{"report_id":"506982fd-7a8b-49ea-a7e3-2f5975b9a12b","version":6,"status":"done","tags":[],"date":"2025-03-11T13:42:31Z","url":{"schema":"http","addr":"download.sysinternals.com/Files/Sigcheck.zip","fqdn":"download.sysinternals.com","domain":"sysinternals.com","tld":"com"},"ip":{"addr":"13.107.253.53","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T13:42:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"yvtdq90pk9gkybs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"download.sysinternals.com","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1998-04-12","domain_rank":317209,"first_seen":"2012-05-21T18:04:23Z","last_seen":"2025-03-08T13:39:54.530745Z","alert_count":0,"request_count":1,"received_data":680576,"sent_data":512,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"ec79fdd634d75309329bd4b6a92afa9c","sha1":"aaed1983cf36b3d2eb8355a696d4bf2a18cb3ed3","sha256":"96efa256749fde2ef157baee9677e417047a0d77325ad97ca800fa10c4bf0dbf","sha512":"79ca91f36031d9cbc6a31ffb66fbefd05f3f5285e95752856a078c7e2733e0387995509979027fc42068a7ab9a8b09df68d3f3debe28b9a75f9c6001b22e6e79","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":680079,"url":{"schema":"https","addr":"download.sysinternals.com/Files/Sigcheck.zip","fqdn":"download.sysinternals.com","domain":"sysinternals.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"archive":[{"path":"sigcheck.exe","filename":"sigcheck.exe","modified":"2022-07-19T16:09:32Z","Modified":"","magic":"PE32 executable (console) Intel 80386, for MS Windows, 5 sections","size":445856,"md5":"e1abd0c9e37d96346de222176c4fd2ae","sha1":"75be04d4adc55551faceb6514afd369ef8fe99e6","sha256":"4fe9a2bd4b160a5352333d00d0b0c10f13685af7acdb48e9e9d0c3877a19eed4","sha512":"2db5d5e1334371bb5018839da9519969e6f4987ab501cf6a0338cd95bb7a7b0f7a5ff89c1017a3110f2789a8ef17ac41ca41fdcfa3bb0498c036394abf421297","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"sigcheck64.exe","filename":"sigcheck64.exe","modified":"2022-07-19T16:09:32Z","Modified":"","magic":"PE32+ executable (console) x86-64, for MS Windows, 7 sections","size":541088,"md5":"32fee0aff79cce5f14a9e6b03c08c019","sha1":"e1579e0bdd5af494e59b817baba2f4bde5c4af65","sha256":"5d9e06ba65bb4d365e98fbb468f44fa8926f05984bf1a77ec7b1df19c43dc5ef","sha512":"5e18de499382d4aa40792c2372c606bb1e10439fb9bc64bb3b7fc13555c3bce6d6ef5bdb55ab29edd0c4d4b5ad73875f1a352b0d9a027bf7ce2fbd9820685c42","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"sigcheck64a.exe","filename":"sigcheck64a.exe","modified":"2022-07-19T16:09:32Z","Modified":"","magic":"PE32+ executable (console) Aarch64, for MS Windows, 6 sections","size":519576,"md5":"c2bb71ee6b838142c789033fa6431092","sha1":"ccc029a644818da961027960693b2e6d9e0bc91e","sha256":"664b41f1ee3e76b68e0887b338dd8f56e222780b12aaf97bbffddbaadce119ae","sha512":"9efca4f5e4935392a517bcefc9a65438b38ecc94aad6c33906a78ed8e53eabfc3512a3efdd3eb2b65297a6043a23fbb084c815840d4234299ecb47f41fae759e","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64a.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"Eula.txt","filename":"Eula.txt","modified":"2022-07-19T16:08:26Z","Modified":"","magic":"Unicode text, UTF-8 (with BOM) text, with very long lines (518), with CRLF line terminators","size":7490,"md5":"8c24c4084cdc3b7e7f7a88444a012bfc","sha1":"5ab806618497189342722d42dc382623ac3e1b55","sha256":"8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a","sha512":"6c74bed85638871fd834b30183e1536e48512dd0f8471624732ac1b487f0eba34dec99f88d2d583335f66df543d5fabf4b8c9456255df2248a4c086f111f0baa","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64a.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"ec79fdd634d75309329bd4b6a92afa9c","sha1":"aaed1983cf36b3d2eb8355a696d4bf2a18cb3ed3","sha256":"96efa256749fde2ef157baee9677e417047a0d77325ad97ca800fa10c4bf0dbf","sha512":"79ca91f36031d9cbc6a31ffb66fbefd05f3f5285e95752856a078c7e2733e0387995509979027fc42068a7ab9a8b09df68d3f3debe28b9a75f9c6001b22e6e79","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":680079,"url":{"schema":"https","addr":"download.sysinternals.com/Files/Sigcheck.zip","fqdn":"download.sysinternals.com","domain":"sysinternals.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"archive":[{"path":"sigcheck.exe","filename":"sigcheck.exe","modified":"2022-07-19T16:09:32Z","Modified":"","magic":"PE32 executable (console) Intel 80386, for MS Windows, 5 sections","size":445856,"md5":"e1abd0c9e37d96346de222176c4fd2ae","sha1":"75be04d4adc55551faceb6514afd369ef8fe99e6","sha256":"4fe9a2bd4b160a5352333d00d0b0c10f13685af7acdb48e9e9d0c3877a19eed4","sha512":"2db5d5e1334371bb5018839da9519969e6f4987ab501cf6a0338cd95bb7a7b0f7a5ff89c1017a3110f2789a8ef17ac41ca41fdcfa3bb0498c036394abf421297","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"sigcheck64.exe","filename":"sigcheck64.exe","modified":"2022-07-19T16:09:32Z","Modified":"","magic":"PE32+ executable (console) x86-64, for MS Windows, 7 sections","size":541088,"md5":"32fee0aff79cce5f14a9e6b03c08c019","sha1":"e1579e0bdd5af494e59b817baba2f4bde5c4af65","sha256":"5d9e06ba65bb4d365e98fbb468f44fa8926f05984bf1a77ec7b1df19c43dc5ef","sha512":"5e18de499382d4aa40792c2372c606bb1e10439fb9bc64bb3b7fc13555c3bce6d6ef5bdb55ab29edd0c4d4b5ad73875f1a352b0d9a027bf7ce2fbd9820685c42","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"sigcheck64a.exe","filename":"sigcheck64a.exe","modified":"2022-07-19T16:09:32Z","Modified":"","magic":"PE32+ executable (console) Aarch64, for MS Windows, 6 sections","size":519576,"md5":"c2bb71ee6b838142c789033fa6431092","sha1":"ccc029a644818da961027960693b2e6d9e0bc91e","sha256":"664b41f1ee3e76b68e0887b338dd8f56e222780b12aaf97bbffddbaadce119ae","sha512":"9efca4f5e4935392a517bcefc9a65438b38ecc94aad6c33906a78ed8e53eabfc3512a3efdd3eb2b65297a6043a23fbb084c815840d4234299ecb47f41fae759e","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64a.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"Eula.txt","filename":"Eula.txt","modified":"2022-07-19T16:08:26Z","Modified":"","magic":"Unicode text, UTF-8 (with BOM) text, with very long lines (518), with CRLF line terminators","size":7490,"md5":"8c24c4084cdc3b7e7f7a88444a012bfc","sha1":"5ab806618497189342722d42dc382623ac3e1b55","sha256":"8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a","sha512":"6c74bed85638871fd834b30183e1536e48512dd0f8471624732ac1b487f0eba34dec99f88d2d583335f66df543d5fabf4b8c9456255df2248a4c086f111f0baa","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-03-11","alert":"files - file ~tmp01925d3f.exe","trigger":"sigcheck64a.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"download.sysinternals.com/Files/Sigcheck.zip","fqdn":"download.sysinternals.com","domain":"sysinternals.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-11T13:42:09.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sysinternals.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 03 Nov 2024 09:10:26 GMT","end":"Fri, 02 May 2025 09:10:26 GMT"},"fingerprint":{"sha1":"77:E7:5E:C4:7D:78:8E:A0:C2:1F:BC:0E:28:DE:41:03:81:A5:49:53","sha256":"A4:52:46:B7:02:99:71:24:A4:7C:19:9B:66:89:8D:F6:55:3F:C8:1F:E2:5E:C9:4D:90:20:1C:13:74:C8:E4:4A"}}},"request":{"raw":"GET /Files/Sigcheck.zip HTTP/1.1\r\nHost: download.sysinternals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Mar 2025 13:42:10 GMT\r\ncontent-type: application/x-zip-compressed\r\ncontent-length: 680079\r\nlast-modified: Tue, 19 Jul 2022 16:39:59 GMT\r\netag: 0x8DA69A5522A1A82\r\nx-ms-request-id: 05db0df2-801e-001e-018b-92c463000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\nx-azure-ref: 20250311T134209Z-17dd8584745c8fmqhC1SVG8vz000000006ng00000000e9fu\r\nx-fd-int-roxy-purgeid: 9\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":680079,"size_decoded":0,"mime_type":"application/x-zip-compressed","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"ec79fdd634d75309329bd4b6a92afa9c","sha1":"aaed1983cf36b3d2eb8355a696d4bf2a18cb3ed3","sha256":"96efa256749fde2ef157baee9677e417047a0d77325ad97ca800fa10c4bf0dbf","sha512":"79ca91f36031d9cbc6a31ffb66fbefd05f3f5285e95752856a078c7e2733e0387995509979027fc42068a7ab9a8b09df68d3f3debe28b9a75f9c6001b22e6e79","ssdeep":"12288:Lfpz3FlhM51vHuIt3CCgRQAlkLGZoKy0qxDfsAEwHUG7s9rsv6QeHbLDx6EwaQYQ:9JlW51vuIrgTaqZsEAvD7msv6Q4bLbwt","tlshash":"c9e433a5094b960fee1474f2aa8da1ec5c7d31527dad12cb430860be75932ce33f5a87","first_seen":"2023-06-26T16:28:13Z","last_seen":"2025-05-29T02:21:07.149084Z","times_seen":314,"resource_available":false,"data":null}},"time_used":2971,"timings":{"blocked":432,"dns":71,"connect":67,"send":0,"wait":1307,"receive":799,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}