{"report_id":"bdcc88cc-40e8-48da-8ef9-99ebd78b443d","version":6,"status":"done","tags":[],"date":"2024-12-04T14:33:17Z","url":{"schema":"http","addr":"www.x360ce.com/Files/x360ce.zip","fqdn":"www.x360ce.com","domain":"x360ce.com","tld":"com"},"ip":{"addr":"62.30.149.144","port":0,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-12T14:33:16Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.x360ce.com","ip":{"addr":"62.30.149.144","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"domain_registered":"2011-09-18","domain_rank":0,"first_seen":"2015-01-09T08:53:16Z","last_seen":"2024-12-02T17:13:05.225503Z","alert_count":0,"request_count":1,"received_data":714,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"github.com","ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"domain_registered":"2007-10-09","domain_rank":1423,"first_seen":"2016-07-13T12:28:22Z","last_seen":"2024-12-04T02:00:34.676305Z","alert_count":0,"request_count":1,"received_data":4333,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"objects.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":134060,"first_seen":"2021-11-01T21:34:29Z","last_seen":"2024-12-04T03:41:37.179229Z","alert_count":1,"request_count":1,"received_data":13450558,"sent_data":952,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aus5.mozilla.org","ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"1998-01-24","domain_rank":2548,"first_seen":"2015-10-27T07:06:24Z","last_seen":"2024-12-04T02:01:02.009726Z","alert_count":0,"request_count":1,"received_data":1218,"sent_data":512,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"425b3e1e66c3ce08449f229c716beedf","sha1":"0aaaa0795d232e41443ad1b298de82f55f75d704","sha256":"908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","sha512":"81942032a261ae5e446829b36d0142f009840b00b645ab82445a4ee1c6e7a50449f425ed8a35d994411672f159f58e1d69eac625c90e4602fa1f8d64b0015199","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":13449768,"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/34226344/98e39380-276a-11eb-8978-bc7c4f3fed9d?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20241204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20241204T143250Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=88053a459c1ae951b58a7c685b3b4ad704135e04f081e63f17daccd3de3e9569\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Dx360ce.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":[{"path":"x360ce.exe","filename":"x360ce.exe","modified":"","Modified":"2020-11-15T17:46:06Z","magic":"PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":15460624,"md5":"be80f3348b240bcee1aa96d33fe0e768","sha1":"40ea5de9a7a15f6e0d891cd1ba4bca8519bb85ed","sha256":"74faf334cb0bdd3e9dfab8c323d4eb3b9b089bcaadc7dbd639d9aa93a4f6f829","sha512":"dfb3b191152981f21180e93597c7b1891da6f10b811db2c8db9f45bbecc9feb54bc032bdd648c7ad1134e9b09e5e2b9705d5e21294e1ae328a4390350745536a","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-12-03","alert":"Scan result 1/67","trigger":"908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","verdict":"suspicious","severity":"","comment":"suspicious - 1/67","link":"https://www.virustotal.com/gui/file/908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"425b3e1e66c3ce08449f229c716beedf","sha1":"0aaaa0795d232e41443ad1b298de82f55f75d704","sha256":"908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","sha512":"81942032a261ae5e446829b36d0142f009840b00b645ab82445a4ee1c6e7a50449f425ed8a35d994411672f159f58e1d69eac625c90e4602fa1f8d64b0015199","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":13449768,"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/34226344/98e39380-276a-11eb-8978-bc7c4f3fed9d?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20241204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20241204T143250Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=88053a459c1ae951b58a7c685b3b4ad704135e04f081e63f17daccd3de3e9569\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Dx360ce.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":[{"path":"x360ce.exe","filename":"x360ce.exe","modified":"","Modified":"2020-11-15T17:46:06Z","magic":"PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections","size":15460624,"md5":"be80f3348b240bcee1aa96d33fe0e768","sha1":"40ea5de9a7a15f6e0d891cd1ba4bca8519bb85ed","sha256":"74faf334cb0bdd3e9dfab8c323d4eb3b9b089bcaadc7dbd639d9aa93a4f6f829","sha512":"dfb3b191152981f21180e93597c7b1891da6f10b811db2c8db9f45bbecc9feb54bc032bdd648c7ad1134e9b09e5e2b9705d5e21294e1ae328a4390350745536a","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-12-03","alert":"Scan result 1/67","trigger":"908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","verdict":"suspicious","severity":"","comment":"suspicious - 1/67","link":"https://www.virustotal.com/gui/file/908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.x360ce.com/Files/x360ce.zip","fqdn":"www.x360ce.com","domain":"x360ce.com","tld":"com"},"ip":{"addr":"62.30.149.144","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-04T14:32:50.282Z","timestamp":1733322770282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x360ce.com","organization":""},"issuer":{"commonName":"GoGetSSL ECC DV CA","organization":"GoGetSSL"},"validity":{"start":"Wed, 07 Aug 2024 00:00:00 GMT","end":"Sun, 07 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BF:04:70:4E:0E:D7:FC:2D:AC:01:E2:A6:3C:5E:8E:35:38:8E:3E:34","sha256":"90:0E:A3:E6:95:14:09:18:5D:40:49:16:A4:01:18:19:24:DF:77:AD:35:08:7F:3C:F3:0A:9A:C2:C8:36:EA:F1"}}},"request":{"raw":"GET /Files/x360ce.zip HTTP/1.1\r\nHost: www.x360ce.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://github.com/x360ce/x360ce/releases/download/4.17.0.0/x360ce.zip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; connect-src *; font-src *; child-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';\r\nreferrer-policy: strict-origin\r\nfeature-policy: camera 'none'; microphone 'none'; payment 'none';\r\nexpect-ct: enforce, max-age=2592000\r\nx-powered-by: \r\ndate: Wed, 04 Dec 2024 14:32:50 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T11:11:49.065596Z","times_seen":13459284,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":97,"dns":0,"connect":35,"send":0,"wait":67,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"github.com/x360ce/x360ce/releases/download/4.17.0.0/x360ce.zip","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-04T14:32:50.459Z","timestamp":1733322770459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0","sha256":"FD:6E:9B:0E:F3:98:BC:D9:04:C3:B2:EC:16:7A:7B:0F:DA:72:01:C9:03:C5:3A:6A:6A:E5:D0:41:43:63:EF:65"}}},"request":{"raw":"GET /x360ce/x360ce/releases/download/4.17.0.0/x360ce.zip HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Wed, 04 Dec 2024 14:32:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://objects.githubusercontent.com/github-production-release-asset-2e65be/34226344/98e39380-276a-11eb-8978-bc7c4f3fed9d?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20241204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20241204T143250Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=88053a459c1ae951b58a7c685b3b4ad704135e04f081e63f17daccd3de3e9569\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Dx360ce.zip\u0026response-content-type=application%2Foctet-stream\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\ncontent-length: 0\r\nx-github-request-id: 6918:3A6663:BF5F77:C2D60C:67506812\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T11:11:49.065596Z","times_seen":13459284,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":106,"dns":2,"connect":23,"send":0,"wait":183,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/34226344/98e39380-276a-11eb-8978-bc7c4f3fed9d?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20241204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20241204T143250Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=88053a459c1ae951b58a7c685b3b4ad704135e04f081e63f17daccd3de3e9569\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Dx360ce.zip\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-04T14:32:50.772Z","timestamp":1733322770772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":"GitHub, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Mar 2024 00:00:00 GMT","end":"Fri, 14 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28","sha256":"09:01:0C:CE:9B:72:21:55:C7:E6:86:B0:77:39:D3:D2:DC:06:05:DE:A1:A4:98:4A:0B:96:5E:18:77:77:26:B5"}}},"request":{"raw":"GET /github-production-release-asset-2e65be/34226344/98e39380-276a-11eb-8978-bc7c4f3fed9d?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20241204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20241204T143250Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=88053a459c1ae951b58a7c685b3b4ad704135e04f081e63f17daccd3de3e9569\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Dx360ce.zip\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: objects.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Tue, 07 Dec 2021 20:45:11 GMT\r\netag: \"0x8D9B9C2767FD48C\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: c39aadbc-c01e-0047-1286-3f8a0e000000\r\nx-ms-version: 2024-08-04\r\nx-ms-creation-time: Tue, 17 Aug 2021 19:14:49 GMT\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\ncontent-disposition: attachment; filename=x360ce.zip\r\nx-ms-server-encrypted: true\r\nvia: 1.1 varnish, 1.1 varnish\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\nage: 3906\r\ndate: Wed, 04 Dec 2024 14:32:51 GMT\r\nx-served-by: cache-iad-kjyo7100032-IAD, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2003, 0\r\nx-timer: S1733322771.857042,VS0,VE3\r\ncontent-length: 13449768\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13449768,"size_decoded":13449768,"mime_type":"application/octet-stream","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"425b3e1e66c3ce08449f229c716beedf","sha1":"0aaaa0795d232e41443ad1b298de82f55f75d704","sha256":"908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","sha512":"81942032a261ae5e446829b36d0142f009840b00b645ab82445a4ee1c6e7a50449f425ed8a35d994411672f159f58e1d69eac625c90e4602fa1f8d64b0015199","ssdeep":"393216:npWZYcR4z9GHzAklmHqaps9I4RO1PT/+nRr10:pWZqzszUHi9APTWnt10","tlshash":"78d633eda6af03fc31bf9075e3159a19116c498d83dbfbc887317d98f94ac8560862c6","first_seen":"2023-06-18T01:55:25Z","last_seen":"2025-07-26T09:19:25.303583Z","times_seen":395,"resource_available":false,"data":null}},"time_used":2065,"timings":{"blocked":67,"dns":1,"connect":26,"send":0,"wait":425,"receive":1507,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-12-03","alert":"Scan result 1/67","trigger":"908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","verdict":"suspicious","severity":"","comment":"suspicious - 1/67","link":"https://www.virustotal.com/gui/file/908babf5e35f2c31922744e1bf78990f9c1edbc5f7c1ce950812e920e60da1e9","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml","fqdn":"aus5.mozilla.org","domain":"mozilla.org","tld":"org"},"ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-12-04T14:33:09.429307765Z","timestamp":1733322789429,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1\r\nHost: aus5.mozilla.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\nrule-id: unknown\r\nrule-data-version: unknown\r\ncontent-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2025-01-22-11-21-23.chain; p384ecdsa=y19L0au4f7Qf4OK6KuAQb9igiLTCVVjtS_m38R0OOxrlHDRlR8XyYgpELFvdRXtkrdA__uMQhHIrRoaXvjgrJy9Bev49rsqNFNf8tDTkl9R2DW4f2bYX29ZefZbUj2Ko\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nx-proxy-cache-status: MISS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Wed, 04 Dec 2024 14:32:12 GMT\r\ncontent-type: text/xml; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-length: 444\r\nage: 57\r\ncache-control: public,max-age=90\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":444,"size_decoded":721,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (332)","md5":"3b324dec137a87ef7e24a30a65b13dd0","sha1":"c0faa95b2f1018e264b3a14aaf50d1003e6c27b3","sha256":"6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463","sha512":"eee5d0a6354c5cfafdba69236359dbb38be1d7cbfd841230c07617fa3d8982751d8ddbe4f3b9c533a277e836b28a2f483d8ddc79aa09573ca9d49fc16341c061","ssdeep":"","tlshash":"54011069bdb5f89100860aa76626c8015a232287e1541888b8df5fc04f9b9b4536f09d","first_seen":"2023-10-13T18:17:52Z","last_seen":"2025-06-20T01:29:36.566077Z","times_seen":185315,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}