API tools faq
paste
paladin316

Exes_bf3edb36dff045b3ba9550bf32e72f70_exe.json

paladin316
Jun 19th, 2019
2,158
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 164.89 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_bf3edb36dff045b3ba9550bf32e72f70.exe"
  7. [*] File Size: 354840
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive"
  9. [*] SHA256: "410336295bab802cf15035d59147da79f32aff96e3cd460ba6f27f48b25022b9"
  10. [*] MD5: "bf3edb36dff045b3ba9550bf32e72f70"
  11. [*] SHA1: "67913240ce5181868b75a084cdb8bf8e6a6be3a0"
  12. [*] SHA512: "a66e3d4def90592f8cb95ef5c7dff079f11bddb1f8b36eca7a7ce127d08ffa83f645f29c352574c7a0931bd8b9e8581d1e0a3c45abc5c43b2bd7f8ac575620f7"
  13. [*] CRC32: "1CA9EA5F"
  14. [*] SSDEEP: "6144:S58WEYF7BjiPgyz4VMiYDaY+PiFIzfayfYPVhh1insUsvXN8:NbYLezIMi6+POIzffYmnOvXG"
  15.  
  16. [*] Process Execution: [
  17. "Exes_bf3edb36dff045b3ba9550bf32e72f70.exe"
  18. ]
  19.  
  20. [*] Signatures Detected: [
  21. {
  22. "Description": "Creates RWX memory",
  23. "Details": []
  24. },
  25. {
  26. "Description": "Reads data out of its own binary image",
  27. "Details": [
  28. {
  29. "self_read": "process: Exes_bf3edb36dff045b3ba9550bf32e72f70.exe, pid: 1844, offset: 0x00000000, length: 0x00056a14"
  30. },
  31. {
  32. "self_read": "process: Exes_bf3edb36dff045b3ba9550bf32e72f70.exe, pid: 1844, offset: 0x0000901c, length: 0x0004d9fc"
  33. }
  34. ]
  35. },
  36. {
  37. "Description": "Performs some HTTP requests",
  38. "Details": [
  39. {
  40. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D"
  41. },
  42. {
  43. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D"
  44. },
  45. {
  46. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D"
  47. },
  48. {
  49. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D"
  50. },
  51. {
  52. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D"
  53. },
  54. {
  55. "url": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D"
  56. },
  57. {
  58. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D"
  59. },
  60. {
  61. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D"
  62. },
  63. {
  64. "url": "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab"
  65. },
  66. {
  67. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D"
  68. },
  69. {
  70. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D"
  71. },
  72. {
  73. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D"
  74. },
  75. {
  76. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D"
  77. },
  78. {
  79. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D"
  80. },
  81. {
  82. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D"
  83. },
  84. {
  85. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D"
  86. },
  87. {
  88. "url": "http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D"
  89. },
  90. {
  91. "url": "http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D"
  92. },
  93. {
  94. "url": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D"
  95. },
  96. {
  97. "url": "http://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D"
  98. },
  99. {
  100. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D"
  101. },
  102. {
  103. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D"
  104. },
  105. {
  106. "url": "http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D"
  107. },
  108. {
  109. "url": "http://redirector.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe"
  110. },
  111. {
  112. "url": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes"
  113. }
  114. ]
  115. },
  116. {
  117. "Description": "Installs itself for autorun at Windows startup",
  118. "Details": [
  119. {
  120. "file": "C:\\Windows\\win.ini"
  121. },
  122. {
  123. "file": "C:\\Windows\\win.ini"
  124. }
  125. ]
  126. },
  127. {
  128. "Description": "File has been identified by 20 Antiviruses on VirusTotal as malicious",
  129. "Details": [
  130. {
  131. "Bkav": "HW32.Packed."
  132. },
  133. {
  134. "FireEye": "Generic.mg.bf3edb36dff045b3"
  135. },
  136. {
  137. "McAfee": "Artemis!BF3EDB36DFF0"
  138. },
  139. {
  140. "Symantec": "ML.Attribute.HighConfidence"
  141. },
  142. {
  143. "ESET-NOD32": "Win32/Injector.EGCC"
  144. },
  145. {
  146. "APEX": "Malicious"
  147. },
  148. {
  149. "Kaspersky": "HEUR:Trojan-Spy.Win32.Noon.gen"
  150. },
  151. {
  152. "Paloalto": "generic.ml"
  153. },
  154. {
  155. "Endgame": "malicious (moderate confidence)"
  156. },
  157. {
  158. "Sophos": "Troj/Agent-BBUQ"
  159. },
  160. {
  161. "Qihoo-360": "HEUR/QVM42.3.EFC3.Malware.Gen"
  162. },
  163. {
  164. "Invincea": "heuristic"
  165. },
  166. {
  167. "McAfee-GW-Edition": "BehavesLike.Win32.Ransom.fc"
  168. },
  169. {
  170. "AegisLab": "Trojan.Multi.Generic.4!c"
  171. },
  172. {
  173. "ZoneAlarm": "HEUR:Trojan-Spy.Win32.Noon.gen"
  174. },
  175. {
  176. "GData": "Win32.Trojan-Stealer.FormBook.NHYKUM"
  177. },
  178. {
  179. "Ikarus": "Trojan.Win32.Injector"
  180. },
  181. {
  182. "AVG": "FileRepMalware"
  183. },
  184. {
  185. "Cybereason": "malicious.0ce518"
  186. },
  187. {
  188. "CrowdStrike": "win/malicious_confidence_60% (W)"
  189. }
  190. ]
  191. }
  192. ]
  193.  
  194. [*] Started Service: []
  195.  
  196. [*] Executed Commands: []
  197.  
  198. [*] Mutexes: [
  199. "OpenMetaverseInstaller"
  200. ]
  201.  
  202. [*] Modified Files: [
  203. "C:\\Users\\user\\AppData\\Local\\Temp\\nsj952.tmp",
  204. "C:\\Users\\user\\AppData\\Local\\Temp\\PhotosAppList.scale-100.png",
  205. "C:\\Users\\user\\AppData\\Local\\Temp\\GetStartedAppList.targetsize-48_altform-unplated.png",
  206. "C:\\Users\\user\\AppData\\Local\\Temp\\FileExtension.targetsize-24.png",
  207. "C:\\Users\\user\\AppData\\Local\\Temp\\Blackberry",
  208. "C:\\Users\\user\\AppData\\Local\\Temp\\metrication.dll",
  209. "C:\\Users\\user\\AppData\\Local\\Temp\\nsz9B1.tmp\\System.dll",
  210. "C:\\Users\\user\\AppData\\Local\\Temp\\nsz9B1.tmp\\Splash.dll",
  211. "C:\\Windows\\win.ini"
  212. ]
  213.  
  214. [*] Deleted Files: [
  215. "C:\\Users\\user\\AppData\\Local\\Temp\\nso922.tmp",
  216. "C:\\Users\\user\\AppData\\Local\\Temp\\nsz9B1.tmp"
  217. ]
  218.  
  219. [*] Modified Registry Keys: []
  220.  
  221. [*] Deleted Registry Keys: []
  222.  
  223. [*] DNS Communications: []
  224.  
  225. [*] Domains: []
  226.  
  227. [*] Network Communication - ICMP: []
  228.  
  229. [*] Network Communication - HTTP: [
  230. {
  231. "count": 1,
  232. "body": "",
  233. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
  234. "user-agent": "Microsoft-CryptoAPI/6.1",
  235. "method": "GET",
  236. "host": "ocsp.digicert.com",
  237. "version": "1.1",
  238. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
  239. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D HTTP/1.1\r\nCache-Control: max-age = 128165\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:02:13 GMT\r\nIf-None-Match: \"5c961235-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  240. "port": 80
  241. },
  242. {
  243. "count": 1,
  244. "body": "",
  245. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
  246. "user-agent": "Microsoft-CryptoAPI/6.1",
  247. "method": "GET",
  248. "host": "ocsp.digicert.com",
  249. "version": "1.1",
  250. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
  251. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  252. "port": 80
  253. },
  254. {
  255. "count": 1,
  256. "body": "",
  257. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
  258. "user-agent": "Microsoft-CryptoAPI/6.1",
  259. "method": "GET",
  260. "host": "ocsp.digicert.com",
  261. "version": "1.1",
  262. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
  263. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D HTTP/1.1\r\nCache-Control: max-age = 143038\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 15:00:07 GMT\r\nIf-None-Match: \"5c9649f7-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  264. "port": 80
  265. },
  266. {
  267. "count": 1,
  268. "body": "",
  269. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D",
  270. "user-agent": "Microsoft-CryptoAPI/6.1",
  271. "method": "GET",
  272. "host": "ocsp.pki.goog",
  273. "version": "1.1",
  274. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D",
  275. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  276. "port": 80
  277. },
  278. {
  279. "count": 1,
  280. "body": "",
  281. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D",
  282. "user-agent": "Microsoft-CryptoAPI/6.1",
  283. "method": "GET",
  284. "host": "ocsp.digicert.com",
  285. "version": "1.1",
  286. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D",
  287. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D HTTP/1.1\r\nCache-Control: max-age = 89056\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Mar 2019 18:30:24 GMT\r\nIf-None-Match: \"5c9529c0-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  288. "port": 80
  289. },
  290. {
  291. "count": 1,
  292. "body": "",
  293. "uri": "http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl",
  294. "user-agent": "Microsoft-CryptoAPI/6.1",
  295. "method": "GET",
  296. "host": "crl.microsoft.com",
  297. "version": "1.1",
  298. "path": "/pki/crl/products/MicrosoftTimeStampPCA.crl",
  299. "data": "GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Feb 2019 02:02:49 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  300. "port": 80
  301. },
  302. {
  303. "count": 1,
  304. "body": "",
  305. "uri": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D",
  306. "user-agent": "Microsoft-CryptoAPI/6.1",
  307. "method": "GET",
  308. "host": "ocsp.comodoca.com",
  309. "version": "1.1",
  310. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D",
  311. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D HTTP/1.1\r\nCache-Control: max-age = 94804\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
  312. "port": 80
  313. },
  314. {
  315. "count": 1,
  316. "body": "",
  317. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D",
  318. "user-agent": "Microsoft-CryptoAPI/6.1",
  319. "method": "GET",
  320. "host": "ocsp.pki.goog",
  321. "version": "1.1",
  322. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D",
  323. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  324. "port": 80
  325. },
  326. {
  327. "count": 1,
  328. "body": "",
  329. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D",
  330. "user-agent": "Microsoft-CryptoAPI/6.1",
  331. "method": "GET",
  332. "host": "ocsp.digicert.com",
  333. "version": "1.1",
  334. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D",
  335. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D HTTP/1.1\r\nCache-Control: max-age = 108232\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Mar 2019 23:50:01 GMT\r\nIf-None-Match: \"5c9574a9-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  336. "port": 80
  337. },
  338. {
  339. "count": 1,
  340. "body": "",
  341. "uri": "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab",
  342. "user-agent": "Microsoft-CryptoAPI/6.1",
  343. "method": "GET",
  344. "host": "www.download.windowsupdate.com",
  345. "version": "1.1",
  346. "path": "/msdownload/update/v3/static/trustedr/en/authrootstl.cab",
  347. "data": "GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Feb 2019 16:53:13 GMT\r\nIf-None-Match: \"80e22c19cfcad41:0\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: www.download.windowsupdate.com\r\n\r\n",
  348. "port": 80
  349. },
  350. {
  351. "count": 1,
  352. "body": "",
  353. "uri": "http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl",
  354. "user-agent": "Microsoft-CryptoAPI/6.1",
  355. "method": "GET",
  356. "host": "crl.microsoft.com",
  357. "version": "1.1",
  358. "path": "/pki/crl/products/MicCodSigPCA_08-31-2010.crl",
  359. "data": "GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 14 Feb 2019 06:01:18 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  360. "port": 80
  361. },
  362. {
  363. "count": 1,
  364. "body": "",
  365. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D",
  366. "user-agent": "Microsoft-CryptoAPI/6.1",
  367. "method": "GET",
  368. "host": "ocsp.digicert.com",
  369. "version": "1.1",
  370. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D",
  371. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D HTTP/1.1\r\nCache-Control: max-age = 93156\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 04:40:45 GMT\r\nIf-None-Match: \"5c8c7e4d-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  372. "port": 80
  373. },
  374. {
  375. "count": 1,
  376. "body": "",
  377. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D",
  378. "user-agent": "Microsoft-CryptoAPI/6.1",
  379. "method": "GET",
  380. "host": "ocsp.digicert.com",
  381. "version": "1.1",
  382. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D",
  383. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D HTTP/1.1\r\nCache-Control: max-age = 149079\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:10:47 GMT\r\nIf-None-Match: \"5c961437-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  384. "port": 80
  385. },
  386. {
  387. "count": 1,
  388. "body": "",
  389. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  390. "user-agent": "Microsoft-CryptoAPI/6.1",
  391. "method": "GET",
  392. "host": "ocsp.digicert.com",
  393. "version": "1.1",
  394. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  395. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D HTTP/1.1\r\nCache-Control: max-age = 148251\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 18:10:24 GMT\r\nIf-None-Match: \"5c8d3c10-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  396. "port": 80
  397. },
  398. {
  399. "count": 1,
  400. "body": "",
  401. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D",
  402. "user-agent": "Microsoft-CryptoAPI/6.1",
  403. "method": "GET",
  404. "host": "ocsp.pki.goog",
  405. "version": "1.1",
  406. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D",
  407. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  408. "port": 80
  409. },
  410. {
  411. "count": 1,
  412. "body": "",
  413. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D",
  414. "user-agent": "Microsoft-CryptoAPI/6.1",
  415. "method": "GET",
  416. "host": "ocsp.pki.goog",
  417. "version": "1.1",
  418. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D",
  419. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  420. "port": 80
  421. },
  422. {
  423. "count": 1,
  424. "body": "",
  425. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D",
  426. "user-agent": "Microsoft-CryptoAPI/6.1",
  427. "method": "GET",
  428. "host": "ocsp.digicert.com",
  429. "version": "1.1",
  430. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D",
  431. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D HTTP/1.1\r\nCache-Control: max-age = 126990\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 10:41:16 GMT\r\nIf-None-Match: \"5c960d4c-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  432. "port": 80
  433. },
  434. {
  435. "count": 1,
  436. "body": "",
  437. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D",
  438. "user-agent": "Microsoft-CryptoAPI/6.1",
  439. "method": "GET",
  440. "host": "ocsp.pki.goog",
  441. "version": "1.1",
  442. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D",
  443. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  444. "port": 80
  445. },
  446. {
  447. "count": 1,
  448. "body": "",
  449. "uri": "http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D",
  450. "user-agent": "Microsoft-CryptoAPI/6.1",
  451. "method": "GET",
  452. "host": "ocsp.msocsp.com",
  453. "version": "1.1",
  454. "path": "/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D",
  455. "data": "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 17:46:18 GMT\r\nIf-None-Match: \"dd54d75d4688b8dc62b087df4e04af258704c48b\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.msocsp.com\r\n\r\n",
  456. "port": 80
  457. },
  458. {
  459. "count": 1,
  460. "body": "",
  461. "uri": "http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D",
  462. "user-agent": "Microsoft-CryptoAPI/6.1",
  463. "method": "GET",
  464. "host": "ocsp.thawte.com",
  465. "version": "1.1",
  466. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D",
  467. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D HTTP/1.1\r\nCache-Control: max-age = 320712\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Wed, 20 Mar 2019 11:42:01 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.thawte.com\r\n\r\n",
  468. "port": 80
  469. },
  470. {
  471. "count": 1,
  472. "body": "",
  473. "uri": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
  474. "user-agent": "Microsoft-CryptoAPI/6.1",
  475. "method": "GET",
  476. "host": "ocsp.usertrust.com",
  477. "version": "1.1",
  478. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
  479. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D HTTP/1.1\r\nCache-Control: max-age = 94765\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.usertrust.com\r\n\r\n",
  480. "port": 80
  481. },
  482. {
  483. "count": 1,
  484. "body": "",
  485. "uri": "http://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D",
  486. "user-agent": "Microsoft-CryptoAPI/6.1",
  487. "method": "GET",
  488. "host": "th.symcd.com",
  489. "version": "1.1",
  490. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D",
  491. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D HTTP/1.1\r\nCache-Control: max-age = 386377\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 21 Mar 2019 05:58:32 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: th.symcd.com\r\n\r\n",
  492. "port": 80
  493. },
  494. {
  495. "count": 1,
  496. "body": "",
  497. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D",
  498. "user-agent": "Microsoft-CryptoAPI/6.1",
  499. "method": "GET",
  500. "host": "ocsp.digicert.com",
  501. "version": "1.1",
  502. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D",
  503. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D HTTP/1.1\r\nCache-Control: max-age = 142986\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Tue, 28 May 2019 07:40:28 GMT\r\nIf-None-Match: \"5cece5ec-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  504. "port": 80
  505. },
  506. {
  507. "count": 1,
  508. "body": "",
  509. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D",
  510. "user-agent": "Microsoft-CryptoAPI/6.1",
  511. "method": "GET",
  512. "host": "ocsp.digicert.com",
  513. "version": "1.1",
  514. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D",
  515. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D HTTP/1.1\r\nCache-Control: max-age = 161796\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Tue, 28 May 2019 13:00:33 GMT\r\nIf-None-Match: \"5ced30f1-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  516. "port": 80
  517. },
  518. {
  519. "count": 1,
  520. "body": "",
  521. "uri": "http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D",
  522. "user-agent": "Microsoft-CryptoAPI/6.1",
  523. "method": "GET",
  524. "host": "ocsp.pki.goog",
  525. "version": "1.1",
  526. "path": "/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D",
  527. "data": "GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  528. "port": 80
  529. },
  530. {
  531. "count": 1,
  532. "body": "",
  533. "uri": "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl",
  534. "user-agent": "Microsoft-CryptoAPI/6.1",
  535. "method": "GET",
  536. "host": "crl.microsoft.com",
  537. "version": "1.1",
  538. "path": "/pki/crl/products/microsoftrootcert.crl",
  539. "data": "GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 07 Mar 2019 06:00:16 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  540. "port": 80
  541. },
  542. {
  543. "count": 2,
  544. "body": "",
  545. "uri": "http://redirector.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe",
  546. "user-agent": "Microsoft BITS/7.5",
  547. "method": "HEAD",
  548. "host": "redirector.gvt1.com",
  549. "version": "1.1",
  550. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe",
  551. "data": "HEAD /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: redirector.gvt1.com\r\n\r\n",
  552. "port": 80
  553. },
  554. {
  555. "count": 1,
  556. "body": "",
  557. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  558. "user-agent": "Microsoft BITS/7.5",
  559. "method": "HEAD",
  560. "host": "r5---sn-tt1eln7l.gvt1.com",
  561. "version": "1.1",
  562. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  563. "data": "HEAD /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  564. "port": 80
  565. },
  566. {
  567. "count": 1,
  568. "body": "",
  569. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  570. "user-agent": "Microsoft BITS/7.5",
  571. "method": "GET",
  572. "host": "r5---sn-tt1eln7l.gvt1.com",
  573. "version": "1.1",
  574. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  575. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=0-6583\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  576. "port": 80
  577. },
  578. {
  579. "count": 1,
  580. "body": "",
  581. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  582. "user-agent": "Microsoft BITS/7.5",
  583. "method": "GET",
  584. "host": "r5---sn-tt1eln7l.gvt1.com",
  585. "version": "1.1",
  586. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  587. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=6584-16328\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  588. "port": 80
  589. },
  590. {
  591. "count": 1,
  592. "body": "",
  593. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  594. "user-agent": "Microsoft BITS/7.5",
  595. "method": "GET",
  596. "host": "r5---sn-tt1eln7l.gvt1.com",
  597. "version": "1.1",
  598. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  599. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=16329-26130\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  600. "port": 80
  601. },
  602. {
  603. "count": 1,
  604. "body": "",
  605. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  606. "user-agent": "Microsoft BITS/7.5",
  607. "method": "GET",
  608. "host": "r5---sn-tt1eln7l.gvt1.com",
  609. "version": "1.1",
  610. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  611. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=26131-40225\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  612. "port": 80
  613. },
  614. {
  615. "count": 1,
  616. "body": "",
  617. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  618. "user-agent": "Microsoft BITS/7.5",
  619. "method": "GET",
  620. "host": "r5---sn-tt1eln7l.gvt1.com",
  621. "version": "1.1",
  622. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  623. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=40226-61524\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  624. "port": 80
  625. },
  626. {
  627. "count": 1,
  628. "body": "",
  629. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  630. "user-agent": "Microsoft BITS/7.5",
  631. "method": "GET",
  632. "host": "r5---sn-tt1eln7l.gvt1.com",
  633. "version": "1.1",
  634. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  635. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=61525-78210\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  636. "port": 80
  637. },
  638. {
  639. "count": 1,
  640. "body": "",
  641. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  642. "user-agent": "Microsoft BITS/7.5",
  643. "method": "GET",
  644. "host": "r5---sn-tt1eln7l.gvt1.com",
  645. "version": "1.1",
  646. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  647. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=78211-148555\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  648. "port": 80
  649. },
  650. {
  651. "count": 1,
  652. "body": "",
  653. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  654. "user-agent": "Microsoft BITS/7.5",
  655. "method": "GET",
  656. "host": "r5---sn-tt1eln7l.gvt1.com",
  657. "version": "1.1",
  658. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  659. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=148556-182838\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  660. "port": 80
  661. },
  662. {
  663. "count": 1,
  664. "body": "",
  665. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  666. "user-agent": "Microsoft BITS/7.5",
  667. "method": "GET",
  668. "host": "r5---sn-tt1eln7l.gvt1.com",
  669. "version": "1.1",
  670. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  671. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=182839-229023\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  672. "port": 80
  673. },
  674. {
  675. "count": 1,
  676. "body": "",
  677. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  678. "user-agent": "Microsoft BITS/7.5",
  679. "method": "GET",
  680. "host": "r5---sn-tt1eln7l.gvt1.com",
  681. "version": "1.1",
  682. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  683. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=229024-281359\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  684. "port": 80
  685. },
  686. {
  687. "count": 1,
  688. "body": "",
  689. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  690. "user-agent": "Microsoft BITS/7.5",
  691. "method": "GET",
  692. "host": "r5---sn-tt1eln7l.gvt1.com",
  693. "version": "1.1",
  694. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  695. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=281360-372984\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  696. "port": 80
  697. },
  698. {
  699. "count": 1,
  700. "body": "",
  701. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  702. "user-agent": "Microsoft BITS/7.5",
  703. "method": "GET",
  704. "host": "r5---sn-tt1eln7l.gvt1.com",
  705. "version": "1.1",
  706. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  707. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=372985-439073\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  708. "port": 80
  709. },
  710. {
  711. "count": 1,
  712. "body": "",
  713. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  714. "user-agent": "Microsoft BITS/7.5",
  715. "method": "GET",
  716. "host": "r5---sn-tt1eln7l.gvt1.com",
  717. "version": "1.1",
  718. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  719. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=439074-611461\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  720. "port": 80
  721. },
  722. {
  723. "count": 1,
  724. "body": "",
  725. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  726. "user-agent": "Microsoft BITS/7.5",
  727. "method": "GET",
  728. "host": "r5---sn-tt1eln7l.gvt1.com",
  729. "version": "1.1",
  730. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  731. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=611462-737982\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  732. "port": 80
  733. },
  734. {
  735. "count": 1,
  736. "body": "",
  737. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  738. "user-agent": "Microsoft BITS/7.5",
  739. "method": "GET",
  740. "host": "r5---sn-tt1eln7l.gvt1.com",
  741. "version": "1.1",
  742. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  743. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=737983-968299\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  744. "port": 80
  745. },
  746. {
  747. "count": 1,
  748. "body": "",
  749. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  750. "user-agent": "Microsoft BITS/7.5",
  751. "method": "GET",
  752. "host": "r5---sn-tt1eln7l.gvt1.com",
  753. "version": "1.1",
  754. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  755. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=968300-1226869\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  756. "port": 80
  757. },
  758. {
  759. "count": 1,
  760. "body": "",
  761. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  762. "user-agent": "Microsoft BITS/7.5",
  763. "method": "GET",
  764. "host": "r5---sn-tt1eln7l.gvt1.com",
  765. "version": "1.1",
  766. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  767. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=1226870-1530161\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  768. "port": 80
  769. },
  770. {
  771. "count": 1,
  772. "body": "",
  773. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  774. "user-agent": "Microsoft BITS/7.5",
  775. "method": "GET",
  776. "host": "r5---sn-tt1eln7l.gvt1.com",
  777. "version": "1.1",
  778. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  779. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=1530162-1961454\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  780. "port": 80
  781. },
  782. {
  783. "count": 1,
  784. "body": "",
  785. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  786. "user-agent": "Microsoft BITS/7.5",
  787. "method": "GET",
  788. "host": "r5---sn-tt1eln7l.gvt1.com",
  789. "version": "1.1",
  790. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  791. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=1961455-2479043\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  792. "port": 80
  793. },
  794. {
  795. "count": 1,
  796. "body": "",
  797. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  798. "user-agent": "Microsoft BITS/7.5",
  799. "method": "GET",
  800. "host": "r5---sn-tt1eln7l.gvt1.com",
  801. "version": "1.1",
  802. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  803. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=2479044-3022244\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  804. "port": 80
  805. },
  806. {
  807. "count": 1,
  808. "body": "",
  809. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  810. "user-agent": "Microsoft BITS/7.5",
  811. "method": "GET",
  812. "host": "r5---sn-tt1eln7l.gvt1.com",
  813. "version": "1.1",
  814. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  815. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=3022245-3645325\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  816. "port": 80
  817. },
  818. {
  819. "count": 1,
  820. "body": "",
  821. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  822. "user-agent": "Microsoft BITS/7.5",
  823. "method": "GET",
  824. "host": "r5---sn-tt1eln7l.gvt1.com",
  825. "version": "1.1",
  826. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  827. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=3645326-4427327\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  828. "port": 80
  829. },
  830. {
  831. "count": 1,
  832. "body": "",
  833. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  834. "user-agent": "Microsoft BITS/7.5",
  835. "method": "GET",
  836. "host": "r5---sn-tt1eln7l.gvt1.com",
  837. "version": "1.1",
  838. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  839. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=4427328-5110986\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  840. "port": 80
  841. },
  842. {
  843. "count": 1,
  844. "body": "",
  845. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  846. "user-agent": "Microsoft BITS/7.5",
  847. "method": "GET",
  848. "host": "r5---sn-tt1eln7l.gvt1.com",
  849. "version": "1.1",
  850. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  851. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=5110987-5647822\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  852. "port": 80
  853. },
  854. {
  855. "count": 1,
  856. "body": "",
  857. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  858. "user-agent": "Microsoft BITS/7.5",
  859. "method": "GET",
  860. "host": "r5---sn-tt1eln7l.gvt1.com",
  861. "version": "1.1",
  862. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  863. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=5647823-6089098\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  864. "port": 80
  865. },
  866. {
  867. "count": 1,
  868. "body": "",
  869. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  870. "user-agent": "Microsoft BITS/7.5",
  871. "method": "GET",
  872. "host": "r5---sn-tt1eln7l.gvt1.com",
  873. "version": "1.1",
  874. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  875. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=6089099-6418776\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  876. "port": 80
  877. },
  878. {
  879. "count": 1,
  880. "body": "",
  881. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  882. "user-agent": "Microsoft BITS/7.5",
  883. "method": "GET",
  884. "host": "r5---sn-tt1eln7l.gvt1.com",
  885. "version": "1.1",
  886. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  887. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=6418777-6702713\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  888. "port": 80
  889. },
  890. {
  891. "count": 1,
  892. "body": "",
  893. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  894. "user-agent": "Microsoft BITS/7.5",
  895. "method": "GET",
  896. "host": "r5---sn-tt1eln7l.gvt1.com",
  897. "version": "1.1",
  898. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  899. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=6702714-7244343\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  900. "port": 80
  901. },
  902. {
  903. "count": 1,
  904. "body": "",
  905. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  906. "user-agent": "Microsoft BITS/7.5",
  907. "method": "GET",
  908. "host": "r5---sn-tt1eln7l.gvt1.com",
  909. "version": "1.1",
  910. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  911. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=7244344-7679714\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  912. "port": 80
  913. },
  914. {
  915. "count": 1,
  916. "body": "",
  917. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  918. "user-agent": "Microsoft BITS/7.5",
  919. "method": "GET",
  920. "host": "r5---sn-tt1eln7l.gvt1.com",
  921. "version": "1.1",
  922. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  923. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=7679715-8012594\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  924. "port": 80
  925. },
  926. {
  927. "count": 1,
  928. "body": "",
  929. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  930. "user-agent": "Microsoft BITS/7.5",
  931. "method": "GET",
  932. "host": "r5---sn-tt1eln7l.gvt1.com",
  933. "version": "1.1",
  934. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  935. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=8012595-8709525\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  936. "port": 80
  937. },
  938. {
  939. "count": 1,
  940. "body": "",
  941. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  942. "user-agent": "Microsoft BITS/7.5",
  943. "method": "GET",
  944. "host": "r5---sn-tt1eln7l.gvt1.com",
  945. "version": "1.1",
  946. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  947. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=8709526-9214877\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  948. "port": 80
  949. },
  950. {
  951. "count": 1,
  952. "body": "",
  953. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  954. "user-agent": "Microsoft BITS/7.5",
  955. "method": "GET",
  956. "host": "r5---sn-tt1eln7l.gvt1.com",
  957. "version": "1.1",
  958. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  959. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=9214878-9630088\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  960. "port": 80
  961. },
  962. {
  963. "count": 1,
  964. "body": "",
  965. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  966. "user-agent": "Microsoft BITS/7.5",
  967. "method": "GET",
  968. "host": "r5---sn-tt1eln7l.gvt1.com",
  969. "version": "1.1",
  970. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  971. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=9630089-9948801\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  972. "port": 80
  973. },
  974. {
  975. "count": 1,
  976. "body": "",
  977. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  978. "user-agent": "Microsoft BITS/7.5",
  979. "method": "GET",
  980. "host": "r5---sn-tt1eln7l.gvt1.com",
  981. "version": "1.1",
  982. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  983. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=9948802-10596180\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  984. "port": 80
  985. },
  986. {
  987. "count": 1,
  988. "body": "",
  989. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  990. "user-agent": "Microsoft BITS/7.5",
  991. "method": "GET",
  992. "host": "r5---sn-tt1eln7l.gvt1.com",
  993. "version": "1.1",
  994. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  995. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=10596181-11077793\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  996. "port": 80
  997. },
  998. {
  999. "count": 1,
  1000. "body": "",
  1001. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1002. "user-agent": "Microsoft BITS/7.5",
  1003. "method": "GET",
  1004. "host": "r5---sn-tt1eln7l.gvt1.com",
  1005. "version": "1.1",
  1006. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1007. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=11077794-11459253\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1008. "port": 80
  1009. },
  1010. {
  1011. "count": 1,
  1012. "body": "",
  1013. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1014. "user-agent": "Microsoft BITS/7.5",
  1015. "method": "GET",
  1016. "host": "r5---sn-tt1eln7l.gvt1.com",
  1017. "version": "1.1",
  1018. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1019. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=11459254-11764868\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1020. "port": 80
  1021. },
  1022. {
  1023. "count": 1,
  1024. "body": "",
  1025. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1026. "user-agent": "Microsoft BITS/7.5",
  1027. "method": "GET",
  1028. "host": "r5---sn-tt1eln7l.gvt1.com",
  1029. "version": "1.1",
  1030. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1031. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=11764869-12377152\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1032. "port": 80
  1033. },
  1034. {
  1035. "count": 1,
  1036. "body": "",
  1037. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1038. "user-agent": "Microsoft BITS/7.5",
  1039. "method": "GET",
  1040. "host": "r5---sn-tt1eln7l.gvt1.com",
  1041. "version": "1.1",
  1042. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1043. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=12377153-12809810\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1044. "port": 80
  1045. },
  1046. {
  1047. "count": 1,
  1048. "body": "",
  1049. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1050. "user-agent": "Microsoft BITS/7.5",
  1051. "method": "GET",
  1052. "host": "r5---sn-tt1eln7l.gvt1.com",
  1053. "version": "1.1",
  1054. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1055. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=12809811-13171572\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1056. "port": 80
  1057. },
  1058. {
  1059. "count": 1,
  1060. "body": "",
  1061. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1062. "user-agent": "Microsoft BITS/7.5",
  1063. "method": "GET",
  1064. "host": "r5---sn-tt1eln7l.gvt1.com",
  1065. "version": "1.1",
  1066. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1067. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=13171573-13462236\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1068. "port": 80
  1069. },
  1070. {
  1071. "count": 1,
  1072. "body": "",
  1073. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1074. "user-agent": "Microsoft BITS/7.5",
  1075. "method": "GET",
  1076. "host": "r5---sn-tt1eln7l.gvt1.com",
  1077. "version": "1.1",
  1078. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1079. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=13462237-13934260\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1080. "port": 80
  1081. },
  1082. {
  1083. "count": 1,
  1084. "body": "",
  1085. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1086. "user-agent": "Microsoft BITS/7.5",
  1087. "method": "GET",
  1088. "host": "r5---sn-tt1eln7l.gvt1.com",
  1089. "version": "1.1",
  1090. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1091. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=13934261-14277021\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1092. "port": 80
  1093. },
  1094. {
  1095. "count": 1,
  1096. "body": "",
  1097. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1098. "user-agent": "Microsoft BITS/7.5",
  1099. "method": "GET",
  1100. "host": "r5---sn-tt1eln7l.gvt1.com",
  1101. "version": "1.1",
  1102. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1103. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=14277022-15001019\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1104. "port": 80
  1105. },
  1106. {
  1107. "count": 1,
  1108. "body": "",
  1109. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1110. "user-agent": "Microsoft BITS/7.5",
  1111. "method": "GET",
  1112. "host": "r5---sn-tt1eln7l.gvt1.com",
  1113. "version": "1.1",
  1114. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1115. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=15001020-15567580\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1116. "port": 80
  1117. },
  1118. {
  1119. "count": 1,
  1120. "body": "",
  1121. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1122. "user-agent": "Microsoft BITS/7.5",
  1123. "method": "GET",
  1124. "host": "r5---sn-tt1eln7l.gvt1.com",
  1125. "version": "1.1",
  1126. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1127. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=15567581-16035381\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1128. "port": 80
  1129. },
  1130. {
  1131. "count": 1,
  1132. "body": "",
  1133. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1134. "user-agent": "Microsoft BITS/7.5",
  1135. "method": "GET",
  1136. "host": "r5---sn-tt1eln7l.gvt1.com",
  1137. "version": "1.1",
  1138. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1139. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=16035382-16396111\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1140. "port": 80
  1141. },
  1142. {
  1143. "count": 1,
  1144. "body": "",
  1145. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1146. "user-agent": "Microsoft BITS/7.5",
  1147. "method": "GET",
  1148. "host": "r5---sn-tt1eln7l.gvt1.com",
  1149. "version": "1.1",
  1150. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1151. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=16396112-16673660\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1152. "port": 80
  1153. },
  1154. {
  1155. "count": 1,
  1156. "body": "",
  1157. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1158. "user-agent": "Microsoft BITS/7.5",
  1159. "method": "GET",
  1160. "host": "r5---sn-tt1eln7l.gvt1.com",
  1161. "version": "1.1",
  1162. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1163. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=16673661-17569216\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1164. "port": 80
  1165. },
  1166. {
  1167. "count": 1,
  1168. "body": "",
  1169. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1170. "user-agent": "Microsoft BITS/7.5",
  1171. "method": "GET",
  1172. "host": "r5---sn-tt1eln7l.gvt1.com",
  1173. "version": "1.1",
  1174. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1175. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=17569217-18593981\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1176. "port": 80
  1177. },
  1178. {
  1179. "count": 1,
  1180. "body": "",
  1181. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1182. "user-agent": "Microsoft BITS/7.5",
  1183. "method": "GET",
  1184. "host": "r5---sn-tt1eln7l.gvt1.com",
  1185. "version": "1.1",
  1186. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1187. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=18593982-20034738\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1188. "port": 80
  1189. },
  1190. {
  1191. "count": 1,
  1192. "body": "",
  1193. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1194. "user-agent": "Microsoft BITS/7.5",
  1195. "method": "GET",
  1196. "host": "r5---sn-tt1eln7l.gvt1.com",
  1197. "version": "1.1",
  1198. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1199. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=20034739-21615808\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1200. "port": 80
  1201. },
  1202. {
  1203. "count": 1,
  1204. "body": "",
  1205. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1206. "user-agent": "Microsoft BITS/7.5",
  1207. "method": "GET",
  1208. "host": "r5---sn-tt1eln7l.gvt1.com",
  1209. "version": "1.1",
  1210. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1211. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=21615809-23374340\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1212. "port": 80
  1213. },
  1214. {
  1215. "count": 1,
  1216. "body": "",
  1217. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1218. "user-agent": "Microsoft BITS/7.5",
  1219. "method": "GET",
  1220. "host": "r5---sn-tt1eln7l.gvt1.com",
  1221. "version": "1.1",
  1222. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1223. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=23374341-24959109\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1224. "port": 80
  1225. },
  1226. {
  1227. "count": 1,
  1228. "body": "",
  1229. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1230. "user-agent": "Microsoft BITS/7.5",
  1231. "method": "GET",
  1232. "host": "r5---sn-tt1eln7l.gvt1.com",
  1233. "version": "1.1",
  1234. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1235. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=24959110-26042603\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1236. "port": 80
  1237. },
  1238. {
  1239. "count": 1,
  1240. "body": "",
  1241. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1242. "user-agent": "Microsoft BITS/7.5",
  1243. "method": "GET",
  1244. "host": "r5---sn-tt1eln7l.gvt1.com",
  1245. "version": "1.1",
  1246. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1247. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=26042604-27225722\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1248. "port": 80
  1249. },
  1250. {
  1251. "count": 1,
  1252. "body": "",
  1253. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1254. "user-agent": "Microsoft BITS/7.5",
  1255. "method": "GET",
  1256. "host": "r5---sn-tt1eln7l.gvt1.com",
  1257. "version": "1.1",
  1258. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1259. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=27225723-29021545\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1260. "port": 80
  1261. },
  1262. {
  1263. "count": 1,
  1264. "body": "",
  1265. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1266. "user-agent": "Microsoft BITS/7.5",
  1267. "method": "GET",
  1268. "host": "r5---sn-tt1eln7l.gvt1.com",
  1269. "version": "1.1",
  1270. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1271. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=29021546-30838522\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1272. "port": 80
  1273. },
  1274. {
  1275. "count": 1,
  1276. "body": "",
  1277. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1278. "user-agent": "Microsoft BITS/7.5",
  1279. "method": "GET",
  1280. "host": "r5---sn-tt1eln7l.gvt1.com",
  1281. "version": "1.1",
  1282. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1283. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=30838523-32872745\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1284. "port": 80
  1285. },
  1286. {
  1287. "count": 1,
  1288. "body": "",
  1289. "uri": "http://r5---sn-tt1eln7l.gvt1.com/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1290. "user-agent": "Microsoft BITS/7.5",
  1291. "method": "GET",
  1292. "host": "r5---sn-tt1eln7l.gvt1.com",
  1293. "version": "1.1",
  1294. "path": "/edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes",
  1295. "data": "GET /edgedl/release2/chrome/APHZtEIErdMX_75.0.3770.100/75.0.3770.100_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.98.67.13&mm=28&mn=sn-tt1eln7l&ms=nvh&mt=1560901364&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 18 Jun 2019 04:17:17 GMT\r\nRange: bytes=32872746-33549055\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-tt1eln7l.gvt1.com\r\n\r\n",
  1296. "port": 80
  1297. }
  1298. ]
  1299.  
  1300. [*] Network Communication - SMTP: []
  1301.  
  1302. [*] Network Communication - Hosts: []
  1303.  
  1304. [*] Network Communication - IRC: []
  1305.  
  1306. [*] Static Analysis: {
  1307. "pe": {
  1308. "peid_signatures": null,
  1309. "imports": [
  1310. {
  1311. "imports": [
  1312. {
  1313. "name": "SetEnvironmentVariableA",
  1314. "address": "0x408070"
  1315. },
  1316. {
  1317. "name": "CreateFileA",
  1318. "address": "0x408074"
  1319. },
  1320. {
  1321. "name": "GetFileSize",
  1322. "address": "0x408078"
  1323. },
  1324. {
  1325. "name": "GetModuleFileNameA",
  1326. "address": "0x40807c"
  1327. },
  1328. {
  1329. "name": "ReadFile",
  1330. "address": "0x408080"
  1331. },
  1332. {
  1333. "name": "GetCurrentProcess",
  1334. "address": "0x408084"
  1335. },
  1336. {
  1337. "name": "CopyFileA",
  1338. "address": "0x408088"
  1339. },
  1340. {
  1341. "name": "Sleep",
  1342. "address": "0x40808c"
  1343. },
  1344. {
  1345. "name": "GetTickCount",
  1346. "address": "0x408090"
  1347. },
  1348. {
  1349. "name": "GetWindowsDirectoryA",
  1350. "address": "0x408094"
  1351. },
  1352. {
  1353. "name": "GetTempPathA",
  1354. "address": "0x408098"
  1355. },
  1356. {
  1357. "name": "GetCommandLineA",
  1358. "address": "0x40809c"
  1359. },
  1360. {
  1361. "name": "lstrlenA",
  1362. "address": "0x4080a0"
  1363. },
  1364. {
  1365. "name": "GetVersion",
  1366. "address": "0x4080a4"
  1367. },
  1368. {
  1369. "name": "SetErrorMode",
  1370. "address": "0x4080a8"
  1371. },
  1372. {
  1373. "name": "lstrcpynA",
  1374. "address": "0x4080ac"
  1375. },
  1376. {
  1377. "name": "ExitProcess",
  1378. "address": "0x4080b0"
  1379. },
  1380. {
  1381. "name": "SetCurrentDirectoryA",
  1382. "address": "0x4080b4"
  1383. },
  1384. {
  1385. "name": "GlobalLock",
  1386. "address": "0x4080b8"
  1387. },
  1388. {
  1389. "name": "CreateThread",
  1390. "address": "0x4080bc"
  1391. },
  1392. {
  1393. "name": "GetLastError",
  1394. "address": "0x4080c0"
  1395. },
  1396. {
  1397. "name": "CreateDirectoryA",
  1398. "address": "0x4080c4"
  1399. },
  1400. {
  1401. "name": "CreateProcessA",
  1402. "address": "0x4080c8"
  1403. },
  1404. {
  1405. "name": "RemoveDirectoryA",
  1406. "address": "0x4080cc"
  1407. },
  1408. {
  1409. "name": "GetTempFileNameA",
  1410. "address": "0x4080d0"
  1411. },
  1412. {
  1413. "name": "WriteFile",
  1414. "address": "0x4080d4"
  1415. },
  1416. {
  1417. "name": "lstrcpyA",
  1418. "address": "0x4080d8"
  1419. },
  1420. {
  1421. "name": "MoveFileExA",
  1422. "address": "0x4080dc"
  1423. },
  1424. {
  1425. "name": "lstrcatA",
  1426. "address": "0x4080e0"
  1427. },
  1428. {
  1429. "name": "GetSystemDirectoryA",
  1430. "address": "0x4080e4"
  1431. },
  1432. {
  1433. "name": "GetProcAddress",
  1434. "address": "0x4080e8"
  1435. },
  1436. {
  1437. "name": "GetExitCodeProcess",
  1438. "address": "0x4080ec"
  1439. },
  1440. {
  1441. "name": "WaitForSingleObject",
  1442. "address": "0x4080f0"
  1443. },
  1444. {
  1445. "name": "CompareFileTime",
  1446. "address": "0x4080f4"
  1447. },
  1448. {
  1449. "name": "SetFileAttributesA",
  1450. "address": "0x4080f8"
  1451. },
  1452. {
  1453. "name": "GetFileAttributesA",
  1454. "address": "0x4080fc"
  1455. },
  1456. {
  1457. "name": "GetShortPathNameA",
  1458. "address": "0x408100"
  1459. },
  1460. {
  1461. "name": "MoveFileA",
  1462. "address": "0x408104"
  1463. },
  1464. {
  1465. "name": "GetFullPathNameA",
  1466. "address": "0x408108"
  1467. },
  1468. {
  1469. "name": "SetFileTime",
  1470. "address": "0x40810c"
  1471. },
  1472. {
  1473. "name": "SearchPathA",
  1474. "address": "0x408110"
  1475. },
  1476. {
  1477. "name": "CloseHandle",
  1478. "address": "0x408114"
  1479. },
  1480. {
  1481. "name": "lstrcmpiA",
  1482. "address": "0x408118"
  1483. },
  1484. {
  1485. "name": "GlobalUnlock",
  1486. "address": "0x40811c"
  1487. },
  1488. {
  1489. "name": "GetDiskFreeSpaceA",
  1490. "address": "0x408120"
  1491. },
  1492. {
  1493. "name": "lstrcmpA",
  1494. "address": "0x408124"
  1495. },
  1496. {
  1497. "name": "FindFirstFileA",
  1498. "address": "0x408128"
  1499. },
  1500. {
  1501. "name": "FindNextFileA",
  1502. "address": "0x40812c"
  1503. },
  1504. {
  1505. "name": "DeleteFileA",
  1506. "address": "0x408130"
  1507. },
  1508. {
  1509. "name": "SetFilePointer",
  1510. "address": "0x408134"
  1511. },
  1512. {
  1513. "name": "GetPrivateProfileStringA",
  1514. "address": "0x408138"
  1515. },
  1516. {
  1517. "name": "FindClose",
  1518. "address": "0x40813c"
  1519. },
  1520. {
  1521. "name": "MultiByteToWideChar",
  1522. "address": "0x408140"
  1523. },
  1524. {
  1525. "name": "FreeLibrary",
  1526. "address": "0x408144"
  1527. },
  1528. {
  1529. "name": "MulDiv",
  1530. "address": "0x408148"
  1531. },
  1532. {
  1533. "name": "WritePrivateProfileStringA",
  1534. "address": "0x40814c"
  1535. },
  1536. {
  1537. "name": "LoadLibraryExA",
  1538. "address": "0x408150"
  1539. },
  1540. {
  1541. "name": "GetModuleHandleA",
  1542. "address": "0x408154"
  1543. },
  1544. {
  1545. "name": "GlobalAlloc",
  1546. "address": "0x408158"
  1547. },
  1548. {
  1549. "name": "GlobalFree",
  1550. "address": "0x40815c"
  1551. },
  1552. {
  1553. "name": "ExpandEnvironmentStringsA",
  1554. "address": "0x408160"
  1555. }
  1556. ],
  1557. "dll": "KERNEL32.dll"
  1558. },
  1559. {
  1560. "imports": [
  1561. {
  1562. "name": "ScreenToClient",
  1563. "address": "0x408184"
  1564. },
  1565. {
  1566. "name": "GetSystemMenu",
  1567. "address": "0x408188"
  1568. },
  1569. {
  1570. "name": "SetClassLongA",
  1571. "address": "0x40818c"
  1572. },
  1573. {
  1574. "name": "IsWindowEnabled",
  1575. "address": "0x408190"
  1576. },
  1577. {
  1578. "name": "SetWindowPos",
  1579. "address": "0x408194"
  1580. },
  1581. {
  1582. "name": "GetSysColor",
  1583. "address": "0x408198"
  1584. },
  1585. {
  1586. "name": "GetWindowLongA",
  1587. "address": "0x40819c"
  1588. },
  1589. {
  1590. "name": "SetCursor",
  1591. "address": "0x4081a0"
  1592. },
  1593. {
  1594. "name": "LoadCursorA",
  1595. "address": "0x4081a4"
  1596. },
  1597. {
  1598. "name": "CheckDlgButton",
  1599. "address": "0x4081a8"
  1600. },
  1601. {
  1602. "name": "GetMessagePos",
  1603. "address": "0x4081ac"
  1604. },
  1605. {
  1606. "name": "LoadBitmapA",
  1607. "address": "0x4081b0"
  1608. },
  1609. {
  1610. "name": "CallWindowProcA",
  1611. "address": "0x4081b4"
  1612. },
  1613. {
  1614. "name": "IsWindowVisible",
  1615. "address": "0x4081b8"
  1616. },
  1617. {
  1618. "name": "CloseClipboard",
  1619. "address": "0x4081bc"
  1620. },
  1621. {
  1622. "name": "SetClipboardData",
  1623. "address": "0x4081c0"
  1624. },
  1625. {
  1626. "name": "EmptyClipboard",
  1627. "address": "0x4081c4"
  1628. },
  1629. {
  1630. "name": "PostQuitMessage",
  1631. "address": "0x4081c8"
  1632. },
  1633. {
  1634. "name": "GetWindowRect",
  1635. "address": "0x4081cc"
  1636. },
  1637. {
  1638. "name": "EnableMenuItem",
  1639. "address": "0x4081d0"
  1640. },
  1641. {
  1642. "name": "CreatePopupMenu",
  1643. "address": "0x4081d4"
  1644. },
  1645. {
  1646. "name": "GetSystemMetrics",
  1647. "address": "0x4081d8"
  1648. },
  1649. {
  1650. "name": "SetDlgItemTextA",
  1651. "address": "0x4081dc"
  1652. },
  1653. {
  1654. "name": "GetDlgItemTextA",
  1655. "address": "0x4081e0"
  1656. },
  1657. {
  1658. "name": "MessageBoxIndirectA",
  1659. "address": "0x4081e4"
  1660. },
  1661. {
  1662. "name": "CharPrevA",
  1663. "address": "0x4081e8"
  1664. },
  1665. {
  1666. "name": "DispatchMessageA",
  1667. "address": "0x4081ec"
  1668. },
  1669. {
  1670. "name": "PeekMessageA",
  1671. "address": "0x4081f0"
  1672. },
  1673. {
  1674. "name": "ReleaseDC",
  1675. "address": "0x4081f4"
  1676. },
  1677. {
  1678. "name": "EnableWindow",
  1679. "address": "0x4081f8"
  1680. },
  1681. {
  1682. "name": "InvalidateRect",
  1683. "address": "0x4081fc"
  1684. },
  1685. {
  1686. "name": "SendMessageA",
  1687. "address": "0x408200"
  1688. },
  1689. {
  1690. "name": "DefWindowProcA",
  1691. "address": "0x408204"
  1692. },
  1693. {
  1694. "name": "BeginPaint",
  1695. "address": "0x408208"
  1696. },
  1697. {
  1698. "name": "GetClientRect",
  1699. "address": "0x40820c"
  1700. },
  1701. {
  1702. "name": "FillRect",
  1703. "address": "0x408210"
  1704. },
  1705. {
  1706. "name": "DrawTextA",
  1707. "address": "0x408214"
  1708. },
  1709. {
  1710. "name": "EndDialog",
  1711. "address": "0x408218"
  1712. },
  1713. {
  1714. "name": "RegisterClassA",
  1715. "address": "0x40821c"
  1716. },
  1717. {
  1718. "name": "SystemParametersInfoA",
  1719. "address": "0x408220"
  1720. },
  1721. {
  1722. "name": "CreateWindowExA",
  1723. "address": "0x408224"
  1724. },
  1725. {
  1726. "name": "GetClassInfoA",
  1727. "address": "0x408228"
  1728. },
  1729. {
  1730. "name": "DialogBoxParamA",
  1731. "address": "0x40822c"
  1732. },
  1733. {
  1734. "name": "CharNextA",
  1735. "address": "0x408230"
  1736. },
  1737. {
  1738. "name": "ExitWindowsEx",
  1739. "address": "0x408234"
  1740. },
  1741. {
  1742. "name": "GetDC",
  1743. "address": "0x408238"
  1744. },
  1745. {
  1746. "name": "CreateDialogParamA",
  1747. "address": "0x40823c"
  1748. },
  1749. {
  1750. "name": "SetTimer",
  1751. "address": "0x408240"
  1752. },
  1753. {
  1754. "name": "GetDlgItem",
  1755. "address": "0x408244"
  1756. },
  1757. {
  1758. "name": "SetWindowLongA",
  1759. "address": "0x408248"
  1760. },
  1761. {
  1762. "name": "SetForegroundWindow",
  1763. "address": "0x40824c"
  1764. },
  1765. {
  1766. "name": "LoadImageA",
  1767. "address": "0x408250"
  1768. },
  1769. {
  1770. "name": "IsWindow",
  1771. "address": "0x408254"
  1772. },
  1773. {
  1774. "name": "SendMessageTimeoutA",
  1775. "address": "0x408258"
  1776. },
  1777. {
  1778. "name": "FindWindowExA",
  1779. "address": "0x40825c"
  1780. },
  1781. {
  1782. "name": "OpenClipboard",
  1783. "address": "0x408260"
  1784. },
  1785. {
  1786. "name": "TrackPopupMenu",
  1787. "address": "0x408264"
  1788. },
  1789. {
  1790. "name": "AppendMenuA",
  1791. "address": "0x408268"
  1792. },
  1793. {
  1794. "name": "EndPaint",
  1795. "address": "0x40826c"
  1796. },
  1797. {
  1798. "name": "DestroyWindow",
  1799. "address": "0x408270"
  1800. },
  1801. {
  1802. "name": "wsprintfA",
  1803. "address": "0x408274"
  1804. },
  1805. {
  1806. "name": "ShowWindow",
  1807. "address": "0x408278"
  1808. },
  1809. {
  1810. "name": "SetWindowTextA",
  1811. "address": "0x40827c"
  1812. }
  1813. ],
  1814. "dll": "USER32.dll"
  1815. },
  1816. {
  1817. "imports": [
  1818. {
  1819. "name": "SelectObject",
  1820. "address": "0x40804c"
  1821. },
  1822. {
  1823. "name": "SetBkMode",
  1824. "address": "0x408050"
  1825. },
  1826. {
  1827. "name": "CreateFontIndirectA",
  1828. "address": "0x408054"
  1829. },
  1830. {
  1831. "name": "SetTextColor",
  1832. "address": "0x408058"
  1833. },
  1834. {
  1835. "name": "DeleteObject",
  1836. "address": "0x40805c"
  1837. },
  1838. {
  1839. "name": "GetDeviceCaps",
  1840. "address": "0x408060"
  1841. },
  1842. {
  1843. "name": "CreateBrushIndirect",
  1844. "address": "0x408064"
  1845. },
  1846. {
  1847. "name": "SetBkColor",
  1848. "address": "0x408068"
  1849. }
  1850. ],
  1851. "dll": "GDI32.dll"
  1852. },
  1853. {
  1854. "imports": [
  1855. {
  1856. "name": "SHGetSpecialFolderLocation",
  1857. "address": "0x408168"
  1858. },
  1859. {
  1860. "name": "ShellExecuteExA",
  1861. "address": "0x40816c"
  1862. },
  1863. {
  1864. "name": "SHGetPathFromIDListA",
  1865. "address": "0x408170"
  1866. },
  1867. {
  1868. "name": "SHBrowseForFolderA",
  1869. "address": "0x408174"
  1870. },
  1871. {
  1872. "name": "SHGetFileInfoA",
  1873. "address": "0x408178"
  1874. },
  1875. {
  1876. "name": "SHFileOperationA",
  1877. "address": "0x40817c"
  1878. }
  1879. ],
  1880. "dll": "SHELL32.dll"
  1881. },
  1882. {
  1883. "imports": [
  1884. {
  1885. "name": "AdjustTokenPrivileges",
  1886. "address": "0x408000"
  1887. },
  1888. {
  1889. "name": "RegCreateKeyExA",
  1890. "address": "0x408004"
  1891. },
  1892. {
  1893. "name": "RegOpenKeyExA",
  1894. "address": "0x408008"
  1895. },
  1896. {
  1897. "name": "SetFileSecurityA",
  1898. "address": "0x40800c"
  1899. },
  1900. {
  1901. "name": "OpenProcessToken",
  1902. "address": "0x408010"
  1903. },
  1904. {
  1905. "name": "LookupPrivilegeValueA",
  1906. "address": "0x408014"
  1907. },
  1908. {
  1909. "name": "RegEnumValueA",
  1910. "address": "0x408018"
  1911. },
  1912. {
  1913. "name": "RegDeleteKeyA",
  1914. "address": "0x40801c"
  1915. },
  1916. {
  1917. "name": "RegDeleteValueA",
  1918. "address": "0x408020"
  1919. },
  1920. {
  1921. "name": "RegCloseKey",
  1922. "address": "0x408024"
  1923. },
  1924. {
  1925. "name": "RegSetValueExA",
  1926. "address": "0x408028"
  1927. },
  1928. {
  1929. "name": "RegQueryValueExA",
  1930. "address": "0x40802c"
  1931. },
  1932. {
  1933. "name": "RegEnumKeyA",
  1934. "address": "0x408030"
  1935. }
  1936. ],
  1937. "dll": "ADVAPI32.dll"
  1938. },
  1939. {
  1940. "imports": [
  1941. {
  1942. "name": "ImageList_Create",
  1943. "address": "0x408038"
  1944. },
  1945. {
  1946. "name": "ImageList_AddMasked",
  1947. "address": "0x40803c"
  1948. },
  1949. {
  1950. "name": "ImageList_Destroy",
  1951. "address": "0x408040"
  1952. },
  1953. {
  1954. "name": null,
  1955. "address": "0x408044"
  1956. }
  1957. ],
  1958. "dll": "COMCTL32.dll"
  1959. },
  1960. {
  1961. "imports": [
  1962. {
  1963. "name": "OleUninitialize",
  1964. "address": "0x408284"
  1965. },
  1966. {
  1967. "name": "OleInitialize",
  1968. "address": "0x408288"
  1969. },
  1970. {
  1971. "name": "CoTaskMemFree",
  1972. "address": "0x40828c"
  1973. },
  1974. {
  1975. "name": "CoCreateInstance",
  1976. "address": "0x408290"
  1977. }
  1978. ],
  1979. "dll": "ole32.dll"
  1980. }
  1981. ],
  1982. "digital_signers": null,
  1983. "exported_dll_name": null,
  1984. "actual_checksum": "0x000655bd",
  1985. "overlay": {
  1986. "size": "0x0004da18",
  1987. "offset": "0x00009000"
  1988. },
  1989. "imagebase": "0x00400000",
  1990. "reported_checksum": "0x00000000",
  1991. "icon_hash": null,
  1992. "entrypoint": "0x00403328",
  1993. "timestamp": "2018-12-15 22:24:32",
  1994. "osversion": "4.0",
  1995. "sections": [
  1996. {
  1997. "name": ".text",
  1998. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1999. "virtual_address": "0x00001000",
  2000. "size_of_data": "0x00006200",
  2001. "entropy": "6.40",
  2002. "raw_address": "0x00000400",
  2003. "virtual_size": "0x00006077",
  2004. "characteristics_raw": "0x60000020"
  2005. },
  2006. {
  2007. "name": ".rdata",
  2008. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2009. "virtual_address": "0x00008000",
  2010. "size_of_data": "0x00001400",
  2011. "entropy": "5.04",
  2012. "raw_address": "0x00006600",
  2013. "virtual_size": "0x00001250",
  2014. "characteristics_raw": "0x40000040"
  2015. },
  2016. {
  2017. "name": ".data",
  2018. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  2019. "virtual_address": "0x0000a000",
  2020. "size_of_data": "0x00000400",
  2021. "entropy": "5.22",
  2022. "raw_address": "0x00007a00",
  2023. "virtual_size": "0x0001a838",
  2024. "characteristics_raw": "0xc0000040"
  2025. },
  2026. {
  2027. "name": ".ndata",
  2028. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  2029. "virtual_address": "0x00025000",
  2030. "size_of_data": "0x00000000",
  2031. "entropy": "0.00",
  2032. "raw_address": "0x00000000",
  2033. "virtual_size": "0x00009000",
  2034. "characteristics_raw": "0xc0000080"
  2035. },
  2036. {
  2037. "name": ".rsrc",
  2038. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2039. "virtual_address": "0x0002e000",
  2040. "size_of_data": "0x00001200",
  2041. "entropy": "4.48",
  2042. "raw_address": "0x00007e00",
  2043. "virtual_size": "0x000011e0",
  2044. "characteristics_raw": "0x40000040"
  2045. }
  2046. ],
  2047. "resources": [],
  2048. "dirents": [
  2049. {
  2050. "virtual_address": "0x00000000",
  2051. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  2052. "size": "0x00000000"
  2053. },
  2054. {
  2055. "virtual_address": "0x00008430",
  2056. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  2057. "size": "0x000000a0"
  2058. },
  2059. {
  2060. "virtual_address": "0x0002e000",
  2061. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  2062. "size": "0x000011e0"
  2063. },
  2064. {
  2065. "virtual_address": "0x00000000",
  2066. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  2067. "size": "0x00000000"
  2068. },
  2069. {
  2070. "virtual_address": "0x00000000",
  2071. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  2072. "size": "0x00000000"
  2073. },
  2074. {
  2075. "virtual_address": "0x00000000",
  2076. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  2077. "size": "0x00000000"
  2078. },
  2079. {
  2080. "virtual_address": "0x00000000",
  2081. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  2082. "size": "0x00000000"
  2083. },
  2084. {
  2085. "virtual_address": "0x00000000",
  2086. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  2087. "size": "0x00000000"
  2088. },
  2089. {
  2090. "virtual_address": "0x00000000",
  2091. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  2092. "size": "0x00000000"
  2093. },
  2094. {
  2095. "virtual_address": "0x00000000",
  2096. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  2097. "size": "0x00000000"
  2098. },
  2099. {
  2100. "virtual_address": "0x00000000",
  2101. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  2102. "size": "0x00000000"
  2103. },
  2104. {
  2105. "virtual_address": "0x00000000",
  2106. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  2107. "size": "0x00000000"
  2108. },
  2109. {
  2110. "virtual_address": "0x00008000",
  2111. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  2112. "size": "0x00000298"
  2113. },
  2114. {
  2115. "virtual_address": "0x00000000",
  2116. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  2117. "size": "0x00000000"
  2118. },
  2119. {
  2120. "virtual_address": "0x00000000",
  2121. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  2122. "size": "0x00000000"
  2123. },
  2124. {
  2125. "virtual_address": "0x00000000",
  2126. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  2127. "size": "0x00000000"
  2128. }
  2129. ],
  2130. "exports": [],
  2131. "guest_signers": {},
  2132. "imphash": "57e98d9a5a72c8d7ad8fb7a6a58b3daf",
  2133. "icon_fuzzy": null,
  2134. "icon": null,
  2135. "pdbpath": null,
  2136. "imported_dll_count": 7,
  2137. "versioninfo": []
  2138. }
  2139. }
  2140.  
  2141. [*] Resolved APIs: [
  2142. "version.dll.GetFileVersionInfoA",
  2143. "shfolder.dll.SHGetFolderPathA",
  2144. "shlwapi.dll.#437",
  2145. "cryptbase.dll.SystemFunction036",
  2146. "uxtheme.dll.ThemeInitApiHook",
  2147. "user32.dll.IsProcessDPIAware",
  2148. "setupapi.dll.CM_Get_Device_Interface_List_Size_ExW",
  2149. "setupapi.dll.CM_Get_Device_Interface_List_ExW",
  2150. "comctl32.dll.#386",
  2151. "kernel32.dll.GetUserDefaultUILanguage",
  2152. "shell32.dll.#680",
  2153. "system.dll.Alloc",
  2154. "system.dll.Call",
  2155. "splash.dll.show",
  2156. "kernel32.dll.CreateMutexA",
  2157. "kernel32.dll.IsProcessorFeaturePresent",
  2158. "metrication.dll.q",
  2159. "kernel32.dll.VirtualAlloc",
  2160. "kernel32.dll.CloseHandle",
  2161. "kernel32.dll.GetFileSize",
  2162. "kernel32.dll.GlobalAlloc",
  2163. "kernel32.dll.ReadFile",
  2164. "kernel32.dll.CreateFileA",
  2165. "kernel32.dll.LoadLibraryA",
  2166. "user32.dll.MessageBoxA",
  2167. "user32.dll.OemToCharBuffA",
  2168. "advapi32.dll.CryptDecrypt",
  2169. "kernel32.dll.HeapAlloc",
  2170. "kernel32.dll.SetThreadPriorityBoost",
  2171. "kernel32.dll.WriteProfileStringA",
  2172. "kernel32.dll.SwitchToThread",
  2173. "kernel32.dll.GetCurrentProcessId",
  2174. "cryptsp.dll.CryptDecrypt"
  2175. ]
  2176.  
  2177. [*] Static Analysis: {
  2178. "pe": {
  2179. "peid_signatures": null,
  2180. "imports": [
  2181. {
  2182. "imports": [
  2183. {
  2184. "name": "SetEnvironmentVariableA",
  2185. "address": "0x408070"
  2186. },
  2187. {
  2188. "name": "CreateFileA",
  2189. "address": "0x408074"
  2190. },
  2191. {
  2192. "name": "GetFileSize",
  2193. "address": "0x408078"
  2194. },
  2195. {
  2196. "name": "GetModuleFileNameA",
  2197. "address": "0x40807c"
  2198. },
  2199. {
  2200. "name": "ReadFile",
  2201. "address": "0x408080"
  2202. },
  2203. {
  2204. "name": "GetCurrentProcess",
  2205. "address": "0x408084"
  2206. },
  2207. {
  2208. "name": "CopyFileA",
  2209. "address": "0x408088"
  2210. },
  2211. {
  2212. "name": "Sleep",
  2213. "address": "0x40808c"
  2214. },
  2215. {
  2216. "name": "GetTickCount",
  2217. "address": "0x408090"
  2218. },
  2219. {
  2220. "name": "GetWindowsDirectoryA",
  2221. "address": "0x408094"
  2222. },
  2223. {
  2224. "name": "GetTempPathA",
  2225. "address": "0x408098"
  2226. },
  2227. {
  2228. "name": "GetCommandLineA",
  2229. "address": "0x40809c"
  2230. },
  2231. {
  2232. "name": "lstrlenA",
  2233. "address": "0x4080a0"
  2234. },
  2235. {
  2236. "name": "GetVersion",
  2237. "address": "0x4080a4"
  2238. },
  2239. {
  2240. "name": "SetErrorMode",
  2241. "address": "0x4080a8"
  2242. },
  2243. {
  2244. "name": "lstrcpynA",
  2245. "address": "0x4080ac"
  2246. },
  2247. {
  2248. "name": "ExitProcess",
  2249. "address": "0x4080b0"
  2250. },
  2251. {
  2252. "name": "SetCurrentDirectoryA",
  2253. "address": "0x4080b4"
  2254. },
  2255. {
  2256. "name": "GlobalLock",
  2257. "address": "0x4080b8"
  2258. },
  2259. {
  2260. "name": "CreateThread",
  2261. "address": "0x4080bc"
  2262. },
  2263. {
  2264. "name": "GetLastError",
  2265. "address": "0x4080c0"
  2266. },
  2267. {
  2268. "name": "CreateDirectoryA",
  2269. "address": "0x4080c4"
  2270. },
  2271. {
  2272. "name": "CreateProcessA",
  2273. "address": "0x4080c8"
  2274. },
  2275. {
  2276. "name": "RemoveDirectoryA",
  2277. "address": "0x4080cc"
  2278. },
  2279. {
  2280. "name": "GetTempFileNameA",
  2281. "address": "0x4080d0"
  2282. },
  2283. {
  2284. "name": "WriteFile",
  2285. "address": "0x4080d4"
  2286. },
  2287. {
  2288. "name": "lstrcpyA",
  2289. "address": "0x4080d8"
  2290. },
  2291. {
  2292. "name": "MoveFileExA",
  2293. "address": "0x4080dc"
  2294. },
  2295. {
  2296. "name": "lstrcatA",
  2297. "address": "0x4080e0"
  2298. },
  2299. {
  2300. "name": "GetSystemDirectoryA",
  2301. "address": "0x4080e4"
  2302. },
  2303. {
  2304. "name": "GetProcAddress",
  2305. "address": "0x4080e8"
  2306. },
  2307. {
  2308. "name": "GetExitCodeProcess",
  2309. "address": "0x4080ec"
  2310. },
  2311. {
  2312. "name": "WaitForSingleObject",
  2313. "address": "0x4080f0"
  2314. },
  2315. {
  2316. "name": "CompareFileTime",
  2317. "address": "0x4080f4"
  2318. },
  2319. {
  2320. "name": "SetFileAttributesA",
  2321. "address": "0x4080f8"
  2322. },
  2323. {
  2324. "name": "GetFileAttributesA",
  2325. "address": "0x4080fc"
  2326. },
  2327. {
  2328. "name": "GetShortPathNameA",
  2329. "address": "0x408100"
  2330. },
  2331. {
  2332. "name": "MoveFileA",
  2333. "address": "0x408104"
  2334. },
  2335. {
  2336. "name": "GetFullPathNameA",
  2337. "address": "0x408108"
  2338. },
  2339. {
  2340. "name": "SetFileTime",
  2341. "address": "0x40810c"
  2342. },
  2343. {
  2344. "name": "SearchPathA",
  2345. "address": "0x408110"
  2346. },
  2347. {
  2348. "name": "CloseHandle",
  2349. "address": "0x408114"
  2350. },
  2351. {
  2352. "name": "lstrcmpiA",
  2353. "address": "0x408118"
  2354. },
  2355. {
  2356. "name": "GlobalUnlock",
  2357. "address": "0x40811c"
  2358. },
  2359. {
  2360. "name": "GetDiskFreeSpaceA",
  2361. "address": "0x408120"
  2362. },
  2363. {
  2364. "name": "lstrcmpA",
  2365. "address": "0x408124"
  2366. },
  2367. {
  2368. "name": "FindFirstFileA",
  2369. "address": "0x408128"
  2370. },
  2371. {
  2372. "name": "FindNextFileA",
  2373. "address": "0x40812c"
  2374. },
  2375. {
  2376. "name": "DeleteFileA",
  2377. "address": "0x408130"
  2378. },
  2379. {
  2380. "name": "SetFilePointer",
  2381. "address": "0x408134"
  2382. },
  2383. {
  2384. "name": "GetPrivateProfileStringA",
  2385. "address": "0x408138"
  2386. },
  2387. {
  2388. "name": "FindClose",
  2389. "address": "0x40813c"
  2390. },
  2391. {
  2392. "name": "MultiByteToWideChar",
  2393. "address": "0x408140"
  2394. },
  2395. {
  2396. "name": "FreeLibrary",
  2397. "address": "0x408144"
  2398. },
  2399. {
  2400. "name": "MulDiv",
  2401. "address": "0x408148"
  2402. },
  2403. {
  2404. "name": "WritePrivateProfileStringA",
  2405. "address": "0x40814c"
  2406. },
  2407. {
  2408. "name": "LoadLibraryExA",
  2409. "address": "0x408150"
  2410. },
  2411. {
  2412. "name": "GetModuleHandleA",
  2413. "address": "0x408154"
  2414. },
  2415. {
  2416. "name": "GlobalAlloc",
  2417. "address": "0x408158"
  2418. },
  2419. {
  2420. "name": "GlobalFree",
  2421. "address": "0x40815c"
  2422. },
  2423. {
  2424. "name": "ExpandEnvironmentStringsA",
  2425. "address": "0x408160"
  2426. }
  2427. ],
  2428. "dll": "KERNEL32.dll"
  2429. },
  2430. {
  2431. "imports": [
  2432. {
  2433. "name": "ScreenToClient",
  2434. "address": "0x408184"
  2435. },
  2436. {
  2437. "name": "GetSystemMenu",
  2438. "address": "0x408188"
  2439. },
  2440. {
  2441. "name": "SetClassLongA",
  2442. "address": "0x40818c"
  2443. },
  2444. {
  2445. "name": "IsWindowEnabled",
  2446. "address": "0x408190"
  2447. },
  2448. {
  2449. "name": "SetWindowPos",
  2450. "address": "0x408194"
  2451. },
  2452. {
  2453. "name": "GetSysColor",
  2454. "address": "0x408198"
  2455. },
  2456. {
  2457. "name": "GetWindowLongA",
  2458. "address": "0x40819c"
  2459. },
  2460. {
  2461. "name": "SetCursor",
  2462. "address": "0x4081a0"
  2463. },
  2464. {
  2465. "name": "LoadCursorA",
  2466. "address": "0x4081a4"
  2467. },
  2468. {
  2469. "name": "CheckDlgButton",
  2470. "address": "0x4081a8"
  2471. },
  2472. {
  2473. "name": "GetMessagePos",
  2474. "address": "0x4081ac"
  2475. },
  2476. {
  2477. "name": "LoadBitmapA",
  2478. "address": "0x4081b0"
  2479. },
  2480. {
  2481. "name": "CallWindowProcA",
  2482. "address": "0x4081b4"
  2483. },
  2484. {
  2485. "name": "IsWindowVisible",
  2486. "address": "0x4081b8"
  2487. },
  2488. {
  2489. "name": "CloseClipboard",
  2490. "address": "0x4081bc"
  2491. },
  2492. {
  2493. "name": "SetClipboardData",
  2494. "address": "0x4081c0"
  2495. },
  2496. {
  2497. "name": "EmptyClipboard",
  2498. "address": "0x4081c4"
  2499. },
  2500. {
  2501. "name": "PostQuitMessage",
  2502. "address": "0x4081c8"
  2503. },
  2504. {
  2505. "name": "GetWindowRect",
  2506. "address": "0x4081cc"
  2507. },
  2508. {
  2509. "name": "EnableMenuItem",
  2510. "address": "0x4081d0"
  2511. },
  2512. {
  2513. "name": "CreatePopupMenu",
  2514. "address": "0x4081d4"
  2515. },
  2516. {
  2517. "name": "GetSystemMetrics",
  2518. "address": "0x4081d8"
  2519. },
  2520. {
  2521. "name": "SetDlgItemTextA",
  2522. "address": "0x4081dc"
  2523. },
  2524. {
  2525. "name": "GetDlgItemTextA",
  2526. "address": "0x4081e0"
  2527. },
  2528. {
  2529. "name": "MessageBoxIndirectA",
  2530. "address": "0x4081e4"
  2531. },
  2532. {
  2533. "name": "CharPrevA",
  2534. "address": "0x4081e8"
  2535. },
  2536. {
  2537. "name": "DispatchMessageA",
  2538. "address": "0x4081ec"
  2539. },
  2540. {
  2541. "name": "PeekMessageA",
  2542. "address": "0x4081f0"
  2543. },
  2544. {
  2545. "name": "ReleaseDC",
  2546. "address": "0x4081f4"
  2547. },
  2548. {
  2549. "name": "EnableWindow",
  2550. "address": "0x4081f8"
  2551. },
  2552. {
  2553. "name": "InvalidateRect",
  2554. "address": "0x4081fc"
  2555. },
  2556. {
  2557. "name": "SendMessageA",
  2558. "address": "0x408200"
  2559. },
  2560. {
  2561. "name": "DefWindowProcA",
  2562. "address": "0x408204"
  2563. },
  2564. {
  2565. "name": "BeginPaint",
  2566. "address": "0x408208"
  2567. },
  2568. {
  2569. "name": "GetClientRect",
  2570. "address": "0x40820c"
  2571. },
  2572. {
  2573. "name": "FillRect",
  2574. "address": "0x408210"
  2575. },
  2576. {
  2577. "name": "DrawTextA",
  2578. "address": "0x408214"
  2579. },
  2580. {
  2581. "name": "EndDialog",
  2582. "address": "0x408218"
  2583. },
  2584. {
  2585. "name": "RegisterClassA",
  2586. "address": "0x40821c"
  2587. },
  2588. {
  2589. "name": "SystemParametersInfoA",
  2590. "address": "0x408220"
  2591. },
  2592. {
  2593. "name": "CreateWindowExA",
  2594. "address": "0x408224"
  2595. },
  2596. {
  2597. "name": "GetClassInfoA",
  2598. "address": "0x408228"
  2599. },
  2600. {
  2601. "name": "DialogBoxParamA",
  2602. "address": "0x40822c"
  2603. },
  2604. {
  2605. "name": "CharNextA",
  2606. "address": "0x408230"
  2607. },
  2608. {
  2609. "name": "ExitWindowsEx",
  2610. "address": "0x408234"
  2611. },
  2612. {
  2613. "name": "GetDC",
  2614. "address": "0x408238"
  2615. },
  2616. {
  2617. "name": "CreateDialogParamA",
  2618. "address": "0x40823c"
  2619. },
  2620. {
  2621. "name": "SetTimer",
  2622. "address": "0x408240"
  2623. },
  2624. {
  2625. "name": "GetDlgItem",
  2626. "address": "0x408244"
  2627. },
  2628. {
  2629. "name": "SetWindowLongA",
  2630. "address": "0x408248"
  2631. },
  2632. {
  2633. "name": "SetForegroundWindow",
  2634. "address": "0x40824c"
  2635. },
  2636. {
  2637. "name": "LoadImageA",
  2638. "address": "0x408250"
  2639. },
  2640. {
  2641. "name": "IsWindow",
  2642. "address": "0x408254"
  2643. },
  2644. {
  2645. "name": "SendMessageTimeoutA",
  2646. "address": "0x408258"
  2647. },
  2648. {
  2649. "name": "FindWindowExA",
  2650. "address": "0x40825c"
  2651. },
  2652. {
  2653. "name": "OpenClipboard",
  2654. "address": "0x408260"
  2655. },
  2656. {
  2657. "name": "TrackPopupMenu",
  2658. "address": "0x408264"
  2659. },
  2660. {
  2661. "name": "AppendMenuA",
  2662. "address": "0x408268"
  2663. },
  2664. {
  2665. "name": "EndPaint",
  2666. "address": "0x40826c"
  2667. },
  2668. {
  2669. "name": "DestroyWindow",
  2670. "address": "0x408270"
  2671. },
  2672. {
  2673. "name": "wsprintfA",
  2674. "address": "0x408274"
  2675. },
  2676. {
  2677. "name": "ShowWindow",
  2678. "address": "0x408278"
  2679. },
  2680. {
  2681. "name": "SetWindowTextA",
  2682. "address": "0x40827c"
  2683. }
  2684. ],
  2685. "dll": "USER32.dll"
  2686. },
  2687. {
  2688. "imports": [
  2689. {
  2690. "name": "SelectObject",
  2691. "address": "0x40804c"
  2692. },
  2693. {
  2694. "name": "SetBkMode",
  2695. "address": "0x408050"
  2696. },
  2697. {
  2698. "name": "CreateFontIndirectA",
  2699. "address": "0x408054"
  2700. },
  2701. {
  2702. "name": "SetTextColor",
  2703. "address": "0x408058"
  2704. },
  2705. {
  2706. "name": "DeleteObject",
  2707. "address": "0x40805c"
  2708. },
  2709. {
  2710. "name": "GetDeviceCaps",
  2711. "address": "0x408060"
  2712. },
  2713. {
  2714. "name": "CreateBrushIndirect",
  2715. "address": "0x408064"
  2716. },
  2717. {
  2718. "name": "SetBkColor",
  2719. "address": "0x408068"
  2720. }
  2721. ],
  2722. "dll": "GDI32.dll"
  2723. },
  2724. {
  2725. "imports": [
  2726. {
  2727. "name": "SHGetSpecialFolderLocation",
  2728. "address": "0x408168"
  2729. },
  2730. {
  2731. "name": "ShellExecuteExA",
  2732. "address": "0x40816c"
  2733. },
  2734. {
  2735. "name": "SHGetPathFromIDListA",
  2736. "address": "0x408170"
  2737. },
  2738. {
  2739. "name": "SHBrowseForFolderA",
  2740. "address": "0x408174"
  2741. },
  2742. {
  2743. "name": "SHGetFileInfoA",
  2744. "address": "0x408178"
  2745. },
  2746. {
  2747. "name": "SHFileOperationA",
  2748. "address": "0x40817c"
  2749. }
  2750. ],
  2751. "dll": "SHELL32.dll"
  2752. },
  2753. {
  2754. "imports": [
  2755. {
  2756. "name": "AdjustTokenPrivileges",
  2757. "address": "0x408000"
  2758. },
  2759. {
  2760. "name": "RegCreateKeyExA",
  2761. "address": "0x408004"
  2762. },
  2763. {
  2764. "name": "RegOpenKeyExA",
  2765. "address": "0x408008"
  2766. },
  2767. {
  2768. "name": "SetFileSecurityA",
  2769. "address": "0x40800c"
  2770. },
  2771. {
  2772. "name": "OpenProcessToken",
  2773. "address": "0x408010"
  2774. },
  2775. {
  2776. "name": "LookupPrivilegeValueA",
  2777. "address": "0x408014"
  2778. },
  2779. {
  2780. "name": "RegEnumValueA",
  2781. "address": "0x408018"
  2782. },
  2783. {
  2784. "name": "RegDeleteKeyA",
  2785. "address": "0x40801c"
  2786. },
  2787. {
  2788. "name": "RegDeleteValueA",
  2789. "address": "0x408020"
  2790. },
  2791. {
  2792. "name": "RegCloseKey",
  2793. "address": "0x408024"
  2794. },
  2795. {
  2796. "name": "RegSetValueExA",
  2797. "address": "0x408028"
  2798. },
  2799. {
  2800. "name": "RegQueryValueExA",
  2801. "address": "0x40802c"
  2802. },
  2803. {
  2804. "name": "RegEnumKeyA",
  2805. "address": "0x408030"
  2806. }
  2807. ],
  2808. "dll": "ADVAPI32.dll"
  2809. },
  2810. {
  2811. "imports": [
  2812. {
  2813. "name": "ImageList_Create",
  2814. "address": "0x408038"
  2815. },
  2816. {
  2817. "name": "ImageList_AddMasked",
  2818. "address": "0x40803c"
  2819. },
  2820. {
  2821. "name": "ImageList_Destroy",
  2822. "address": "0x408040"
  2823. },
  2824. {
  2825. "name": null,
  2826. "address": "0x408044"
  2827. }
  2828. ],
  2829. "dll": "COMCTL32.dll"
  2830. },
  2831. {
  2832. "imports": [
  2833. {
  2834. "name": "OleUninitialize",
  2835. "address": "0x408284"
  2836. },
  2837. {
  2838. "name": "OleInitialize",
  2839. "address": "0x408288"
  2840. },
  2841. {
  2842. "name": "CoTaskMemFree",
  2843. "address": "0x40828c"
  2844. },
  2845. {
  2846. "name": "CoCreateInstance",
  2847. "address": "0x408290"
  2848. }
  2849. ],
  2850. "dll": "ole32.dll"
  2851. }
  2852. ],
  2853. "digital_signers": null,
  2854. "exported_dll_name": null,
  2855. "actual_checksum": "0x000655bd",
  2856. "overlay": {
  2857. "size": "0x0004da18",
  2858. "offset": "0x00009000"
  2859. },
  2860. "imagebase": "0x00400000",
  2861. "reported_checksum": "0x00000000",
  2862. "icon_hash": null,
  2863. "entrypoint": "0x00403328",
  2864. "timestamp": "2018-12-15 22:24:32",
  2865. "osversion": "4.0",
  2866. "sections": [
  2867. {
  2868. "name": ".text",
  2869. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  2870. "virtual_address": "0x00001000",
  2871. "size_of_data": "0x00006200",
  2872. "entropy": "6.40",
  2873. "raw_address": "0x00000400",
  2874. "virtual_size": "0x00006077",
  2875. "characteristics_raw": "0x60000020"
  2876. },
  2877. {
  2878. "name": ".rdata",
  2879. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2880. "virtual_address": "0x00008000",
  2881. "size_of_data": "0x00001400",
  2882. "entropy": "5.04",
  2883. "raw_address": "0x00006600",
  2884. "virtual_size": "0x00001250",
  2885. "characteristics_raw": "0x40000040"
  2886. },
  2887. {
  2888. "name": ".data",
  2889. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  2890. "virtual_address": "0x0000a000",
  2891. "size_of_data": "0x00000400",
  2892. "entropy": "5.22",
  2893. "raw_address": "0x00007a00",
  2894. "virtual_size": "0x0001a838",
  2895. "characteristics_raw": "0xc0000040"
  2896. },
  2897. {
  2898. "name": ".ndata",
  2899. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  2900. "virtual_address": "0x00025000",
  2901. "size_of_data": "0x00000000",
  2902. "entropy": "0.00",
  2903. "raw_address": "0x00000000",
  2904. "virtual_size": "0x00009000",
  2905. "characteristics_raw": "0xc0000080"
  2906. },
  2907. {
  2908. "name": ".rsrc",
  2909. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2910. "virtual_address": "0x0002e000",
  2911. "size_of_data": "0x00001200",
  2912. "entropy": "4.48",
  2913. "raw_address": "0x00007e00",
  2914. "virtual_size": "0x000011e0",
  2915. "characteristics_raw": "0x40000040"
  2916. }
  2917. ],
  2918. "resources": [],
  2919. "dirents": [
  2920. {
  2921. "virtual_address": "0x00000000",
  2922. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  2923. "size": "0x00000000"
  2924. },
  2925. {
  2926. "virtual_address": "0x00008430",
  2927. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  2928. "size": "0x000000a0"
  2929. },
  2930. {
  2931. "virtual_address": "0x0002e000",
  2932. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  2933. "size": "0x000011e0"
  2934. },
  2935. {
  2936. "virtual_address": "0x00000000",
  2937. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  2938. "size": "0x00000000"
  2939. },
  2940. {
  2941. "virtual_address": "0x00000000",
  2942. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  2943. "size": "0x00000000"
  2944. },
  2945. {
  2946. "virtual_address": "0x00000000",
  2947. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  2948. "size": "0x00000000"
  2949. },
  2950. {
  2951. "virtual_address": "0x00000000",
  2952. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  2953. "size": "0x00000000"
  2954. },
  2955. {
  2956. "virtual_address": "0x00000000",
  2957. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  2958. "size": "0x00000000"
  2959. },
  2960. {
  2961. "virtual_address": "0x00000000",
  2962. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  2963. "size": "0x00000000"
  2964. },
  2965. {
  2966. "virtual_address": "0x00000000",
  2967. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  2968. "size": "0x00000000"
  2969. },
  2970. {
  2971. "virtual_address": "0x00000000",
  2972. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  2973. "size": "0x00000000"
  2974. },
  2975. {
  2976. "virtual_address": "0x00000000",
  2977. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  2978. "size": "0x00000000"
  2979. },
  2980. {
  2981. "virtual_address": "0x00008000",
  2982. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  2983. "size": "0x00000298"
  2984. },
  2985. {
  2986. "virtual_address": "0x00000000",
  2987. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  2988. "size": "0x00000000"
  2989. },
  2990. {
  2991. "virtual_address": "0x00000000",
  2992. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  2993. "size": "0x00000000"
  2994. },
  2995. {
  2996. "virtual_address": "0x00000000",
  2997. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  2998. "size": "0x00000000"
  2999. }
  3000. ],
  3001. "exports": [],
  3002. "guest_signers": {},
  3003. "imphash": "57e98d9a5a72c8d7ad8fb7a6a58b3daf",
  3004. "icon_fuzzy": null,
  3005. "icon": null,
  3006. "pdbpath": null,
  3007. "imported_dll_count": 7,
  3008. "versioninfo": []
  3009. }
  3010. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!