{"report_id":"e26efd21-9b03-4c68-9dc4-7d3487c4af2f","version":6,"status":"done","tags":[],"date":"2025-05-10T12:30:51Z","url":{"schema":"http","addr":"ntscorp.ru/dev-c/ScriptHookV_3521.0_814.9.zip","fqdn":"ntscorp.ru","domain":"ntscorp.ru","tld":"ru"},"ip":{"addr":"104.21.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-19T12:30:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ntscorp.ru","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-06-04","domain_rank":927641,"first_seen":"2012-07-01T20:16:28Z","last_seen":"2025-05-08T03:43:07.93887Z","alert_count":0,"request_count":1,"received_data":1721298,"sent_data":513,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"0437fde5ff68dbc5dc540e3acdf72868","sha1":"11d4df7a3a91f5e5459a7c56cfb6ca43f2ae79f9","sha256":"f32fb999c6b173073d0ec0576b3b016728ab46c345deab06d7d4cea6fdb21ca5","sha512":"6feed57b4cc38aa17d8dd3359f66a71909ef3cd71e65e6b16336b631a91064be9cf1dae6b73dd29755a86ad309408f2f8c1bc45fcaa1ebe8d49a258df38c22e0","magic":"Zip archive data, at least v2.0 to extract, compression method=store","size":1720579,"url":{"schema":"https","addr":"ntscorp.ru/dev-c/ScriptHookV_3521.0_814.9.zip","fqdn":"ntscorp.ru","domain":"ntscorp.ru","tld":"ru"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":[{"path":"bin/args.txt","filename":"args.txt","modified":"2024-12-12T03:13:09+03:00","Modified":"","magic":"ASCII text, with no line terminators","size":27,"md5":"8731d4770140cb8eca6c53e77b39fed4","sha1":"6df4b181fa1d0edb730d589cf3033c0bcaada76e","sha256":"c43ab20adcb17d900db8dda629036ca79a42965a3afda7fcaaf8375c55768384","sha512":"0b93eac88d7cd4a0a709c57003717cb10d794e62df4070235fc0122dfc38741e0045e70309de0c8df39bd236dc6d672af1b84fc5646b856c25ffc1fa0742292f","alerts":{"urlquery":null,"analyzer":null}},{"path":"bin/dinput8.dll","filename":"dinput8.dll","modified":"2015-05-02T08:59:14+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":131072,"md5":"c9b973183908a6631b31ca29f863b4d1","sha1":"6b32c09f1404be8f9eb21e6c1b8955f4bf00e51d","sha256":"9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d","sha512":"aa63cfba16d5c134b7478fc27b32e4b1e588f5910205e050d94b59a15f95d886ecaa4c2d494c7c3496b2bb8f386e7a540ec999190714b6e048c6bc07d1a43755","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-07","alert":"Scan result 1/72","trigger":"9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d","meta":null}]}},{"path":"bin/NativeTrainer.asi","filename":"NativeTrainer.asi","modified":"2017-03-17T13:43:47+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":216576,"md5":"e107b94ae23ec9a56bfa1faaf7118e85","sha1":"191d9a3a09ee0cfc0754226988c0373a5f074068","sha256":"f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf","sha512":"86720525ebfa76628a4540a0344de29cf7135ed89dc0c38665fcc2d9ea83c0a2b9341f7d8945e54083317e2dbbb120c68afeb4a7cbbe182db5711c3638d04e90","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-07","alert":"Scan result 2/72","trigger":"f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf","meta":null}]}},{"path":"bin/ScriptHookV.dll","filename":"ScriptHookV.dll","modified":"2025-05-10T14:14:14+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":1979904,"md5":"d2de2ead86ba12f1ff9041e390461f3a","sha1":"38d8dff40122451edf1dd3033c5190eb1bcd0277","sha256":"71cc241edd3bd106870726b2f5db0d593a8ff8530ea9758cdfabc96eabc162d4","sha512":"bf92e99f542d50e343b482ac9c9882bc0c275f19e79ed5ead200035e226ab78b043ca50cea78f6d2ed63b731d886420c45b5d9254be27e83c61afa83b187f841","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-10","alert":"Scan result 2/71","trigger":"71cc241edd3bd106870726b2f5db0d593a8ff8530ea9758cdfabc96eabc162d4","verdict":"suspicious","severity":"","comment":"suspicious - 2/71","link":"https://www.virustotal.com/gui/file/71cc241edd3bd106870726b2f5db0d593a8ff8530ea9758cdfabc96eabc162d4","meta":null}]}},{"path":"bin/xinput1_4.dll","filename":"xinput1_4.dll","modified":"2025-03-22T20:59:14+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":133632,"md5":"5c5f65caf05eaf8168378934f7896498","sha1":"9c0123815df86533b02666b76e40d837c85482d2","sha256":"a1a8bde409ed75d94a0439c37cf881bc354b13c2f8cd32e4bef3b10f308f1392","sha512":"6a2ccce90437ccc72fd16c278fc210d8befa24d313c2970bf6f4d17be44dfc37cfe72b8c0bb3df9b2c9f2f9cfc919fb80744871a2c58e76a9f9f25771d9cb74d","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-07","alert":"Scan result 1/72","trigger":"a1a8bde409ed75d94a0439c37cf881bc354b13c2f8cd32e4bef3b10f308f1392","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/a1a8bde409ed75d94a0439c37cf881bc354b13c2f8cd32e4bef3b10f308f1392","meta":null}]}},{"path":"HOW_TO_INSTALL_2025.txt","filename":"HOW_TO_INSTALL_2025.txt","modified":"2024-12-12T18:09:59+03:00","Modified":"","magic":"ASCII text, with CRLF line terminators","size":940,"md5":"7f307b412cb5863d1bf34f9901d1484d","sha1":"d7741b70796a734bc76880ed43b15f51b597b14e","sha256":"e88fbbc88877e42f28c2f83736582181e56cf169ed4ff25ff7e88a26bd1d9169","sha512":"d0cb840fd7aebda7704feef0b540fd247979072a2d03bb558a5715bf916c7fa87c8223569845b48d30b5785479019d8206392be44cc16a6a34863fad8a83cd6b","alerts":{"urlquery":null,"analyzer":null}},{"path":"readme.txt","filename":"readme.txt","modified":"2025-05-10T14:26:18+03:00","Modified":"","magic":"ASCII text, with CRLF line terminators","size":8252,"md5":"3ea697ced1588703f35645c403576e3c","sha1":"90bc5060a9cb51d6995ca70a3f1f2d7cb43e90c3","sha256":"201f91019e6d1d2e00de7f8af1bb8be641bd54cf930c7407d79b3dcd33cf2568","sha512":"00e56e6899d9c2444793878449e59377dfcd165255cf0bcbc863c53ee06ccca0222674db50d9166eea509f9ee170a4b4359f81cbaf74364fad03887f2ebf1e84","alerts":{"urlquery":null,"analyzer":null}},{"path":"www.dev-c.com.url","filename":"www.dev-c.com.url","modified":"2015-04-23T04:12:11+03:00","Modified":"","magic":"MS Windows 95 Internet shortcut text (URL=\u003chttp://dev-c.com\u003e), ASCII text, with CRLF line terminators","size":42,"md5":"6d1062a38a2c835b32bb73df4af90fc0","sha1":"6283703aed023c2a67ca5caa524f352885d0f3f9","sha256":"8250e69c27be10f67c387b69208c4df4aa7823c487a58abffb18a47c02e5ac58","sha512":"ae3f4280cc87311f367a9ecfb355024d242de0ed1f4dd0733580d9b3e8d802888b2fa2e7ad867ba9ab398eaeab4bdb8e3bfcb245130470d5f80981c5e796460a","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0437fde5ff68dbc5dc540e3acdf72868","sha1":"11d4df7a3a91f5e5459a7c56cfb6ca43f2ae79f9","sha256":"f32fb999c6b173073d0ec0576b3b016728ab46c345deab06d7d4cea6fdb21ca5","sha512":"6feed57b4cc38aa17d8dd3359f66a71909ef3cd71e65e6b16336b631a91064be9cf1dae6b73dd29755a86ad309408f2f8c1bc45fcaa1ebe8d49a258df38c22e0","magic":"Zip archive data, at least v2.0 to extract, compression method=store","size":1720579,"url":{"schema":"https","addr":"ntscorp.ru/dev-c/ScriptHookV_3521.0_814.9.zip","fqdn":"ntscorp.ru","domain":"ntscorp.ru","tld":"ru"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":[{"path":"bin/args.txt","filename":"args.txt","modified":"2024-12-12T03:13:09+03:00","Modified":"","magic":"ASCII text, with no line terminators","size":27,"md5":"8731d4770140cb8eca6c53e77b39fed4","sha1":"6df4b181fa1d0edb730d589cf3033c0bcaada76e","sha256":"c43ab20adcb17d900db8dda629036ca79a42965a3afda7fcaaf8375c55768384","sha512":"0b93eac88d7cd4a0a709c57003717cb10d794e62df4070235fc0122dfc38741e0045e70309de0c8df39bd236dc6d672af1b84fc5646b856c25ffc1fa0742292f","alerts":{"urlquery":null,"analyzer":null}},{"path":"bin/dinput8.dll","filename":"dinput8.dll","modified":"2015-05-02T08:59:14+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":131072,"md5":"c9b973183908a6631b31ca29f863b4d1","sha1":"6b32c09f1404be8f9eb21e6c1b8955f4bf00e51d","sha256":"9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d","sha512":"aa63cfba16d5c134b7478fc27b32e4b1e588f5910205e050d94b59a15f95d886ecaa4c2d494c7c3496b2bb8f386e7a540ec999190714b6e048c6bc07d1a43755","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-07","alert":"Scan result 1/72","trigger":"9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d","meta":null}]}},{"path":"bin/NativeTrainer.asi","filename":"NativeTrainer.asi","modified":"2017-03-17T13:43:47+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":216576,"md5":"e107b94ae23ec9a56bfa1faaf7118e85","sha1":"191d9a3a09ee0cfc0754226988c0373a5f074068","sha256":"f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf","sha512":"86720525ebfa76628a4540a0344de29cf7135ed89dc0c38665fcc2d9ea83c0a2b9341f7d8945e54083317e2dbbb120c68afeb4a7cbbe182db5711c3638d04e90","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-07","alert":"Scan result 2/72","trigger":"f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf","meta":null}]}},{"path":"bin/ScriptHookV.dll","filename":"ScriptHookV.dll","modified":"2025-05-10T14:14:14+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":1979904,"md5":"d2de2ead86ba12f1ff9041e390461f3a","sha1":"38d8dff40122451edf1dd3033c5190eb1bcd0277","sha256":"71cc241edd3bd106870726b2f5db0d593a8ff8530ea9758cdfabc96eabc162d4","sha512":"bf92e99f542d50e343b482ac9c9882bc0c275f19e79ed5ead200035e226ab78b043ca50cea78f6d2ed63b731d886420c45b5d9254be27e83c61afa83b187f841","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-10","alert":"Scan result 2/71","trigger":"71cc241edd3bd106870726b2f5db0d593a8ff8530ea9758cdfabc96eabc162d4","verdict":"suspicious","severity":"","comment":"suspicious - 2/71","link":"https://www.virustotal.com/gui/file/71cc241edd3bd106870726b2f5db0d593a8ff8530ea9758cdfabc96eabc162d4","meta":null}]}},{"path":"bin/xinput1_4.dll","filename":"xinput1_4.dll","modified":"2025-03-22T20:59:14+03:00","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections","size":133632,"md5":"5c5f65caf05eaf8168378934f7896498","sha1":"9c0123815df86533b02666b76e40d837c85482d2","sha256":"a1a8bde409ed75d94a0439c37cf881bc354b13c2f8cd32e4bef3b10f308f1392","sha512":"6a2ccce90437ccc72fd16c278fc210d8befa24d313c2970bf6f4d17be44dfc37cfe72b8c0bb3df9b2c9f2f9cfc919fb80744871a2c58e76a9f9f25771d9cb74d","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-07","alert":"Scan result 1/72","trigger":"a1a8bde409ed75d94a0439c37cf881bc354b13c2f8cd32e4bef3b10f308f1392","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/a1a8bde409ed75d94a0439c37cf881bc354b13c2f8cd32e4bef3b10f308f1392","meta":null}]}},{"path":"HOW_TO_INSTALL_2025.txt","filename":"HOW_TO_INSTALL_2025.txt","modified":"2024-12-12T18:09:59+03:00","Modified":"","magic":"ASCII text, with CRLF line terminators","size":940,"md5":"7f307b412cb5863d1bf34f9901d1484d","sha1":"d7741b70796a734bc76880ed43b15f51b597b14e","sha256":"e88fbbc88877e42f28c2f83736582181e56cf169ed4ff25ff7e88a26bd1d9169","sha512":"d0cb840fd7aebda7704feef0b540fd247979072a2d03bb558a5715bf916c7fa87c8223569845b48d30b5785479019d8206392be44cc16a6a34863fad8a83cd6b","alerts":{"urlquery":null,"analyzer":null}},{"path":"readme.txt","filename":"readme.txt","modified":"2025-05-10T14:26:18+03:00","Modified":"","magic":"ASCII text, with CRLF line terminators","size":8252,"md5":"3ea697ced1588703f35645c403576e3c","sha1":"90bc5060a9cb51d6995ca70a3f1f2d7cb43e90c3","sha256":"201f91019e6d1d2e00de7f8af1bb8be641bd54cf930c7407d79b3dcd33cf2568","sha512":"00e56e6899d9c2444793878449e59377dfcd165255cf0bcbc863c53ee06ccca0222674db50d9166eea509f9ee170a4b4359f81cbaf74364fad03887f2ebf1e84","alerts":{"urlquery":null,"analyzer":null}},{"path":"www.dev-c.com.url","filename":"www.dev-c.com.url","modified":"2015-04-23T04:12:11+03:00","Modified":"","magic":"MS Windows 95 Internet shortcut text (URL=\u003chttp://dev-c.com\u003e), ASCII text, with CRLF line terminators","size":42,"md5":"6d1062a38a2c835b32bb73df4af90fc0","sha1":"6283703aed023c2a67ca5caa524f352885d0f3f9","sha256":"8250e69c27be10f67c387b69208c4df4aa7823c487a58abffb18a47c02e5ac58","sha512":"ae3f4280cc87311f367a9ecfb355024d242de0ed1f4dd0733580d9b3e8d802888b2fa2e7ad867ba9ab398eaeab4bdb8e3bfcb245130470d5f80981c5e796460a","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ntscorp.ru/dev-c/ScriptHookV_3521.0_814.9.zip","fqdn":"ntscorp.ru","domain":"ntscorp.ru","tld":"ru"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-10T12:30:18.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntscorp.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Mar 2025 09:08:05 GMT","end":"Thu, 12 Jun 2025 10:06:51 GMT"},"fingerprint":{"sha1":"EE:1D:41:B9:8F:5D:04:B8:00:98:1E:52:06:A9:9F:95:68:14:71:EB","sha256":"9B:C3:1C:2D:E9:46:AF:B1:D5:50:2C:57:BF:B0:60:FF:99:B1:AC:76:49:C0:A2:7B:D5:6B:E7:B0:B4:EF:43:4F"}}},"request":{"raw":"GET /dev-c/ScriptHookV_3521.0_814.9.zip HTTP/1.1\r\nHost: ntscorp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 May 2025 12:30:18 GMT\r\ncontent-type: application/x-zip-compressed\r\ncontent-length: 1720579\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 10 May 2025 11:39:34 GMT\r\netag: \"5a2fd633a0c1db1:0\"\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 2702\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LFH977FofBwvrm%2F6XqpXiCiKg5WxgFy8AMw0%2FcmQhzzABZDhXmudTZ%2B1PnBIDR0Xx6QQxWG13coO%2FSPNOhWoHabTKy5Mie4KocGTELRC3tDQH0dQSL2SR9JS0cz\"}]}\r\ncf-ray: 93d972778c6256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1720579,"size_decoded":0,"mime_type":"application/x-zip-compressed","magic":"Zip archive data, at least v2.0 to extract, compression method=store","md5":"0437fde5ff68dbc5dc540e3acdf72868","sha1":"11d4df7a3a91f5e5459a7c56cfb6ca43f2ae79f9","sha256":"f32fb999c6b173073d0ec0576b3b016728ab46c345deab06d7d4cea6fdb21ca5","sha512":"6feed57b4cc38aa17d8dd3359f66a71909ef3cd71e65e6b16336b631a91064be9cf1dae6b73dd29755a86ad309408f2f8c1bc45fcaa1ebe8d49a258df38c22e0","ssdeep":"49152:iZw41RjxkCYPO+mK6HUbnVIYReglGrCmgDBB:iZw41L+OVlU7VHeglUf+B","tlshash":"008533d956fcb1fac90aa0c7ba44cf2b76c393c1e601b06867c014cebe4c5e9096e61d","first_seen":"2025-05-10T12:30:56.782472Z","last_seen":"2025-05-29T15:01:31.554268Z","times_seen":12,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":39,"dns":2,"connect":1,"send":0,"wait":19,"receive":239,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}