684Z","timestamp":1721720129684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0","sha256":"FD:6E:9B:0E:F3:98:BC:D9:04:C3:B2:EC:16:7A:7B:0F:DA:72:01:C9:03:C5:3A:6A:6A:E5:D0:41:43:63:EF:65"}}},"request":{"raw":"GET /Nekiplay/ImGUI-RakSamp-Lite/releases/download/1.0.0/Overlay.zip HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Tue, 23 Jul 2024 07:35:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://objects.githubusercontent.com/github-production-release-asset-2e65be/750362349/381df603-1a38-4cb7-b5b6-9aa2d592957b?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20240723%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20240723T073529Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=5575f7ec0fa36686a0ea1f9e29dbfa8535453b654d7eeb2e575745435c049a0f\u0026X-Amz-SignedHeaders=host\u0026actor_id=0\u0026key_id=0\u0026repo_id=750362349\u0026response-content-disposition=attachment%3B%20filename%3DOverlay.zip\u0026response-content-type=application%2Foctet-stream\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/\r\ncontent-length: 0\r\nx-github-request-id: 9BD2:1F7E6A:255CF67:2640F6E:669F5D41\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T03:20:38.702035Z","times_seen":15251003,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":141,"dns":2,"connect":26,"send":0,"wait":170,"receive":1,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/750362349/381df603-1a38-4cb7-b5b6-9aa2d592957b?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20240723%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20240723T073529Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=5575f7ec0fa36686a0ea1f9e29dbfa8535453b654d7eeb2e575745435c049a0f\u0026X-Amz-SignedHeaders=host\u0026actor_id=0\u0026key_id=0\u0026repo_id=750362349\u0026response-content-disposition=attachment%3B%20filename%3DOverlay.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-23T07:35:30.009Z","timestamp":1721720130009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":"GitHub, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Mar 2024 00:00:00 GMT","end":"Fri, 14 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28","sha256":"09:01:0C:CE:9B:72:21:55:C7:E6:86:B0:77:39:D3:D2:DC:06:05:DE:A1:A4:98:4A:0B:96:5E:18:77:77:26:B5"}}},"request":{"raw":"GET /github-production-release-asset-2e65be/750362349/381df603-1a38-4cb7-b5b6-9aa2d592957b?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20240723%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20240723T073529Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=5575f7ec0fa36686a0ea1f9e29dbfa8535453b654d7eeb2e575745435c049a0f\u0026X-Amz-SignedHeaders=host\u0026actor_id=0\u0026key_id=0\u0026repo_id=750362349\u0026response-content-disposition=attachment%3B%20filename%3DOverlay.zip\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: objects.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\ncontent-md5: DZqzarL5qJDL00oqm9tPxg==\r\nlast-modified: Tue, 30 Jan 2024 14:01:44 GMT\r\netag: \"0x8DC219BFE3842E8\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: ab52bfa2-601e-002c-32d2-dc0dfa000000\r\nx-ms-version: 2020-10-02\r\nx-ms-creation-time: Tue, 30 Jan 2024 14:01:44 GMT\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\ncontent-disposition: attachment; filename=Overlay.zip\r\nx-ms-server-encrypted: true\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 23 Jul 2024 07:35:30 GMT\r\nx-served-by: cache-iad-kiad7000094-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, MISS\r\nx-cache-hits: 3, 0\r\nx-timer: S1721720130.090364,VS0,VE490\r\ncontent-length: 4816324\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4816324,"size_decoded":4816324,"mime_type":"application/octet-stream","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"0d9ab36ab2f9a890cbd34a2a9bdb4fc6","sha1":"ef3c81a411ab39388eddf86c9c78bf179024c34f","sha256":"365c5eb378f553351587b991c99b051d8c89489ee51497b5d4b43a3c8a04cf23","sha512":"55f5a5de950e3e218b37c40c1f1d56ef0f65936037cccf812242c7371050ce72540716002721194d13ffb9b9027c80bf931b32f8abcc582289ec4ab60542fb29","ssdeep":"98304:sy0aV/01uHLYY9ZHx7wmvayEOpvMQTRTGPypc8V6I9SrG/zuKOLuiwyj9QrxwBe:svatMurhJxxSTOyQTRyPmc8V6IwG/zuM","tlshash":"952633bb9cbf7678c046b1781b36e71b2b06098f190671bad05e47fd6fc66a10121b72","first_seen":"2024-08-19T16:00:57.65795Z","last_seen":"2024-08-19T16:00:57.65795Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1183,"timings":{"blocked":77,"dns":1,"connect":22,"send":0,"wait":504,"receive":524,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:31.928618266Z","timestamp":1721720131928,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"23A21016E52B76D94858B277E1A729969FC7F0F66B9212013F3B1CD64FC2591C\"\r\nLast-Modified: Sat, 20 Jul 2024 19:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7765\r\nExpires: Tue, 23 Jul 2024 09:44:56 GMT\r\nDate: Tue, 23 Jul 2024 07:35:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"abdbb83f974102baaaa6f77ee331d442","sha1":"053c22e9dce284413f8a2d4433748edbdd91b77b","sha256":"23a21016e52b76d94858b277e1a729969fc7f0f66b9212013f3b1cd64fc2591c","sha512":"85cd14104e12fb3b9b4a2142ca24510e72dc6896a00da0e5091e16d8135602b1675eb3a78231727c6a59b94465375203a116dddb7e523fa3ff120bb34dce589d","ssdeep":"","tlshash":"71f0cccb106a7f41df61161f30a4fa574c21ddf7301441c018d0c2e17440bcd1d4805c","first_seen":"2024-07-20T23:44:47Z","last_seen":"2024-08-19T16:14:21.244156Z","times_seen":15995,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:31.929946926Z","timestamp":1721720131929,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"23A21016E52B76D94858B277E1A729969FC7F0F66B9212013F3B1CD64FC2591C\"\r\nLast-Modified: Sat, 20 Jul 2024 19:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7765\r\nExpires: Tue, 23 Jul 2024 09:44:56 GMT\r\nDate: Tue, 23 Jul 2024 07:35:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"abdbb83f974102baaaa6f77ee331d442","sha1":"053c22e9dce284413f8a2d4433748edbdd91b77b","sha256":"23a21016e52b76d94858b277e1a729969fc7f0f66b9212013f3b1cd64fc2591c","sha512":"85cd14104e12fb3b9b4a2142ca24510e72dc6896a00da0e5091e16d8135602b1675eb3a78231727c6a59b94465375203a116dddb7e523fa3ff120bb34dce589d","ssdeep":"","tlshash":"71f0cccb106a7f41df61161f30a4fa574c21ddf7301441c018d0c2e17440bcd1d4805c","first_seen":"2024-07-20T23:44:47Z","last_seen":"2024-08-19T16:14:21.244156Z","times_seen":15995,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:31.931281789Z","timestamp":1721720131931,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"23A21016E52B76D94858B277E1A729969FC7F0F66B9212013F3B1CD64FC2591C\"\r\nLast-Modified: Sat, 20 Jul 2024 19:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7765\r\nExpires: Tue, 23 Jul 2024 09:44:56 GMT\r\nDate: Tue, 23 Jul 2024 07:35:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"abdbb83f974102baaaa6f77ee331d442","sha1":"053c22e9dce284413f8a2d4433748edbdd91b77b","sha256":"23a21016e52b76d94858b277e1a729969fc7f0f66b9212013f3b1cd64fc2591c","sha512":"85cd14104e12fb3b9b4a2142ca24510e72dc6896a00da0e5091e16d8135602b1675eb3a78231727c6a59b94465375203a116dddb7e523fa3ff120bb34dce589d","ssdeep":"","tlshash":"71f0cccb106a7f41df61161f30a4fa574c21ddf7301441c018d0c2e17440bcd1d4805c","first_seen":"2024-07-20T23:44:47Z","last_seen":"2024-08-19T16:14:21.244156Z","times_seen":15995,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T07:35:31.932517882Z","timestamp":1721720131932,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"23A21016E52B76D94858B277E1A729969FC7F0F66B9212013F3B1CD64FC2591C\"\r\nLast-Modified: Sat, 20 Jul 2024 19:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7765\r\nExpires: Tue, 23 Jul 2024 09:44:56 GMT\r\nDate: Tue, 23 Jul 2024 07:35:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"abdbb83f974102baaaa6f77ee331d442","sha1":"053c22e9dce284413f8a2d4433748edbdd91b77b","sha256":"23a21016e52b76d94858b277e1a729969fc7f0f66b9212013f3b1cd64fc2591c","sha512":"85cd14104e12fb3b9b4a2142ca24510e72dc6896a00da0e5091e16d8135602b1675eb3a78231727c6a59b94465375203a116dddb7e523fa3ff120bb34dce589d","ssdeep":"","tlshash":"71f0cccb106a7f41df61161f30a4fa574c21ddf7301441c018d0c2e17440bcd1d4805c","first_seen":"2024-07-20T23:44:47Z","last_seen":"2024-08-19T16:14:21.244156Z","times_seen":15995,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}