{"report_id":"5a677c05-cdd4-47a9-846c-21bffa4541ba","version":6,"status":"done","tags":[],"date":"2024-11-29T19:41:16Z","url":{"schema":"http","addr":"amlpages.com/Source/amlpages_ru_pe.zip","fqdn":"amlpages.com","domain":"amlpages.com","tld":"com"},"ip":{"addr":"91.189.114.23","port":0,"asn":48287,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-07T19:41:15Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"amlpages.com","ip":{"addr":"91.189.114.23","port":80,"asn":48287,"as":"Jsc Ru-Center","country":"Russia","country_code":"RU"},"domain_registered":"2006-12-09","domain_rank":0,"first_seen":"2012-06-18T11:40:31Z","last_seen":"2024-11-24T06:01:18.586956Z","alert_count":1,"request_count":1,"received_data":6302936,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aus5.mozilla.org","ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"1998-01-24","domain_rank":2548,"first_seen":"2015-10-27T08:06:24Z","last_seen":"2024-11-27T01:59:59.233412Z","alert_count":0,"request_count":1,"received_data":1222,"sent_data":512,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"6aec457fd49258d7fd0a38118433540f","sha1":"a3c0047ce0d5f33c592beb5d5fc6f89ec8e9a079","sha256":"4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","sha512":"ca8bbf63d689b45edb09370badb7c6a6aa96e722c4fd540eb158683a3de3d1ff129e73e3e39b84344bd45ef9b45e862bb8d438eb0f98430f16f19fbb81d5a3bf","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":6302685,"url":{"schema":"http","addr":"amlpages.com/Source/amlpages_ru_pe.zip","fqdn":"amlpages.com","domain":"amlpages.com","tld":"com"},"ip":{"addr":"91.189.114.23","port":80,"asn":48287,"as":"Jsc Ru-Center","country":"Russia","country_code":"RU"},"archive":[{"path":"PLUGINS/AACu.dll","filename":"AACu.dll","modified":"","Modified":"2023-07-22T13:14:02+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":114176,"md5":"391ed5233f5b8ef56e42795e2f345867","sha1":"5daabd310ea154e262de5cdfee8eb1a464708697","sha256":"3107e49a1cf634e66666c99a008090c355fd23c0811c59b021b4351649c5cb89","sha512":"6ef8d8ad9523248c2a0e659d8a8f8fb6f50f05749593890775277f9e426500a660986a051cc455f4116f62f4b441da27d48df34c8df6a1323b57ff2b5b7e3c99","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-14","alert":"Scan result 1/73","trigger":"3107e49a1cf634e66666c99a008090c355fd23c0811c59b021b4351649c5cb89","verdict":"suspicious","severity":"","comment":"suspicious - 1/73","link":"https://www.virustotal.com/gui/file/3107e49a1cf634e66666c99a008090c355fd23c0811c59b021b4351649c5cb89","meta":null}]}},{"path":"PLUGINS/AmlAssistU.dll","filename":"AmlAssistU.dll","modified":"","Modified":"2024-09-30T17:03:18+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":355328,"md5":"6b0c08f6a7a926822fa16a62ec1356c8","sha1":"e2a8f0f5555cbef961ee83d9afc66cad305889ea","sha256":"cce95af8f326b3e4d98cd98f4a1492dce6b926519ad41aca331ceb10a0cd620f","sha512":"f36b8a9d2afb585e549083d99828d2cfa511f37e7612e7befd0f85bdd1ebdf25e89929da67f4b6698f03cf8ce94f1b57f700fd9b1bda01f814a18e68839de2c1","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/AmlExportU.dll","filename":"AmlExportU.dll","modified":"","Modified":"2017-03-11T13:00:46+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":35328,"md5":"ca9ac29b25af213eba31878de27a878d","sha1":"89875dd3f2de604fe515c612952301c70062a2da","sha256":"ac1c8c225da95e7c111ddd2386e78a1f5a12aeb5ac94c181526539bba07817a0","sha512":"7dea081beed2131713529728011151ecc4e8c3f32b82041db129b1054ead2e9bc479847cb42be8e8e626f1ca16ffacf8d4601a0eb4fe892a18adbf3a59a9fef3","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/AmlImageU.dll","filename":"AmlImageU.dll","modified":"","Modified":"2014-11-21T11:13:51+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":44032,"md5":"f7019b758785021b924c11287845d037","sha1":"5457a0844c2ccb0dd847718167fc3aae8d761313","sha256":"d085f98eda06a5e5264834530a83d98d3d856836f36e0596bf0bc30173326760","sha512":"3d1aec1dbe6e51391a39a79cb155a8b6e6914113a9428068f3766217e3b9bf2f89dfc33e33387f692b2868601b594ecc6e777245c39fac2d91ebf5af66b9b20d","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-13","alert":"Scan result 2/72","trigger":"d085f98eda06a5e5264834530a83d98d3d856836f36e0596bf0bc30173326760","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/d085f98eda06a5e5264834530a83d98d3d856836f36e0596bf0bc30173326760","meta":null}]}},{"path":"PLUGINS/AutoReplaceU.dll","filename":"AutoReplaceU.dll","modified":"","Modified":"2024-01-30T12:47:07+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":40960,"md5":"84d75afc3b078dc465f85d8b1ceeb9df","sha1":"4d183c4009c8f9ac68d0066d15ff06e25582b499","sha256":"6eb8cd2cba266a7171c6587772925ee73bc8403f5cb2c7e5df6c462a7b247f23","sha512":"7e53533281a15dc6dd4ff45edf47669d1ec5b671cea0956abe3e0dfd3f70eaa6a97d833c39ba99d16594a703a2f0a7ee527ff325dbe1d97d771c379c21853922","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/PlacementRestorerU.dll","filename":"PlacementRestorerU.dll","modified":"","Modified":"2014-06-01T16:46:22+04:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections","size":59392,"md5":"e1df1f9af1d725d452665253f8cbfe96","sha1":"6c9f7fa79732ef178fac2ba36d3563858c3ef362","sha256":"61abdd955b7a638bc775c5160baa9ea6ae36b75b6609526c3b93a91fccb31db4","sha512":"83f76ba3d34c3cf8caf5856002584e5fbd1f2d097cd78d3e15eed047f9b22c540f5dc3518d047a55e0af75b6a1e865788ea8827d4eeea0a22dd0e9aabf0b4c79","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-23","alert":"Scan result 2/70","trigger":"61abdd955b7a638bc775c5160baa9ea6ae36b75b6609526c3b93a91fccb31db4","verdict":"suspicious","severity":"","comment":"suspicious - 2/70","link":"https://www.virustotal.com/gui/file/61abdd955b7a638bc775c5160baa9ea6ae36b75b6609526c3b93a91fccb31db4","meta":null}]}},{"path":"PLUGINS/ChangeLog.dll","filename":"ChangeLog.dll","modified":"","Modified":"2024-05-15T08:33:52+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":78336,"md5":"5599b4dae0898fad9201e8eda96b28b1","sha1":"942c34fe64acff5a7531cf0fae2d5ce09c421523","sha256":"727cf6a263655ff80ff59b5f3aa4c605d02cd6b028c5cdff543df07c41812aa8","sha512":"562c99b461b2fcdfe2f65c6f42fbf2d5c1416a1a140e201b2bd7cc437cf699d741205994bd07ec26fab180de881f6789881a9f40b4d235880518fdb6675ad188","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-06-23","alert":"Scan result 1/74","trigger":"727cf6a263655ff80ff59b5f3aa4c605d02cd6b028c5cdff543df07c41812aa8","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/727cf6a263655ff80ff59b5f3aa4c605d02cd6b028c5cdff543df07c41812aa8","meta":null}]}},{"path":"PLUGINS/PwdGen.dll","filename":"PwdGen.dll","modified":"","Modified":"2017-12-05T19:06:45+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":73728,"md5":"811321aaa734b2db3e33f3d4340f5492","sha1":"1b90c76cb878dbfa4766ccf35c3d1fd13d6af7d8","sha256":"243f869c21b4fdb7dcb73b56ab199de8e39bdc993ec6981bf69c88d0ace4fd77","sha512":"3441f828490bf3979caf018de52d647a243642501130a00db54bd471c958005b00a9f951db2cd0868c1e64db3df4bd452d19fcefc3c9cb657093c6bc600d1c5c","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-13","alert":"Scan result 1/72","trigger":"243f869c21b4fdb7dcb73b56ab199de8e39bdc993ec6981bf69c88d0ace4fd77","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/243f869c21b4fdb7dcb73b56ab199de8e39bdc993ec6981bf69c88d0ace4fd77","meta":null}]}},{"path":"PLUGINS/ThemesU.DLL","filename":"ThemesU.DLL","modified":"","Modified":"2017-12-26T20:04:12+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":140288,"md5":"343dda962e44f615a21a54f7a6be1d87","sha1":"ffaad19aeda7a037bc3238aa59e0eeda28346d8f","sha256":"5f38d6dc52f9776dd27fdfad8dbb50d763893d0da08e69e3a73c70b01c59df5b","sha512":"4d8907342bebffec5470bf0c55e214b1c9a7a9693cca40634ccf103a3cec18dd9fefd54551054dbaa9edde354a5fdb2c9825d73a3a131d02fef616e673d1daad","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-30","alert":"Scan result 1/74","trigger":"5f38d6dc52f9776dd27fdfad8dbb50d763893d0da08e69e3a73c70b01c59df5b","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/5f38d6dc52f9776dd27fdfad8dbb50d763893d0da08e69e3a73c70b01c59df5b","meta":null}]}},{"path":"PLUGINS/With_Background_Picture.aptheme","filename":"With_Background_Picture.aptheme","modified":"","Modified":"2010-05-17T03:42:00+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":473,"md5":"4694473f1170c139f5e7889d3f479bf7","sha1":"6a17e64a68b98b55fa2505a83c448ddff11c192b","sha256":"bd587387d2c32e15ca1645b276d08acdb916ac0973a0e013c19c3eb1b40495f7","sha512":"c086296bfc428d135ab19881a02f67353e01efdad5cd5c0f0ffd785b11232488f89ea58e28253218cae0334a1acc793717223112e125693b1f9cfe0b7706e7c7","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/Magenta_Plain.aptheme","filename":"Magenta_Plain.aptheme","modified":"","Modified":"2010-05-08T21:45:30+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":296,"md5":"bd32be1768ad813f38251195cc652108","sha1":"b8f1b2a0572d47751dcc6867182af21de7822a8d","sha256":"26f9eaaaf42d604ae12b53e74319a51020049fecefd46dcaee04643ed9702be6","sha512":"ceca2c2baafad24c8cb1290c5edbe041d5092189bbcf600213fa904e09e644a09ffc878e80c7b6fed1d456d1a8983bf6a9438cbc7f9ac660aab72b40a97c57ed","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/White_Standard.aptheme","filename":"White_Standard.aptheme","modified":"","Modified":"2015-11-28T11:53:27+03:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":404,"md5":"2b77e8c9cad7450b7ac950933ec8d086","sha1":"1c68b79716327949aa9374651b99134b23431ee5","sha256":"5e3f74f09c1ac059cf4481a364e4b483e12ae77859932921b0702250ae298990","sha512":"f9a38529f8418f351c1fa900f3f0a09105d53328f764638fe3195d8771ef153b6efc7da7b547f2c452530cfc07e9df296a26d485e6f3216d89ae63eb6fdafb1f","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/White Letters.aptheme","filename":"White Letters.aptheme","modified":"","Modified":"2010-07-28T05:00:32+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":5528,"md5":"aac091d720746e63a1b2e0f3b595e16a","sha1":"6f7544c4812f4bff173402df05420809d870cd1a","sha256":"489f94930e558731bd8f00dbda1ac8da37cc2e8abfe52faaed549c12c014652b","sha512":"b29c09543ea3de9ca51b8f48932f8d04910a2b96aa0347814cf72d2fff7afb8bbaa1d327f354baedda80de5e838aad4bf036166e513abaed748af015e8774b01","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/Present_White_With_Background.aptheme","filename":"Present_White_With_Background.aptheme","modified":"","Modified":"2015-11-30T02:04:56+03:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":355,"md5":"304e204af156140a1b17b3c78c0b25dd","sha1":"e7c480f889386321c2e3de8fca548b711621056d","sha256":"e18efd3d7be6d000f0ea319c570c207fd276d357b8e27aa7679a477a4db74947","sha512":"d65c9c0d832d668cc902d870da09ffe4251609f3fb5a008ec89d2f0609538f756174471e80df7e65085e0b71f657a77e238e365b2d952b3e2dd8627f8e05d2c9","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/White_Standard_Large_Fonts.aptheme","filename":"White_Standard_Large_Fonts.aptheme","modified":"","Modified":"2014-06-01T00:31:18+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":354,"md5":"3f928772cc0f1598aa1ec1ada4ad3106","sha1":"4b1ce3ed05450763d71a7911d043fa3cb5bd341b","sha256":"f4748bd962233bed32022603970ce52af68500d342bc85fb6ea2d52869696093","sha512":"a3abbaae4a7f2dcf3933cdc483e0c66cff3c3226e46c286edac067b4bd7485df40621df3abdd0ed14427397055c5e91b7c3ea7f0ac455349cd5b4bf09f653f17","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/Black.aptheme","filename":"Black.aptheme","modified":"","Modified":"2016-05-15T08:41:10+03:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":422,"md5":"8ebed93f278c72ea49763f475a73d7a7","sha1":"46d685d9e71241f0c621880d5fd2030ee76edfb9","sha256":"70c84149596562a631d7f14843834e1719c8ded72287b8b0060d638d2e0604ea","sha512":"b00044f5a028ca3a0cf1803b085bb3de6269c0291270ab00984dca7f9929e836cd8a5d347a51a294dfe44acebe5a69ce276c1834acd0ccfa5baa768957826e08","alerts":{"urlquery":null,"analyzer":null}},{"path":"AmlPages.exe","filename":"AmlPages.exe","modified":"","Modified":"2024-11-25T20:49:32+03:00","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 7 sections","size":4612096,"md5":"ac5f4dd119511e73732013f2a7584421","sha1":"a424beba291f6609683980b5aa5cef8a71b882bf","sha256":"30ee8170a29aa1b73612e9aa588fb6eee44cb19ef80aaed163516af7d5af06e6","sha512":"528549414567361fd36f148635433c96d9feb7c5a9b36e285c200c55bebd24f52b928dae9ec5b624292fe2eef8b06c70dda2edcdf20bc1074bb207e7a1fa9c24","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-11-26","alert":"Scan result 2/72","trigger":"30ee8170a29aa1b73612e9aa588fb6eee44cb19ef80aaed163516af7d5af06e6","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/30ee8170a29aa1b73612e9aa588fb6eee44cb19ef80aaed163516af7d5af06e6","meta":null}]}},{"path":"ApExit.exe","filename":"ApExit.exe","modified":"","Modified":"2022-05-26T09:35:21+03:00","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections","size":16384,"md5":"bfcb5192402f557b4a41c092e76ba8ca","sha1":"cec54c37ecfd325101965017d7d8b8a620b40df3","sha256":"886344e2dd1f814c6a9c16012c6de02da60230fdf180591129958bb96b362623","sha512":"ab03f0e7116b154a16cb6fd300170e0c9727a9db9bf047ce186e53b24a292578dd187cae5343b45ac6c8f5e509e5f7bd7c982f320003a4df37f64ce4b2a9fef8","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-13","alert":"Scan result 2/69","trigger":"886344e2dd1f814c6a9c16012c6de02da60230fdf180591129958bb96b362623","verdict":"suspicious","severity":"","comment":"suspicious - 2/69","link":"https://www.virustotal.com/gui/file/886344e2dd1f814c6a9c16012c6de02da60230fdf180591129958bb96b362623","meta":null}]}},{"path":"AmlPages.chm","filename":"AmlPages.chm","modified":"","Modified":"2022-10-16T22:10:28+03:00","magic":"MS Windows HtmlHelp Data","size":1876414,"md5":"6017476a89a0d7b045de1045bc07e7d2","sha1":"5ab5e3eaf37b44310447dd32b4249be5ee7e09ca","sha256":"7411102bba0367ce99efba1bbdba5f42f19b5f9bb3f2a954fddf5bfc89a9d8c8","sha512":"b26c33933f70d0d5bcb6d9d47f83c76e8d2325c05d6f3384000fc96aee04c9d3fe28ab07999f14fd0373adbb13ed4ac5789be37e905a18e62b889c89475b2c68","alerts":{"urlquery":null,"analyzer":null}},{"path":"ColorDlg.dll","filename":"ColorDlg.dll","modified":"","Modified":"2024-09-15T07:51:24+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":59392,"md5":"d89644075964134ff57ae2d60e255172","sha1":"3a0e661bee124687905e2d99abc9c719c5532de9","sha256":"d0776e0da86b3320ff56c9e76924da4e608fd72a4a0a170d6021a51cb774dcc2","sha512":"e90726d7612d883556a3d72363c20bdbeb68a36260aea25ed04b111442cf58b37358daa9c606a2c7b7a425faf41043a207f547e6c8c9642e9de60c043711d2bd","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-10-21","alert":"Scan result 1/73","trigger":"d0776e0da86b3320ff56c9e76924da4e608fd72a4a0a170d6021a51cb774dcc2","verdict":"suspicious","severity":"","comment":"suspicious - 1/73","link":"https://www.virustotal.com/gui/file/d0776e0da86b3320ff56c9e76924da4e608fd72a4a0a170d6021a51cb774dcc2","meta":null}]}},{"path":"GGSoundUtil.dll","filename":"GGSoundUtil.dll","modified":"","Modified":"2022-10-18T21:58:50+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":8704,"md5":"ec0da6271fbcfa43a96bf22db8536268","sha1":"fd71bda28937c5e83a7399c190ff518371d85f8a","sha256":"458f1e9e3385dddcc65f450f17cd0aa38a91b92f505385b4c2d27c75fead88cd","sha512":"ee1884df42222494f68e5225ebf536044feaf432b2c1234133bc99e81638b38178d2babe6f6b349dd492734b9e0d16f4f9e4b3f0e0e3e91339f1f5cba96807b2","alerts":{"urlquery":null,"analyzer":null}},{"path":"REUtil.dll","filename":"REUtil.dll","modified":"","Modified":"2023-01-17T23:19:50+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":8704,"md5":"b5406cb3f80b9a4aa48f15426a3f0ea0","sha1":"4f770fe4b004393899761d23d91320c01ae12238","sha256":"ec547038594aaaa5425c2d249c2d4692b3f232f1a01548113fa699d1bfb7f873","sha512":"d7385ffd460df32735d36a676bf50c5a3cd0ed4c55871e2935e6a93234619c6ed32e97d18dc4b6e13d29c677d2ddb6b0b32a374d8559a0bb2da3c9c5c8b40899","alerts":{"urlquery":null,"analyzer":null}},{"path":"msftedit.dll","filename":"msftedit.dll","modified":"","Modified":"2004-08-17T17:04:22+04:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections","size":537088,"md5":"1824704d09fbe4967a6206ffc53ea44c","sha1":"ef190ad3947cbc0146f3926aa01384bf02cea183","sha256":"0844e1dea517a51bdebde26856abd4e58233c3450a8ecb0d942f4c8220ef1ab9","sha512":"f7f268432749051e2756358c1ed325f1088d06566a91b5dd684aa96e56a68f9bd4df0a778df74baf13945d395bd30a680abacdbe0ecf73ec9358c3f2d83491b6","alerts":{"urlquery":null,"analyzer":null}},{"path":"RICHED20.DLL","filename":"RICHED20.DLL","modified":"","Modified":"2006-10-27T16:12:34+04:00","magic":"PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections","size":1082144,"md5":"c6cc76bde13e3a2c2275bd44c590d158","sha1":"641ae476de365569b36778a7cb9d12d6ce2693d8","sha256":"e4d12eb628ab54d3aacb3ee9391ce639b34b0cc5837968aeaec80dc6eea8ac3b","sha512":"c2cf9f9f61ae5a1dff07030cb601ba03ce1e8c2c2c252ffba1de91ab010ab14512e22674595f006cf992e3c1b1a5bf95597d577e1ab0a219e9e73a5cd897bc09","alerts":{"urlquery":null,"analyzer":null}},{"path":"MSPTLS.DLL","filename":"MSPTLS.DLL","modified":"","Modified":"2006-10-26T14:56:46+04:00","magic":"PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections","size":757008,"md5":"2706258cf6880e0667d20e149b7a7f5a","sha1":"146916de6e78643bd97335ad3bc9577492c5ebc8","sha256":"e4a9d97d96d46939c5399e76fbb777128c5c8c9a79279311fdef5c8289ebc35b","sha512":"9992e8d4955ef24cfeada9a978ca9bd27445098c24d81a74dc627000663858dbb22f2192a563046c6907370c4b1f92fceec7ef430dafccafa755215068a90ffe","alerts":{"urlquery":null,"analyzer":null}},{"path":"irun.dll","filename":"irun.dll","modified":"","Modified":"2006-12-21T11:21:34+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections","size":133632,"md5":"c17b2c0aad82791f9d60608dc6e778e2","sha1":"d2bbb1d248c572f7b0fd2dfa2f57388a1978fd95","sha256":"63dc28fdce04d65203bb3b74c8d93d0a07b6c9eafaa0b041070b2d297bd74ca8","sha512":"751be8e6394d1cee4439114c23a58d9beebbecd6fc350017553d54b25d8e5c2f504740f55c125774dcdfabd7493ceea47d8d8c003fd3457d4bf77d99f84e4770","alerts":{"urlquery":null,"analyzer":null}},{"path":"Icons/APIconsLib.icl","filename":"APIconsLib.icl","modified":"","Modified":"2011-01-22T22:34:18+03:00","magic":"MS-DOS executable, NE for MS Windows 3.x (3.0) (DLL or font)","size":257024,"md5":"7ec416e516416bd8c3b00b1801acd036","sha1":"d6808cc54b25718aee7ebf6c2725e7e7b71937e4","sha256":"e391be8a0ce01b3236694ac3b1f626598a02d488f7f52e4ad604360aa506f01b","sha512":"b9cd628391ba797a7c5ab1a637b892c78b9587fdbd17fcfb185c504de74a505e4f4b1419149f4881929d323026365b296e0f6d1859223370b913bd93183efb36","alerts":{"urlquery":null,"analyzer":null}},{"path":"RUN_PORTABLE.bat","filename":"RUN_PORTABLE.bat","modified":"","Modified":"2009-10-28T15:11:02+03:00","magic":"ASCII text, with CRLF line terminators","size":72,"md5":"e6fbdb838793a7d52a74402debdfb5ce","sha1":"a19532689323214ce8ef4984005acd2e8cd1340d","sha256":"ae2d24a1ea1b38620d7d0270c319ea2da5f538f24fce16848e7412f8360e5153","sha512":"4d25c23a13d12f108c67498116897365bfec317712b150575b819740aff335779f30039b8a67d9cb0f56fb5bd7b0276c36a92045484d196004180d0db893bcbd","alerts":{"urlquery":null,"analyzer":null}},{"path":"tips.txt","filename":"tips.txt","modified":"","Modified":"2023-05-11T04:49:34+03:00","magic":"Unicode text, UTF-16, little-endian text, with very long lines (339), with CRLF line terminators","size":39020,"md5":"1be4d387e229e59bac5dad8cf638d6f5","sha1":"8a90f19e2b91a88c145440e3c58953ab0ccdbd60","sha256":"00450da609110eda2033a309a04cfbb1261ab3bc013d1a7c92a7054f68b00e29","sha512":"01b94da443abcd77c6ae59703ae1e4cb901c26daf4f44d91fa15fe2d76ec8a82ce6e1291728c74352b41f4ac81d96b722a4812ece8deb3d10ee175bba91c2feb","alerts":{"urlquery":null,"analyzer":null}},{"path":"whatnews.rus","filename":"whatnews.rus","modified":"","Modified":"2024-11-25T20:57:12+03:00","magic":"Non-ISO extended-ASCII text, with CRLF line terminators","size":165396,"md5":"05c40b86057e417cb63be58c875dd72b","sha1":"b5cb0c9843e9c336e8d92f3965cac2d0511d3932","sha256":"ef8c69f98c7c3416f01a7c84ad9ba788eb7c777dba13b53052c2c689caf401ee","sha512":"50dddaf58b26607e6cc44f0b23d86780e175d557cd5a6feb7b8f3fbca22039ae61def5f10988291aa1ce07c7f671a6213a3784bbf1b34c8b557d98c738a02ed7","alerts":{"urlquery":null,"analyzer":null}},{"path":"README_PORTABLE.txt","filename":"README_PORTABLE.txt","modified":"","Modified":"2024-01-27T12:12:20+03:00","magic":"ISO-8859 text, with very long lines (410), with CRLF line terminators","size":3067,"md5":"652ac30e1331c2fdf0985c15e66e2c29","sha1":"b02b9e39aba67d75782e713e14eef49dcbd8e9b2","sha256":"a5c2c7bcbd8029e4fe4e2a5d6dd7839bfdd0ad31a25617fa32b3bcd6973d2e0c","sha512":"6bd2e398afd5b34b6dc3fff54112046817be966f833c4eefcc6a182615482cc5fc841c8ee33cb8ab03eac395de81f399fdec1b74599696e9bf1bf100d8c094e4","alerts":{"urlquery":null,"analyzer":null}},{"path":"1c.ash","filename":"1c.ash","modified":"","Modified":"2007-05-25T00:35:16+04:00","magic":"Generic INItialization configuration [1C]","size":5009,"md5":"5c06ae6fcb5e044eeb81b0f6c2601863","sha1":"e705bbe105bf6a369a2e6383c9fdcadc2a22e1dc","sha256":"4e7a80e9bd49858e233bc6b4178077f08d6292c34fa6be0782d5b75a30b754a0","sha512":"769d1f3cd63e579aebcc4fdca60ee824af2864607a226a5acec2cd741a30b506164f23ef30083484020328f5e38dfd9a1c0da0d71c5bb037d586619e0888ea85","alerts":{"urlquery":null,"analyzer":null}},{"path":"AsCarc.ash","filename":"AsCarc.ash","modified":"","Modified":"2022-10-15T13:33:53+03:00","magic":"Generic INItialization configuration [As Carc]","size":1518,"md5":"6684d0761ad77a745e9bb2b87c2af15d","sha1":"bb4cbfb5205449e1747b634867cc565da98ca3b1","sha256":"174ef8db9e23f9cd03f2e23467d80cc3c9e4f39d2bf992608da3c51c79aa1c40","sha512":"d4acd61c656ce34c5e44a621b40cd5e4624fe9cee5469278a62b6db59a6936cdfa2742bc8ee6ac875e11c44763245347090f52b35aa51391589b6c7c58e0da2d","alerts":{"urlquery":null,"analyzer":null}},{"path":"ash.ash","filename":"ash.ash","modified":"","Modified":"2007-05-25T00:37:48+04:00","magic":"ISO-8859 text, with CRLF line terminators","size":984,"md5":"1d8cde57095830f874e88ae56e0b8e53","sha1":"0eb451dc1063e673f276e7d6894a32323847dfbf","sha256":"2ed411ac8a62f89cda1afb1868dc1319627c5884e60bd1d6bfc6cca476e9468c","sha512":"162429172ea2b5dee5cad92f294330fc9b1615156ca86dddd395dc86af917a0dd159c4ef2ed3f091fbe4f8dc6775dd4dc61feecfae86dcbaebfedd171cc1d6ce","alerts":{"urlquery":null,"analyzer":null}},{"path":"cpp.ash","filename":"cpp.ash","modified":"","Modified":"2006-12-16T10:02:04+03:00","magic":"ASCII text, with very long lines (584), with CRLF line terminators","size":1009,"md5":"d7a0f9ddd6b81a9b8467e12de0cd4788","sha1":"11f735afba15ee6fb91cdf3bd308fc0bbb945c1c","sha256":"c5144fe58c2b85a24dabb1beacfc414535d6130d83a2992aa96cc6df81dc5468","sha512":"a0cbe0a941c72270a94fb512ed800b82e6ae41e13ed6fc873259d25de072f8798ca7a97d4e77b538fbaea5e9e9f22c3840a1f586765d2dae39608ad72eb94ef0","alerts":{"urlquery":null,"analyzer":null}},{"path":"delphi.ash","filename":"delphi.ash","modified":"","Modified":"2006-12-16T10:02:16+03:00","magic":"Generic INItialization configuration [Delphi]","size":933,"md5":"4901e392e63b965be78efd22b83d7734","sha1":"a25251311512e0eae5e699c807c5a95516263b3d","sha256":"b64dd9cdacd744e2e8ae9d6b5a05f39b018e3f6a9ede750ea49515a3fbbcad1b","sha512":"32caf227a3b8c9332a4c210101cb47a51aa849b61bf857c4dd2936d4f5f010e80b64e6b900a15efaa428285961a768992ac29d65ada942255c7da3dae67ff1c4","alerts":{"urlquery":null,"analyzer":null}},{"path":"email.ash","filename":"email.ash","modified":"","Modified":"2008-12-18T15:30:10+03:00","magic":"ISO-8859 text, with CRLF line terminators","size":499,"md5":"d83f7b05991d106391d52ed496ced5a4","sha1":"e049df9cebdc7133f6b60909d85cb8344b4c1ec7","sha256":"0788a7bc958bdb828369c81e57a9dfb792d54f38fce774f568f5c4f0ee41e1dd","sha512":"c3050005a0d17d3732b5a2da81ce06889eb1153e9b3397581d060dbdcd65bc2ac044fd070519dc0450952399d04b694c06bf8af10f23b0d2a78676e09fb81d99","alerts":{"urlquery":null,"analyzer":null}},{"path":"html.ash","filename":"html.ash","modified":"","Modified":"2022-10-16T06:49:01+03:00","magic":"Generic INItialization configuration [HTML]","size":3469,"md5":"18f14c72666be3effbcdf538715cf1f9","sha1":"7ea973f205372f90f5e47d91a421533eaa4bbb4a","sha256":"c6d7bca6d32717ff74d9f09d99c185c88ff110b3b47ccf73df7188cb0fc70bf2","sha512":"4bff4da90ada833dcae05aab0e08cf93e844170a92f452b7f13ea78abcae3ea33a0599fb26d1d59b0ad17d976df77b97f63f793e3a062f0ac347774fd7ef7911","alerts":{"urlquery":null,"analyzer":null}},{"path":"math.ash","filename":"math.ash","modified":"","Modified":"2008-09-29T21:04:50+04:00","magic":"Generic INItialization configuration [Math]","size":684,"md5":"149bf5298c741562a0de95d9f4dcab74","sha1":"b320ce1d556c6f6cba17dc4db30008fc73060194","sha256":"d88e9ce79d0f6e20733e79b2a04ec5f0ae874a10c8b0d3fd640d8a145c5c8974","sha512":"219fc68ca4e6cd5058a3279f323e7c59b3c194982f71e9517432eebdf94372b0e9b1a9e5002bffc8e45fa33ada13e7d7d414108c78539b92d82256ade3bff650","alerts":{"urlquery":null,"analyzer":null}},{"path":"mfc.ash","filename":"mfc.ash","modified":"","Modified":"2018-06-29T20:26:18+03:00","magic":"ASCII text, with very long lines (584), with CRLF line terminators","size":5361,"md5":"f6d73d006b1e2467c1e1617502272426","sha1":"813de72ae207432b39876895ee9ebf6dd9144afb","sha256":"51e9766b25e812f8ee6cb7c478717c73a634bd1aa575f4bbdfba827ed48d7d11","sha512":"fbb6b438e23ba9f1c2839293f9d8874e313cb345668063f5ae6cb4a6087dce798edaf7ba45118221dd74a8f2e00a6528e9cbd2340d7011ca6d9ffd095553e67e","alerts":{"urlquery":null,"analyzer":null}},{"path":"nsis.ash","filename":"nsis.ash","modified":"","Modified":"2006-12-16T10:03:02+03:00","magic":"Generic INItialization configuration [NSIS]","size":1566,"md5":"bf2ac7bed4f5263a06c0e56a9d2002dc","sha1":"cae9e50617dd8f406abd0d6a026776a580db5379","sha256":"5cc9244b3fded2c9225952a8026d5d0d59f99bfdaf42080dfedfde05123b80fc","sha512":"4d058a2650c9b722a6dfa4d7931d155a28ba2db347cdbf7afaa52c7a0ff89e7cb98d2aee664849ebce10f0d139b5003932a43a91657c550108c64aa503666ce0","alerts":{"urlquery":null,"analyzer":null}},{"path":"perl.ash","filename":"perl.ash","modified":"","Modified":"2006-12-16T10:03:10+03:00","magic":"Generic INItialization configuration [Perl]","size":2072,"md5":"877b0994506bd5d4cbbb2f81784448eb","sha1":"9f90da836e33f9493ddf45f6c6059c063cca048c","sha256":"8fb7fe29e53e2cb7640d43dc80125db715b1ce2bbd93d4b835a73f746fefa269","sha512":"16a7e4ca77df9c4c89b5302a2ba7a997fb213221cf420d9b0cc55e0e87ac05a0166b1ce54f6393dd6ef12ef9fe34c2bea0aed4e00912e05758442541e4bb2344","alerts":{"urlquery":null,"analyzer":null}},{"path":"ruby.ash","filename":"ruby.ash","modified":"","Modified":"2009-07-21T15:07:14+04:00","magic":"Generic INItialization configuration [Ruby]","size":2779,"md5":"b6d288ca49688f5a9aba92b659f96b46","sha1":"63d771efbefc9090d73b08c102de77be0d665f83","sha256":"f4855a93936e1c0c9ac98caf6d6109e4f56b64588d1f8e5966f909fa4d56750f","sha512":"cb97a09b4d94f7417a6f97c8506e102e68bbee54e5e88f5a5b507be9389d51bea7a22853d7d691927f0aa4e8858b45570798a28609d7e92696e754261ab1545b","alerts":{"urlquery":null,"analyzer":null}},{"path":"sql.ash","filename":"sql.ash","modified":"","Modified":"2006-12-16T10:03:18+03:00","magic":"Generic INItialization configuration [SQL]","size":712,"md5":"2bd98dda4437ce5373b821ae239c8715","sha1":"932c18d95640d2098728aca640b4822246935084","sha256":"0fdc67d45b35cdacd8f7ebdc4ec7e1d67152a1b88313de449e2d8654908cf3b1","sha512":"89408d018d34356dead079db754756ed52fb9f00e281ffd6fe3fada3a06832c27f815653a3f5ad612f94c1805c9fe24879709f780a48e6eb754ed244e5518e9f","alerts":{"urlquery":null,"analyzer":null}},{"path":"vb.ash","filename":"vb.ash","modified":"","Modified":"2006-12-16T10:03:40+03:00","magic":"ASCII text, with very long lines (453), with CRLF line terminators","size":849,"md5":"9ffdf1210332d809bf212af12618c184","sha1":"3bcf0954625d3127cad4cc608c8610556972a78c","sha256":"c317d8a766a8112898c13d1640a0a5ac7614cfc45b86c35fafc5844e008bf4b8","sha512":"29e34becc5f8f15be1e8ffe76d126a7b7a204511cfd41474d87eb386cc82647ea40515edaba490b430711dbbbfcb69dea34c29502bd2e367b4aae06e9684a98b","alerts":{"urlquery":null,"analyzer":null}},{"path":"wtl.ash","filename":"wtl.ash","modified":"","Modified":"2006-12-16T10:03:48+03:00","magic":"ASCII text, with very long lines (584), with CRLF line terminators","size":1519,"md5":"a90d00b1454ac1b559fbd72da52d921c","sha1":"2dd5a6a019029d23266e29cdb56775d7a7aa0b59","sha256":"fcf0c4f232d83072c034450fe380b9813f91af8ce5cec877233075a062deb09e","sha512":"57fea139a5269dbade0d84cb6332ea699db5793706db83c09806b40e48585d451281b2608692f8edbebe0c894581838a86490608c1b9379996702b0ed1db75c5","alerts":{"urlquery":null,"analyzer":null}},{"path":"java.ash","filename":"java.ash","modified":"","Modified":"2010-01-28T17:50:14+03:00","magic":"Generic INItialization configuration [Java SE 6 Edition]","size":1754,"md5":"dc524755cd79fb99af1f5977adfe5b56","sha1":"97eaee8b5601d7e73151d143915778291f055362","sha256":"e9e6f4a8fc55a8a85dacf02dc037c558607610e978e451b669ac23ad9f786043","sha512":"2fb9e0791049c16083a6301cddbfbc05a7f28c446aa282e8f5ef3a566adf43168762882a0fe6af58ecd2418d54489adb464a750052794a970dc221cb4e41075a","alerts":{"urlquery":null,"analyzer":null}},{"path":"python.ash","filename":"python.ash","modified":"","Modified":"2011-02-05T22:25:54+03:00","magic":"Generic INItialization configuration [Python (Standard)]","size":846,"md5":"c89792c268c69005158862fe1636a1d9","sha1":"35c6c67239f0209fab12abf888e6150c00ccc1c5","sha256":"a05b70efe84e26746da1b897412c786e70a1f6ef525f89bc9728c8c32f05a593","sha512":"6f7b9094f3e22a09886877602b8df007c2e381363ad0177f53640729098624d4deae83245b2e678f9c06955d2249cc6125686cb57ad95c5d0d16b10093dd3e10","alerts":{"urlquery":null,"analyzer":null}},{"path":"WinDos.ash","filename":"WinDos.ash","modified":"","Modified":"2014-03-01T19:10:14+04:00","magic":"ASCII text, with very long lines (543), with CRLF line terminators","size":906,"md5":"f50fb1ddbb480e81ab690704b51661da","sha1":"468f0dedaf31e21792a558b8eff11c8c70bd6de7","sha256":"cb0e39c1e1e255ff5a6fa74f0a3f3aa6157d50986fedd2c1ee43b4ce4462396b","sha512":"b26ec09d621b35e8a65e8c0350f5bc675f8771a71087e6aea5b923af7645f39b0a1b3838f6a0ce683de5bafc2bd4c94fb652762724384ce5a76442d39e145303","alerts":{"urlquery":null,"analyzer":null}},{"path":"vb2013.ash","filename":"vb2013.ash","modified":"","Modified":"2014-02-28T19:53:16+04:00","magic":"Generic INItialization configuration [Visual Basic (2013)]","size":1800,"md5":"ea9fb09caffc4c04412d5605b4ab4bea","sha1":"d3243b3c1b67350791c6d61b41cc32fbccb4577f","sha256":"c49e96c3e92964ace0938cf9ae8c3c5ccc7950c818638f25dcd8249d969984c2","sha512":"c1151b647e13bba59c404bde10c3dd0956eb475af96ab7e4cd065fa5c64bfe2dbfb2765f6f7e9923b4eea160a9ad22879600e321c3ed8dc00325e6801832d36c","alerts":{"urlquery":null,"analyzer":null}},{"path":"autotext.atx","filename":"autotext.atx","modified":"","Modified":"2014-06-16T09:42:51+04:00","magic":"HTML document, Unicode text, UTF-16, little-endian text, with very long lines (512), with CRLF line terminators","size":13906,"md5":"0f768a98b395be21fa02508bdde3495c","sha1":"eceaf6e12f5fe120e1d2652d81ce71935b640dc8","sha256":"94dcf7cbb99f83da23c34abedf920b25a9b3b0748b31b20f8de309b88f95913e","sha512":"a6e376093c94d241a6b9bc314486cbb04d388c89cfbe785099b61800da6f8082a29ad0f5fb4a57c3248ab8e40dd71e90c00af5ed7c5abed24f3cc013dc447f52","alerts":{"urlquery":null,"analyzer":null}},{"path":"cell.gif","filename":"cell.gif","modified":"","Modified":"2008-11-14T03:49:04+03:00","magic":"GIF image data, version 89a, 36 x 24","size":2224,"md5":"fba1cffd5f9b087b9efad22fa4934006","sha1":"4550768cf79e1c419a6335ca82ec0c94391f4944","sha256":"a55a239b6f7a227d70b81cbe03b4b639c00c223c5d02d7ecdafcb6041ea0ac41","sha512":"4b45df3d89c50dd8fe835f994f03e23b45deecc8fc38ea90c8facdb26f1372fed03b146e6d3c01bd77bb518af78c07c180cccc5182beb1efa1ee374424736b05","alerts":{"urlquery":null,"analyzer":null}},{"path":"howtoreg.htm","filename":"howtoreg.htm","modified":"","Modified":"2023-05-11T04:01:46+03:00","magic":"HTML document, ISO-8859 text, with CRLF line terminators","size":2509,"md5":"540e4349a043a5e7d3e151fb3ae41aa8","sha1":"3033476fc0b073f05037a71f0e7681a546fb6310","sha256":"a1721f5065295c46f5e2dfff856a0e163aac4606d556389941cfb19389cc9a3e","sha512":"e7ea3bf66ff0a5bce86512aa8076840dd9c6b5fbfdcba4af11e86b87734a86cc0ffed19783a450d88f555845202661471299387a54ccb1f96445344eb61a0652","alerts":{"urlquery":null,"analyzer":null}},{"path":"splash.jpg","filename":"splash.jpg","modified":"","Modified":"2008-12-28T00:20:50+03:00","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, comment: \"File written by Adobe Photoshop� 5.2\", progressive, precision 8, 400x213, components 3","size":11534,"md5":"7f414fe0d8a2dea71d908dd74286710e","sha1":"48ec71303f23a26f4eee2909fda5d8cf625cfa9c","sha256":"29fa91d21649754e14fd578e45dc998058a7ad711fc768fbb6d97116a84a9cd7","sha512":"1dbf4b64fdae3ac63f546eb021a35088315f9836c0b3bf08f7fb7c8f788e7d645687b96f34e3d22cfe6f86f23516306fa195fc932c6d477c7769f2c13783662d","alerts":{"urlquery":null,"analyzer":null}},{"path":"sample.apd","filename":"sample.apd","modified":"","Modified":"2023-02-10T20:13:48+03:00","magic":"data","size":1077676,"md5":"bd9e17fa8033f9f4e217478bfa03ecd0","sha1":"c5c2ba2ac5a1608459a3659cffd0008bb98910fe","sha256":"2da7c509752fcf2e367cb03861d251ef21f7ab60df1f1ac9dead261e9b5bf1d7","sha512":"9bf516712f6e8e0a763303423d7c2172771d828d698becdb78e6015eacc1a5c034105574e625092e6d82b41845d064bd88b48dde8bc6dd75ba5d9e99df3af262","alerts":{"urlquery":null,"analyzer":null}},{"path":"Table 2x2.template","filename":"Table 2x2.template","modified":"","Modified":"2011-07-23T15:04:30+04:00","magic":"Rich Text Format data, version 1, ANSI, code page 1251, default language ID 1049","size":884,"md5":"77713a4c3de510d0339f429f89f42993","sha1":"701c7158feca2812b9e92504458366467db9854f","sha256":"d78393581c53c85bacdb0c4ebf895dec92d8e30a3f421a824867fd4ff89ff9d2","sha512":"88371f566b8d3a7a6ab1b9a2c436e946857675e7284e9d59f2499673d51086e560d992ad496957ff9ac1029d2221cd575b1e269ab0f850db3376ce275a658fbb","alerts":{"urlquery":null,"analyzer":null}},{"path":"TYPE_YOUR_HEADER.template","filename":"TYPE_YOUR_HEADER.template","modified":"","Modified":"2011-07-23T14:58:58+04:00","magic":"Rich Text Format data, version 1, ANSI, code page 1251, default language ID 1049","size":461,"md5":"58d75f264d8092f5821a716615547172","sha1":"a1d5ddee2373b332357903b28c1d7bdd4f010443","sha256":"453ddbc7acd55646d35ef16f2f6c8bdb24ae295d0942bb640c7bf899df4e628a","sha512":"7f9e1ad7ef9fa127b0a8eae5a3f143c1db9ddaa997dbdfad045fcdce9f77ee7bd63a812ff666e81916a7f0e698b517ed22eb81fa97a5109c929923b68306362d","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-11-27","alert":"Scan result 2/69","trigger":"4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","verdict":"suspicious","severity":"","comment":"suspicious - 2/69","link":"https://www.virustotal.com/gui/file/4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"6aec457fd49258d7fd0a38118433540f","sha1":"a3c0047ce0d5f33c592beb5d5fc6f89ec8e9a079","sha256":"4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","sha512":"ca8bbf63d689b45edb09370badb7c6a6aa96e722c4fd540eb158683a3de3d1ff129e73e3e39b84344bd45ef9b45e862bb8d438eb0f98430f16f19fbb81d5a3bf","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":6302685,"url":{"schema":"http","addr":"amlpages.com/Source/amlpages_ru_pe.zip","fqdn":"amlpages.com","domain":"amlpages.com","tld":"com"},"ip":{"addr":"91.189.114.23","port":80,"asn":48287,"as":"Jsc Ru-Center","country":"Russia","country_code":"RU"},"archive":[{"path":"PLUGINS/AACu.dll","filename":"AACu.dll","modified":"","Modified":"2023-07-22T13:14:02+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":114176,"md5":"391ed5233f5b8ef56e42795e2f345867","sha1":"5daabd310ea154e262de5cdfee8eb1a464708697","sha256":"3107e49a1cf634e66666c99a008090c355fd23c0811c59b021b4351649c5cb89","sha512":"6ef8d8ad9523248c2a0e659d8a8f8fb6f50f05749593890775277f9e426500a660986a051cc455f4116f62f4b441da27d48df34c8df6a1323b57ff2b5b7e3c99","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-14","alert":"Scan result 1/73","trigger":"3107e49a1cf634e66666c99a008090c355fd23c0811c59b021b4351649c5cb89","verdict":"suspicious","severity":"","comment":"suspicious - 1/73","link":"https://www.virustotal.com/gui/file/3107e49a1cf634e66666c99a008090c355fd23c0811c59b021b4351649c5cb89","meta":null}]}},{"path":"PLUGINS/AmlAssistU.dll","filename":"AmlAssistU.dll","modified":"","Modified":"2024-09-30T17:03:18+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":355328,"md5":"6b0c08f6a7a926822fa16a62ec1356c8","sha1":"e2a8f0f5555cbef961ee83d9afc66cad305889ea","sha256":"cce95af8f326b3e4d98cd98f4a1492dce6b926519ad41aca331ceb10a0cd620f","sha512":"f36b8a9d2afb585e549083d99828d2cfa511f37e7612e7befd0f85bdd1ebdf25e89929da67f4b6698f03cf8ce94f1b57f700fd9b1bda01f814a18e68839de2c1","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/AmlExportU.dll","filename":"AmlExportU.dll","modified":"","Modified":"2017-03-11T13:00:46+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":35328,"md5":"ca9ac29b25af213eba31878de27a878d","sha1":"89875dd3f2de604fe515c612952301c70062a2da","sha256":"ac1c8c225da95e7c111ddd2386e78a1f5a12aeb5ac94c181526539bba07817a0","sha512":"7dea081beed2131713529728011151ecc4e8c3f32b82041db129b1054ead2e9bc479847cb42be8e8e626f1ca16ffacf8d4601a0eb4fe892a18adbf3a59a9fef3","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/AmlImageU.dll","filename":"AmlImageU.dll","modified":"","Modified":"2014-11-21T11:13:51+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":44032,"md5":"f7019b758785021b924c11287845d037","sha1":"5457a0844c2ccb0dd847718167fc3aae8d761313","sha256":"d085f98eda06a5e5264834530a83d98d3d856836f36e0596bf0bc30173326760","sha512":"3d1aec1dbe6e51391a39a79cb155a8b6e6914113a9428068f3766217e3b9bf2f89dfc33e33387f692b2868601b594ecc6e777245c39fac2d91ebf5af66b9b20d","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-13","alert":"Scan result 2/72","trigger":"d085f98eda06a5e5264834530a83d98d3d856836f36e0596bf0bc30173326760","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/d085f98eda06a5e5264834530a83d98d3d856836f36e0596bf0bc30173326760","meta":null}]}},{"path":"PLUGINS/AutoReplaceU.dll","filename":"AutoReplaceU.dll","modified":"","Modified":"2024-01-30T12:47:07+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":40960,"md5":"84d75afc3b078dc465f85d8b1ceeb9df","sha1":"4d183c4009c8f9ac68d0066d15ff06e25582b499","sha256":"6eb8cd2cba266a7171c6587772925ee73bc8403f5cb2c7e5df6c462a7b247f23","sha512":"7e53533281a15dc6dd4ff45edf47669d1ec5b671cea0956abe3e0dfd3f70eaa6a97d833c39ba99d16594a703a2f0a7ee527ff325dbe1d97d771c379c21853922","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/PlacementRestorerU.dll","filename":"PlacementRestorerU.dll","modified":"","Modified":"2014-06-01T16:46:22+04:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections","size":59392,"md5":"e1df1f9af1d725d452665253f8cbfe96","sha1":"6c9f7fa79732ef178fac2ba36d3563858c3ef362","sha256":"61abdd955b7a638bc775c5160baa9ea6ae36b75b6609526c3b93a91fccb31db4","sha512":"83f76ba3d34c3cf8caf5856002584e5fbd1f2d097cd78d3e15eed047f9b22c540f5dc3518d047a55e0af75b6a1e865788ea8827d4eeea0a22dd0e9aabf0b4c79","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-23","alert":"Scan result 2/70","trigger":"61abdd955b7a638bc775c5160baa9ea6ae36b75b6609526c3b93a91fccb31db4","verdict":"suspicious","severity":"","comment":"suspicious - 2/70","link":"https://www.virustotal.com/gui/file/61abdd955b7a638bc775c5160baa9ea6ae36b75b6609526c3b93a91fccb31db4","meta":null}]}},{"path":"PLUGINS/ChangeLog.dll","filename":"ChangeLog.dll","modified":"","Modified":"2024-05-15T08:33:52+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":78336,"md5":"5599b4dae0898fad9201e8eda96b28b1","sha1":"942c34fe64acff5a7531cf0fae2d5ce09c421523","sha256":"727cf6a263655ff80ff59b5f3aa4c605d02cd6b028c5cdff543df07c41812aa8","sha512":"562c99b461b2fcdfe2f65c6f42fbf2d5c1416a1a140e201b2bd7cc437cf699d741205994bd07ec26fab180de881f6789881a9f40b4d235880518fdb6675ad188","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-06-23","alert":"Scan result 1/74","trigger":"727cf6a263655ff80ff59b5f3aa4c605d02cd6b028c5cdff543df07c41812aa8","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/727cf6a263655ff80ff59b5f3aa4c605d02cd6b028c5cdff543df07c41812aa8","meta":null}]}},{"path":"PLUGINS/PwdGen.dll","filename":"PwdGen.dll","modified":"","Modified":"2017-12-05T19:06:45+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":73728,"md5":"811321aaa734b2db3e33f3d4340f5492","sha1":"1b90c76cb878dbfa4766ccf35c3d1fd13d6af7d8","sha256":"243f869c21b4fdb7dcb73b56ab199de8e39bdc993ec6981bf69c88d0ace4fd77","sha512":"3441f828490bf3979caf018de52d647a243642501130a00db54bd471c958005b00a9f951db2cd0868c1e64db3df4bd452d19fcefc3c9cb657093c6bc600d1c5c","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-13","alert":"Scan result 1/72","trigger":"243f869c21b4fdb7dcb73b56ab199de8e39bdc993ec6981bf69c88d0ace4fd77","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/243f869c21b4fdb7dcb73b56ab199de8e39bdc993ec6981bf69c88d0ace4fd77","meta":null}]}},{"path":"PLUGINS/ThemesU.DLL","filename":"ThemesU.DLL","modified":"","Modified":"2017-12-26T20:04:12+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":140288,"md5":"343dda962e44f615a21a54f7a6be1d87","sha1":"ffaad19aeda7a037bc3238aa59e0eeda28346d8f","sha256":"5f38d6dc52f9776dd27fdfad8dbb50d763893d0da08e69e3a73c70b01c59df5b","sha512":"4d8907342bebffec5470bf0c55e214b1c9a7a9693cca40634ccf103a3cec18dd9fefd54551054dbaa9edde354a5fdb2c9825d73a3a131d02fef616e673d1daad","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-05-30","alert":"Scan result 1/74","trigger":"5f38d6dc52f9776dd27fdfad8dbb50d763893d0da08e69e3a73c70b01c59df5b","verdict":"suspicious","severity":"","comment":"suspicious - 1/74","link":"https://www.virustotal.com/gui/file/5f38d6dc52f9776dd27fdfad8dbb50d763893d0da08e69e3a73c70b01c59df5b","meta":null}]}},{"path":"PLUGINS/With_Background_Picture.aptheme","filename":"With_Background_Picture.aptheme","modified":"","Modified":"2010-05-17T03:42:00+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":473,"md5":"4694473f1170c139f5e7889d3f479bf7","sha1":"6a17e64a68b98b55fa2505a83c448ddff11c192b","sha256":"bd587387d2c32e15ca1645b276d08acdb916ac0973a0e013c19c3eb1b40495f7","sha512":"c086296bfc428d135ab19881a02f67353e01efdad5cd5c0f0ffd785b11232488f89ea58e28253218cae0334a1acc793717223112e125693b1f9cfe0b7706e7c7","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/Magenta_Plain.aptheme","filename":"Magenta_Plain.aptheme","modified":"","Modified":"2010-05-08T21:45:30+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":296,"md5":"bd32be1768ad813f38251195cc652108","sha1":"b8f1b2a0572d47751dcc6867182af21de7822a8d","sha256":"26f9eaaaf42d604ae12b53e74319a51020049fecefd46dcaee04643ed9702be6","sha512":"ceca2c2baafad24c8cb1290c5edbe041d5092189bbcf600213fa904e09e644a09ffc878e80c7b6fed1d456d1a8983bf6a9438cbc7f9ac660aab72b40a97c57ed","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/White_Standard.aptheme","filename":"White_Standard.aptheme","modified":"","Modified":"2015-11-28T11:53:27+03:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":404,"md5":"2b77e8c9cad7450b7ac950933ec8d086","sha1":"1c68b79716327949aa9374651b99134b23431ee5","sha256":"5e3f74f09c1ac059cf4481a364e4b483e12ae77859932921b0702250ae298990","sha512":"f9a38529f8418f351c1fa900f3f0a09105d53328f764638fe3195d8771ef153b6efc7da7b547f2c452530cfc07e9df296a26d485e6f3216d89ae63eb6fdafb1f","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/White Letters.aptheme","filename":"White Letters.aptheme","modified":"","Modified":"2010-07-28T05:00:32+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":5528,"md5":"aac091d720746e63a1b2e0f3b595e16a","sha1":"6f7544c4812f4bff173402df05420809d870cd1a","sha256":"489f94930e558731bd8f00dbda1ac8da37cc2e8abfe52faaed549c12c014652b","sha512":"b29c09543ea3de9ca51b8f48932f8d04910a2b96aa0347814cf72d2fff7afb8bbaa1d327f354baedda80de5e838aad4bf036166e513abaed748af015e8774b01","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/Present_White_With_Background.aptheme","filename":"Present_White_With_Background.aptheme","modified":"","Modified":"2015-11-30T02:04:56+03:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":355,"md5":"304e204af156140a1b17b3c78c0b25dd","sha1":"e7c480f889386321c2e3de8fca548b711621056d","sha256":"e18efd3d7be6d000f0ea319c570c207fd276d357b8e27aa7679a477a4db74947","sha512":"d65c9c0d832d668cc902d870da09ffe4251609f3fb5a008ec89d2f0609538f756174471e80df7e65085e0b71f657a77e238e365b2d952b3e2dd8627f8e05d2c9","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/White_Standard_Large_Fonts.aptheme","filename":"White_Standard_Large_Fonts.aptheme","modified":"","Modified":"2014-06-01T00:31:18+04:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":354,"md5":"3f928772cc0f1598aa1ec1ada4ad3106","sha1":"4b1ce3ed05450763d71a7911d043fa3cb5bd341b","sha256":"f4748bd962233bed32022603970ce52af68500d342bc85fb6ea2d52869696093","sha512":"a3abbaae4a7f2dcf3933cdc483e0c66cff3c3226e46c286edac067b4bd7485df40621df3abdd0ed14427397055c5e91b7c3ea7f0ac455349cd5b4bf09f653f17","alerts":{"urlquery":null,"analyzer":null}},{"path":"PLUGINS/Black.aptheme","filename":"Black.aptheme","modified":"","Modified":"2016-05-15T08:41:10+03:00","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":422,"md5":"8ebed93f278c72ea49763f475a73d7a7","sha1":"46d685d9e71241f0c621880d5fd2030ee76edfb9","sha256":"70c84149596562a631d7f14843834e1719c8ded72287b8b0060d638d2e0604ea","sha512":"b00044f5a028ca3a0cf1803b085bb3de6269c0291270ab00984dca7f9929e836cd8a5d347a51a294dfe44acebe5a69ce276c1834acd0ccfa5baa768957826e08","alerts":{"urlquery":null,"analyzer":null}},{"path":"AmlPages.exe","filename":"AmlPages.exe","modified":"","Modified":"2024-11-25T20:49:32+03:00","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 7 sections","size":4612096,"md5":"ac5f4dd119511e73732013f2a7584421","sha1":"a424beba291f6609683980b5aa5cef8a71b882bf","sha256":"30ee8170a29aa1b73612e9aa588fb6eee44cb19ef80aaed163516af7d5af06e6","sha512":"528549414567361fd36f148635433c96d9feb7c5a9b36e285c200c55bebd24f52b928dae9ec5b624292fe2eef8b06c70dda2edcdf20bc1074bb207e7a1fa9c24","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-11-26","alert":"Scan result 2/72","trigger":"30ee8170a29aa1b73612e9aa588fb6eee44cb19ef80aaed163516af7d5af06e6","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/30ee8170a29aa1b73612e9aa588fb6eee44cb19ef80aaed163516af7d5af06e6","meta":null}]}},{"path":"ApExit.exe","filename":"ApExit.exe","modified":"","Modified":"2022-05-26T09:35:21+03:00","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections","size":16384,"md5":"bfcb5192402f557b4a41c092e76ba8ca","sha1":"cec54c37ecfd325101965017d7d8b8a620b40df3","sha256":"886344e2dd1f814c6a9c16012c6de02da60230fdf180591129958bb96b362623","sha512":"ab03f0e7116b154a16cb6fd300170e0c9727a9db9bf047ce186e53b24a292578dd187cae5343b45ac6c8f5e509e5f7bd7c982f320003a4df37f64ce4b2a9fef8","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-07-13","alert":"Scan result 2/69","trigger":"886344e2dd1f814c6a9c16012c6de02da60230fdf180591129958bb96b362623","verdict":"suspicious","severity":"","comment":"suspicious - 2/69","link":"https://www.virustotal.com/gui/file/886344e2dd1f814c6a9c16012c6de02da60230fdf180591129958bb96b362623","meta":null}]}},{"path":"AmlPages.chm","filename":"AmlPages.chm","modified":"","Modified":"2022-10-16T22:10:28+03:00","magic":"MS Windows HtmlHelp Data","size":1876414,"md5":"6017476a89a0d7b045de1045bc07e7d2","sha1":"5ab5e3eaf37b44310447dd32b4249be5ee7e09ca","sha256":"7411102bba0367ce99efba1bbdba5f42f19b5f9bb3f2a954fddf5bfc89a9d8c8","sha512":"b26c33933f70d0d5bcb6d9d47f83c76e8d2325c05d6f3384000fc96aee04c9d3fe28ab07999f14fd0373adbb13ed4ac5789be37e905a18e62b889c89475b2c68","alerts":{"urlquery":null,"analyzer":null}},{"path":"ColorDlg.dll","filename":"ColorDlg.dll","modified":"","Modified":"2024-09-15T07:51:24+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":59392,"md5":"d89644075964134ff57ae2d60e255172","sha1":"3a0e661bee124687905e2d99abc9c719c5532de9","sha256":"d0776e0da86b3320ff56c9e76924da4e608fd72a4a0a170d6021a51cb774dcc2","sha512":"e90726d7612d883556a3d72363c20bdbeb68a36260aea25ed04b111442cf58b37358daa9c606a2c7b7a425faf41043a207f547e6c8c9642e9de60c043711d2bd","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-10-21","alert":"Scan result 1/73","trigger":"d0776e0da86b3320ff56c9e76924da4e608fd72a4a0a170d6021a51cb774dcc2","verdict":"suspicious","severity":"","comment":"suspicious - 1/73","link":"https://www.virustotal.com/gui/file/d0776e0da86b3320ff56c9e76924da4e608fd72a4a0a170d6021a51cb774dcc2","meta":null}]}},{"path":"GGSoundUtil.dll","filename":"GGSoundUtil.dll","modified":"","Modified":"2022-10-18T21:58:50+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":8704,"md5":"ec0da6271fbcfa43a96bf22db8536268","sha1":"fd71bda28937c5e83a7399c190ff518371d85f8a","sha256":"458f1e9e3385dddcc65f450f17cd0aa38a91b92f505385b4c2d27c75fead88cd","sha512":"ee1884df42222494f68e5225ebf536044feaf432b2c1234133bc99e81638b38178d2babe6f6b349dd492734b9e0d16f4f9e4b3f0e0e3e91339f1f5cba96807b2","alerts":{"urlquery":null,"analyzer":null}},{"path":"REUtil.dll","filename":"REUtil.dll","modified":"","Modified":"2023-01-17T23:19:50+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":8704,"md5":"b5406cb3f80b9a4aa48f15426a3f0ea0","sha1":"4f770fe4b004393899761d23d91320c01ae12238","sha256":"ec547038594aaaa5425c2d249c2d4692b3f232f1a01548113fa699d1bfb7f873","sha512":"d7385ffd460df32735d36a676bf50c5a3cd0ed4c55871e2935e6a93234619c6ed32e97d18dc4b6e13d29c677d2ddb6b0b32a374d8559a0bb2da3c9c5c8b40899","alerts":{"urlquery":null,"analyzer":null}},{"path":"msftedit.dll","filename":"msftedit.dll","modified":"","Modified":"2004-08-17T17:04:22+04:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections","size":537088,"md5":"1824704d09fbe4967a6206ffc53ea44c","sha1":"ef190ad3947cbc0146f3926aa01384bf02cea183","sha256":"0844e1dea517a51bdebde26856abd4e58233c3450a8ecb0d942f4c8220ef1ab9","sha512":"f7f268432749051e2756358c1ed325f1088d06566a91b5dd684aa96e56a68f9bd4df0a778df74baf13945d395bd30a680abacdbe0ecf73ec9358c3f2d83491b6","alerts":{"urlquery":null,"analyzer":null}},{"path":"RICHED20.DLL","filename":"RICHED20.DLL","modified":"","Modified":"2006-10-27T16:12:34+04:00","magic":"PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections","size":1082144,"md5":"c6cc76bde13e3a2c2275bd44c590d158","sha1":"641ae476de365569b36778a7cb9d12d6ce2693d8","sha256":"e4d12eb628ab54d3aacb3ee9391ce639b34b0cc5837968aeaec80dc6eea8ac3b","sha512":"c2cf9f9f61ae5a1dff07030cb601ba03ce1e8c2c2c252ffba1de91ab010ab14512e22674595f006cf992e3c1b1a5bf95597d577e1ab0a219e9e73a5cd897bc09","alerts":{"urlquery":null,"analyzer":null}},{"path":"MSPTLS.DLL","filename":"MSPTLS.DLL","modified":"","Modified":"2006-10-26T14:56:46+04:00","magic":"PE32 executable (DLL) (console) Intel 80386, for MS Windows, 4 sections","size":757008,"md5":"2706258cf6880e0667d20e149b7a7f5a","sha1":"146916de6e78643bd97335ad3bc9577492c5ebc8","sha256":"e4a9d97d96d46939c5399e76fbb777128c5c8c9a79279311fdef5c8289ebc35b","sha512":"9992e8d4955ef24cfeada9a978ca9bd27445098c24d81a74dc627000663858dbb22f2192a563046c6907370c4b1f92fceec7ef430dafccafa755215068a90ffe","alerts":{"urlquery":null,"analyzer":null}},{"path":"irun.dll","filename":"irun.dll","modified":"","Modified":"2006-12-21T11:21:34+03:00","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections","size":133632,"md5":"c17b2c0aad82791f9d60608dc6e778e2","sha1":"d2bbb1d248c572f7b0fd2dfa2f57388a1978fd95","sha256":"63dc28fdce04d65203bb3b74c8d93d0a07b6c9eafaa0b041070b2d297bd74ca8","sha512":"751be8e6394d1cee4439114c23a58d9beebbecd6fc350017553d54b25d8e5c2f504740f55c125774dcdfabd7493ceea47d8d8c003fd3457d4bf77d99f84e4770","alerts":{"urlquery":null,"analyzer":null}},{"path":"Icons/APIconsLib.icl","filename":"APIconsLib.icl","modified":"","Modified":"2011-01-22T22:34:18+03:00","magic":"MS-DOS executable, NE for MS Windows 3.x (3.0) (DLL or font)","size":257024,"md5":"7ec416e516416bd8c3b00b1801acd036","sha1":"d6808cc54b25718aee7ebf6c2725e7e7b71937e4","sha256":"e391be8a0ce01b3236694ac3b1f626598a02d488f7f52e4ad604360aa506f01b","sha512":"b9cd628391ba797a7c5ab1a637b892c78b9587fdbd17fcfb185c504de74a505e4f4b1419149f4881929d323026365b296e0f6d1859223370b913bd93183efb36","alerts":{"urlquery":null,"analyzer":null}},{"path":"RUN_PORTABLE.bat","filename":"RUN_PORTABLE.bat","modified":"","Modified":"2009-10-28T15:11:02+03:00","magic":"ASCII text, with CRLF line terminators","size":72,"md5":"e6fbdb838793a7d52a74402debdfb5ce","sha1":"a19532689323214ce8ef4984005acd2e8cd1340d","sha256":"ae2d24a1ea1b38620d7d0270c319ea2da5f538f24fce16848e7412f8360e5153","sha512":"4d25c23a13d12f108c67498116897365bfec317712b150575b819740aff335779f30039b8a67d9cb0f56fb5bd7b0276c36a92045484d196004180d0db893bcbd","alerts":{"urlquery":null,"analyzer":null}},{"path":"tips.txt","filename":"tips.txt","modified":"","Modified":"2023-05-11T04:49:34+03:00","magic":"Unicode text, UTF-16, little-endian text, with very long lines (339), with CRLF line terminators","size":39020,"md5":"1be4d387e229e59bac5dad8cf638d6f5","sha1":"8a90f19e2b91a88c145440e3c58953ab0ccdbd60","sha256":"00450da609110eda2033a309a04cfbb1261ab3bc013d1a7c92a7054f68b00e29","sha512":"01b94da443abcd77c6ae59703ae1e4cb901c26daf4f44d91fa15fe2d76ec8a82ce6e1291728c74352b41f4ac81d96b722a4812ece8deb3d10ee175bba91c2feb","alerts":{"urlquery":null,"analyzer":null}},{"path":"whatnews.rus","filename":"whatnews.rus","modified":"","Modified":"2024-11-25T20:57:12+03:00","magic":"Non-ISO extended-ASCII text, with CRLF line terminators","size":165396,"md5":"05c40b86057e417cb63be58c875dd72b","sha1":"b5cb0c9843e9c336e8d92f3965cac2d0511d3932","sha256":"ef8c69f98c7c3416f01a7c84ad9ba788eb7c777dba13b53052c2c689caf401ee","sha512":"50dddaf58b26607e6cc44f0b23d86780e175d557cd5a6feb7b8f3fbca22039ae61def5f10988291aa1ce07c7f671a6213a3784bbf1b34c8b557d98c738a02ed7","alerts":{"urlquery":null,"analyzer":null}},{"path":"README_PORTABLE.txt","filename":"README_PORTABLE.txt","modified":"","Modified":"2024-01-27T12:12:20+03:00","magic":"ISO-8859 text, with very long lines (410), with CRLF line terminators","size":3067,"md5":"652ac30e1331c2fdf0985c15e66e2c29","sha1":"b02b9e39aba67d75782e713e14eef49dcbd8e9b2","sha256":"a5c2c7bcbd8029e4fe4e2a5d6dd7839bfdd0ad31a25617fa32b3bcd6973d2e0c","sha512":"6bd2e398afd5b34b6dc3fff54112046817be966f833c4eefcc6a182615482cc5fc841c8ee33cb8ab03eac395de81f399fdec1b74599696e9bf1bf100d8c094e4","alerts":{"urlquery":null,"analyzer":null}},{"path":"1c.ash","filename":"1c.ash","modified":"","Modified":"2007-05-25T00:35:16+04:00","magic":"Generic INItialization configuration [1C]","size":5009,"md5":"5c06ae6fcb5e044eeb81b0f6c2601863","sha1":"e705bbe105bf6a369a2e6383c9fdcadc2a22e1dc","sha256":"4e7a80e9bd49858e233bc6b4178077f08d6292c34fa6be0782d5b75a30b754a0","sha512":"769d1f3cd63e579aebcc4fdca60ee824af2864607a226a5acec2cd741a30b506164f23ef30083484020328f5e38dfd9a1c0da0d71c5bb037d586619e0888ea85","alerts":{"urlquery":null,"analyzer":null}},{"path":"AsCarc.ash","filename":"AsCarc.ash","modified":"","Modified":"2022-10-15T13:33:53+03:00","magic":"Generic INItialization configuration [As Carc]","size":1518,"md5":"6684d0761ad77a745e9bb2b87c2af15d","sha1":"bb4cbfb5205449e1747b634867cc565da98ca3b1","sha256":"174ef8db9e23f9cd03f2e23467d80cc3c9e4f39d2bf992608da3c51c79aa1c40","sha512":"d4acd61c656ce34c5e44a621b40cd5e4624fe9cee5469278a62b6db59a6936cdfa2742bc8ee6ac875e11c44763245347090f52b35aa51391589b6c7c58e0da2d","alerts":{"urlquery":null,"analyzer":null}},{"path":"ash.ash","filename":"ash.ash","modified":"","Modified":"2007-05-25T00:37:48+04:00","magic":"ISO-8859 text, with CRLF line terminators","size":984,"md5":"1d8cde57095830f874e88ae56e0b8e53","sha1":"0eb451dc1063e673f276e7d6894a32323847dfbf","sha256":"2ed411ac8a62f89cda1afb1868dc1319627c5884e60bd1d6bfc6cca476e9468c","sha512":"162429172ea2b5dee5cad92f294330fc9b1615156ca86dddd395dc86af917a0dd159c4ef2ed3f091fbe4f8dc6775dd4dc61feecfae86dcbaebfedd171cc1d6ce","alerts":{"urlquery":null,"analyzer":null}},{"path":"cpp.ash","filename":"cpp.ash","modified":"","Modified":"2006-12-16T10:02:04+03:00","magic":"ASCII text, with very long lines (584), with CRLF line terminators","size":1009,"md5":"d7a0f9ddd6b81a9b8467e12de0cd4788","sha1":"11f735afba15ee6fb91cdf3bd308fc0bbb945c1c","sha256":"c5144fe58c2b85a24dabb1beacfc414535d6130d83a2992aa96cc6df81dc5468","sha512":"a0cbe0a941c72270a94fb512ed800b82e6ae41e13ed6fc873259d25de072f8798ca7a97d4e77b538fbaea5e9e9f22c3840a1f586765d2dae39608ad72eb94ef0","alerts":{"urlquery":null,"analyzer":null}},{"path":"delphi.ash","filename":"delphi.ash","modified":"","Modified":"2006-12-16T10:02:16+03:00","magic":"Generic INItialization configuration [Delphi]","size":933,"md5":"4901e392e63b965be78efd22b83d7734","sha1":"a25251311512e0eae5e699c807c5a95516263b3d","sha256":"b64dd9cdacd744e2e8ae9d6b5a05f39b018e3f6a9ede750ea49515a3fbbcad1b","sha512":"32caf227a3b8c9332a4c210101cb47a51aa849b61bf857c4dd2936d4f5f010e80b64e6b900a15efaa428285961a768992ac29d65ada942255c7da3dae67ff1c4","alerts":{"urlquery":null,"analyzer":null}},{"path":"email.ash","filename":"email.ash","modified":"","Modified":"2008-12-18T15:30:10+03:00","magic":"ISO-8859 text, with CRLF line terminators","size":499,"md5":"d83f7b05991d106391d52ed496ced5a4","sha1":"e049df9cebdc7133f6b60909d85cb8344b4c1ec7","sha256":"0788a7bc958bdb828369c81e57a9dfb792d54f38fce774f568f5c4f0ee41e1dd","sha512":"c3050005a0d17d3732b5a2da81ce06889eb1153e9b3397581d060dbdcd65bc2ac044fd070519dc0450952399d04b694c06bf8af10f23b0d2a78676e09fb81d99","alerts":{"urlquery":null,"analyzer":null}},{"path":"html.ash","filename":"html.ash","modified":"","Modified":"2022-10-16T06:49:01+03:00","magic":"Generic INItialization configuration [HTML]","size":3469,"md5":"18f14c72666be3effbcdf538715cf1f9","sha1":"7ea973f205372f90f5e47d91a421533eaa4bbb4a","sha256":"c6d7bca6d32717ff74d9f09d99c185c88ff110b3b47ccf73df7188cb0fc70bf2","sha512":"4bff4da90ada833dcae05aab0e08cf93e844170a92f452b7f13ea78abcae3ea33a0599fb26d1d59b0ad17d976df77b97f63f793e3a062f0ac347774fd7ef7911","alerts":{"urlquery":null,"analyzer":null}},{"path":"math.ash","filename":"math.ash","modified":"","Modified":"2008-09-29T21:04:50+04:00","magic":"Generic INItialization configuration [Math]","size":684,"md5":"149bf5298c741562a0de95d9f4dcab74","sha1":"b320ce1d556c6f6cba17dc4db30008fc73060194","sha256":"d88e9ce79d0f6e20733e79b2a04ec5f0ae874a10c8b0d3fd640d8a145c5c8974","sha512":"219fc68ca4e6cd5058a3279f323e7c59b3c194982f71e9517432eebdf94372b0e9b1a9e5002bffc8e45fa33ada13e7d7d414108c78539b92d82256ade3bff650","alerts":{"urlquery":null,"analyzer":null}},{"path":"mfc.ash","filename":"mfc.ash","modified":"","Modified":"2018-06-29T20:26:18+03:00","magic":"ASCII text, with very long lines (584), with CRLF line terminators","size":5361,"md5":"f6d73d006b1e2467c1e1617502272426","sha1":"813de72ae207432b39876895ee9ebf6dd9144afb","sha256":"51e9766b25e812f8ee6cb7c478717c73a634bd1aa575f4bbdfba827ed48d7d11","sha512":"fbb6b438e23ba9f1c2839293f9d8874e313cb345668063f5ae6cb4a6087dce798edaf7ba45118221dd74a8f2e00a6528e9cbd2340d7011ca6d9ffd095553e67e","alerts":{"urlquery":null,"analyzer":null}},{"path":"nsis.ash","filename":"nsis.ash","modified":"","Modified":"2006-12-16T10:03:02+03:00","magic":"Generic INItialization configuration [NSIS]","size":1566,"md5":"bf2ac7bed4f5263a06c0e56a9d2002dc","sha1":"cae9e50617dd8f406abd0d6a026776a580db5379","sha256":"5cc9244b3fded2c9225952a8026d5d0d59f99bfdaf42080dfedfde05123b80fc","sha512":"4d058a2650c9b722a6dfa4d7931d155a28ba2db347cdbf7afaa52c7a0ff89e7cb98d2aee664849ebce10f0d139b5003932a43a91657c550108c64aa503666ce0","alerts":{"urlquery":null,"analyzer":null}},{"path":"perl.ash","filename":"perl.ash","modified":"","Modified":"2006-12-16T10:03:10+03:00","magic":"Generic INItialization configuration [Perl]","size":2072,"md5":"877b0994506bd5d4cbbb2f81784448eb","sha1":"9f90da836e33f9493ddf45f6c6059c063cca048c","sha256":"8fb7fe29e53e2cb7640d43dc80125db715b1ce2bbd93d4b835a73f746fefa269","sha512":"16a7e4ca77df9c4c89b5302a2ba7a997fb213221cf420d9b0cc55e0e87ac05a0166b1ce54f6393dd6ef12ef9fe34c2bea0aed4e00912e05758442541e4bb2344","alerts":{"urlquery":null,"analyzer":null}},{"path":"ruby.ash","filename":"ruby.ash","modified":"","Modified":"2009-07-21T15:07:14+04:00","magic":"Generic INItialization configuration [Ruby]","size":2779,"md5":"b6d288ca49688f5a9aba92b659f96b46","sha1":"63d771efbefc9090d73b08c102de77be0d665f83","sha256":"f4855a93936e1c0c9ac98caf6d6109e4f56b64588d1f8e5966f909fa4d56750f","sha512":"cb97a09b4d94f7417a6f97c8506e102e68bbee54e5e88f5a5b507be9389d51bea7a22853d7d691927f0aa4e8858b45570798a28609d7e92696e754261ab1545b","alerts":{"urlquery":null,"analyzer":null}},{"path":"sql.ash","filename":"sql.ash","modified":"","Modified":"2006-12-16T10:03:18+03:00","magic":"Generic INItialization configuration [SQL]","size":712,"md5":"2bd98dda4437ce5373b821ae239c8715","sha1":"932c18d95640d2098728aca640b4822246935084","sha256":"0fdc67d45b35cdacd8f7ebdc4ec7e1d67152a1b88313de449e2d8654908cf3b1","sha512":"89408d018d34356dead079db754756ed52fb9f00e281ffd6fe3fada3a06832c27f815653a3f5ad612f94c1805c9fe24879709f780a48e6eb754ed244e5518e9f","alerts":{"urlquery":null,"analyzer":null}},{"path":"vb.ash","filename":"vb.ash","modified":"","Modified":"2006-12-16T10:03:40+03:00","magic":"ASCII text, with very long lines (453), with CRLF line terminators","size":849,"md5":"9ffdf1210332d809bf212af12618c184","sha1":"3bcf0954625d3127cad4cc608c8610556972a78c","sha256":"c317d8a766a8112898c13d1640a0a5ac7614cfc45b86c35fafc5844e008bf4b8","sha512":"29e34becc5f8f15be1e8ffe76d126a7b7a204511cfd41474d87eb386cc82647ea40515edaba490b430711dbbbfcb69dea34c29502bd2e367b4aae06e9684a98b","alerts":{"urlquery":null,"analyzer":null}},{"path":"wtl.ash","filename":"wtl.ash","modified":"","Modified":"2006-12-16T10:03:48+03:00","magic":"ASCII text, with very long lines (584), with CRLF line terminators","size":1519,"md5":"a90d00b1454ac1b559fbd72da52d921c","sha1":"2dd5a6a019029d23266e29cdb56775d7a7aa0b59","sha256":"fcf0c4f232d83072c034450fe380b9813f91af8ce5cec877233075a062deb09e","sha512":"57fea139a5269dbade0d84cb6332ea699db5793706db83c09806b40e48585d451281b2608692f8edbebe0c894581838a86490608c1b9379996702b0ed1db75c5","alerts":{"urlquery":null,"analyzer":null}},{"path":"java.ash","filename":"java.ash","modified":"","Modified":"2010-01-28T17:50:14+03:00","magic":"Generic INItialization configuration [Java SE 6 Edition]","size":1754,"md5":"dc524755cd79fb99af1f5977adfe5b56","sha1":"97eaee8b5601d7e73151d143915778291f055362","sha256":"e9e6f4a8fc55a8a85dacf02dc037c558607610e978e451b669ac23ad9f786043","sha512":"2fb9e0791049c16083a6301cddbfbc05a7f28c446aa282e8f5ef3a566adf43168762882a0fe6af58ecd2418d54489adb464a750052794a970dc221cb4e41075a","alerts":{"urlquery":null,"analyzer":null}},{"path":"python.ash","filename":"python.ash","modified":"","Modified":"2011-02-05T22:25:54+03:00","magic":"Generic INItialization configuration [Python (Standard)]","size":846,"md5":"c89792c268c69005158862fe1636a1d9","sha1":"35c6c67239f0209fab12abf888e6150c00ccc1c5","sha256":"a05b70efe84e26746da1b897412c786e70a1f6ef525f89bc9728c8c32f05a593","sha512":"6f7b9094f3e22a09886877602b8df007c2e381363ad0177f53640729098624d4deae83245b2e678f9c06955d2249cc6125686cb57ad95c5d0d16b10093dd3e10","alerts":{"urlquery":null,"analyzer":null}},{"path":"WinDos.ash","filename":"WinDos.ash","modified":"","Modified":"2014-03-01T19:10:14+04:00","magic":"ASCII text, with very long lines (543), with CRLF line terminators","size":906,"md5":"f50fb1ddbb480e81ab690704b51661da","sha1":"468f0dedaf31e21792a558b8eff11c8c70bd6de7","sha256":"cb0e39c1e1e255ff5a6fa74f0a3f3aa6157d50986fedd2c1ee43b4ce4462396b","sha512":"b26ec09d621b35e8a65e8c0350f5bc675f8771a71087e6aea5b923af7645f39b0a1b3838f6a0ce683de5bafc2bd4c94fb652762724384ce5a76442d39e145303","alerts":{"urlquery":null,"analyzer":null}},{"path":"vb2013.ash","filename":"vb2013.ash","modified":"","Modified":"2014-02-28T19:53:16+04:00","magic":"Generic INItialization configuration [Visual Basic (2013)]","size":1800,"md5":"ea9fb09caffc4c04412d5605b4ab4bea","sha1":"d3243b3c1b67350791c6d61b41cc32fbccb4577f","sha256":"c49e96c3e92964ace0938cf9ae8c3c5ccc7950c818638f25dcd8249d969984c2","sha512":"c1151b647e13bba59c404bde10c3dd0956eb475af96ab7e4cd065fa5c64bfe2dbfb2765f6f7e9923b4eea160a9ad22879600e321c3ed8dc00325e6801832d36c","alerts":{"urlquery":null,"analyzer":null}},{"path":"autotext.atx","filename":"autotext.atx","modified":"","Modified":"2014-06-16T09:42:51+04:00","magic":"HTML document, Unicode text, UTF-16, little-endian text, with very long lines (512), with CRLF line terminators","size":13906,"md5":"0f768a98b395be21fa02508bdde3495c","sha1":"eceaf6e12f5fe120e1d2652d81ce71935b640dc8","sha256":"94dcf7cbb99f83da23c34abedf920b25a9b3b0748b31b20f8de309b88f95913e","sha512":"a6e376093c94d241a6b9bc314486cbb04d388c89cfbe785099b61800da6f8082a29ad0f5fb4a57c3248ab8e40dd71e90c00af5ed7c5abed24f3cc013dc447f52","alerts":{"urlquery":null,"analyzer":null}},{"path":"cell.gif","filename":"cell.gif","modified":"","Modified":"2008-11-14T03:49:04+03:00","magic":"GIF image data, version 89a, 36 x 24","size":2224,"md5":"fba1cffd5f9b087b9efad22fa4934006","sha1":"4550768cf79e1c419a6335ca82ec0c94391f4944","sha256":"a55a239b6f7a227d70b81cbe03b4b639c00c223c5d02d7ecdafcb6041ea0ac41","sha512":"4b45df3d89c50dd8fe835f994f03e23b45deecc8fc38ea90c8facdb26f1372fed03b146e6d3c01bd77bb518af78c07c180cccc5182beb1efa1ee374424736b05","alerts":{"urlquery":null,"analyzer":null}},{"path":"howtoreg.htm","filename":"howtoreg.htm","modified":"","Modified":"2023-05-11T04:01:46+03:00","magic":"HTML document, ISO-8859 text, with CRLF line terminators","size":2509,"md5":"540e4349a043a5e7d3e151fb3ae41aa8","sha1":"3033476fc0b073f05037a71f0e7681a546fb6310","sha256":"a1721f5065295c46f5e2dfff856a0e163aac4606d556389941cfb19389cc9a3e","sha512":"e7ea3bf66ff0a5bce86512aa8076840dd9c6b5fbfdcba4af11e86b87734a86cc0ffed19783a450d88f555845202661471299387a54ccb1f96445344eb61a0652","alerts":{"urlquery":null,"analyzer":null}},{"path":"splash.jpg","filename":"splash.jpg","modified":"","Modified":"2008-12-28T00:20:50+03:00","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, comment: \"File written by Adobe Photoshop� 5.2\", progressive, precision 8, 400x213, components 3","size":11534,"md5":"7f414fe0d8a2dea71d908dd74286710e","sha1":"48ec71303f23a26f4eee2909fda5d8cf625cfa9c","sha256":"29fa91d21649754e14fd578e45dc998058a7ad711fc768fbb6d97116a84a9cd7","sha512":"1dbf4b64fdae3ac63f546eb021a35088315f9836c0b3bf08f7fb7c8f788e7d645687b96f34e3d22cfe6f86f23516306fa195fc932c6d477c7769f2c13783662d","alerts":{"urlquery":null,"analyzer":null}},{"path":"sample.apd","filename":"sample.apd","modified":"","Modified":"2023-02-10T20:13:48+03:00","magic":"data","size":1077676,"md5":"bd9e17fa8033f9f4e217478bfa03ecd0","sha1":"c5c2ba2ac5a1608459a3659cffd0008bb98910fe","sha256":"2da7c509752fcf2e367cb03861d251ef21f7ab60df1f1ac9dead261e9b5bf1d7","sha512":"9bf516712f6e8e0a763303423d7c2172771d828d698becdb78e6015eacc1a5c034105574e625092e6d82b41845d064bd88b48dde8bc6dd75ba5d9e99df3af262","alerts":{"urlquery":null,"analyzer":null}},{"path":"Table 2x2.template","filename":"Table 2x2.template","modified":"","Modified":"2011-07-23T15:04:30+04:00","magic":"Rich Text Format data, version 1, ANSI, code page 1251, default language ID 1049","size":884,"md5":"77713a4c3de510d0339f429f89f42993","sha1":"701c7158feca2812b9e92504458366467db9854f","sha256":"d78393581c53c85bacdb0c4ebf895dec92d8e30a3f421a824867fd4ff89ff9d2","sha512":"88371f566b8d3a7a6ab1b9a2c436e946857675e7284e9d59f2499673d51086e560d992ad496957ff9ac1029d2221cd575b1e269ab0f850db3376ce275a658fbb","alerts":{"urlquery":null,"analyzer":null}},{"path":"TYPE_YOUR_HEADER.template","filename":"TYPE_YOUR_HEADER.template","modified":"","Modified":"2011-07-23T14:58:58+04:00","magic":"Rich Text Format data, version 1, ANSI, code page 1251, default language ID 1049","size":461,"md5":"58d75f264d8092f5821a716615547172","sha1":"a1d5ddee2373b332357903b28c1d7bdd4f010443","sha256":"453ddbc7acd55646d35ef16f2f6c8bdb24ae295d0942bb640c7bf899df4e628a","sha512":"7f9e1ad7ef9fa127b0a8eae5a3f143c1db9ddaa997dbdfad045fcdce9f77ee7bd63a812ff666e81916a7f0e698b517ed22eb81fa97a5109c929923b68306362d","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-11-27","alert":"Scan result 2/69","trigger":"4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","verdict":"suspicious","severity":"","comment":"suspicious - 2/69","link":"https://www.virustotal.com/gui/file/4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-11-29T19:40:49Z","timestamp":1732909249,"ip_dst":{"addr":"172.18.0.16","port":36320,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"91.189.114.23","port":443,"asn":48287,"as":"Jsc Ru-Center","country":"Russia","country_code":"RU"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2024-11-29T19:40:49.440262+0000\",\"flow_id\":453201069434781,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"91.189.114.23\",\"src_port\":443,\"dest_ip\":\"172.18.0.16\",\"dest_port\":36320,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"amlpages.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2024-11-29T19:40:49.354205+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"amlpages.com/Source/amlpages_ru_pe.zip","fqdn":"amlpages.com","domain":"amlpages.com","tld":"com"},"ip":{"addr":"91.189.114.23","port":80,"asn":48287,"as":"Jsc Ru-Center","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-11-29T19:40:49.481Z","timestamp":1732909249481,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Source/amlpages_ru_pe.zip HTTP/1.1\r\nHost: amlpages.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 29 Nov 2024 19:40:49 GMT\r\nContent-Type: application/zip\r\nContent-Length: 6302685\r\nConnection: keep-alive\r\nLast-Modified: Mon, 25 Nov 2024 18:06:15 GMT\r\nETag: \"602bdd-627c096ab1a2c\"\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6302685,"size_decoded":6302685,"mime_type":"application/zip","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"6aec457fd49258d7fd0a38118433540f","sha1":"a3c0047ce0d5f33c592beb5d5fc6f89ec8e9a079","sha256":"4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","sha512":"ca8bbf63d689b45edb09370badb7c6a6aa96e722c4fd540eb158683a3de3d1ff129e73e3e39b84344bd45ef9b45e862bb8d438eb0f98430f16f19fbb81d5a3bf","ssdeep":"196608:vCw41nn2Vk2eFi0cEOhW8S9cU9ivZQlVJIRNqOLLs:KXn2Vn8i0/Oo8e9ivaGRAOLLs","tlshash":"f156331c0b232a2ce673457f09c56755fbd9598b72f06ad287f4e88458e8630c90fe9b","first_seen":"2024-11-26T02:08:46.7558Z","last_seen":"2024-11-29T19:41:23.889174Z","times_seen":6,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":35,"dns":0,"connect":50,"send":0,"wait":48,"receive":583,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-11-27","alert":"Scan result 2/69","trigger":"4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","verdict":"suspicious","severity":"","comment":"suspicious - 2/69","link":"https://www.virustotal.com/gui/file/4154063c6b6c2a9c7c49d736b22be1b1d61338cc06d30593287caa0a6e98ffa0","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml","fqdn":"aus5.mozilla.org","domain":"mozilla.org","tld":"org"},"ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-11-29T19:41:08.534217479Z","timestamp":1732909268534,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1\r\nHost: aus5.mozilla.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\nrule-id: unknown\r\nrule-data-version: unknown\r\ncontent-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2025-01-01-20-48-31.chain; p384ecdsa=Xdxs7FNrtPYIDF6I06VJngwP16yRo0nbYmpIhQKJ2lS6Tn9QgEvFZAO5678UjiCQjOqKvVm-HFZmJwjy6cNphD6QgijkhjdImW4JhORvEuMhaqkvdLQCP70D29erlwe_\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nx-proxy-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Fri, 29 Nov 2024 19:39:23 GMT\r\ncontent-type: text/xml; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-length: 444\r\nage: 105\r\ncache-control: public,max-age=90\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":444,"size_decoded":721,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (332)","md5":"3b324dec137a87ef7e24a30a65b13dd0","sha1":"c0faa95b2f1018e264b3a14aaf50d1003e6c27b3","sha256":"6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463","sha512":"eee5d0a6354c5cfafdba69236359dbb38be1d7cbfd841230c07617fa3d8982751d8ddbe4f3b9c533a277e836b28a2f483d8ddc79aa09573ca9d49fc16341c061","ssdeep":"","tlshash":"54011069bdb5f89100860aa76626c8015a232287e1541888b8df5fc04f9b9b4536f09d","first_seen":"2023-10-13T18:17:52Z","last_seen":"2025-06-20T01:29:36.566077Z","times_seen":185315,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}