Exes_5f16c706_exe.json

[*] MalFamily: ""

[*] MalScore: 10.0

[*] File Name: "Exes_5f16c706.exe"
[*] File Size: 353792
[*] File Type: "PE32 executable (console) Intel 80386, for MS Windows"
[*] SHA256: "b8aa9749665008a8533dbcae04e77b48dc64056d5ebc4a157766acecb800a115"
[*] MD5: "ea1c7f57c71dc0360596e5bbb1bed5d8"
[*] SHA1: "993869f834b55daa3c1022bfdad75e8a1e74fdb4"
[*] SHA512: "68bdb4458bf6d1235ca42d0fcb57cb69a14984ff2d9b4253ed35f84761c9c8c64293936bfab9e09e60702493968365bf81b33cc068f19c301102225407b84ac9"
[*] CRC32: "5F16C706"
[*] SSDEEP: "6144:knDQFhJ6W5gbOV9ZLmuCGd88w4ove/AAAANDlwEj1Z:wkJ6WS6VzXLC8w7aZ"

[*] Process Execution: [
    "Exes_5f16c706.exe"
]

[*] Signatures Detected: [
    {
        "Description": "Creates RWX memory",
        "Details": []
    },
    {
        "Description": "Performs some HTTP requests",
        "Details": [
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D"
            },
            {
                "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D"
            },
            {
                "url": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D"
            },
            {
                "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D"
            },
            {
                "url": "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D"
            },
            {
                "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D"
            },
            {
                "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D"
            },
            {
                "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D"
            },
            {
                "url": "http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D"
            },
            {
                "url": "http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D"
            },
            {
                "url": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D"
            },
            {
                "url": "http://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D"
            },
            {
                "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D"
            },
            {
                "url": "http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D"
            },
            {
                "url": "http://redirector.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe"
            },
            {
                "url": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes"
            }
        ]
    },
    {
        "Description": "File has been identified by 27 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "FireEye": "Generic.mg.ea1c7f57c71dc036"
            },
            {
                "McAfee": "RDN/Generic.dx"
            },
            {
                "Cylance": "Unsafe"
            },
            {
                "K7GW": "Trojan ( 0054ff161 )"
            },
            {
                "K7AntiVirus": "Trojan ( 0054ff161 )"
            },
            {
                "Symantec": "ML.Attribute.HighConfidence"
            },
            {
                "APEX": "Malicious"
            },
            {
                "Paloalto": "generic.ml"
            },
            {
                "Kaspersky": "UDS:DangerousObject.Multi.Generic"
            },
            {
                "Avast": "Win32:PWSX-gen [Trj]"
            },
            {
                "F-Secure": "Heuristic.HEUR/AGEN.1037388"
            },
            {
                "DrWeb": "Trojan.Inject3.16937"
            },
            {
                "McAfee-GW-Edition": "Artemis!Trojan"
            },
            {
                "Trapmine": "malicious.high.ml.score"
            },
            {
                "SentinelOne": "DFI - Suspicious PE"
            },
            {
                "ESET-NOD32": "a variant of Win32/Kryptik.GTWJ"
            },
            {
                "Avira": "HEUR/AGEN.1037388"
            },
            {
                "Microsoft": "Trojan:Win32/Fuerboos.E!cl"
            },
            {
                "AegisLab": "Trojan.Multi.Generic.4!c"
            },
            {
                "ZoneAlarm": "Trojan.Win32.Zudochka.vh"
            },
            {
                "Acronis": "suspicious"
            },
            {
                "Malwarebytes": "Trojan.MalPack.RES"
            },
            {
                "TrendMicro-HouseCall": "TROJ_GEN.R002H0AFB19"
            },
            {
                "Fortinet": "W32/Kryptik.GTWJ!tr"
            },
            {
                "AVG": "Win32:PWSX-gen [Trj]"
            },
            {
                "CrowdStrike": "win/malicious_confidence_80% (W)"
            },
            {
                "Qihoo-360": "Win32/Trojan.PWS.d75"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: [
    "DBWinMutex"
]

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: [
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D HTTP/1.1\r\nCache-Control: max-age = 128165\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:02:13 GMT\r\nIf-None-Match: \"5c961235-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D HTTP/1.1\r\nCache-Control: max-age = 143038\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 15:00:07 GMT\r\nIf-None-Match: \"5c9649f7-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.pki.goog",
        "version": "1.1",
        "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D",
        "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D HTTP/1.1\r\nCache-Control: max-age = 89056\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Mar 2019 18:30:24 GMT\r\nIf-None-Match: \"5c9529c0-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "crl.microsoft.com",
        "version": "1.1",
        "path": "/pki/crl/products/MicrosoftTimeStampPCA.crl",
        "data": "GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Feb 2019 02:02:49 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.comodoca.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D HTTP/1.1\r\nCache-Control: max-age = 94804\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.pki.goog",
        "version": "1.1",
        "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D",
        "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D HTTP/1.1\r\nCache-Control: max-age = 108232\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Mar 2019 23:50:01 GMT\r\nIf-None-Match: \"5c9574a9-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "www.download.windowsupdate.com",
        "version": "1.1",
        "path": "/msdownload/update/v3/static/trustedr/en/authrootstl.cab",
        "data": "GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Feb 2019 16:53:13 GMT\r\nIf-None-Match: \"80e22c19cfcad41:0\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: www.download.windowsupdate.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "crl.microsoft.com",
        "version": "1.1",
        "path": "/pki/crl/products/MicCodSigPCA_08-31-2010.crl",
        "data": "GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 14 Feb 2019 06:01:18 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D HTTP/1.1\r\nCache-Control: max-age = 93156\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 04:40:45 GMT\r\nIf-None-Match: \"5c8c7e4d-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D HTTP/1.1\r\nCache-Control: max-age = 149079\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:10:47 GMT\r\nIf-None-Match: \"5c961437-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D HTTP/1.1\r\nCache-Control: max-age = 148251\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 18:10:24 GMT\r\nIf-None-Match: \"5c8d3c10-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.pki.goog",
        "version": "1.1",
        "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D",
        "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.pki.goog",
        "version": "1.1",
        "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D",
        "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D HTTP/1.1\r\nCache-Control: max-age = 126990\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 10:41:16 GMT\r\nIf-None-Match: \"5c960d4c-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.pki.goog",
        "version": "1.1",
        "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D",
        "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.msocsp.com",
        "version": "1.1",
        "path": "/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D",
        "data": "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 17:46:18 GMT\r\nIf-None-Match: \"dd54d75d4688b8dc62b087df4e04af258704c48b\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.msocsp.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.thawte.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D HTTP/1.1\r\nCache-Control: max-age = 320712\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Wed, 20 Mar 2019 11:42:01 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.thawte.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.usertrust.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D HTTP/1.1\r\nCache-Control: max-age = 94765\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.usertrust.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "th.symcd.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D HTTP/1.1\r\nCache-Control: max-age = 386377\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 21 Mar 2019 05:58:32 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: th.symcd.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D HTTP/1.1\r\nCache-Control: max-age = 142986\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Tue, 28 May 2019 07:40:28 GMT\r\nIf-None-Match: \"5cece5ec-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.digicert.com",
        "version": "1.1",
        "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D",
        "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D HTTP/1.1\r\nCache-Control: max-age = 161796\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Tue, 28 May 2019 13:00:33 GMT\r\nIf-None-Match: \"5ced30f1-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "ocsp.pki.goog",
        "version": "1.1",
        "path": "/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D",
        "data": "GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl",
        "user-agent": "Microsoft-CryptoAPI/6.1",
        "method": "GET",
        "host": "crl.microsoft.com",
        "version": "1.1",
        "path": "/pki/crl/products/microsoftrootcert.crl",
        "data": "GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 07 Mar 2019 06:00:16 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://redirector.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe",
        "user-agent": "Microsoft BITS/7.5",
        "method": "HEAD",
        "host": "redirector.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe",
        "data": "HEAD /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: redirector.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "HEAD",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "HEAD /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=0-6765\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=6766-16398\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=16399-25975\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=25976-35834\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=35835-56596\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=56597-100612\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=100613-186318\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=186319-318328\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=318329-571088\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=571089-901151\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=901152-2320804\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=2320805-5153836\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=5153837-10851727\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=10851728-21023122\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    },
    {
        "count": 1,
        "body": "",
        "uri": "http://r15---sn-bvvbax-2ime.gvt1.com/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "user-agent": "Microsoft BITS/7.5",
        "method": "GET",
        "host": "r15---sn-bvvbax-2ime.gvt1.com",
        "version": "1.1",
        "path": "/edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes",
        "data": "GET /edgedl/release2/chrome/APFK-8M7gy6B_75.0.3770.90/75.0.3770.90_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=70.162.191.80&mm=28&mn=sn-bvvbax-2ime&ms=nvh&mt=1560480450&mv=m&nh=EAI&pl=16&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Wed, 12 Jun 2019 16:40:08 GMT\r\nRange: bytes=21023123-33512703\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r15---sn-bvvbax-2ime.gvt1.com\r\n\r\n",
        "port": 80
    }
]

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "VirtualProtect",
                        "address": "0x40e000"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x40e004"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x40e008"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x40e00c"
                    },
                    {
                        "name": "CreateFileW",
                        "address": "0x40e010"
                    },
                    {
                        "name": "DecodePointer",
                        "address": "0x40e014"
                    },
                    {
                        "name": "WriteConsoleW",
                        "address": "0x40e018"
                    },
                    {
                        "name": "SetFilePointerEx",
                        "address": "0x40e01c"
                    },
                    {
                        "name": "GetConsoleMode",
                        "address": "0x40e020"
                    },
                    {
                        "name": "GetConsoleCP",
                        "address": "0x40e024"
                    },
                    {
                        "name": "FlushFileBuffers",
                        "address": "0x40e028"
                    },
                    {
                        "name": "HeapReAlloc",
                        "address": "0x40e02c"
                    },
                    {
                        "name": "HeapSize",
                        "address": "0x40e030"
                    },
                    {
                        "name": "GetProcessHeap",
                        "address": "0x40e034"
                    },
                    {
                        "name": "GetStringTypeW",
                        "address": "0x40e038"
                    },
                    {
                        "name": "GetFileType",
                        "address": "0x40e03c"
                    },
                    {
                        "name": "SetStdHandle",
                        "address": "0x40e040"
                    },
                    {
                        "name": "LCMapStringW",
                        "address": "0x40e044"
                    },
                    {
                        "name": "CompareStringW",
                        "address": "0x40e048"
                    },
                    {
                        "name": "SetEnvironmentVariableA",
                        "address": "0x40e04c"
                    },
                    {
                        "name": "FreeEnvironmentStringsW",
                        "address": "0x40e050"
                    },
                    {
                        "name": "GetEnvironmentStringsW",
                        "address": "0x40e054"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x40e058"
                    },
                    {
                        "name": "GetOEMCP",
                        "address": "0x40e05c"
                    },
                    {
                        "name": "IsValidCodePage",
                        "address": "0x40e060"
                    },
                    {
                        "name": "FindNextFileA",
                        "address": "0x40e064"
                    },
                    {
                        "name": "FindFirstFileExA",
                        "address": "0x40e068"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x40e06c"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x40e070"
                    },
                    {
                        "name": "HeapAlloc",
                        "address": "0x40e074"
                    },
                    {
                        "name": "HeapFree",
                        "address": "0x40e078"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x40e07c"
                    },
                    {
                        "name": "GetCommandLineW",
                        "address": "0x40e080"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x40e084"
                    },
                    {
                        "name": "GetModuleHandleExW",
                        "address": "0x40e088"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x40e08c"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x40e090"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x40e094"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x40e098"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x40e09c"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x40e0a0"
                    },
                    {
                        "name": "LoadLibraryExW",
                        "address": "0x40e0a4"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x40e0a8"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x40e0ac"
                    },
                    {
                        "name": "TlsFree",
                        "address": "0x40e0b0"
                    },
                    {
                        "name": "TlsSetValue",
                        "address": "0x40e0b4"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x40e0b8"
                    },
                    {
                        "name": "TlsAlloc",
                        "address": "0x40e0bc"
                    },
                    {
                        "name": "InitializeCriticalSectionAndSpinCount",
                        "address": "0x40e0c0"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x40e0c4"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x40e0c8"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x40e0cc"
                    },
                    {
                        "name": "SetLastError",
                        "address": "0x40e0d0"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x40e0d4"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x40e0d8"
                    },
                    {
                        "name": "TerminateProcess",
                        "address": "0x40e0dc"
                    },
                    {
                        "name": "GetCurrentProcess",
                        "address": "0x40e0e0"
                    },
                    {
                        "name": "GetModuleHandleW",
                        "address": "0x40e0e4"
                    },
                    {
                        "name": "IsProcessorFeaturePresent",
                        "address": "0x40e0e8"
                    },
                    {
                        "name": "GetStartupInfoW",
                        "address": "0x40e0ec"
                    },
                    {
                        "name": "SetUnhandledExceptionFilter",
                        "address": "0x40e0f0"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x40e0f4"
                    },
                    {
                        "name": "IsDebuggerPresent",
                        "address": "0x40e0f8"
                    },
                    {
                        "name": "InitializeSListHead",
                        "address": "0x40e0fc"
                    },
                    {
                        "name": "GetSystemTimeAsFileTime",
                        "address": "0x40e100"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x40e104"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x40e108"
                    },
                    {
                        "name": "QueryPerformanceCounter",
                        "address": "0x40e10c"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x40e110"
                    }
                ],
                "dll": "KERNEL32.dll"
            },
            {
                "imports": [
                    {
                        "name": null,
                        "address": "0x40e1e8"
                    },
                    {
                        "name": "AddPrinterA",
                        "address": "0x40e1ec"
                    },
                    {
                        "name": "GetPrinterDataW",
                        "address": "0x40e1f0"
                    },
                    {
                        "name": "AddPrinterDriverW",
                        "address": "0x40e1f4"
                    },
                    {
                        "name": "StartDocDlgA",
                        "address": "0x40e1f8"
                    },
                    {
                        "name": "EnumPrinterDriversA",
                        "address": "0x40e1fc"
                    },
                    {
                        "name": "EnumFormsW",
                        "address": "0x40e200"
                    },
                    {
                        "name": "EnumPrintProcessorsA",
                        "address": "0x40e204"
                    },
                    {
                        "name": "GetJobW",
                        "address": "0x40e208"
                    },
                    {
                        "name": "FindClosePrinterChangeNotification",
                        "address": "0x40e20c"
                    },
                    {
                        "name": null,
                        "address": "0x40e210"
                    },
                    {
                        "name": "DeletePrintProvidorA",
                        "address": "0x40e214"
                    },
                    {
                        "name": "CommitSpoolData",
                        "address": "0x40e218"
                    },
                    {
                        "name": "SetJobA",
                        "address": "0x40e21c"
                    },
                    {
                        "name": "AddPrinterDriverA",
                        "address": "0x40e220"
                    },
                    {
                        "name": "AddJobW",
                        "address": "0x40e224"
                    },
                    {
                        "name": "DeletePrintProvidorW",
                        "address": "0x40e228"
                    },
                    {
                        "name": "EnumPrintProcessorDatatypesW",
                        "address": "0x40e22c"
                    },
                    {
                        "name": "AddPortExA",
                        "address": "0x40e230"
                    },
                    {
                        "name": "AddPortA",
                        "address": "0x40e234"
                    },
                    {
                        "name": "DeletePrinterDriverExW",
                        "address": "0x40e238"
                    },
                    {
                        "name": null,
                        "address": "0x40e23c"
                    },
                    {
                        "name": "AddMonitorW",
                        "address": "0x40e240"
                    },
                    {
                        "name": null,
                        "address": "0x40e244"
                    }
                ],
                "dll": "WINSPOOL.DRV"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x40e188"
                    },
                    {
                        "name": "BSTR_UserMarshal",
                        "address": "0x40e18c"
                    },
                    {
                        "name": "VarI1FromI4",
                        "address": "0x40e190"
                    },
                    {
                        "name": "VarUI1FromI1",
                        "address": "0x40e194"
                    },
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x40e198"
                    },
                    {
                        "name": "VarCyRound",
                        "address": "0x40e19c"
                    },
                    {
                        "name": "VARIANT_UserSize",
                        "address": "0x40e1a0"
                    },
                    {
                        "name": "VarNot",
                        "address": "0x40e1a4"
                    },
                    {
                        "name": "VarCyFromR8",
                        "address": "0x40e1a8"
                    },
                    {
                        "name": "VarUI1FromUI4",
                        "address": "0x40e1ac"
                    },
                    {
                        "name": "SafeArraySetRecordInfo",
                        "address": "0x40e1b0"
                    },
                    {
                        "name": "VarUI2FromDate",
                        "address": "0x40e1b4"
                    },
                    {
                        "name": "OleIconToCursor",
                        "address": "0x40e1b8"
                    },
                    {
                        "name": "SafeArrayGetDim",
                        "address": "0x40e1bc"
                    },
                    {
                        "name": "LoadTypeLib",
                        "address": "0x40e1c0"
                    },
                    {
                        "name": "VarBoolFromUI1",
                        "address": "0x40e1c4"
                    },
                    {
                        "name": "VarDecRound",
                        "address": "0x40e1c8"
                    },
                    {
                        "name": "VarCyFromBool",
                        "address": "0x40e1cc"
                    },
                    {
                        "name": "VarR4FromCy",
                        "address": "0x40e1d0"
                    },
                    {
                        "name": "VARIANT_UserUnmarshal",
                        "address": "0x40e1d4"
                    },
                    {
                        "name": "VarBstrFromUI4",
                        "address": "0x40e1d8"
                    },
                    {
                        "name": "VarBstrFromCy",
                        "address": "0x40e1dc"
                    },
                    {
                        "name": "GetRecordInfoFromGuids",
                        "address": "0x40e1e0"
                    }
                ],
                "dll": "OLEAUT32.dll"
            },
            {
                "imports": [
                    {
                        "name": null,
                        "address": "0x40e118"
                    },
                    {
                        "name": null,
                        "address": "0x40e11c"
                    },
                    {
                        "name": null,
                        "address": "0x40e120"
                    },
                    {
                        "name": null,
                        "address": "0x40e124"
                    },
                    {
                        "name": null,
                        "address": "0x40e128"
                    },
                    {
                        "name": null,
                        "address": "0x40e12c"
                    },
                    {
                        "name": null,
                        "address": "0x40e130"
                    },
                    {
                        "name": null,
                        "address": "0x40e134"
                    },
                    {
                        "name": null,
                        "address": "0x40e138"
                    },
                    {
                        "name": null,
                        "address": "0x40e13c"
                    },
                    {
                        "name": null,
                        "address": "0x40e140"
                    },
                    {
                        "name": null,
                        "address": "0x40e144"
                    },
                    {
                        "name": null,
                        "address": "0x40e148"
                    },
                    {
                        "name": null,
                        "address": "0x40e14c"
                    },
                    {
                        "name": null,
                        "address": "0x40e150"
                    },
                    {
                        "name": null,
                        "address": "0x40e154"
                    },
                    {
                        "name": null,
                        "address": "0x40e158"
                    },
                    {
                        "name": null,
                        "address": "0x40e15c"
                    },
                    {
                        "name": null,
                        "address": "0x40e160"
                    },
                    {
                        "name": null,
                        "address": "0x40e164"
                    },
                    {
                        "name": null,
                        "address": "0x40e168"
                    },
                    {
                        "name": null,
                        "address": "0x40e16c"
                    },
                    {
                        "name": null,
                        "address": "0x40e170"
                    },
                    {
                        "name": null,
                        "address": "0x40e174"
                    },
                    {
                        "name": null,
                        "address": "0x40e178"
                    },
                    {
                        "name": null,
                        "address": "0x40e17c"
                    },
                    {
                        "name": null,
                        "address": "0x40e180"
                    }
                ],
                "dll": "MAPI32.dll"
            },
            {
                "imports": [
                    {
                        "name": "UnloadPerfCounterTextStringsW",
                        "address": "0x40e2b8"
                    },
                    {
                        "name": "LoadPerfCounterTextStringsA",
                        "address": "0x40e2bc"
                    },
                    {
                        "name": "UnloadPerfCounterTextStringsA",
                        "address": "0x40e2c0"
                    },
                    {
                        "name": "LoadPerfCounterTextStringsW",
                        "address": "0x40e2c4"
                    }
                ],
                "dll": "loadperf.dll"
            },
            {
                "imports": [
                    {
                        "name": "connect",
                        "address": "0x40e24c"
                    },
                    {
                        "name": "gethostbyname",
                        "address": "0x40e250"
                    },
                    {
                        "name": "WSCInstallNameSpace",
                        "address": "0x40e254"
                    },
                    {
                        "name": "WSALookupServiceEnd",
                        "address": "0x40e258"
                    },
                    {
                        "name": "WSAWaitForMultipleEvents",
                        "address": "0x40e25c"
                    },
                    {
                        "name": "WSACancelBlockingCall",
                        "address": "0x40e260"
                    },
                    {
                        "name": "listen",
                        "address": "0x40e264"
                    },
                    {
                        "name": "WSAGetQOSByName",
                        "address": "0x40e268"
                    },
                    {
                        "name": "WSAEnumNameSpaceProvidersW",
                        "address": "0x40e26c"
                    },
                    {
                        "name": "WSCUnInstallNameSpace",
                        "address": "0x40e270"
                    },
                    {
                        "name": "WSAAsyncGetServByPort",
                        "address": "0x40e274"
                    },
                    {
                        "name": "htonl",
                        "address": "0x40e278"
                    },
                    {
                        "name": "getservbyname",
                        "address": "0x40e27c"
                    },
                    {
                        "name": "WSAConnect",
                        "address": "0x40e280"
                    },
                    {
                        "name": "recv",
                        "address": "0x40e284"
                    },
                    {
                        "name": "WSAAsyncGetProtoByNumber",
                        "address": "0x40e288"
                    },
                    {
                        "name": "WSAEnumNetworkEvents",
                        "address": "0x40e28c"
                    },
                    {
                        "name": "WSCEnableNSProvider",
                        "address": "0x40e290"
                    },
                    {
                        "name": "select",
                        "address": "0x40e294"
                    },
                    {
                        "name": "__WSAFDIsSet",
                        "address": "0x40e298"
                    },
                    {
                        "name": "WSCInstallProvider",
                        "address": "0x40e29c"
                    },
                    {
                        "name": "gethostname",
                        "address": "0x40e2a0"
                    },
                    {
                        "name": "WSAAccept",
                        "address": "0x40e2a4"
                    },
                    {
                        "name": "ntohl",
                        "address": "0x40e2a8"
                    },
                    {
                        "name": "WSASocketA",
                        "address": "0x40e2ac"
                    },
                    {
                        "name": "WSASetServiceW",
                        "address": "0x40e2b0"
                    }
                ],
                "dll": "WS2_32.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x000594c9",
        "overlay": null,
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x004029ab",
        "timestamp": "2019-06-10 21:23:33",
        "osversion": "5.1",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x0000c800",
                "entropy": "6.63",
                "raw_address": "0x00000400",
                "virtual_size": "0x0000c6d7",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0000e000",
                "size_of_data": "0x00006000",
                "entropy": "4.94",
                "raw_address": "0x0000cc00",
                "virtual_size": "0x00005e96",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".data",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00014000",
                "size_of_data": "0x00007800",
                "entropy": "6.64",
                "raw_address": "0x00012c00",
                "virtual_size": "0x00008570",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".gfids",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0001d000",
                "size_of_data": "0x00000200",
                "entropy": "1.37",
                "raw_address": "0x0001a400",
                "virtual_size": "0x000000ac",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0001e000",
                "size_of_data": "0x0003aa00",
                "entropy": "6.51",
                "raw_address": "0x0001a600",
                "virtual_size": "0x0003a915",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00059000",
                "size_of_data": "0x00001600",
                "entropy": "6.49",
                "raw_address": "0x00055000",
                "virtual_size": "0x000015e8",
                "characteristics_raw": "0x42000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000132f4",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x0000008c"
            },
            {
                "virtual_address": "0x0001e000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x0003a915"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00059000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x000015e8"
            },
            {
                "virtual_address": "0x00012c30",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x0000001c"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00012c50",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000040"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0000e000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x000002cc"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "c5a436032ea30bb2423a079d38ff3cd6",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 6,
        "versioninfo": []
    }
}

[*] Resolved APIs: [
    "kernel32.dll.FlsAlloc",
    "kernel32.dll.FlsSetValue",
    "kernel32.dll.FlsGetValue",
    "kernel32.dll.LCMapStringEx"
]

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "VirtualProtect",
                        "address": "0x40e000"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x40e004"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x40e008"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x40e00c"
                    },
                    {
                        "name": "CreateFileW",
                        "address": "0x40e010"
                    },
                    {
                        "name": "DecodePointer",
                        "address": "0x40e014"
                    },
                    {
                        "name": "WriteConsoleW",
                        "address": "0x40e018"
                    },
                    {
                        "name": "SetFilePointerEx",
                        "address": "0x40e01c"
                    },
                    {
                        "name": "GetConsoleMode",
                        "address": "0x40e020"
                    },
                    {
                        "name": "GetConsoleCP",
                        "address": "0x40e024"
                    },
                    {
                        "name": "FlushFileBuffers",
                        "address": "0x40e028"
                    },
                    {
                        "name": "HeapReAlloc",
                        "address": "0x40e02c"
                    },
                    {
                        "name": "HeapSize",
                        "address": "0x40e030"
                    },
                    {
                        "name": "GetProcessHeap",
                        "address": "0x40e034"
                    },
                    {
                        "name": "GetStringTypeW",
                        "address": "0x40e038"
                    },
                    {
                        "name": "GetFileType",
                        "address": "0x40e03c"
                    },
                    {
                        "name": "SetStdHandle",
                        "address": "0x40e040"
                    },
                    {
                        "name": "LCMapStringW",
                        "address": "0x40e044"
                    },
                    {
                        "name": "CompareStringW",
                        "address": "0x40e048"
                    },
                    {
                        "name": "SetEnvironmentVariableA",
                        "address": "0x40e04c"
                    },
                    {
                        "name": "FreeEnvironmentStringsW",
                        "address": "0x40e050"
                    },
                    {
                        "name": "GetEnvironmentStringsW",
                        "address": "0x40e054"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x40e058"
                    },
                    {
                        "name": "GetOEMCP",
                        "address": "0x40e05c"
                    },
                    {
                        "name": "IsValidCodePage",
                        "address": "0x40e060"
                    },
                    {
                        "name": "FindNextFileA",
                        "address": "0x40e064"
                    },
                    {
                        "name": "FindFirstFileExA",
                        "address": "0x40e068"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x40e06c"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x40e070"
                    },
                    {
                        "name": "HeapAlloc",
                        "address": "0x40e074"
                    },
                    {
                        "name": "HeapFree",
                        "address": "0x40e078"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x40e07c"
                    },
                    {
                        "name": "GetCommandLineW",
                        "address": "0x40e080"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x40e084"
                    },
                    {
                        "name": "GetModuleHandleExW",
                        "address": "0x40e088"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x40e08c"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x40e090"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x40e094"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x40e098"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x40e09c"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x40e0a0"
                    },
                    {
                        "name": "LoadLibraryExW",
                        "address": "0x40e0a4"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x40e0a8"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x40e0ac"
                    },
                    {
                        "name": "TlsFree",
                        "address": "0x40e0b0"
                    },
                    {
                        "name": "TlsSetValue",
                        "address": "0x40e0b4"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x40e0b8"
                    },
                    {
                        "name": "TlsAlloc",
                        "address": "0x40e0bc"
                    },
                    {
                        "name": "InitializeCriticalSectionAndSpinCount",
                        "address": "0x40e0c0"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x40e0c4"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x40e0c8"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x40e0cc"
                    },
                    {
                        "name": "SetLastError",
                        "address": "0x40e0d0"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x40e0d4"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x40e0d8"
                    },
                    {
                        "name": "TerminateProcess",
                        "address": "0x40e0dc"
                    },
                    {
                        "name": "GetCurrentProcess",
                        "address": "0x40e0e0"
                    },
                    {
                        "name": "GetModuleHandleW",
                        "address": "0x40e0e4"
                    },
                    {
                        "name": "IsProcessorFeaturePresent",
                        "address": "0x40e0e8"
                    },
                    {
                        "name": "GetStartupInfoW",
                        "address": "0x40e0ec"
                    },
                    {
                        "name": "SetUnhandledExceptionFilter",
                        "address": "0x40e0f0"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x40e0f4"
                    },
                    {
                        "name": "IsDebuggerPresent",
                        "address": "0x40e0f8"
                    },
                    {
                        "name": "InitializeSListHead",
                        "address": "0x40e0fc"
                    },
                    {
                        "name": "GetSystemTimeAsFileTime",
                        "address": "0x40e100"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x40e104"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x40e108"
                    },
                    {
                        "name": "QueryPerformanceCounter",
                        "address": "0x40e10c"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x40e110"
                    }
                ],
                "dll": "KERNEL32.dll"
            },
            {
                "imports": [
                    {
                        "name": null,
                        "address": "0x40e1e8"
                    },
                    {
                        "name": "AddPrinterA",
                        "address": "0x40e1ec"
                    },
                    {
                        "name": "GetPrinterDataW",
                        "address": "0x40e1f0"
                    },
                    {
                        "name": "AddPrinterDriverW",
                        "address": "0x40e1f4"
                    },
                    {
                        "name": "StartDocDlgA",
                        "address": "0x40e1f8"
                    },
                    {
                        "name": "EnumPrinterDriversA",
                        "address": "0x40e1fc"
                    },
                    {
                        "name": "EnumFormsW",
                        "address": "0x40e200"
                    },
                    {
                        "name": "EnumPrintProcessorsA",
                        "address": "0x40e204"
                    },
                    {
                        "name": "GetJobW",
                        "address": "0x40e208"
                    },
                    {
                        "name": "FindClosePrinterChangeNotification",
                        "address": "0x40e20c"
                    },
                    {
                        "name": null,
                        "address": "0x40e210"
                    },
                    {
                        "name": "DeletePrintProvidorA",
                        "address": "0x40e214"
                    },
                    {
                        "name": "CommitSpoolData",
                        "address": "0x40e218"
                    },
                    {
                        "name": "SetJobA",
                        "address": "0x40e21c"
                    },
                    {
                        "name": "AddPrinterDriverA",
                        "address": "0x40e220"
                    },
                    {
                        "name": "AddJobW",
                        "address": "0x40e224"
                    },
                    {
                        "name": "DeletePrintProvidorW",
                        "address": "0x40e228"
                    },
                    {
                        "name": "EnumPrintProcessorDatatypesW",
                        "address": "0x40e22c"
                    },
                    {
                        "name": "AddPortExA",
                        "address": "0x40e230"
                    },
                    {
                        "name": "AddPortA",
                        "address": "0x40e234"
                    },
                    {
                        "name": "DeletePrinterDriverExW",
                        "address": "0x40e238"
                    },
                    {
                        "name": null,
                        "address": "0x40e23c"
                    },
                    {
                        "name": "AddMonitorW",
                        "address": "0x40e240"
                    },
                    {
                        "name": null,
                        "address": "0x40e244"
                    }
                ],
                "dll": "WINSPOOL.DRV"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x40e188"
                    },
                    {
                        "name": "BSTR_UserMarshal",
                        "address": "0x40e18c"
                    },
                    {
                        "name": "VarI1FromI4",
                        "address": "0x40e190"
                    },
                    {
                        "name": "VarUI1FromI1",
                        "address": "0x40e194"
                    },
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x40e198"
                    },
                    {
                        "name": "VarCyRound",
                        "address": "0x40e19c"
                    },
                    {
                        "name": "VARIANT_UserSize",
                        "address": "0x40e1a0"
                    },
                    {
                        "name": "VarNot",
                        "address": "0x40e1a4"
                    },
                    {
                        "name": "VarCyFromR8",
                        "address": "0x40e1a8"
                    },
                    {
                        "name": "VarUI1FromUI4",
                        "address": "0x40e1ac"
                    },
                    {
                        "name": "SafeArraySetRecordInfo",
                        "address": "0x40e1b0"
                    },
                    {
                        "name": "VarUI2FromDate",
                        "address": "0x40e1b4"
                    },
                    {
                        "name": "OleIconToCursor",
                        "address": "0x40e1b8"
                    },
                    {
                        "name": "SafeArrayGetDim",
                        "address": "0x40e1bc"
                    },
                    {
                        "name": "LoadTypeLib",
                        "address": "0x40e1c0"
                    },
                    {
                        "name": "VarBoolFromUI1",
                        "address": "0x40e1c4"
                    },
                    {
                        "name": "VarDecRound",
                        "address": "0x40e1c8"
                    },
                    {
                        "name": "VarCyFromBool",
                        "address": "0x40e1cc"
                    },
                    {
                        "name": "VarR4FromCy",
                        "address": "0x40e1d0"
                    },
                    {
                        "name": "VARIANT_UserUnmarshal",
                        "address": "0x40e1d4"
                    },
                    {
                        "name": "VarBstrFromUI4",
                        "address": "0x40e1d8"
                    },
                    {
                        "name": "VarBstrFromCy",
                        "address": "0x40e1dc"
                    },
                    {
                        "name": "GetRecordInfoFromGuids",
                        "address": "0x40e1e0"
                    }
                ],
                "dll": "OLEAUT32.dll"
            },
            {
                "imports": [
                    {
                        "name": null,
                        "address": "0x40e118"
                    },
                    {
                        "name": null,
                        "address": "0x40e11c"
                    },
                    {
                        "name": null,
                        "address": "0x40e120"
                    },
                    {
                        "name": null,
                        "address": "0x40e124"
                    },
                    {
                        "name": null,
                        "address": "0x40e128"
                    },
                    {
                        "name": null,
                        "address": "0x40e12c"
                    },
                    {
                        "name": null,
                        "address": "0x40e130"
                    },
                    {
                        "name": null,
                        "address": "0x40e134"
                    },
                    {
                        "name": null,
                        "address": "0x40e138"
                    },
                    {
                        "name": null,
                        "address": "0x40e13c"
                    },
                    {
                        "name": null,
                        "address": "0x40e140"
                    },
                    {
                        "name": null,
                        "address": "0x40e144"
                    },
                    {
                        "name": null,
                        "address": "0x40e148"
                    },
                    {
                        "name": null,
                        "address": "0x40e14c"
                    },
                    {
                        "name": null,
                        "address": "0x40e150"
                    },
                    {
                        "name": null,
                        "address": "0x40e154"
                    },
                    {
                        "name": null,
                        "address": "0x40e158"
                    },
                    {
                        "name": null,
                        "address": "0x40e15c"
                    },
                    {
                        "name": null,
                        "address": "0x40e160"
                    },
                    {
                        "name": null,
                        "address": "0x40e164"
                    },
                    {
                        "name": null,
                        "address": "0x40e168"
                    },
                    {
                        "name": null,
                        "address": "0x40e16c"
                    },
                    {
                        "name": null,
                        "address": "0x40e170"
                    },
                    {
                        "name": null,
                        "address": "0x40e174"
                    },
                    {
                        "name": null,
                        "address": "0x40e178"
                    },
                    {
                        "name": null,
                        "address": "0x40e17c"
                    },
                    {
                        "name": null,
                        "address": "0x40e180"
                    }
                ],
                "dll": "MAPI32.dll"
            },
            {
                "imports": [
                    {
                        "name": "UnloadPerfCounterTextStringsW",
                        "address": "0x40e2b8"
                    },
                    {
                        "name": "LoadPerfCounterTextStringsA",
                        "address": "0x40e2bc"
                    },
                    {
                        "name": "UnloadPerfCounterTextStringsA",
                        "address": "0x40e2c0"
                    },
                    {
                        "name": "LoadPerfCounterTextStringsW",
                        "address": "0x40e2c4"
                    }
                ],
                "dll": "loadperf.dll"
            },
            {
                "imports": [
                    {
                        "name": "connect",
                        "address": "0x40e24c"
                    },
                    {
                        "name": "gethostbyname",
                        "address": "0x40e250"
                    },
                    {
                        "name": "WSCInstallNameSpace",
                        "address": "0x40e254"
                    },
                    {
                        "name": "WSALookupServiceEnd",
                        "address": "0x40e258"
                    },
                    {
                        "name": "WSAWaitForMultipleEvents",
                        "address": "0x40e25c"
                    },
                    {
                        "name": "WSACancelBlockingCall",
                        "address": "0x40e260"
                    },
                    {
                        "name": "listen",
                        "address": "0x40e264"
                    },
                    {
                        "name": "WSAGetQOSByName",
                        "address": "0x40e268"
                    },
                    {
                        "name": "WSAEnumNameSpaceProvidersW",
                        "address": "0x40e26c"
                    },
                    {
                        "name": "WSCUnInstallNameSpace",
                        "address": "0x40e270"
                    },
                    {
                        "name": "WSAAsyncGetServByPort",
                        "address": "0x40e274"
                    },
                    {
                        "name": "htonl",
                        "address": "0x40e278"
                    },
                    {
                        "name": "getservbyname",
                        "address": "0x40e27c"
                    },
                    {
                        "name": "WSAConnect",
                        "address": "0x40e280"
                    },
                    {
                        "name": "recv",
                        "address": "0x40e284"
                    },
                    {
                        "name": "WSAAsyncGetProtoByNumber",
                        "address": "0x40e288"
                    },
                    {
                        "name": "WSAEnumNetworkEvents",
                        "address": "0x40e28c"
                    },
                    {
                        "name": "WSCEnableNSProvider",
                        "address": "0x40e290"
                    },
                    {
                        "name": "select",
                        "address": "0x40e294"
                    },
                    {
                        "name": "__WSAFDIsSet",
                        "address": "0x40e298"
                    },
                    {
                        "name": "WSCInstallProvider",
                        "address": "0x40e29c"
                    },
                    {
                        "name": "gethostname",
                        "address": "0x40e2a0"
                    },
                    {
                        "name": "WSAAccept",
                        "address": "0x40e2a4"
                    },
                    {
                        "name": "ntohl",
                        "address": "0x40e2a8"
                    },
                    {
                        "name": "WSASocketA",
                        "address": "0x40e2ac"
                    },
                    {
                        "name": "WSASetServiceW",
                        "address": "0x40e2b0"
                    }
                ],
                "dll": "WS2_32.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x000594c9",
        "overlay": null,
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x004029ab",
        "timestamp": "2019-06-10 21:23:33",
        "osversion": "5.1",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x0000c800",
                "entropy": "6.63",
                "raw_address": "0x00000400",
                "virtual_size": "0x0000c6d7",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0000e000",
                "size_of_data": "0x00006000",
                "entropy": "4.94",
                "raw_address": "0x0000cc00",
                "virtual_size": "0x00005e96",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".data",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00014000",
                "size_of_data": "0x00007800",
                "entropy": "6.64",
                "raw_address": "0x00012c00",
                "virtual_size": "0x00008570",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".gfids",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0001d000",
                "size_of_data": "0x00000200",
                "entropy": "1.37",
                "raw_address": "0x0001a400",
                "virtual_size": "0x000000ac",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0001e000",
                "size_of_data": "0x0003aa00",
                "entropy": "6.51",
                "raw_address": "0x0001a600",
                "virtual_size": "0x0003a915",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".reloc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00059000",
                "size_of_data": "0x00001600",
                "entropy": "6.49",
                "raw_address": "0x00055000",
                "virtual_size": "0x000015e8",
                "characteristics_raw": "0x42000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000132f4",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x0000008c"
            },
            {
                "virtual_address": "0x0001e000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x0003a915"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00059000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x000015e8"
            },
            {
                "virtual_address": "0x00012c30",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x0000001c"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00012c50",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000040"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0000e000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x000002cc"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "c5a436032ea30bb2423a079d38ff3cd6",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 6,
        "versioninfo": []
    }
}